diff --git a/doc/release-notes/rl-2511.section.md b/doc/release-notes/rl-2511.section.md
index 9213159a4d05..375310c2aa51 100644
--- a/doc/release-notes/rl-2511.section.md
+++ b/doc/release-notes/rl-2511.section.md
@@ -97,6 +97,8 @@
 
 <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->
 
+- `mealie` has been updated to 3.0.2: This update introduces breaking changes in some API endpoints (see the [release changelog](https://github.com/mealie-recipes/mealie/releases/tag/v3.0.0))
+
 ### Breaking changes {#sec-nixpkgs-release-25.11-lib-breaking}
 
 - `reaction` has been updated to version 2, which includes some breaking changes.
diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 69ce363c3afd..6173ce3281ec 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -2064,12 +2064,6 @@
     githubId = 10400299;
     name = "Arjan Schrijver";
   };
-  arjix = {
-    email = "arjix@protonmail.com";
-    github = "arjix";
-    githubId = 62168569;
-    name = "arjix";
-  };
   arkivm = {
     email = "vikram186@gmail.com";
     github = "arkivm";
@@ -5569,12 +5563,6 @@
     matrix = "@dan:matrix.org";
     name = "Daniel Theriault";
   };
-  dan4ik605743 = {
-    email = "6057430gu@gmail.com";
-    github = "dan4ik605743";
-    githubId = 86075850;
-    name = "Danil Danevich";
-  };
   danbst = {
     email = "abcz2.uprola@gmail.com";
     github = "danbst";
@@ -20986,6 +20974,11 @@
     githubId = 104558;
     name = "Benjamin Saunders";
   };
+  ralleka = {
+    name = "RalleKa";
+    github = "RalleKa";
+    githubId = 46349331;
+  };
   ramblurr = {
     name = "Casey Link";
     email = "nix@caseylink.com";
@@ -26858,6 +26851,12 @@
     githubId = 367185;
     name = "Jan Votava";
   };
+  voxi0 = {
+    name = "Wasiq Arbab";
+    email = "alif200099@gmail.com";
+    github = "Voxi0";
+    githubId = 113725768;
+  };
   vpetersson = {
     email = "vpetersson@screenly.io";
     github = "vpetersson";
diff --git a/nixos/modules/programs/vim.nix b/nixos/modules/programs/vim.nix
index 80dc3cdd3959..c3efcd0a54dc 100644
--- a/nixos/modules/programs/vim.nix
+++ b/nixos/modules/programs/vim.nix
@@ -17,10 +17,12 @@ in
     package = lib.mkPackageOption pkgs "vim" { example = [ "vim-full" ]; };
   };
 
-  # TODO: convert it into assert after 24.11 release
   config = lib.mkIf (cfg.enable || cfg.defaultEditor) {
-    warnings = lib.mkIf (cfg.defaultEditor && !cfg.enable) [
-      "programs.vim.defaultEditor will only work if programs.vim.enable is enabled, which will be enforced after the 24.11 release"
+    assertions = [
+      {
+        assertion = cfg.defaultEditor -> cfg.enable;
+        message = "{option}`programs.vim.defaultEditor` requires {option}`programs.vim.enable` to be set to true.";
+      }
     ];
     environment = {
       systemPackages = [ cfg.package ];
diff --git a/nixos/modules/services/misc/tandoor-recipes.nix b/nixos/modules/services/misc/tandoor-recipes.nix
index 2ef2c5e02741..549b3ad5fa3d 100644
--- a/nixos/modules/services/misc/tandoor-recipes.nix
+++ b/nixos/modules/services/misc/tandoor-recipes.nix
@@ -184,7 +184,7 @@ in
       };
     };
 
-    services.paperless.settings = lib.mkIf cfg.database.createLocally {
+    services.tandoor-recipes.extraConfig = lib.mkIf cfg.database.createLocally {
       DB_ENGINE = "django.db.backends.postgresql";
       POSTGRES_HOST = "/run/postgresql";
       POSTGRES_USER = "tandoor_recipes";
diff --git a/nixos/modules/services/networking/cgit.nix b/nixos/modules/services/networking/cgit.nix
index 9c1f1bf7bf8e..c9abf022932f 100644
--- a/nixos/modules/services/networking/cgit.nix
+++ b/nixos/modules/services/networking/cgit.nix
@@ -256,9 +256,7 @@ in
             (genAttrs' [ "cgit.css" "cgit.png" "favicon.ico" "robots.txt" ] (
               fileName:
               lib.nameValuePair "= ${stripLocation cfg}/${fileName}" {
-                extraConfig = ''
-                  alias ${cfg.package}/cgit/${fileName};
-                '';
+                alias = lib.mkDefault "${cfg.package}/cgit/${fileName}";
               }
             ))
             // {
diff --git a/nixos/modules/system/boot/loader/limine/limine-install.py b/nixos/modules/system/boot/loader/limine/limine-install.py
index 746cb693409c..21cf817509fc 100644
--- a/nixos/modules/system/boot/loader/limine/limine-install.py
+++ b/nixos/modules/system/boot/loader/limine/limine-install.py
@@ -145,8 +145,10 @@ def config_entry(levels: int, bootspec: BootSpec, label: str, time: str) -> str:
         entry += f'module_path: ' + get_kernel_uri(bootspec.initrd) + '\n'
 
     if bootspec.initrdSecrets:
-        initrd_secrets_path = str(limine_install_dir) + '/kernels/' + os.path.basename(bootspec.toplevel) + '-secrets'
-        os.makedirs(initrd_secrets_path)
+        base_path = str(limine_install_dir) + '/kernels/'
+        initrd_secrets_path = base_path + os.path.basename(bootspec.toplevel) + '-secrets'
+        if not os.path.exists(base_path):
+            os.makedirs(base_path)
 
         old_umask = os.umask(0o137)
         initrd_secrets_path_temp = tempfile.mktemp(os.path.basename(bootspec.toplevel) + '-secrets')
diff --git a/nixos/tests/mealie.nix b/nixos/tests/mealie.nix
index 97dd4d048f48..3cb8fa23857b 100644
--- a/nixos/tests/mealie.nix
+++ b/nixos/tests/mealie.nix
@@ -15,6 +15,7 @@
         services.mealie = {
           enable = true;
           port = 9001;
+          settings.ALLOW_SIGNUP = "true";
         };
       };
       postgres = {
@@ -27,16 +28,83 @@
     };
 
   testScript = ''
-    start_all()
+    import json
+    import urllib.parse
+
+    def api_get(node, path, qry={}, **headers):
+      url = f"http://localhost:9001/api{path}"
+      if len(qry) > 0:
+        url += "?" + "&".join([f"{k}={urllib.parse.quote(v)}" for k, v in qry.items()])
+
+      headers = " ".join([f"-H '{k}: {str(v)}'" for k, v in headers.items()])
+
+      got = node.succeed(f"curl -s -X GET {headers} --fail {url}")
+      print(f"* GET {path}\n{got}")
+      return json.loads(got)
+
+    def api_post(node, path, method="POST", urlencode=False, body={}, qry={}, **headers):
+      url = f"http://localhost:9001/api{path}"
+      if len(qry) > 0:
+        url += "?" + "&".join([f"{k}={urllib.parse.quote(v)}" for k, v in qry.items()])
+
+      if urlencode:
+        headers["Content-Type"] = "application/x-www-form-urlencoded"
+        print("BODY", body)
+        body = "&".join([f"{k}={urllib.parse.quote(str(v))}" for k, v in body.items()])
+      else:
+        headers["Content-Type"] = "application/json"
+        body = json.dumps(body)
+
+      headers["Accept"] = "application/json"
+      headers = " ".join([f"-H '{k}: {str(v)}'" for k, v in headers.items()])
+
+      got = node.succeed(f"curl -v --fail -X {method} {url} {headers} -d '{body}'")
+      print(f"* POST {path}\n{got}")
+      return json.loads(got)
 
     def test_mealie(node):
       node.wait_for_unit("mealie.service")
       node.wait_for_open_port(9001)
       node.succeed("curl --fail http://localhost:9001")
 
+      got = api_get(node, "/app/about")
+      assert got["version"] == "v${pkgs.mealie.version}"
+
+      new_user = dict(
+        email=node.name + ".nomail@no.mail",
+        username="noname-" + node.name,
+        fullName="No Name" + node.name,
+        password="SuperSecure" + node.name,
+        passwordConfirm="SuperSecure" + node.name,
+        group="mygroup" + node.name,
+      )
+      got = api_post(node, "/users/register", body=new_user)
+      got = api_post(node, "/auth/token", urlencode=True, body={
+        "username": new_user["username"],
+        "password": new_user["password"],
+        "remember_me": False,
+      })
+      assert "access_token" in got
+      token = "Bearer " + got["access_token"]
+
+      got = api_get(node, "/recipes", authorization=token)
+      assert got["total"] == 0
+
+      slug = api_post(node, "/recipes", body={"name": "TestRecipe"}, authorization=token)
+      recipe = { "description": "Test recipe" }
+      got = api_post(node, f"/recipes/{slug}", body=recipe, method="PATCH", authorization=token)
+      got = api_get(node, "/recipes", authorization=token)
+      assert got["total"] > 0
+      assert got["items"][0]["description"] == recipe["description"]
+
+    postgres.start()
+    test_mealie(postgres)
+    postgres.send_monitor_command("quit")
+    postgres.wait_for_shutdown()
+
+    sqlite.start()
     test_mealie(sqlite)
     sqlite.send_monitor_command("quit")
     sqlite.wait_for_shutdown()
-    test_mealie(postgres)
   '';
 }
diff --git a/pkgs/applications/editors/vim/plugins/generated.nix b/pkgs/applications/editors/vim/plugins/generated.nix
index ffc45cd3277f..98093b77d678 100644
--- a/pkgs/applications/editors/vim/plugins/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/generated.nix
@@ -1596,6 +1596,19 @@ final: prev: {
     meta.hydraPlatforms = [ ];
   };
 
+  blink-cmp-words = buildVimPlugin {
+    pname = "blink-cmp-words";
+    version = "2025-06-26";
+    src = fetchFromGitHub {
+      owner = "archie-judd";
+      repo = "blink-cmp-words";
+      rev = "81224ec2eb72115c84bb19ae566ef25083dbfed2";
+      sha256 = "1561sxrz3h10qdxn4a1aqlvbnih4v5g5kvs5mwipjnfh8n4wcnnb";
+    };
+    meta.homepage = "https://github.com/archie-judd/blink-cmp-words/";
+    meta.hydraPlatforms = [ ];
+  };
+
   blink-compat = buildVimPlugin {
     pname = "blink.compat";
     version = "2025-05-28";
diff --git a/pkgs/applications/editors/vim/plugins/overrides.nix b/pkgs/applications/editors/vim/plugins/overrides.nix
index 78e4de437b10..391c59aefa6a 100644
--- a/pkgs/applications/editors/vim/plugins/overrides.nix
+++ b/pkgs/applications/editors/vim/plugins/overrides.nix
@@ -333,6 +333,10 @@ in
     dependencies = [ self.blink-cmp ];
   };
 
+  blink-cmp-words = super.blink-cmp-words.overrideAttrs {
+    dependencies = [ self.blink-cmp ];
+  };
+
   bluloco-nvim = super.bluloco-nvim.overrideAttrs {
     dependencies = [ self.lush-nvim ];
   };
diff --git a/pkgs/applications/editors/vim/plugins/vim-plugin-names b/pkgs/applications/editors/vim/plugins/vim-plugin-names
index 615a6932b7a3..4562f5a2dc3f 100644
--- a/pkgs/applications/editors/vim/plugins/vim-plugin-names
+++ b/pkgs/applications/editors/vim/plugins/vim-plugin-names
@@ -121,6 +121,7 @@ https://github.com/Kaiser-Yang/blink-cmp-dictionary/,HEAD,
 https://github.com/Kaiser-Yang/blink-cmp-git/,HEAD,
 https://github.com/alexandre-abrioux/blink-cmp-npm.nvim/,HEAD,
 https://github.com/ribru17/blink-cmp-spell/,HEAD,
+https://github.com/archie-judd/blink-cmp-words/,HEAD,
 https://github.com/fang2hou/blink-copilot/,HEAD,
 https://github.com/moyiz/blink-emoji.nvim/,HEAD,
 https://github.com/MahanRahmati/blink-nerdfont.nvim/,HEAD,
diff --git a/pkgs/applications/misc/cubocore-packages/coreaction/default.nix b/pkgs/applications/misc/cubocore-packages/coreaction/default.nix
index 16b72bbeb2d8..320aaf5c5fae 100644
--- a/pkgs/applications/misc/cubocore-packages/coreaction/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/coreaction/default.nix
@@ -38,7 +38,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreaction";
     homepage = "https://gitlab.com/cubocore/coreapps/coreaction";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corearchiver/default.nix b/pkgs/applications/misc/cubocore-packages/corearchiver/default.nix
index c78878dc72c7..922c1ebb328d 100644
--- a/pkgs/applications/misc/cubocore-packages/corearchiver/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corearchiver/default.nix
@@ -41,7 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corearchiver";
     homepage = "https://gitlab.com/cubocore/coreapps/corearchiver";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corefm/default.nix b/pkgs/applications/misc/cubocore-packages/corefm/default.nix
index 43407b104869..599f56ffbfb6 100644
--- a/pkgs/applications/misc/cubocore-packages/corefm/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corefm/default.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corefm";
     homepage = "https://gitlab.com/cubocore/coreapps/corefm";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/coregarage/default.nix b/pkgs/applications/misc/cubocore-packages/coregarage/default.nix
index 279026051549..c02c46884ba1 100644
--- a/pkgs/applications/misc/cubocore-packages/coregarage/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/coregarage/default.nix
@@ -41,7 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coregarage";
     homepage = "https://gitlab.com/cubocore/coreapps/coregarage";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corehunt/default.nix b/pkgs/applications/misc/cubocore-packages/corehunt/default.nix
index bce9d730a27c..00b2b0761328 100644
--- a/pkgs/applications/misc/cubocore-packages/corehunt/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corehunt/default.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corehunt";
     homepage = "https://gitlab.com/cubocore/coreapps/corehunt";
     license = lib.licenses.gpl3Only;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/coreimage/default.nix b/pkgs/applications/misc/cubocore-packages/coreimage/default.nix
index b891e9f132a0..f6be00ece3e5 100644
--- a/pkgs/applications/misc/cubocore-packages/coreimage/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/coreimage/default.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreimage";
     homepage = "https://gitlab.com/cubocore/coreapps/coreimage";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/coreinfo/default.nix b/pkgs/applications/misc/cubocore-packages/coreinfo/default.nix
index 9aba07fcff1d..afce7298f039 100644
--- a/pkgs/applications/misc/cubocore-packages/coreinfo/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/coreinfo/default.nix
@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreinfo";
     homepage = "https://gitlab.com/cubocore/coreapps/coreinfo";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corekeyboard/default.nix b/pkgs/applications/misc/cubocore-packages/corekeyboard/default.nix
index 4c7dffabe200..37d9bde54aae 100644
--- a/pkgs/applications/misc/cubocore-packages/corekeyboard/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corekeyboard/default.nix
@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corekeyboard";
     homepage = "https://gitlab.com/cubocore/coreapps/corekeyboard";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corepad/default.nix b/pkgs/applications/misc/cubocore-packages/corepad/default.nix
index 86c0689979ab..db8ae6dd4b75 100644
--- a/pkgs/applications/misc/cubocore-packages/corepad/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corepad/default.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corepad";
     homepage = "https://gitlab.com/cubocore/coreapps/corepad";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corepaint/default.nix b/pkgs/applications/misc/cubocore-packages/corepaint/default.nix
index b281a3fd448d..435a1b47e3ff 100644
--- a/pkgs/applications/misc/cubocore-packages/corepaint/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corepaint/default.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corepaint";
     homepage = "https://gitlab.com/cubocore/coreapps/corepaint";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corepdf/default.nix b/pkgs/applications/misc/cubocore-packages/corepdf/default.nix
index fa4e8374b511..795e57d52366 100644
--- a/pkgs/applications/misc/cubocore-packages/corepdf/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corepdf/default.nix
@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corepdf";
     homepage = "https://gitlab.com/cubocore/coreapps/corepdf";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corepins/default.nix b/pkgs/applications/misc/cubocore-packages/corepins/default.nix
index d7d49426be56..9d3df7951f04 100644
--- a/pkgs/applications/misc/cubocore-packages/corepins/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corepins/default.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corepins";
     homepage = "https://gitlab.com/cubocore/coreapps/corepins";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corerenamer/default.nix b/pkgs/applications/misc/cubocore-packages/corerenamer/default.nix
index c44dc5c41967..7a3174f37687 100644
--- a/pkgs/applications/misc/cubocore-packages/corerenamer/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corerenamer/default.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corerenamer";
     homepage = "https://gitlab.com/cubocore/coreapps/corerenamer";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/coreshot/default.nix b/pkgs/applications/misc/cubocore-packages/coreshot/default.nix
index 2c75140f7465..af001ecce2a8 100644
--- a/pkgs/applications/misc/cubocore-packages/coreshot/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/coreshot/default.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreshot";
     homepage = "https://gitlab.com/cubocore/coreapps/coreshot";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corestats/default.nix b/pkgs/applications/misc/cubocore-packages/corestats/default.nix
index dfe7b160d1d2..4926de4a663c 100644
--- a/pkgs/applications/misc/cubocore-packages/corestats/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corestats/default.nix
@@ -39,7 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corestats";
     homepage = "https://gitlab.com/cubocore/coreapps/corestats";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/corestuff/default.nix b/pkgs/applications/misc/cubocore-packages/corestuff/default.nix
index 55089f533438..1d0faa705a01 100644
--- a/pkgs/applications/misc/cubocore-packages/corestuff/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/corestuff/default.nix
@@ -45,7 +45,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "corestuff";
     homepage = "https://gitlab.com/cubocore/coreapps/corestuff";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
     # Address boundary error
     broken = true;
diff --git a/pkgs/applications/misc/cubocore-packages/coreterminal/default.nix b/pkgs/applications/misc/cubocore-packages/coreterminal/default.nix
index 59f3c26c31af..18cba76b8fbb 100644
--- a/pkgs/applications/misc/cubocore-packages/coreterminal/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/coreterminal/default.nix
@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreterminal";
     homepage = "https://gitlab.com/cubocore/coreapps/coreterminal";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/coretime/default.nix b/pkgs/applications/misc/cubocore-packages/coretime/default.nix
index 4a48cf604cd9..6f54355722ab 100644
--- a/pkgs/applications/misc/cubocore-packages/coretime/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/coretime/default.nix
@@ -38,7 +38,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coretime";
     homepage = "https://gitlab.com/cubocore/coreapps/coretime";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/coretoppings/default.nix b/pkgs/applications/misc/cubocore-packages/coretoppings/default.nix
index 70cb09b4dca3..82328cb4f247 100644
--- a/pkgs/applications/misc/cubocore-packages/coretoppings/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/coretoppings/default.nix
@@ -81,7 +81,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "shareIT";
     homepage = "https://gitlab.com/cubocore/coreapps/coretoppings";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/coreuniverse/default.nix b/pkgs/applications/misc/cubocore-packages/coreuniverse/default.nix
index b5fa399805ac..059b3f79478e 100644
--- a/pkgs/applications/misc/cubocore-packages/coreuniverse/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/coreuniverse/default.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "coreuniverse";
     homepage = "https://gitlab.com/cubocore/coreapps/coreuniverse";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/libcprime/default.nix b/pkgs/applications/misc/cubocore-packages/libcprime/default.nix
index f190c303eae2..f2f28822e5cb 100644
--- a/pkgs/applications/misc/cubocore-packages/libcprime/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/libcprime/default.nix
@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Library for bookmarking, saving recent activites, managing settings of C-Suite";
     homepage = "https://gitlab.com/cubocore/libcprime";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/misc/cubocore-packages/libcsys/default.nix b/pkgs/applications/misc/cubocore-packages/libcsys/default.nix
index d48596c9c78f..7d69d36a6279 100644
--- a/pkgs/applications/misc/cubocore-packages/libcsys/default.nix
+++ b/pkgs/applications/misc/cubocore-packages/libcsys/default.nix
@@ -35,7 +35,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Library for managing drive and getting system resource information in real time";
     homepage = "https://gitlab.com/cubocore/libcsys";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index 0fe351e2637f..fd5a20139ff9 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -985,13 +985,13 @@
     "vendorHash": "sha256-AlB9tC3KejgUAjjT2pY7Q2mTS/AV4QRusSnyPiOheXE="
   },
   "opentelekomcloud": {
-    "hash": "sha256-HbtNk5UAr+q09mOICkKzh9wIP0HM9MFVVR6gEIBdnvs=",
+    "hash": "sha256-lBaer+ZI4kYHocgLlDDOVJnr3EwVhLEHO9JXqbLcH9E=",
     "homepage": "https://registry.terraform.io/providers/opentelekomcloud/opentelekomcloud",
     "owner": "opentelekomcloud",
     "repo": "terraform-provider-opentelekomcloud",
-    "rev": "v1.36.43",
+    "rev": "v1.36.44",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-9ese4fUPQifxbvcK6QiSIet++WFaK9XuyBv6oJiIOGA="
+    "vendorHash": "sha256-+OT7y7YN8xT9MJqzVGlGxR1cEK6PYSNZLeSVNp9yOvI="
   },
   "openwrt": {
     "hash": "sha256-z78IceF2VJtiQpVqC+rTUDsph73LZawIK+az3rEhljA=",
@@ -1138,13 +1138,13 @@
     "vendorHash": "sha256-75GQmp/ybD+VugrrB8qTbP3OPHy3eyBGe5u7CM7CRcc="
   },
   "routeros": {
-    "hash": "sha256-ciQsBvpX6gWnDPt9O1SGrVVgNCvAHBPCaLfVlPxrSAY=",
+    "hash": "sha256-1qdq09QFijxQDUaoPJwJB4F5aZ0AHXJSGndcdR9iqOs=",
     "homepage": "https://registry.terraform.io/providers/terraform-routeros/routeros",
     "owner": "terraform-routeros",
     "repo": "terraform-provider-routeros",
-    "rev": "v1.85.3",
+    "rev": "v1.86.1",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-lurBPksF2+SPraQ6KRr4EmI8rR7lY9BN+LZY8pKHjYU="
+    "vendorHash": "sha256-et1xqcaCKTRz9bJjTlRnxhXBoc6PaeSwJgBI4pAzcdg="
   },
   "rundeck": {
     "hash": "sha256-g8unbz8+UGLiAOJju6E2bLkygvZgHkv173PdMDefmrc=",
diff --git a/pkgs/applications/window-managers/i3/lock-blur.nix b/pkgs/applications/window-managers/i3/lock-blur.nix
index 68471ad4bc0d..56e21ba19407 100644
--- a/pkgs/applications/window-managers/i3/lock-blur.nix
+++ b/pkgs/applications/window-managers/i3/lock-blur.nix
@@ -34,7 +34,7 @@ i3lock-color.overrideAttrs (oldAttrs: rec {
     description = "Improved screenlocker based upon XCB and PAM with background blurring filter";
     homepage = "https://github.com/karulont/i3lock-blur/";
     license = licenses.bsd3;
-    maintainers = with maintainers; [ dan4ik605743 ];
+    maintainers = with maintainers; [ ];
     platforms = platforms.all;
     broken = stdenv.hostPlatform.isDarwin; # never built on Hydra https://hydra.nixos.org/job/nixpkgs/trunk/i3lock-blur.x86_64-darwin
   };
diff --git a/pkgs/by-name/af/afetch/package.nix b/pkgs/by-name/af/afetch/package.nix
index 79c7da836198..8af8ed4438e0 100644
--- a/pkgs/by-name/af/afetch/package.nix
+++ b/pkgs/by-name/af/afetch/package.nix
@@ -24,7 +24,6 @@ stdenv.mkDerivation rec {
     homepage = "https://github.com/13-CF/afetch";
     license = lib.licenses.gpl3Plus;
     maintainers = with lib.maintainers; [
-      dan4ik605743
       jk
     ];
     platforms = lib.platforms.linux;
diff --git a/pkgs/by-name/al/all-the-package-names/package.nix b/pkgs/by-name/al/all-the-package-names/package.nix
index 2fb9dd0354cd..2d958cdd2c53 100644
--- a/pkgs/by-name/al/all-the-package-names/package.nix
+++ b/pkgs/by-name/al/all-the-package-names/package.nix
@@ -7,16 +7,16 @@
 
 buildNpmPackage rec {
   pname = "all-the-package-names";
-  version = "2.0.2156";
+  version = "2.0.2159";
 
   src = fetchFromGitHub {
     owner = "nice-registry";
     repo = "all-the-package-names";
     tag = "v${version}";
-    hash = "sha256-XdMapdtcuZhrF/IacXahxCbpgu7f5mjtKxu5whebDvM=";
+    hash = "sha256-7c4cxGSBc60WTLjRptb8VbTf279BxDgVOiVaP4C7pKk=";
   };
 
-  npmDepsHash = "sha256-GUs0JyCYg5lIXZ9i9F+45myGtc6zYYmZ5YTxwcjOVUo=";
+  npmDepsHash = "sha256-fDQnEjPefRBbpCX21vZrJ3Y8y7d3PgM54IfPJbb44ao=";
 
   passthru.updateScript = nix-update-script { };
 
diff --git a/pkgs/by-name/ao/ao3downloader/package.nix b/pkgs/by-name/ao/ao3downloader/package.nix
new file mode 100644
index 000000000000..f8ab850e37c2
--- /dev/null
+++ b/pkgs/by-name/ao/ao3downloader/package.nix
@@ -0,0 +1,56 @@
+{
+  lib,
+  python312Packages,
+  fetchFromGitHub,
+}:
+
+# ao3downloader explicitly does not support Python 3.13 yet
+# https://github.com/nianeyna/ao3downloader/blob/f8399bb8aca276ae7359157b90afd13925c90056/pyproject.toml#L8
+python312Packages.buildPythonApplication rec {
+  pname = "ao3downloader";
+  version = "2025.6.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "nianeyna";
+    repo = "ao3downloader";
+    tag = "v${version}";
+    hash = "sha256-ukS3uku8OW5nhM2Nr0IxAiG03XfqUn/Xyd0lZDGGkWw=";
+  };
+
+  build-system = with python312Packages; [
+    hatchling
+  ];
+
+  dependencies = with python312Packages; [
+    beautifulsoup4
+    mobi
+    pdfquery
+    requests
+    six
+    tqdm
+  ];
+
+  pythonRelaxDeps = [
+    "requests"
+  ];
+
+  pythonImportsCheck = [
+    "ao3downloader"
+  ];
+
+  nativeCheckInputs = with python312Packages; [
+    pytestCheckHook
+    syrupy
+    pythonImportsCheckHook
+  ];
+
+  meta = {
+    description = "Utility for downloading fanfiction in bulk from the Archive of Our Own";
+    changelog = "https://github.com/nianeyna/ao3downloader/releases/tag/v${version}";
+    mainProgram = "ao3downloader";
+    homepage = "https://nianeyna.dev/ao3downloader";
+    license = lib.licenses.gpl3;
+    maintainers = [ lib.maintainers.samasaur ];
+  };
+}
diff --git a/pkgs/by-name/as/asus-wmi-screenpad-ctl/package.nix b/pkgs/by-name/as/asus-wmi-screenpad-ctl/package.nix
new file mode 100644
index 000000000000..aa1b7241145b
--- /dev/null
+++ b/pkgs/by-name/as/asus-wmi-screenpad-ctl/package.nix
@@ -0,0 +1,33 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+let
+  version = "1.0.0";
+in
+rustPlatform.buildRustPackage {
+  pname = "asus-wmi-screenpad-ctl";
+  inherit version;
+
+  src = fetchFromGitHub {
+    repo = "asus-wmi-screenpad-ctl";
+    owner = "aldenparker";
+    tag = "v${version}";
+    hash = "sha256-TV61Kh8A7PFJPRONqeCK1xEK2AHfiV/eoZOCL0SZ+5M=";
+  };
+
+  cargoHash = "sha256-ZluFoV9TclY6NOB5sHBN+1ht3zovmb4H+q7qT/Ywwmc=";
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Brightness control program for the asus-wmi-screenpad kernel module";
+    mainProgram = "asus-wmi-screenpad-ctl";
+    homepage = "https://github.com/aldenparker/asus-wmi-screenpad-ctl";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ aldenparker ];
+    platforms = lib.platforms.linux;
+  };
+}
diff --git a/pkgs/by-name/au/automatic-timezoned/package.nix b/pkgs/by-name/au/automatic-timezoned/package.nix
index ea0c8ae11138..a92ac06c2174 100644
--- a/pkgs/by-name/au/automatic-timezoned/package.nix
+++ b/pkgs/by-name/au/automatic-timezoned/package.nix
@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "automatic-timezoned";
-  version = "2.0.83";
+  version = "2.0.84";
 
   src = fetchFromGitHub {
     owner = "maxbrunet";
     repo = "automatic-timezoned";
     rev = "v${version}";
-    sha256 = "sha256-jrRuQXzx1dBIjXswVFq5szydj2GNEBPgpGj7K1vvQkE=";
+    sha256 = "sha256-Ul9bzMC8MfbfE4PDi3O8mhsImbspOcBDqTZOoVVeP/0=";
   };
 
-  cargoHash = "sha256-itZPo0GuTdWr2NYBluvf5/jQlwGVDZsPurIfftL94gk=";
+  cargoHash = "sha256-GroKztTpPWTw/tyrPWfld1ix0BnkjphwHM3J/17byqM=";
 
   meta = {
     description = "Automatically update system timezone based on location";
diff --git a/pkgs/by-name/aw/aws-iam-authenticator/package.nix b/pkgs/by-name/aw/aws-iam-authenticator/package.nix
index 0fb8190e2697..443879996c7e 100644
--- a/pkgs/by-name/aw/aws-iam-authenticator/package.nix
+++ b/pkgs/by-name/aw/aws-iam-authenticator/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "aws-iam-authenticator";
-  version = "0.7.4";
+  version = "0.7.5";
 
   src = fetchFromGitHub {
     owner = "kubernetes-sigs";
     repo = "aws-iam-authenticator";
     tag = "v${version}";
-    hash = "sha256-TC8FntHiOrYdaVajvkzOK5P13LyOrmaZNsBhqD7bDpw=";
+    hash = "sha256-FvXK4yrWPtM7uhXb0eJB2Hs1eE/+h3R79xVbHFSX2hQ=";
   };
 
-  vendorHash = "sha256-XmFskQF8YFL3Ol0mF2wBb0v+2+VrtwBKmfOH8j3IWOs=";
+  vendorHash = "sha256-fLA+dPAqvCPo8p+NUdmziAhUbi7wQVp2gnzv4493zr8=";
 
   ldflags =
     let
diff --git a/pkgs/by-name/ba/backblaze-b2/package.nix b/pkgs/by-name/ba/backblaze-b2/package.nix
index c4ee5eb0aff2..4fc25ff8421c 100644
--- a/pkgs/by-name/ba/backblaze-b2/package.nix
+++ b/pkgs/by-name/ba/backblaze-b2/package.nix
@@ -52,6 +52,7 @@ python3Packages.buildPythonApplication rec {
     pexpect
     pytestCheckHook
     pytest-xdist
+    tenacity
   ];
 
   preCheck = ''
diff --git a/pkgs/by-name/bo/bosh-cli/package.nix b/pkgs/by-name/bo/bosh-cli/package.nix
index a6c40f7f20ec..c7290e7f6b6f 100644
--- a/pkgs/by-name/bo/bosh-cli/package.nix
+++ b/pkgs/by-name/bo/bosh-cli/package.nix
@@ -9,13 +9,13 @@
 buildGoModule rec {
   pname = "bosh-cli";
 
-  version = "7.9.7";
+  version = "7.9.8";
 
   src = fetchFromGitHub {
     owner = "cloudfoundry";
     repo = "bosh-cli";
     rev = "v${version}";
-    sha256 = "sha256-Y3wk05IeWoH5YCrA+CJEtqvwCUxAvYdoYD+qDwTJo5Q=";
+    sha256 = "sha256-PCkP+IUjVlgcNHmBtUO2kuML8+dk4VT2ybtqsKbCzZo=";
   };
   vendorHash = null;
 
diff --git a/pkgs/by-name/bu/bulky/package.nix b/pkgs/by-name/bu/bulky/package.nix
index 8f3d19e2b1ea..6034d7b82242 100644
--- a/pkgs/by-name/bu/bulky/package.nix
+++ b/pkgs/by-name/bu/bulky/package.nix
@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation rec {
   pname = "bulky";
-  version = "3.7";
+  version = "3.8";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "bulky";
     rev = version;
-    hash = "sha256-8sSn/EXLs7UC4M6cNKtVUNwrHeV4dt3mvUCxQQQRaj0=";
+    hash = "sha256-LVrVgfYCcfaIFDPQu8cFr2+KkzXboDSjPwM5UIP4G9c=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ca/cargo-dist/package.nix b/pkgs/by-name/ca/cargo-dist/package.nix
index 1d678173ea17..bf6d9513cf9a 100644
--- a/pkgs/by-name/ca/cargo-dist/package.nix
+++ b/pkgs/by-name/ca/cargo-dist/package.nix
@@ -13,16 +13,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "cargo-dist";
-  version = "0.28.2";
+  version = "0.29.0";
 
   src = fetchFromGitHub {
     owner = "axodotdev";
     repo = "cargo-dist";
     rev = "v${version}";
-    hash = "sha256-Nlix74IvhUuWKJTslPajGHkGKxGPo1ucTEkuuA//zn0=";
+    hash = "sha256-J4zAjbyHHLxdObos/drDH5sDVmQE8h1WFqmfG8ac3uQ=";
   };
 
-  cargoHash = "sha256-GmzMmErEshYECMr7APhJ6uWqflHbG73bw/utMgq3dk0=";
+  cargoHash = "sha256-aPI8NtcLnLrQ0AC2E09QtH5RfXJ8cBtBrVfB3AwbgKc=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/co/colloid-gtk-theme/package.nix b/pkgs/by-name/co/colloid-gtk-theme/package.nix
index 7d64b3261e18..2d5e8d5b0774 100644
--- a/pkgs/by-name/co/colloid-gtk-theme/package.nix
+++ b/pkgs/by-name/co/colloid-gtk-theme/package.nix
@@ -57,13 +57,13 @@ lib.checkListOfEnum "colloid-gtk-theme: theme variants"
   stdenvNoCC.mkDerivation
   rec {
     inherit pname;
-    version = "2024-11-16";
+    version = "2025-07-31";
 
     src = fetchFromGitHub {
       owner = "vinceliuice";
       repo = "colloid-gtk-theme";
       rev = version;
-      hash = "sha256-70HDn87acG0me+zbXk6AoGmakY6VLuawq1ubgGcRZVk=";
+      hash = "sha256-0pXbeeBAkk6v2DBWfUYhWWdyrQhgr/JfDbhyS33maMM=";
     };
 
     nativeBuildInputs = [
diff --git a/pkgs/by-name/co/compare50/package.nix b/pkgs/by-name/co/compare50/package.nix
index 0981bb9454b7..e1fa66017524 100644
--- a/pkgs/by-name/co/compare50/package.nix
+++ b/pkgs/by-name/co/compare50/package.nix
@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "compare50";
-  version = "1.2.7";
+  version = "1.2.13";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "cs50";
     repo = "compare50";
     tag = "v${version}";
-    hash = "sha256-T7ts/9Uux2gVhh5EGv8PRh9cbCQDbLBYD06sWqNSvLU=";
+    hash = "sha256-qRESVE9242Leo6js+YrRrLff7C3IjWFKSN2/GsC/8VA=";
   };
 
   postPatch = ''
@@ -65,7 +65,7 @@ python3Packages.buildPythonApplication rec {
     description = "Tool for detecting similarity in code supporting over 300 languages";
     homepage = "https://cs50.readthedocs.io/projects/compare50/en/latest/";
     downloadPage = "https://github.com/cs50/compare50";
-    changelog = "https://github.com/cs50/compare50/releases/tag/v${version}";
+    changelog = "https://github.com/cs50/compare50/releases/tag/${src.tag}";
     license = lib.licenses.gpl3Only;
     platforms = lib.platforms.unix;
     maintainers = with lib.maintainers; [ ethancedwards8 ];
diff --git a/pkgs/by-name/cr/crowdin-cli/package.nix b/pkgs/by-name/cr/crowdin-cli/package.nix
index 0245a807e4f3..42718799e882 100644
--- a/pkgs/by-name/cr/crowdin-cli/package.nix
+++ b/pkgs/by-name/cr/crowdin-cli/package.nix
@@ -14,11 +14,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "crowdin-cli";
-  version = "4.9.0";
+  version = "4.9.1";
 
   src = fetchurl {
     url = "https://github.com/crowdin/crowdin-cli/releases/download/${finalAttrs.version}/crowdin-cli.zip";
-    hash = "sha256-fPgcr0Gg0uIgDhnfowFp6K+NhtKdjThLd4yzjcZ78K4=";
+    hash = "sha256-VU3kG8Y/p6bM/kkExmP6Mww46d1kxpljhNIRNhUY6kg=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/da/darkly/package.nix b/pkgs/by-name/da/darkly/package.nix
index c7644c91217a..e977ce2c0af5 100644
--- a/pkgs/by-name/da/darkly/package.nix
+++ b/pkgs/by-name/da/darkly/package.nix
@@ -13,13 +13,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "darkly-qt${qtMajorVersion}";
-  version = "0.5.21";
+  version = "0.5.22";
 
   src = fetchFromGitHub {
     owner = "Bali10050";
     repo = "Darkly";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-1WErpDYTlMW/889Efe3OUM3uwt5w+EttjOGoBolBZvE=";
+    hash = "sha256-m3UMp3dJfGptOR8WDGYgaHfax7Wpad0wKfOI8xZLC1s=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/dd/ddns-go/package.nix b/pkgs/by-name/dd/ddns-go/package.nix
index 18b228f77cbc..f78d77ddfaeb 100644
--- a/pkgs/by-name/dd/ddns-go/package.nix
+++ b/pkgs/by-name/dd/ddns-go/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule rec {
   pname = "ddns-go";
-  version = "6.12.0";
+  version = "6.12.1";
 
   src = fetchFromGitHub {
     owner = "jeessy2";
     repo = "ddns-go";
     rev = "v${version}";
-    hash = "sha256-6syI3XQNiERqxHUWmquNGHyKHymVkVgD8Yh2iZoek4g=";
+    hash = "sha256-7NDuC7MshPXEekEPo4DL2ww6HfWPdHhPa4a979a4NJY=";
   };
 
   vendorHash = "sha256-0HH5KkMVQzD/xyaue9Sh6CE5dI/aZJMwei7ynhzp9dc=";
diff --git a/pkgs/by-name/en/enry/package.nix b/pkgs/by-name/en/enry/package.nix
new file mode 100644
index 000000000000..5ca32969b0cb
--- /dev/null
+++ b/pkgs/by-name/en/enry/package.nix
@@ -0,0 +1,57 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  versionCheckHook,
+  writeScript,
+}:
+
+let
+  commitHash = "f10711437bfbb25b15506eb69dde24bb7decd222"; # matches tag release
+in
+buildGoModule (finalAttrs: {
+  pname = "enry";
+  version = "1.3.0";
+
+  src = fetchFromGitHub {
+    owner = "go-enry";
+    repo = "enry";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-JSYOCdWZnCM4Kq3EFkS7XZ5n0ahkR+A8omI4z1S45z8=";
+  };
+
+  vendorHash = "sha256-tUDhpeXlKpo1jnNyk0U3CcXroOlv7lHVUxc1wAnysG4=";
+
+  ldflags = [
+    "-X main.version=${finalAttrs.version}"
+    "-X main.commit=${commitHash}"
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
+  passthru.updateScript = writeScript "update-enry" ''
+    #!/usr/bin/env nix-shell
+    #!nix-shell -i bash -p curl jq nix-update
+
+    set -eu -o pipefail
+
+    gh_metadata="$(curl -sS https://api.github.com/repos/go-enry/enry/tags)"
+    version="$(echo "$gh_metadata" | jq -r '.[] | .name' | sort --version-sort | tail -1)"
+    commit_hash="$(echo "$gh_metadata" | jq -r --arg ver "$version" '.[] | select(.name == $ver).commit.sha')"
+
+    filename="$(nix-instantiate --eval -E "with import ./. {}; (builtins.unsafeGetAttrPos \"version\" enry).file" | tr -d '"')"
+    sed -i "s/commitHash = \"[^\"]*\"/commitHash = \"$commit_hash\"/" $filename
+
+    nix-update enry
+  '';
+
+  meta = {
+    description = "Programming language detector based on go-enry/go-enry/v2 library";
+    mainProgram = "enry";
+    homepage = "https://github.com/go-enry/enry";
+    changelog = "https://github.com/go-enry/enry/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ dvcorreia ];
+  };
+})
diff --git a/pkgs/by-name/fi/firefoxpwa/package.nix b/pkgs/by-name/fi/firefoxpwa/package.nix
index 0cbd3a10643f..f66a9eef39f0 100644
--- a/pkgs/by-name/fi/firefoxpwa/package.nix
+++ b/pkgs/by-name/fi/firefoxpwa/package.nix
@@ -1,5 +1,6 @@
 {
   extraLibs ? [ ],
+  firefoxRuntime ? firefox-unwrapped,
 
   lib,
   fetchFromGitHub,
@@ -84,9 +85,13 @@ rustPlatform.buildRustPackage rec {
   postInstall = ''
     # Runtime
     mkdir -p $out/share/firefoxpwa
-    cp -Lr ${firefox-unwrapped}/lib/firefox $out/share/firefoxpwa/runtime
+    cp -Lr ${firefoxRuntime}/lib/${firefoxRuntime.binaryName} $out/share/firefoxpwa/runtime
     chmod -R +w $out/share/firefoxpwa
 
+    if [ "${firefoxRuntime.binaryName}" != "firefox" ]; then
+      ln $out/share/firefoxpwa/runtime/${firefoxRuntime.binaryName} $out/share/firefoxpwa/runtime/firefox
+    fi
+
     # UserChrome
     cp -r userchrome $out/share/firefoxpwa
 
diff --git a/pkgs/by-name/fo/folder-color-switcher/package.nix b/pkgs/by-name/fo/folder-color-switcher/package.nix
index ebaad510b63f..616a02ae13a4 100644
--- a/pkgs/by-name/fo/folder-color-switcher/package.nix
+++ b/pkgs/by-name/fo/folder-color-switcher/package.nix
@@ -8,14 +8,14 @@
 
 stdenvNoCC.mkDerivation {
   pname = "folder-color-switcher";
-  version = "1.6.7";
+  version = "1.6.8";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "folder-color-switcher";
     # They don't really do tags, this is just a named commit.
-    rev = "5bd94d3ffdb9585c09832f0beabb14f0e67e8d58";
-    hash = "sha256-77+b7yVcTvBjtmXGOUIrh88IaxvCiBNM+hbZoN0+zoI=";
+    rev = "d135f29d688d89a0e7b48acec9e08738c7976ee1";
+    hash = "sha256-3EFnQxTYcJLGjfAzZNS7pgVDUwuU3juOAwUyaKOHemI=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/gi/github-desktop/package.nix b/pkgs/by-name/gi/github-desktop/package.nix
index 29da084ecdf2..46be620793f4 100644
--- a/pkgs/by-name/gi/github-desktop/package.nix
+++ b/pkgs/by-name/gi/github-desktop/package.nix
@@ -100,7 +100,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     homepage = "https://desktop.github.com/";
     license = lib.licenses.mit;
     mainProgram = "github-desktop";
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
   };
diff --git a/pkgs/by-name/gn/gnome-online-accounts-gtk/package.nix b/pkgs/by-name/gn/gnome-online-accounts-gtk/package.nix
index 35397182758d..ef4e232f9b7d 100644
--- a/pkgs/by-name/gn/gnome-online-accounts-gtk/package.nix
+++ b/pkgs/by-name/gn/gnome-online-accounts-gtk/package.nix
@@ -15,13 +15,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-online-accounts-gtk";
-  version = "3.50.6";
+  version = "3.50.7";
 
   src = fetchFromGitHub {
     owner = "xapp-project";
     repo = "gnome-online-accounts-gtk";
     rev = finalAttrs.version;
-    hash = "sha256-/d6ezujW/yeZV95zv/12ttUEUliZARtEGFoCXe6Dp/I=";
+    hash = "sha256-CFPaCx3tfOIoovm9AXofBdZzl/Rxiz5RVOrVKCuxZbI=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/go/go-ios/package.nix b/pkgs/by-name/go/go-ios/package.nix
index 1d73a22ede69..7c23051c394a 100644
--- a/pkgs/by-name/go/go-ios/package.nix
+++ b/pkgs/by-name/go/go-ios/package.nix
@@ -5,6 +5,8 @@
   nix-update-script,
   pkg-config,
   libusb1,
+  iproute2,
+  net-tools,
 }:
 
 buildGoModule rec {
@@ -25,6 +27,14 @@ buildGoModule rec {
     "restapi"
   ];
 
+  postPatch = ''
+    substituteInPlace ncm/linux_commands.go \
+      --replace-fail "ip " "${lib.getExe' iproute2 "ip"} "
+
+    substituteInPlace ios/tunnel/tunnel.go \
+      --replace-fail "ifconfig" "${lib.getExe' net-tools "ifconfig"}"
+  '';
+
   nativeBuildInputs = [
     pkg-config
   ];
diff --git a/pkgs/by-name/go/gotlsaflare/package.nix b/pkgs/by-name/go/gotlsaflare/package.nix
index d331b3933537..0f2b16b861f6 100644
--- a/pkgs/by-name/go/gotlsaflare/package.nix
+++ b/pkgs/by-name/go/gotlsaflare/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "gotlsaflare";
-  version = "2.7.2";
+  version = "2.7.3";
 
   src = fetchFromGitHub {
     owner = "Stenstromen";
     repo = "gotlsaflare";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-MryKBTFTdjoi8Bn39kCcyCVsj/C/lPJUaEgliLkHXuQ=";
+    hash = "sha256-OmjbXek62i0CrbwIXR13tDrZlWPMwO10ciUQ5kTd3gU=";
   };
 
-  vendorHash = "sha256-ZC1OD7TYE0CL8Vsopgeh+K13Rcm0mI9I2BpdDNpDSWE=";
+  vendorHash = "sha256-BAN2KzzmAk8dYvD1Uw94junawlvmVbSx6AQ7flxn18g=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/ha/halloy/package.nix b/pkgs/by-name/ha/halloy/package.nix
index 949b38215af7..8d237bffd68c 100644
--- a/pkgs/by-name/ha/halloy/package.nix
+++ b/pkgs/by-name/ha/halloy/package.nix
@@ -18,16 +18,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "halloy";
-  version = "2025.2";
+  version = "2025.8";
 
   src = fetchFromGitHub {
     owner = "squidowl";
     repo = "halloy";
     tag = version;
-    hash = "sha256-ijSUGiAowxSqYwH3OxSWiGvm99n88ETJxAFn5x4m/BE=";
+    hash = "sha256-Jtr1/MDR6pAaagVdhR2HZM91PTEPaQkDYMmALIWkHFU=";
   };
 
-  cargoHash = "sha256-j4lx3sSQZ7BKl+d5nFJQkMhgQWjn0xkNNCWMlbKLwVQ=";
+  cargoHash = "sha256-HseKOow4BjiPsGmwslZqBlvCoreY2BcnBu3BHg5965c=";
 
   nativeBuildInputs = [
     copyDesktopItems
diff --git a/pkgs/by-name/hy/hypnotix/package.nix b/pkgs/by-name/hy/hypnotix/package.nix
index 33bcda56b3bd..38f51702037f 100644
--- a/pkgs/by-name/hy/hypnotix/package.nix
+++ b/pkgs/by-name/hy/hypnotix/package.nix
@@ -15,13 +15,13 @@
 
 stdenv.mkDerivation rec {
   pname = "hypnotix";
-  version = "5.0";
+  version = "5.1";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "hypnotix";
     rev = version;
-    hash = "sha256-nBt+eGzUQaRO2IaEkvhdEZcVuKpZFEqIYSdVKSO1l4M=";
+    hash = "sha256-XXfZDFvHrGk+RFSQPldI/G4xhPm8lafZyBVCDtzvyoI=";
   };
 
   patches = [
diff --git a/pkgs/by-name/ie/ieda/package.nix b/pkgs/by-name/ie/ieda/package.nix
index 889f015aabfa..9efef4c1c61e 100644
--- a/pkgs/by-name/ie/ieda/package.nix
+++ b/pkgs/by-name/ie/ieda/package.nix
@@ -2,7 +2,6 @@
   lib,
   stdenv,
   fetchgit,
-  fetchFromGitHub,
   fetchpatch,
   callPackages,
   cmake,
@@ -24,22 +23,13 @@
   onnxruntime,
 }:
 let
-  glog-lock = glog.overrideAttrs (oldAttrs: rec {
-    version = "0.6.0";
-    src = fetchFromGitHub {
-      owner = "google";
-      repo = "glog";
-      rev = "v${version}";
-      sha256 = "sha256-xqRp9vaauBkKz2CXbh/Z4TWqhaUtqfbsSlbYZR/kW9s=";
-    };
-  });
   rootSrc = stdenv.mkDerivation {
     pname = "iEDA-src";
-    version = "2025-05-30";
+    version = "2025-06-30";
     src = fetchgit {
       url = "https://gitee.com/oscc-project/iEDA";
-      rev = "3096147fcea491c381da2928be6fb5a12c2d97b7";
-      sha256 = "sha256-rPkcE+QFMlEuwwJ/QBgyLTXP5lWLQPj5SOlZysJ6WTI=";
+      rev = "689f172c726c3934d49577f09adb5b09804f11e5";
+      sha256 = "sha256-JJePIn+NUScb+3o67vT31BoKHcfBuE9osV4SrcicFds=";
     };
 
     patches = [
@@ -47,15 +37,15 @@ let
       # and remove some libs or path that they hard-coded in the source code.
       # Should be removed after we upstream these changes.
       (fetchpatch {
-        url = "https://github.com/Emin017/iEDA/commit/e899b432776010048b558a939ad9ba17452cb44f.patch";
-        hash = "sha256-fLKsb/dgbT1mFCWEldFwhyrA1HSkKGMAbAs/IxV9pwM=";
+        url = "https://github.com/Emin017/iEDA/commit/c17e42a3673afd9c7ace9374f85290a85354bb78.patch";
+        hash = "sha256-xa1oSy3OZ5r0TigGywzpVPvpPnA7L6RIcNktfFen4AA=";
       })
       # This patch is to fix the compile error on the newer version of gcc/g++
-      # which is caused by some incorrect declarations and usages of the Boost library.
+      # We remove some forward declarations which are not allowed in newer versions of gcc/g++
       # Should be removed after we upstream these changes.
       (fetchpatch {
-        url = "https://github.com/Emin017/iEDA/commit/3a2c7e27a5bd349d72b3a7198358cd640c678802.patch";
-        hash = "sha256-2YROkQ92jGOJZr+4+LrwRJKxhA39Bypb1xFdo6aftu8=";
+        url = "https://github.com/Emin017/iEDA/commit/f5464cc40a2c671c5d405f16b509e2fa8d54f7f1.patch";
+        hash = "sha256-uVMV/CjkX9oLexHJbQvnEDOET/ZqsEPreI6EQb3Z79s=";
       })
     ];
 
@@ -76,7 +66,7 @@ let
 in
 stdenv.mkDerivation {
   pname = "iEDA";
-  version = "0-unstable-2025-05-30";
+  version = "0-unstable-2025-06-30";
 
   src = rootSrc;
 
@@ -107,7 +97,7 @@ stdenv.mkDerivation {
     rustpkgs.verilog-parser
     rustpkgs.liberty-parser
     gtest
-    glog-lock
+    glog
     gflags
     boost
     onnxruntime
diff --git a/pkgs/by-name/ja/jailer/package.nix b/pkgs/by-name/ja/jailer/package.nix
index f28ad2b6d2f7..de40f0bbe8ec 100644
--- a/pkgs/by-name/ja/jailer/package.nix
+++ b/pkgs/by-name/ja/jailer/package.nix
@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "jailer";
-  version = "16.7";
+  version = "16.7.1";
 
   src = fetchFromGitHub {
     owner = "Wisser";
     repo = "Jailer";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-lHBthOZu4utJd2X8cTJ7HCp8zLs0su78RIdf/QBbSJk=";
+    hash = "sha256-76l8f8CKUxbpR3xeWtbcUt67c44W/2Kv9tKDfvHBCLo=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/js/json-schema-catalog-rs/package.nix b/pkgs/by-name/js/json-schema-catalog-rs/package.nix
index 179906351b01..b441646e7283 100644
--- a/pkgs/by-name/js/json-schema-catalog-rs/package.nix
+++ b/pkgs/by-name/js/json-schema-catalog-rs/package.nix
@@ -1,6 +1,7 @@
 {
   callPackage,
   fetchFromGitHub,
+  jsonSchemaCatalogs,
   lib,
   nix-update-script,
   rustPlatform,
@@ -28,6 +29,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
   passthru = {
     tests = {
       run = callPackage ./test-run.nix { json-schema-catalog-rs = finalAttrs.finalPackage; };
+      jsonSchemaCatalogs = jsonSchemaCatalogs.tests.override {
+        json-schema-catalog-rs = finalAttrs.finalPackage;
+      };
     };
 
     updateScript = nix-update-script { };
diff --git a/pkgs/by-name/ju/justbuild/package.nix b/pkgs/by-name/ju/justbuild/package.nix
index 3399824bee11..97327fb6c0ce 100644
--- a/pkgs/by-name/ju/justbuild/package.nix
+++ b/pkgs/by-name/ju/justbuild/package.nix
@@ -33,13 +33,13 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "justbuild";
-  version = "1.6.1";
+  version = "1.6.2";
 
   src = fetchFromGitHub {
     owner = "just-buildsystem";
     repo = "justbuild";
     rev = "refs/tags/v${version}";
-    hash = "sha256-WtdzrtTqeDN0N50KLry95ijYfCP8xIY+ZSRtVbWLw/g=";
+    hash = "sha256-C2Tv/R8bIKAG0E1vcZyS2fs2Pr26+luinPsjCqbboR0=";
   };
 
   bazelapi = fetchurl {
diff --git a/pkgs/by-name/ka/kardolus-chatgpt-cli/package.nix b/pkgs/by-name/ka/kardolus-chatgpt-cli/package.nix
new file mode 100644
index 000000000000..0d3a26965770
--- /dev/null
+++ b/pkgs/by-name/ka/kardolus-chatgpt-cli/package.nix
@@ -0,0 +1,48 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  makeWrapper,
+}:
+
+buildGoModule (finalAttrs: {
+  # "chatgpt-cli" is taken by another package with the same upsteam name.
+  # To keep "pname" and "package attribute name" identical, the owners name (kardolus) gets prefixed as identifier.
+  pname = "kardolus-chatgpt-cli";
+  version = "1.8.4";
+
+  src = fetchFromGitHub {
+    owner = "kardolus";
+    repo = "chatgpt-cli";
+    rev = "v${finalAttrs.version}";
+    hash = "sha256-vr61SrIYun6KUB9u+ZtUmdGO/ks2aQnAMAQ0g6QPaho=";
+  };
+
+  vendorHash = null;
+  # The tests of kardolus/chatgpt-cli require an OpenAI API Key to be present in the environment,
+  # (e.g. https://github.com/kardolus/chatgpt-cli/blob/v1.8.4/test/contract/contract_test.go#L35)
+  # which will not be the case in the pipeline.
+  # Therefore, tests must be skipped.
+  doCheck = false;
+
+  nativeBuildInputs = [ makeWrapper ];
+  postFixup = ''
+    wrapProgram $out/bin/chatgpt \
+      --run "mkdir -p ~/.chatgpt-cli" \
+      --set-default CHATGPT_CLI_HISTORY_DIR ~/.chatgpt-cli
+  '';
+
+  meta = {
+    description = "Command-line interface for ChatGPT";
+    longDescription = ''
+      ChatGPT CLI is a versatile tool for interacting with LLMs through OpenAI, Azure, and other popular providers like Perplexity AI and Llama.
+      It supports prompt files, history tracking, and live data injection via MCP (Model Context Protocol),
+      making it ideal for both casual users and developers seeking a powerful, customizable GPT experience.
+    '';
+    homepage = "https://github.com/kardolus/chatgpt-cli";
+    platforms = lib.platforms.unix;
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ralleka ];
+    mainProgram = "chatgpt";
+  };
+})
diff --git a/pkgs/by-name/ky/kyverno/package.nix b/pkgs/by-name/ky/kyverno/package.nix
index d87efef20e8b..767f103488d5 100644
--- a/pkgs/by-name/ky/kyverno/package.nix
+++ b/pkgs/by-name/ky/kyverno/package.nix
@@ -9,13 +9,13 @@
 
 buildGoModule rec {
   pname = "kyverno";
-  version = "1.14.4";
+  version = "1.15.0";
 
   src = fetchFromGitHub {
     owner = "kyverno";
     repo = "kyverno";
     rev = "v${version}";
-    hash = "sha256-hOYNHJfK3EMe6oC3ucymcK8uyu07asRZjYJxm4fN6x8=";
+    hash = "sha256-NGyNB+N80oXxgL3bg/E1DmeRYYNxKsDLIjfUwtVGk7A=";
   };
 
   ldflags = [
@@ -26,7 +26,7 @@ buildGoModule rec {
     "-X github.com/kyverno/kyverno/pkg/version.BuildTime=1970-01-01_00:00:00"
   ];
 
-  vendorHash = "sha256-HdHK70AELKdeVSyP1S2yHZad3vooRDDdxAOnzN6s0nQ=";
+  vendorHash = "sha256-AaQ4/yrLNqLFBVRuDVjRHiNE4Bxb0kTUG7WeNw+gpZo=";
 
   subPackages = [ "cmd/cli/kubectl-kyverno" ];
 
diff --git a/pkgs/by-name/la/lazysql/package.nix b/pkgs/by-name/la/lazysql/package.nix
index 346915c4ed1c..1987fc6b9b33 100644
--- a/pkgs/by-name/la/lazysql/package.nix
+++ b/pkgs/by-name/la/lazysql/package.nix
@@ -11,13 +11,13 @@
 
 buildGoModule rec {
   pname = "lazysql";
-  version = "0.3.8";
+  version = "0.4.0";
 
   src = fetchFromGitHub {
     owner = "jorgerojas26";
     repo = "lazysql";
     rev = "v${version}";
-    hash = "sha256-aRySSDNqxdu4kZRohvG/PmOK3Uipvnw9DctJ8h5vl2g=";
+    hash = "sha256-XQjdMmHVrNzfQN/uFQFxGK9LwnRh1IkAvRQSDcAYWXo=";
   };
 
   vendorHash = "sha256-LLOUTml/mz7edCUy82k+S5PfpFovgUTQr0BoQQXiVGs=";
diff --git a/pkgs/by-name/li/libarchive-qt/package.nix b/pkgs/by-name/li/libarchive-qt/package.nix
index 74b7f79a11d1..015f30014c32 100644
--- a/pkgs/by-name/li/libarchive-qt/package.nix
+++ b/pkgs/by-name/li/libarchive-qt/package.nix
@@ -45,7 +45,7 @@ stdenv.mkDerivation (finalAttrs: {
     mainProgram = "archiver";
     homepage = "https://gitlab.com/marcusbritanicus/libarchive-qt";
     license = lib.licenses.lgpl3Plus;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })
diff --git a/pkgs/by-name/li/lightdm-slick-greeter/package.nix b/pkgs/by-name/li/lightdm-slick-greeter/package.nix
index 6d5ff8194811..38a775254e5a 100644
--- a/pkgs/by-name/li/lightdm-slick-greeter/package.nix
+++ b/pkgs/by-name/li/lightdm-slick-greeter/package.nix
@@ -22,13 +22,13 @@
 
 stdenv.mkDerivation rec {
   pname = "lightdm-slick-greeter";
-  version = "2.2.0";
+  version = "2.2.1";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "slick-greeter";
     rev = version;
-    hash = "sha256-xuNUCS8v8XXidXNT/DP+sckdadUTeflFK34ZDpF1iyc=";
+    hash = "sha256-AErY8Gy1AkYY/vpXoSE8zhyJd/nboMw+9BO3j6N7CNc=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/lo/loco/package.nix b/pkgs/by-name/lo/loco/package.nix
index ab6415d1ef47..88dc7865dfbb 100644
--- a/pkgs/by-name/lo/loco/package.nix
+++ b/pkgs/by-name/lo/loco/package.nix
@@ -6,14 +6,14 @@
 }:
 rustPlatform.buildRustPackage rec {
   pname = "loco";
-  version = "0.16.1";
+  version = "0.16.2";
 
   src = fetchCrate {
     inherit pname version;
-    hash = "sha256-5mg2caScI1sxKtadw8IP/yxDOdPN+RRqHXdsWr2R0FY=";
+    hash = "sha256-yctOGUfKd1zaIArtHESYEr1q79ZrJqL7H6bvpAFrE+8=";
   };
 
-  cargoHash = "sha256-SFNaTo6fV7xhmkqK8SuFOjXeDDYN4+KTbF9DfpEX+dI=";
+  cargoHash = "sha256-IdYicJ7ZIoVOQU91S8yIPYGeY+DaeAMztGOmriTGW38=";
 
   #Skip trycmd integration tests
   checkFlags = [ "--skip=cli_tests" ];
diff --git a/pkgs/by-name/ls/lsd2dsl/package.nix b/pkgs/by-name/ls/lsd2dsl/package.nix
index c2b9719e3ab8..6a7179a7f1c3 100644
--- a/pkgs/by-name/ls/lsd2dsl/package.nix
+++ b/pkgs/by-name/ls/lsd2dsl/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch,
   makeDesktopItem,
   copyDesktopItems,
   cmake,
@@ -15,17 +16,24 @@
   qt6,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "lsd2dsl";
   version = "0.6.0";
 
   src = fetchFromGitHub {
     owner = "nongeneric";
     repo = "lsd2dsl";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-0UsxDNpuWpBrfjh4q3JhZnOyXhHatSa3t/cApiG2JzM=";
   };
 
+  patches = [
+    (fetchpatch {
+      url = "https://github.com/nongeneric/lsd2dsl/commit/bbda5be1b76a4a44804483d00c07d79783eceb6b.patch";
+      hash = "sha256-7is83D1cMBArXVLe5TP7D7lUcwnTMeXjkJ+cbaH5JQk=";
+    })
+  ];
+
   postPatch = ''
     substituteInPlace CMakeLists.txt --replace "-Werror" ""
   '';
@@ -48,14 +56,14 @@ stdenv.mkDerivation rec {
     qt6.qtwebengine
   ];
 
-  env.NIX_CFLAGS_COMPILE = lib.optionalString stdenv.cc.isClang "-Wno-int-conversion";
+  env.NIX_CFLAGS_COMPILE = "-Wno-int-conversion";
 
   desktopItems = lib.singleton (makeDesktopItem {
     name = "lsd2dsl";
     exec = "lsd2dsl-qtgui";
     desktopName = "lsd2dsl";
     genericName = "lsd2dsl";
-    comment = meta.description;
+    comment = finalAttrs.meta.description;
     categories = [
       "Dictionary"
       "FileTools"
@@ -67,14 +75,14 @@ stdenv.mkDerivation rec {
     install -Dm755 console/lsd2dsl gui/lsd2dsl-qtgui -t $out/bin
   '';
 
-  meta = with lib; {
+  meta = {
     homepage = "https://rcebits.com/lsd2dsl/";
     description = "Lingvo dictionaries decompiler";
     longDescription = ''
       A decompiler for ABBYY Lingvo’s proprietary dictionaries.
     '';
-    license = licenses.mit;
-    maintainers = with maintainers; [ sikmir ];
-    platforms = platforms.unix;
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ sikmir ];
+    platforms = lib.platforms.unix;
   };
-}
+})
diff --git a/pkgs/by-name/ma/mangojuice/package.nix b/pkgs/by-name/ma/mangojuice/package.nix
index f11a268a7a99..4f98f7961fff 100644
--- a/pkgs/by-name/ma/mangojuice/package.nix
+++ b/pkgs/by-name/ma/mangojuice/package.nix
@@ -25,13 +25,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "mangojuice";
-  version = "0.8.5";
+  version = "0.8.6";
 
   src = fetchFromGitHub {
     owner = "radiolamp";
     repo = "mangojuice";
     tag = finalAttrs.version;
-    hash = "sha256-pqtzNJBMoKbF48JoIrbcJX78S+e3tb+otiG85YbBKYk=";
+    hash = "sha256-EVjKO+03o8es2t2/K1QuUIhXey7+2VNF37yXiMrv4o4=";
   };
 
   patches = [
diff --git a/pkgs/by-name/me/mealie/mealie-frontend.nix b/pkgs/by-name/me/mealie/mealie-frontend.nix
index 5132f564e99a..444e0eac309f 100644
--- a/pkgs/by-name/me/mealie/mealie-frontend.nix
+++ b/pkgs/by-name/me/mealie/mealie-frontend.nix
@@ -1,12 +1,17 @@
 src: version:
 {
   lib,
+  fetchFromGitHub,
   fetchYarnDeps,
-  nodejs_20,
+  dart-sass,
+  nodePackages_latest,
   fixup-yarn-lock,
   stdenv,
   yarn,
 }:
+let
+  nodejs = nodePackages_latest.nodejs;
+in
 stdenv.mkDerivation {
   name = "mealie-frontend";
   inherit version;
@@ -14,27 +19,29 @@ stdenv.mkDerivation {
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = "${src}/frontend/yarn.lock";
-    hash = "sha256-a2kIOQHaMzaMWId6+SSYN+SPQM2Ipa+F1ztFZgo3R6A=";
+    hash = "sha256-712mc/xksjXgnc0inthxE+ztSDl/4107oXw3vKcZD2g=";
   };
 
   nativeBuildInputs = [
     fixup-yarn-lock
-    nodejs_20
-    (yarn.override { nodejs = nodejs_20; })
+    nodejs
+    (yarn.override { inherit nodejs; })
   ];
 
   configurePhase = ''
     runHook preConfigure
 
+    sed -i 's+"@nuxt/fonts",+// NUXT FONTS DISABLED+g' nuxt.config.ts
+
     export HOME=$(mktemp -d)
     yarn config --offline set yarn-offline-mirror "$yarnOfflineCache"
     fixup-yarn-lock yarn.lock
-    # TODO: Remove --ignore-engines once upstream supports nodejs_20+
-    # https://github.com/mealie-recipes/mealie/issues/5400
-    # https://github.com/mealie-recipes/mealie/pull/5184
-    yarn install --frozen-lockfile --offline --no-progress --non-interactive --ignore-engines
+    yarn install --frozen-lockfile --offline --no-progress --non-interactive
     patchShebangs node_modules/
 
+    mkdir -p node_modules/sass-embedded/dist/lib/src/vendor/dart-sass
+    ln -s ${dart-sass}/bin/dart-sass node_modules/sass-embedded/dist/lib/src/vendor/dart-sass/sass
+
     runHook postConfigure
   '';
 
@@ -50,7 +57,7 @@ stdenv.mkDerivation {
 
   installPhase = ''
     runHook preInstall
-    mv dist $out
+    mv .output/public $out
     runHook postInstall
   '';
 
diff --git a/pkgs/by-name/me/mealie/package.nix b/pkgs/by-name/me/mealie/package.nix
index 6a7897f9a79f..cd20fb65b996 100644
--- a/pkgs/by-name/me/mealie/package.nix
+++ b/pkgs/by-name/me/mealie/package.nix
@@ -11,12 +11,12 @@
 }:
 
 let
-  version = "2.8.0";
+  version = "3.0.2";
   src = fetchFromGitHub {
     owner = "mealie-recipes";
     repo = "mealie";
     tag = "v${version}";
-    hash = "sha256-0LUT7OdYoOZTdR/UXJO2eL2Afo2Y7GjBPIrjWUt205E=";
+    hash = "sha256-0GlHfyoVEqmfTDSN9BGXrLRkStRjWjv2qzZac2oYu7Q=";
   };
 
   frontend = callPackage (import ./mealie-frontend.nix src version) { };
@@ -24,7 +24,6 @@ let
   pythonpkgs = python3Packages;
   python = pythonpkgs.python;
 in
-
 pythonpkgs.buildPythonApplication rec {
   pname = "mealie";
   inherit version src;
@@ -46,9 +45,7 @@ pythonpkgs.buildPythonApplication rec {
     apprise
     authlib
     bcrypt
-    extruct
     fastapi
-    gunicorn
     html2text
     httpx
     ingredient-parser-nlp
@@ -58,12 +55,12 @@ pythonpkgs.buildPythonApplication rec {
     openai
     orjson
     paho-mqtt
-    pillow
     pillow-heif
     psycopg2
     pydantic-settings
     pyhumps
     pyjwt
+    python-dateutil
     python-dotenv
     python-ldap
     python-multipart
diff --git a/pkgs/by-name/me/media-downloader/package.nix b/pkgs/by-name/me/media-downloader/package.nix
index ce608a4a650a..f7846ded9061 100644
--- a/pkgs/by-name/me/media-downloader/package.nix
+++ b/pkgs/by-name/me/media-downloader/package.nix
@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "media-downloader";
-  version = "5.4.1";
+  version = "5.4.2";
 
   src = fetchFromGitHub {
     owner = "mhogomchungu";
     repo = "media-downloader";
     rev = finalAttrs.version;
-    hash = "sha256-J9TXjN/u/I8m5Boa8SE0uI5iExVEm3yCRQ6c0fzW+jM=";
+    hash = "sha256-QW6wPljY259baHHucJjIBihinocafNALfLVN4s/gN1Q=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/mi/mint-y-icons/package.nix b/pkgs/by-name/mi/mint-y-icons/package.nix
index 4a49fc1acb75..211164c7da71 100644
--- a/pkgs/by-name/mi/mint-y-icons/package.nix
+++ b/pkgs/by-name/mi/mint-y-icons/package.nix
@@ -10,13 +10,13 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "mint-y-icons";
-  version = "1.8.4";
+  version = "1.8.5";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "mint-y-icons";
     rev = version;
-    hash = "sha256-ftiV9l7hTmWdtw36Z2GKpJZuRwQQ3MQWYIgb62VBde0=";
+    hash = "sha256-p+VnEsmFcPyyLLh2bC4zKPUaa/qQzZdx9DE9y+M3EMI=";
   };
 
   propagatedBuildInputs = [
@@ -31,12 +31,6 @@ stdenvNoCC.mkDerivation rec {
 
   dontDropIconThemeCache = true;
 
-  postPatch = ''
-    # Breaks gtk-update-icon-cache
-    # https://github.com/linuxmint/mint-y-icons/issues/494
-    find usr/share/icons/Mint-Y/apps/ -type l -name "1AC2_Battle.net Launcher.0.png" -delete
-  '';
-
   installPhase = ''
     runHook preInstall
 
diff --git a/pkgs/by-name/mo/moar/package.nix b/pkgs/by-name/mo/moar/package.nix
index 276eee36acd4..b231f30b2c5b 100644
--- a/pkgs/by-name/mo/moar/package.nix
+++ b/pkgs/by-name/mo/moar/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule rec {
   pname = "moar";
-  version = "1.32.5";
+  version = "1.33.0";
 
   src = fetchFromGitHub {
     owner = "walles";
     repo = "moar";
     rev = "v${version}";
-    hash = "sha256-EuVEpCHfyvd6D/eb1NGFS1ENLyX8u/m2FHrgZcbI3So=";
+    hash = "sha256-+06cup9iG+iMyluQPzUQ7vrnFHoeU4KNHGra3AsRRw0=";
   };
 
-  vendorHash = "sha256-eKL6R2Xmj6JOwXGuJJdSGwobEzDzZ0FUD8deO2d1unc=";
+  vendorHash = "sha256-ComKeqnw1PvDaCRVXfInRjSzhyZWGkD/hp5piwhwxds=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/mo/models-dev/package.nix b/pkgs/by-name/mo/models-dev/package.nix
index 0c0ffbf851ba..feda2dc96cb6 100644
--- a/pkgs/by-name/mo/models-dev/package.nix
+++ b/pkgs/by-name/mo/models-dev/package.nix
@@ -9,20 +9,20 @@
 
 let
   models-dev-node-modules-hash = {
-    "aarch64-darwin" = "sha256-2EVW5zQTcqH9zBYAegWj/Wtb0lYHZwA7Bbqs3gRjcx0=";
-    "aarch64-linux" = "sha256-nJgFnszwvknqA21uaqlGQQ1x+4ztKx0/tEvcNrv1LJg=";
-    "x86_64-darwin" = "sha256-Un6UxmvsmBuDdUwcWnu4qb0nPN1V1PFJi4VGVkNh/YU=";
-    "x86_64-linux" = "sha256-nlL+Ayacxz4fm404cABORSVGQcNxb3cB4mOezkrI90U=";
+    "aarch64-darwin" = "sha256-099Y+7cLtSQ0s71vxUGEochQSpCv1hbkwYbWx/eOvhY=";
+    "aarch64-linux" = "sha256-fOmp7UyszqpR04f5TW0pU96IO7euaxX9fBMtwoqIMY4=";
+    "x86_64-darwin" = "sha256-OsJDPCsEAAcXzgI/QrtfXXb2jc82pp6ldHuA4Ps8OpM=";
+    "x86_64-linux" = "sha256-Enx27ag7D0Qeb/ss/7zTQ1XSukyPzOMMK7pTYHqQUMs=";
   };
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "models-dev";
-  version = "0-unstable-2025-07-31";
+  version = "0-unstable-2025-08-01";
   src = fetchFromGitHub {
     owner = "sst";
     repo = "models.dev";
-    rev = "60f2d80bc087ded768a8c6c36981f43822871c78";
-    hash = "sha256-mE+ptgTETbF/QIhMwOOVkbT9Jeus8ceGbninagPqgeU=";
+    rev = "2e3f718c40e8868c2487b7275131b2e054feb462";
+    hash = "sha256-P7Q03I68ih2eKNfPkpzkIuvKcHLsrk8yxWbFCw74Pjg=";
   };
 
   node_modules = stdenvNoCC.mkDerivation {
diff --git a/pkgs/by-name/ne/nengo-gui/package.nix b/pkgs/by-name/ne/nengo-gui/package.nix
index 21ced9321462..d7b2418a189c 100644
--- a/pkgs/by-name/ne/nengo-gui/package.nix
+++ b/pkgs/by-name/ne/nengo-gui/package.nix
@@ -26,6 +26,6 @@ python3Packages.buildPythonPackage rec {
     description = "Nengo interactive visualizer";
     homepage = "https://nengo.ai/";
     license = licenses.unfreeRedistributable;
-    maintainers = with maintainers; [ arjix ];
+    maintainers = with maintainers; [ ];
   };
 }
diff --git a/pkgs/by-name/ne/nexusmods-app/deps.json b/pkgs/by-name/ne/nexusmods-app/deps.json
index f73fca4450dd..5f67beee978b 100644
--- a/pkgs/by-name/ne/nexusmods-app/deps.json
+++ b/pkgs/by-name/ne/nexusmods-app/deps.json
@@ -361,58 +361,58 @@
   },
   {
     "pname": "GameFinder",
-    "version": "4.7.3",
-    "hash": "sha256-tUUvWC8/HTFvESqSPN2HMnGkf6OroDBpHCbqo1ThD/8="
+    "version": "4.9.0",
+    "hash": "sha256-cuoMMfh5adQgVh9ZNqZ3mF9bLoArXRuzzZ6TIdFkh+M="
   },
   {
     "pname": "GameFinder.Common",
-    "version": "4.7.3",
-    "hash": "sha256-lPTPiywObx6SEaBKuL25+eLdfVHuWb1x14Q7aMpXLMQ="
+    "version": "4.9.0",
+    "hash": "sha256-1PXCCLN+TjDtnMZo8NnxE3MKJb1CUkRNYiD1SeWkdTE="
   },
   {
     "pname": "GameFinder.Launcher.Heroic",
-    "version": "4.7.3",
-    "hash": "sha256-Rp9I0XfW4KhyOSgyPzhR9aHYVcLDwUnpmvTjowviWC8="
+    "version": "4.9.0",
+    "hash": "sha256-g0suL5aVnDXFltlKzuds8PQxVCEtNsNdl52owlSg0jg="
   },
   {
     "pname": "GameFinder.RegistryUtils",
-    "version": "4.7.3",
-    "hash": "sha256-Z4IbxyMx6apZt9SYfDFvWD8I/qSP2S4kEz8hXym96KY="
+    "version": "4.9.0",
+    "hash": "sha256-mjGWEwpbxNdiljl7x+kWjnVysNBwcHC/zv9Z92HN5CM="
   },
   {
     "pname": "GameFinder.StoreHandlers.EADesktop",
-    "version": "4.7.3",
-    "hash": "sha256-RbPZayuG9OJXI1aSL2d5vfjfXlEAWFz9aZrXDXX6jhM="
+    "version": "4.9.0",
+    "hash": "sha256-HqkyZh+eys58KZOz8bik4CGtCui9V1aIyQQ6mLhsGgw="
   },
   {
     "pname": "GameFinder.StoreHandlers.EGS",
-    "version": "4.7.3",
-    "hash": "sha256-99DbRfzESJZAUDd3yREb8M6Mgn8dztNQqBPyR1bsST4="
+    "version": "4.9.0",
+    "hash": "sha256-Dp2EUsWbjXKOfZF8nzWWLESgt7VadvF65iqXE8LZ45g="
   },
   {
     "pname": "GameFinder.StoreHandlers.GOG",
-    "version": "4.7.3",
-    "hash": "sha256-u0Vm9k8XAkzOdW2U6nzuRPWgMxj3QwkvFc5S4c8A/u4="
+    "version": "4.9.0",
+    "hash": "sha256-F+sAOeSdIV/85mkhWfuszSPnNEOdJB+Wul601rAVaoQ="
   },
   {
     "pname": "GameFinder.StoreHandlers.Origin",
-    "version": "4.7.3",
-    "hash": "sha256-f/saANmx8zYrZ+G3xbsy2w7mQwC0Jmb5WpUSlZNyzJU="
+    "version": "4.9.0",
+    "hash": "sha256-l1WIlBYoA04eK0k1EU8C46MdEeNXix5MIWCo67Dzhlo="
   },
   {
     "pname": "GameFinder.StoreHandlers.Steam",
-    "version": "4.7.3",
-    "hash": "sha256-5WtdyR1/xX+Ra5ldlvM0leIgc8gTGaPKAFOC/KTHGk8="
+    "version": "4.9.0",
+    "hash": "sha256-Cw7eMevnbyJz3N4jUfWZ9SsQvMEbtFKHgc6HPnDD3+Y="
   },
   {
     "pname": "GameFinder.StoreHandlers.Xbox",
-    "version": "4.7.3",
-    "hash": "sha256-Z9RpXomR53mLhD0WH7pCYxmnQIAsGiBVqUgs4I0ZO4w="
+    "version": "4.9.0",
+    "hash": "sha256-/lkl+POQgiwlYxNJ4h4Dtp7w+hI5YUDv1sizAk8FCzc="
   },
   {
     "pname": "GameFinder.Wine",
-    "version": "4.7.3",
-    "hash": "sha256-PO8aXHEvCxBQq92GyPl3b//s4MTCU7T8mvryS4p0Hsg="
+    "version": "4.9.0",
+    "hash": "sha256-ER82DUiTnm85m65rIK7XbbIiiD2cvuu7cjF133g6yic="
   },
   {
     "pname": "Gee.External.Capstone",
diff --git a/pkgs/by-name/ne/nexusmods-app/package.nix b/pkgs/by-name/ne/nexusmods-app/package.nix
index 783b313bcd8d..d30526f049f7 100644
--- a/pkgs/by-name/ne/nexusmods-app/package.nix
+++ b/pkgs/by-name/ne/nexusmods-app/package.nix
@@ -23,12 +23,12 @@ let
 in
 buildDotnetModule (finalAttrs: {
   inherit pname;
-  version = "0.13.4";
+  version = "0.14.3";
 
   src = fetchgit {
     url = "https://github.com/Nexus-Mods/NexusMods.App.git";
     rev = "refs/tags/v${finalAttrs.version}";
-    hash = "sha256-Ub6HjZChOhRUDYQ2TAnrwOtrW6ahP+k74vCAmLkYABA=";
+    hash = "sha256-B2gIRVeaTwYEnESMovwEJgdmLwRNA7/nJs7opNhiyyA=";
     fetchSubmodules = true;
   };
 
@@ -147,6 +147,9 @@ buildDotnetModule (finalAttrs: {
     # Fails attempting to fetch SMAPI version data from github:
     # https://github.com/erri120/smapi-versions/raw/main/data/game-smapi-versions.json
     "NexusMods.Games.StardewValley.Tests.SMAPIGameVersionDiagnosticEmitterTests.Test_TryGetLastSupportedSMAPIVersion"
+
+    # Fails attempting to fetch game info from NexusMods API
+    "NexusMods.Networking.NexusWebApi.Tests.LocalMappingCacheTests.Test_Parse"
   ]
   ++ lib.optionals (!_7zz.meta.unfree) [
     "NexusMods.Games.FOMOD.Tests.FomodXmlInstallerTests.InstallsFilesSimple_UsingRar"
diff --git a/pkgs/by-name/op/openapi-python-client/package.nix b/pkgs/by-name/op/openapi-python-client/package.nix
index e37ceb99d18b..a5d6bbb76aac 100644
--- a/pkgs/by-name/op/openapi-python-client/package.nix
+++ b/pkgs/by-name/op/openapi-python-client/package.nix
@@ -11,7 +11,7 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "openapi-python-client";
-  version = "0.25.2";
+  version = "0.25.3";
   pyproject = true;
 
   src = fetchFromGitHub {
@@ -19,7 +19,7 @@ python3Packages.buildPythonApplication rec {
     owner = "openapi-generators";
     repo = "openapi-python-client";
     tag = "v${version}";
-    hash = "sha256-B+GVv1Q/OwbtHDMGNYkPkZgvHqncrAkdvZ6ECwhIbLE=";
+    hash = "sha256-6lGzAMt7c811u3Zooyn+HftoJNK3DHyjSO6lnOoDUus=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/op/openfreebuds/package.nix b/pkgs/by-name/op/openfreebuds/package.nix
new file mode 100644
index 000000000000..abb348f91dd8
--- /dev/null
+++ b/pkgs/by-name/op/openfreebuds/package.nix
@@ -0,0 +1,70 @@
+{
+  fetchFromGitHub,
+  lib,
+  nix-update-script,
+  python3Packages,
+  qt6,
+  qt6Packages,
+}:
+python3Packages.buildPythonApplication rec {
+  name = "openfreebuds";
+  version = "0.17.1";
+
+  src = fetchFromGitHub {
+    owner = "melianmiko";
+    repo = "OpenFreebuds";
+    tag = "v${version}";
+    hash = "sha256-y89BTKk14P/2kkYo63i9HgAdenzCVVnNArDsTmo4bPU=";
+  };
+
+  pyproject = true;
+
+  pythonRelaxDeps = [ "psutil" ];
+
+  build-system = with python3Packages; [
+    pdm-backend
+    pyqt6
+  ];
+
+  nativeBuildInputs = [
+    qt6Packages.wrapQtAppsHook
+    qt6Packages.qttools
+  ];
+
+  buildInputs = [ qt6.qtbase ];
+
+  dependencies = with python3Packages; [
+    aiocmd
+    aiohttp
+    dbus-next
+    pillow
+    psutil
+    pynput
+    pyqt6
+    qasync
+  ];
+
+  preBuild = ''
+    find openfreebuds_qt/designer -name "*.ui" | while read ui_file; do
+      py_file="''${ui_file%.ui}.py"
+      pyuic6 "$ui_file" -o "$py_file"
+    done
+
+    lrelease openfreebuds_qt/assets/i18n/*.ts
+  '';
+
+  preFixup = ''
+    makeWrapperArgs+=("''${qtWrapperArgs[@]}")
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    changelog = "https://github.com/melianmiko/OpenFreebuds/blob/${src.rev}/CHANGELOG.md";
+    description = "Open source app for HUAWEI FreeBuds (Linux + Windows)";
+    homepage = "https://github.com/melianmiko/OpenFreebuds";
+    license = lib.licenses.gpl3Only;
+    maintainers = [ lib.maintainers.znaniye ];
+    platforms = lib.platforms.linux;
+  };
+}
diff --git a/pkgs/by-name/pa/panoply/package.nix b/pkgs/by-name/pa/panoply/package.nix
index 03078eb621c0..b8bbdba8e308 100644
--- a/pkgs/by-name/pa/panoply/package.nix
+++ b/pkgs/by-name/pa/panoply/package.nix
@@ -8,11 +8,11 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "panoply";
-  version = "5.6.1";
+  version = "5.6.2";
 
   src = fetchurl {
     url = "https://www.giss.nasa.gov/tools/panoply/download/PanoplyJ-${version}.tgz";
-    hash = "sha256-r3hKlBRpZe9HJws24cqoiiQmFlH6Abn++w5yEudgKfI=";
+    hash = "sha256-DxQjIUv2Gkb3VnaorphMDTo+GlM/NoCZ6y/ogHSs07c=";
   };
 
   nativeBuildInputs = [ makeWrapper ];
diff --git a/pkgs/by-name/ph/phraze/package.nix b/pkgs/by-name/ph/phraze/package.nix
index f2b16f0f1d9f..47125020d996 100644
--- a/pkgs/by-name/ph/phraze/package.nix
+++ b/pkgs/by-name/ph/phraze/package.nix
@@ -10,18 +10,18 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "phraze";
-  version = "0.3.23";
+  version = "0.3.24";
 
   src = fetchFromGitHub {
     owner = "sts10";
     repo = "phraze";
     rev = "v${version}";
-    hash = "sha256-CQhzH6x8Fxx0ynHbLh8FTY7urbiXHrvTbMh+/TAwS2A=";
+    hash = "sha256-UURzpG5YZ7R/6vVOB/gtbFNNsVnOAsRwioKRLFxOH4c=";
   };
 
   doCheck = true;
 
-  cargoHash = "sha256-d4qj4rvH5CyHTH3RWDV6ADSGK/kz6yQLp3JjQdb6Wyo=";
+  cargoHash = "sha256-Uxbi/spmsPmxUNuLvEAWD1QLLBc/3zU/JoNyB7Dvlac=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/pi/pix/package.nix b/pkgs/by-name/pi/pix/package.nix
index 87066c993e65..3ee81efe9e33 100644
--- a/pkgs/by-name/pi/pix/package.nix
+++ b/pkgs/by-name/pi/pix/package.nix
@@ -34,13 +34,13 @@
 
 stdenv.mkDerivation rec {
   pname = "pix";
-  version = "3.4.5";
+  version = "3.4.6";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "pix";
     rev = version;
-    hash = "sha256-c/+NQHvscW/XE49Twmg1Rk1IfsjReCtRQWffobZtgTs=";
+    hash = "sha256-jlaqlA3akRNnBPTdtkWl+0NXqFbYw9uJKRfE/oTJMSg=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/pu/pureref/package.nix b/pkgs/by-name/pu/pureref/package.nix
index 069ff4f7e3a3..28f7cb01b497 100644
--- a/pkgs/by-name/pu/pureref/package.nix
+++ b/pkgs/by-name/pu/pureref/package.nix
@@ -1,6 +1,7 @@
 {
   lib,
   appimageTools,
+  makeWrapper,
   runCommand,
   curl,
   gnugrep,
@@ -32,11 +33,14 @@ appimageTools.wrapType1 {
   pname = "pureref";
   inherit version;
 
+  nativeBuildInputs = [ makeWrapper ];
+
   src = "${deb}/usr/bin/PureRef";
 
   extraInstallCommands = ''
     mv $out/bin/pureref $out/bin/PureRef
     cp -r ${deb}/usr/share $out
+    wrapProgram $out/bin/PureRef --set QT_QPA_PLATFORM xcb
   '';
 
   meta = with lib; {
diff --git a/pkgs/by-name/sa/sane-airscan/package.nix b/pkgs/by-name/sa/sane-airscan/package.nix
index dd37d24c4f07..398ea6f01a37 100644
--- a/pkgs/by-name/sa/sane-airscan/package.nix
+++ b/pkgs/by-name/sa/sane-airscan/package.nix
@@ -15,7 +15,7 @@
 }:
 stdenv.mkDerivation rec {
   pname = "sane-airscan";
-  version = "0.99.35";
+  version = "0.99.36";
 
   nativeBuildInputs = [
     meson
@@ -36,7 +36,7 @@ stdenv.mkDerivation rec {
     owner = "alexpevzner";
     repo = "sane-airscan";
     rev = version;
-    sha256 = "sha256-sWBqYoeCEAIM5Gug+w4b4WZ8SwFrywqJVzo0nt69diA=";
+    sha256 = "sha256-vpTUZVD5ONcQeDnjPmQDY9Qf/bmDqZMnxA+I8ALOB7Y=";
   };
 
   meta = with lib; {
diff --git a/pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix b/pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix
index dcfa2604ef00..0beedf429fbb 100644
--- a/pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix
+++ b/pkgs/by-name/sd/sdl_gamecontrollerdb/package.nix
@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "sdl_gamecontrollerdb";
-  version = "0-unstable-2025-07-18";
+  version = "0-unstable-2025-07-28";
 
   src = fetchFromGitHub {
     owner = "mdqinc";
     repo = "SDL_GameControllerDB";
-    rev = "dce2d3593c6a96a57716d13d58aa3b1d4965fe6f";
-    hash = "sha256-a1466lU8pCQJcJSIe3cEplUcbVnYoABvnm/QQhwsuDw=";
+    rev = "34765aa1de21323a873ab107a2a25e269e86b2e8";
+    hash = "sha256-K3XeSs6psR8RnDiYAKrVbx3KWQuJcD3RyZpOl+dn5Qw=";
   };
 
   dontBuild = true;
diff --git a/pkgs/by-name/sq/squid/package.nix b/pkgs/by-name/sq/squid/package.nix
index e7d3c325e1ac..569c9f556f2e 100644
--- a/pkgs/by-name/sq/squid/package.nix
+++ b/pkgs/by-name/sq/squid/package.nix
@@ -101,8 +101,10 @@ stdenv.mkDerivation (finalAttrs: {
     license = licenses.gpl2Plus;
     platforms = platforms.linux;
     maintainers = with maintainers; [ raskin ];
-    knownVulnerabilities = [
-      "Squid has multiple unresolved security vulnerabilities, for more information see https://megamansec.github.io/Squid-Security-Audit/"
-    ];
+    # In the past, it has been brought up that Squid had many security vulnerabilities
+    # (see https://megamansec.github.io/Squid-Security-Audit/). As of version 7.0,
+    # all of them have been solved, as tracked in their GitHub Security page:
+    # https://github.com/squid-cache/squid/security
+    knownVulnerabilities = [ ];
   };
 })
diff --git a/pkgs/by-name/st/sticky/package.nix b/pkgs/by-name/st/sticky/package.nix
index 42c8ad6666ad..90740339153b 100644
--- a/pkgs/by-name/st/sticky/package.nix
+++ b/pkgs/by-name/st/sticky/package.nix
@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation rec {
   pname = "sticky";
-  version = "1.25";
+  version = "1.26";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "sticky";
     rev = version;
-    hash = "sha256-lM9R89CNj8ZXeOciwn/ax9wcsf3J4yPmzrgAntp8Fsg=";
+    hash = "sha256-pwY5MO3xKgRQa1zYfcO02z6kOMofOFWqTUrwEYzkAEo=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/st/stunner-webrtc/package.nix b/pkgs/by-name/st/stunner-webrtc/package.nix
new file mode 100644
index 000000000000..8dc6ad9718a4
--- /dev/null
+++ b/pkgs/by-name/st/stunner-webrtc/package.nix
@@ -0,0 +1,28 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "stunner";
+  version = "0.5.8";
+
+  src = fetchFromGitHub {
+    owner = "firefart";
+    repo = "stunner";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-A/k43ZOk/JIpCHBI1ygFBjmbDWWmLMIzuDbM6+8FKdw=";
+  };
+
+  vendorHash = "sha256-cXvHNn4BbVVUVgy5IwCe/K1ISV8CyDilJrNYEK2QFU8=";
+
+  meta = {
+    description = "Test and exploit STUN, TURN and TURN over TCP servers";
+    homepage = "https://github.com/firefart/stunner";
+    changelog = "https://github.com/firefart/stunner/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.cc-by-nc-sa-40;
+    maintainers = with lib.maintainers; [ hougo ];
+    mainProgram = "stunner";
+  };
+})
diff --git a/pkgs/by-name/sv/svix-server/package.nix b/pkgs/by-name/sv/svix-server/package.nix
index 2df5402a404b..f405786e5747 100644
--- a/pkgs/by-name/sv/svix-server/package.nix
+++ b/pkgs/by-name/sv/svix-server/package.nix
@@ -10,18 +10,18 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "svix-server";
-  version = "1.69.0";
+  version = "1.70.0";
 
   src = fetchFromGitHub {
     owner = "svix";
     repo = "svix-webhooks";
     rev = "v${version}";
-    hash = "sha256-1boqSBDm91cOeHvecYb21MHpzUkSWkG20lPr/HpQSxQ=";
+    hash = "sha256-82QB+EmZf1v3L5zTLydaa4WlIUK5IJT0ghOpmIC1nRE=";
   };
 
   sourceRoot = "${src.name}/server";
 
-  cargoHash = "sha256-IJvGDMEI4bmJGsX5mM3xJ5eg/jqCoR/13s6KBrkFH/E=";
+  cargoHash = "sha256-f6nU5i9Dhy9inqqpHlNjR1M2E781398xo/T7hVGuCvk=";
 
   nativeBuildInputs = [ pkg-config ];
 
diff --git a/pkgs/by-name/ta/tagutil/package.nix b/pkgs/by-name/ta/tagutil/package.nix
index de5b89cad116..9f26660d647e 100644
--- a/pkgs/by-name/ta/tagutil/package.nix
+++ b/pkgs/by-name/ta/tagutil/package.nix
@@ -46,7 +46,7 @@ stdenv.mkDerivation rec {
     description = "Scriptable music files tags tool and editor";
     homepage = "https://github.com/kaworu/tagutil";
     license = licenses.bsd2;
-    maintainers = with maintainers; [ dan4ik605743 ];
+    maintainers = with maintainers; [ ];
     platforms = platforms.linux;
     mainProgram = "tagutil";
   };
diff --git a/pkgs/by-name/ta/tailscale/package.nix b/pkgs/by-name/ta/tailscale/package.nix
index 58f7e7d0b6e8..149737474d5f 100644
--- a/pkgs/by-name/ta/tailscale/package.nix
+++ b/pkgs/by-name/ta/tailscale/package.nix
@@ -23,7 +23,7 @@
 }:
 
 let
-  version = "1.84.3";
+  version = "1.86.2";
 in
 buildGoModule {
   pname = "tailscale";
@@ -37,11 +37,11 @@ buildGoModule {
   src = fetchFromGitHub {
     owner = "tailscale";
     repo = "tailscale";
-    rev = "v${version}";
-    hash = "sha256-0HvUNpyi6xzS3PtbgMvh6bLRhV77CZRrVSKGMr7JtbE=";
+    tag = "v${version}";
+    hash = "sha256-hozfvKkvTeaabN1tYl0NlEpjfD4sZQe9Z+agdoXFHNE=";
   };
 
-  vendorHash = "sha256-QBYCMOWQOBCt+69NtJtluhTZIOiBWcQ78M9Gbki6bN0=";
+  vendorHash = "sha256-4QTSspHLYJfzlontQ7msXyOB5gzq7ZwSvWmKuYY5klA=";
 
   nativeBuildInputs = [
     makeWrapper
@@ -63,8 +63,7 @@ buildGoModule {
   ];
 
   excludedPackages = [
-    # exlude integration tests which fail to work
-    # and require additional tooling
+    # Exclude integration tests which fail to work and require additional tooling
     "tstest/integration"
   ];
 
@@ -79,8 +78,7 @@ buildGoModule {
     "ts_include_cli"
   ];
 
-  # remove vendored tooling to ensure it's not used
-  # also avoids some unnecessary tests
+  # Remove vendored tooling to ensure it's not used; also avoids some unnecessary tests
   preBuild = ''
     rm -rf ./tool
   '';
@@ -151,6 +149,12 @@ buildGoModule {
 
         # flaky: https://github.com/tailscale/tailscale/issues/15348
         "TestSafeFuncHappyPath"
+
+        # Requires `go` to be installed with the `go tool` system which we don't use
+        "TestGoVersion"
+
+        # Fails because we vendor dependencies
+        "TestLicenseHeaders"
       ]
       ++ lib.optionals stdenv.hostPlatform.isDarwin [
         # syscall default route interface en0 differs from netstat
@@ -165,6 +169,11 @@ buildGoModule {
 
         # Fails only on Darwin, succeeds on other tested platforms.
         "TestOnTailnetDefaultAutoUpdate"
+
+        # Fails due to UNIX domain socket path limits in the Nix build environment.
+        # Likely we could do something to make the paths shorter.
+        "TestProtocolQEMU"
+        "TestProtocolUnixDgram"
       ];
     in
     [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];
diff --git a/pkgs/by-name/to/tonelib-gfx/package.nix b/pkgs/by-name/to/tonelib-gfx/package.nix
index 086dff96b162..f800e909f860 100644
--- a/pkgs/by-name/to/tonelib-gfx/package.nix
+++ b/pkgs/by-name/to/tonelib-gfx/package.nix
@@ -69,7 +69,6 @@ stdenv.mkDerivation rec {
     sourceProvenance = with sourceTypes; [ binaryNativeCode ];
     license = licenses.unfree;
     maintainers = with maintainers; [
-      dan4ik605743
       husjon
       orivej
     ];
diff --git a/pkgs/by-name/to/tonelib-jam/package.nix b/pkgs/by-name/to/tonelib-jam/package.nix
index 4bfee1934bdf..8d474374848d 100644
--- a/pkgs/by-name/to/tonelib-jam/package.nix
+++ b/pkgs/by-name/to/tonelib-jam/package.nix
@@ -61,7 +61,7 @@ stdenv.mkDerivation rec {
     homepage = "https://tonelib.net/";
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     license = lib.licenses.unfree;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = [ "x86_64-linux" ];
     mainProgram = "ToneLib-Jam";
   };
diff --git a/pkgs/by-name/to/tonelib-metal/package.nix b/pkgs/by-name/to/tonelib-metal/package.nix
index c25a4f1d10a9..ae7748152db9 100644
--- a/pkgs/by-name/to/tonelib-metal/package.nix
+++ b/pkgs/by-name/to/tonelib-metal/package.nix
@@ -62,7 +62,7 @@ stdenv.mkDerivation rec {
     homepage = "https://tonelib.net";
     sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
     license = lib.licenses.unfree;
-    maintainers = with lib.maintainers; [ dan4ik605743 ];
+    maintainers = with lib.maintainers; [ ];
     platforms = [ "x86_64-linux" ];
     mainProgram = "ToneLib-Metal";
   };
diff --git a/pkgs/by-name/to/tonelib-zoom/package.nix b/pkgs/by-name/to/tonelib-zoom/package.nix
index 24e248b5e060..174620fbcde2 100644
--- a/pkgs/by-name/to/tonelib-zoom/package.nix
+++ b/pkgs/by-name/to/tonelib-zoom/package.nix
@@ -60,7 +60,7 @@ stdenv.mkDerivation rec {
     homepage = "https://tonelib.net/";
     sourceProvenance = with sourceTypes; [ binaryNativeCode ];
     license = licenses.unfree;
-    maintainers = with maintainers; [ dan4ik605743 ];
+    maintainers = with maintainers; [ ];
     platforms = [ "x86_64-linux" ];
     mainProgram = "ToneLib-Zoom";
   };
diff --git a/pkgs/development/tools/misc/travis/Gemfile b/pkgs/by-name/tr/travis/Gemfile
similarity index 100%
rename from pkgs/development/tools/misc/travis/Gemfile
rename to pkgs/by-name/tr/travis/Gemfile
diff --git a/pkgs/development/tools/misc/travis/Gemfile.lock b/pkgs/by-name/tr/travis/Gemfile.lock
similarity index 100%
rename from pkgs/development/tools/misc/travis/Gemfile.lock
rename to pkgs/by-name/tr/travis/Gemfile.lock
diff --git a/pkgs/development/tools/misc/travis/gemset.nix b/pkgs/by-name/tr/travis/gemset.nix
similarity index 100%
rename from pkgs/development/tools/misc/travis/gemset.nix
rename to pkgs/by-name/tr/travis/gemset.nix
diff --git a/pkgs/development/tools/misc/travis/default.nix b/pkgs/by-name/tr/travis/package.nix
similarity index 81%
rename from pkgs/development/tools/misc/travis/default.nix
rename to pkgs/by-name/tr/travis/package.nix
index 52ae177172d3..06d571221be6 100644
--- a/pkgs/development/tools/misc/travis/default.nix
+++ b/pkgs/by-name/tr/travis/package.nix
@@ -12,12 +12,12 @@ bundlerEnv {
 
   passthru.updateScript = bundlerUpdateScript "travis";
 
-  meta = with lib; {
+  meta = {
     description = "CLI and Ruby client library for Travis CI";
     mainProgram = "travis";
     homepage = "https://github.com/travis-ci/travis.rb";
-    license = licenses.mit;
-    maintainers = with maintainers; [
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
       zimbatm
       nicknovitski
     ];
diff --git a/pkgs/by-name/uc/ucon64/package.nix b/pkgs/by-name/uc/ucon64/package.nix
new file mode 100644
index 000000000000..7f5551fd7108
--- /dev/null
+++ b/pkgs/by-name/uc/ucon64/package.nix
@@ -0,0 +1,58 @@
+{
+  lib,
+  stdenv,
+  fetchurl,
+  versionCheckHook,
+  libusb1,
+  zlib,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "ucon64";
+  version = "2.2.2";
+
+  src = fetchurl {
+    url = "https://sourceforge.net/projects/ucon64/files/ucon64/ucon64-${finalAttrs.version}/ucon64-${finalAttrs.version}-src.tar.gz/download";
+    name = "ucon64-${finalAttrs.version}-src.tar.gz";
+    hash = "sha256-4QCtSjD2wZq96Y42HGoOysTkBHf1TPt1SYxczSH7Ohg=";
+  };
+
+  buildInputs = [
+    zlib
+    libusb1
+  ];
+
+  sourceRoot = "ucon64-${finalAttrs.version}-src/src";
+
+  # Disable parallel on ARM (sys/io.h is x86-only)
+  configureFlags = lib.optionals (!stdenv.hostPlatform.isx86) [
+    "--disable-parallel"
+  ];
+
+  makeFlags = [
+    "CC=${stdenv.cc.targetPrefix}cc"
+  ];
+
+  installPhase = ''
+    runHook preInstall
+
+    install -Dm755 ucon64 -t $out/bin/
+
+    runHook postInstall
+  '';
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
+  meta = {
+    description = "Tool to backup video game cartridges and perform various ROM operations";
+    homepage = "https://ucon64.sourceforge.io/";
+    license = lib.licenses.gpl2Plus;
+    maintainers = with lib.maintainers; [ liberodark ];
+    mainProgram = "ucon64";
+  };
+})
diff --git a/pkgs/by-name/va/vacuum-go/package.nix b/pkgs/by-name/va/vacuum-go/package.nix
index f369e7f6d1f4..350ce8e238c5 100644
--- a/pkgs/by-name/va/vacuum-go/package.nix
+++ b/pkgs/by-name/va/vacuum-go/package.nix
@@ -7,17 +7,17 @@
 
 buildGoModule (finalAttrs: {
   pname = "vacuum-go";
-  version = "0.17.6";
+  version = "0.17.7";
 
   src = fetchFromGitHub {
     owner = "daveshanley";
     repo = "vacuum";
     # using refs/tags because simple version gives: 'the given path has multiple possibilities' error
     tag = "v${finalAttrs.version}";
-    hash = "sha256-riTyTOx8SoyIaXtL2qbL7AZO2sPcCIi6DJ64OFMNAWE=";
+    hash = "sha256-RkJOBiannG98bqc3GdBzRGvDATjX0gtgn8PCdIIBdBc=";
   };
 
-  vendorHash = "sha256-f+frQCCk/9+9dilSt13yk4U3c7D/r5XAwlXznyMhqM4=";
+  vendorHash = "sha256-6tBKlJa7fec0jc7/s1A6h86SwlZR7HzGes7hPEuwNmo=";
 
   env.CGO_ENABLED = 0;
   ldflags = [
diff --git a/pkgs/by-name/vk/vk-cli/package.nix b/pkgs/by-name/vk/vk-cli/package.nix
index aaf91887ed0f..fe7fc0e8c6b9 100644
--- a/pkgs/by-name/vk/vk-cli/package.nix
+++ b/pkgs/by-name/vk/vk-cli/package.nix
@@ -56,7 +56,7 @@ stdenv.mkDerivation rec {
     homepage = "https://github.com/vk-cli/vk";
     sourceProvenance = with sourceTypes; [ binaryNativeCode ];
     license = licenses.asl20;
-    maintainers = with maintainers; [ dan4ik605743 ];
+    maintainers = with maintainers; [ ];
     platforms = [ "x86_64-linux" ];
   };
 }
diff --git a/pkgs/by-name/wa/warpinator/package.nix b/pkgs/by-name/wa/warpinator/package.nix
index 9e3a6bb0dea9..61e5c92ac7fa 100644
--- a/pkgs/by-name/wa/warpinator/package.nix
+++ b/pkgs/by-name/wa/warpinator/package.nix
@@ -39,13 +39,13 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "warpinator";
-  version = "1.8.9";
+  version = "1.8.10";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "warpinator";
     rev = version;
-    hash = "sha256-/BRL0TT0zLjrL3ZcDnNqlHHMizirx8wQd9R4NT+fMqI=";
+    hash = "sha256-OSZYjCnFIHmWCwVcWP1MLmezt5HL4Njf0WMyCRmPP58=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/wa/wayland-bongocat/package.nix b/pkgs/by-name/wa/wayland-bongocat/package.nix
new file mode 100644
index 000000000000..445ce3b0f879
--- /dev/null
+++ b/pkgs/by-name/wa/wayland-bongocat/package.nix
@@ -0,0 +1,57 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  pkg-config,
+  wayland,
+  wayland-protocols,
+  wayland-scanner,
+}:
+stdenv.mkDerivation (finalAttrs: {
+  pname = "wayland-bongocat";
+  version = "1.2.1";
+  src = fetchFromGitHub {
+    owner = "saatvik333";
+    repo = "wayland-bongocat";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-mtbw4UW5I2et2cVWrkCKWbG0p3tDGhgmHfH60OHvPkI=";
+  };
+
+  # Package dependencies
+  strictDeps = true;
+  nativeBuildInputs = [
+    pkg-config
+    wayland-scanner
+  ];
+  buildInputs = [
+    wayland
+    wayland-protocols
+  ];
+
+  # Build phases
+  # Ensure that the Makefile has the correct directory with the Wayland protocols
+  preBuild = ''
+    export WAYLAND_PROTOCOLS_DIR="${wayland-protocols}/share/wayland-protocols"
+  '';
+
+  makeFlags = [ "release" ];
+  installPhase = ''
+    runHook preInstall
+
+    # Install binaries
+    install -Dm755 build/bongocat $out/bin/${finalAttrs.meta.mainProgram}
+    install -Dm755 scripts/find_input_devices.sh $out/bin/bongocat-find-devices
+
+    runHook postInstall
+  '';
+
+  # Package information
+  meta = {
+    description = "Delightful Wayland overlay that displays an animated bongo cat reacting to keyboard input";
+    homepage = "https://github.com/saatvik333/wayland-bongocat";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ voxi0 ];
+    mainProgram = "bongocat";
+    platforms = lib.platforms.linux;
+  };
+})
diff --git a/pkgs/by-name/wh/whitesur-gtk-theme/package.nix b/pkgs/by-name/wh/whitesur-gtk-theme/package.nix
index 274b4dfe7147..4e8921fe4c6f 100644
--- a/pkgs/by-name/wh/whitesur-gtk-theme/package.nix
+++ b/pkgs/by-name/wh/whitesur-gtk-theme/package.nix
@@ -94,13 +94,13 @@ lib.checkListOfEnum "${pname}: window control buttons variants" [ "normal" "alt"
   stdenv.mkDerivation
   rec {
     pname = "whitesur-gtk-theme";
-    version = "2025-06-14";
+    version = "2025-07-24";
 
     src = fetchFromGitHub {
       owner = "vinceliuice";
       repo = "whitesur-gtk-theme";
       rev = version;
-      hash = "sha256-+K2HAnpcCqfSw3WmiklMPnJTDuCSBiWe3aGNq2mnFLA=";
+      hash = "sha256-tuon9XxMdrz9XNTp50sbss2gtx6H9hEZh8t2jSoqx28=";
     };
 
     nativeBuildInputs = [
diff --git a/pkgs/by-name/xa/xapp/package.nix b/pkgs/by-name/xa/xapp/package.nix
index 5e4ce77f2336..2962ed6d683b 100644
--- a/pkgs/by-name/xa/xapp/package.nix
+++ b/pkgs/by-name/xa/xapp/package.nix
@@ -24,7 +24,7 @@
 
 stdenv.mkDerivation rec {
   pname = "xapp";
-  version = "2.8.9";
+  version = "2.8.11";
 
   outputs = [
     "out"
@@ -35,7 +35,7 @@ stdenv.mkDerivation rec {
     owner = "linuxmint";
     repo = "xapp";
     rev = version;
-    hash = "sha256-ub5OwtB+LR86gt17342cmgvoWJu2kYzkWhl9V1QVCzQ=";
+    hash = "sha256-dmMjGWjq0s4MkobeqssbG5G3+gHRqA6lmu95uJX3RJY=";
   };
 
   # Recommended by upstream, which enables the build of xapp-debug.
diff --git a/pkgs/by-name/xe/xed-editor/package.nix b/pkgs/by-name/xe/xed-editor/package.nix
index 6809ecac4198..2c7f8c774074 100644
--- a/pkgs/by-name/xe/xed-editor/package.nix
+++ b/pkgs/by-name/xe/xed-editor/package.nix
@@ -21,13 +21,13 @@
 
 stdenv.mkDerivation rec {
   pname = "xed-editor";
-  version = "3.8.2";
+  version = "3.8.3";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "xed";
     rev = version;
-    hash = "sha256-LSAOo6lPm6CQdTNxfAIthul9I9VnWpbEo1vOnKN7SNU=";
+    hash = "sha256-bNnxQOYDBS/pNaBwvmrt/VAya/m7t5H40lJkFevufUE=";
   };
 
   patches = [
diff --git a/pkgs/by-name/xe/xenia-canary/package.nix b/pkgs/by-name/xe/xenia-canary/package.nix
index e59bf3884350..540db1ad546b 100644
--- a/pkgs/by-name/xe/xenia-canary/package.nix
+++ b/pkgs/by-name/xe/xenia-canary/package.nix
@@ -25,8 +25,8 @@ llvmPackages_20.stdenv.mkDerivation {
     owner = "xenia-canary";
     repo = "xenia-canary";
     fetchSubmodules = true;
-    rev = "c3e4a93c0a59281cb53c6991c2c4b67e224a37d8";
-    hash = "sha256-p4XZwmehboq7CZnVO4J+QzyTNIjvJEplBfVPPvzVepw=";
+    rev = "4e8e789876329e03697d1542718fbc21b5053aa5";
+    hash = "sha256-sfNkMeOEvmBbFv2mDnKs3UGPxFRvts9wcgcA23endUI=";
   };
 
   dontConfigure = true;
@@ -59,8 +59,8 @@ llvmPackages_20.stdenv.mkDerivation {
 
   buildPhase = ''
     runHook preBuild
-    python3 xenia-build setup
-    python3 xenia-build build --config=release
+    python3 xenia-build.py setup
+    python3 xenia-build.py build --config=release
     runHook postBuild
   '';
 
diff --git a/pkgs/by-name/xr/xreader/package.nix b/pkgs/by-name/xr/xreader/package.nix
index 81ee70af9020..90d0a2544a70 100644
--- a/pkgs/by-name/xr/xreader/package.nix
+++ b/pkgs/by-name/xr/xreader/package.nix
@@ -36,13 +36,13 @@
 
 stdenv.mkDerivation rec {
   pname = "xreader";
-  version = "4.2.7";
+  version = "4.2.8";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "xreader";
     rev = version;
-    hash = "sha256-APBVrrvLS5CFtfi0UlIDtYyg4pfCS8qLc2a4KDOU1Zk=";
+    hash = "sha256-Q/Hx43B+LmoAWzHPcz+kETjLzKyrO0Sn4gu9PmGfyUI=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/xv/xviewer/package.nix b/pkgs/by-name/xv/xviewer/package.nix
index 5817fca0f464..bcc96b762885 100644
--- a/pkgs/by-name/xv/xviewer/package.nix
+++ b/pkgs/by-name/xv/xviewer/package.nix
@@ -28,13 +28,13 @@
 
 stdenv.mkDerivation rec {
   pname = "xviewer";
-  version = "3.4.9";
+  version = "3.4.10";
 
   src = fetchFromGitHub {
     owner = "linuxmint";
     repo = "xviewer";
     rev = version;
-    hash = "sha256-WYGX57PUX+WUVVZ1F+oE3QNwKB7ii5FlJdQ/3j5heUA=";
+    hash = "sha256-ELjr6W1Hqpvc7ChOrLhVUw9YPRoS/JjXQMNBrCn7JOQ=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/zs/zsh-forgit/package.nix b/pkgs/by-name/zs/zsh-forgit/package.nix
index a652f9996ab8..bef7658244c7 100644
--- a/pkgs/by-name/zs/zsh-forgit/package.nix
+++ b/pkgs/by-name/zs/zsh-forgit/package.nix
@@ -15,13 +15,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "zsh-forgit";
-  version = "25.07.0";
+  version = "25.08.0";
 
   src = fetchFromGitHub {
     owner = "wfxr";
     repo = "forgit";
     tag = finalAttrs.version;
-    hash = "sha256-h9li2nwKG6SnOQntWZpdeBbU3RrwO4+4yO7tAwuOwhE=";
+    hash = "sha256-45NeIRSTNiCqctdwBaS/qOeOI/8f4L+KVI/I6grYm+0=";
   };
 
   strictDeps = true;
diff --git a/pkgs/by-name/zu/zuse/package.nix b/pkgs/by-name/zu/zuse/package.nix
new file mode 100644
index 000000000000..af031f981148
--- /dev/null
+++ b/pkgs/by-name/zu/zuse/package.nix
@@ -0,0 +1,36 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "zuse";
+  version = "1.0";
+
+  src = fetchFromGitHub {
+    owner = "babycommando";
+    repo = "zuse";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-zKAAHvbaR1HnRe6CmAEi/6iAOHCcbGVS1/jSrQwksRk=";
+  };
+
+  vendorHash = "sha256-P7T244d1OpFDqwRu3gdEI1OAqq9EbpL1YO2mlTw0Jew=";
+
+  ldflags = [
+    "-s"
+    "-w"
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "IRC client for the terminal made in Go with Bubbletea";
+    homepage = "https://github.com/babycommando/zuse";
+    changelog = "https://github.com/babycommando/zuse/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ yiyu ];
+    mainProgram = "zuse";
+  };
+})
diff --git a/pkgs/data/json-schema/catalogs/json-patch-schemastore.nix b/pkgs/data/json-schema/catalogs/json-patch-schemastore.nix
new file mode 100644
index 000000000000..7eea0445eb76
--- /dev/null
+++ b/pkgs/data/json-schema/catalogs/json-patch-schemastore.nix
@@ -0,0 +1,33 @@
+{
+  fetchurl,
+  lib,
+  newCatalog,
+}:
+
+newCatalog {
+  name = "json-patch-schemastore";
+  displayName = "JSON Patch as maintained by the https://www.schemastore.org community";
+  version = "2024-11-26";
+  groups = {
+    "JSON Patch" = {
+      "https://json.schemastore.org/json-patch.json" = fetchurl {
+        name = "json-patch-schema";
+        # Note that we don't use the json.schemastore.org URLs directly, as those are mutable resources.
+        # Make sure to update the version above!
+        url = "https://github.com/schemastore/schemastore/raw/138439cd4f9d7bf57d6747b674ce5bbcffbfafdc/src/schemas/json/json-patch.json";
+        hash = "sha256-vrqlgvlU61aEO6jd1SLLEqJDZG1k+eTBozcyPmhUp2U=";
+      };
+    };
+  };
+  extraDescription = ''
+    A JSON Patch is a sequence of editing and checking operations to perform against another JSON document.
+    It is specified in IETF RFC 6902: https://datatracker.ietf.org/doc/html/rfc6902/
+
+    The schema is maintained by the community at https://www.schemastore.org, which is a collection of JSON Schemas for various purposes.
+  '';
+  meta = {
+    maintainers = with lib.maintainers; [ roberth ];
+    license = lib.licenses.asl20;
+    changelog = "https://github.com/schemastore/schemastore/commits/master/src/schemas/json/json-patch.json";
+  };
+}
diff --git a/pkgs/data/json-schema/catalogs/json-schema.nix b/pkgs/data/json-schema/catalogs/json-schema.nix
new file mode 100644
index 000000000000..68defdc0b301
--- /dev/null
+++ b/pkgs/data/json-schema/catalogs/json-schema.nix
@@ -0,0 +1,39 @@
+{
+  fetchurl,
+  lib,
+  newCatalog,
+}:
+
+newCatalog {
+  name = "json-schema";
+  displayName = "JSON Schema Metaschemas";
+  groups = {
+    "JSON Schema" = {
+      "http://json-schema.org/draft-04/schema#" = fetchurl {
+        name = "json-schema-draft-04";
+        url = "https://json-schema.org/draft-04/schema";
+        hash = "sha256-4UidC0dV8CeTMCWR0/y48Htok6gqlPJIlfjk7fEbguI=";
+      };
+      "http://json-schema.org/draft-06/schema#" = fetchurl {
+        name = "json-schema-draft-06";
+        url = "https://json-schema.org/draft-06/schema";
+        hash = "sha256-AGTogLohS/8c7lEeZ4++SMmCbdNZ6R4kI/w23mey6+E=";
+      };
+      "http://json-schema.org/draft-07/schema#" = fetchurl {
+        name = "json-schema-draft-07";
+        url = "https://json-schema.org/draft-07/schema";
+        hash = "sha256-aS4dFl5Hr8tfEbLOHGOWNf+oNANdbstrzzCHSB2uhAQ=";
+      };
+      # Unclear how newer metaschemas should be handled, so leaving them out for now.
+      # https://github.com/roberth/json-schema-catalog-rs/issues/8
+    };
+  };
+  meta = {
+    maintainers = with lib.maintainers; [ roberth ];
+    # https://github.com/json-schema-org/json-schema-spec/blob/main/LICENSE
+    license = [
+      lib.licenses.bsd3
+      lib.licenses.afl3
+    ];
+  };
+}
diff --git a/pkgs/data/json-schema/default.nix b/pkgs/data/json-schema/default.nix
new file mode 100644
index 000000000000..f12bab479074
--- /dev/null
+++ b/pkgs/data/json-schema/default.nix
@@ -0,0 +1,28 @@
+{
+  lib,
+  newScope,
+  json-schema-catalog-rs,
+  jsonschema-cli,
+}:
+let
+  inherit (lib) concatMapAttrs optionalAttrs;
+  inherit (lib.strings) hasSuffix removeSuffix;
+
+  jsonSchemaCatalogs = lib.makeScope newScope (
+    self:
+    {
+      inherit ((self.callPackage ./lib.nix { }).lib) newCatalog;
+      tests = self.callPackage ./tests.nix { };
+    }
+    // concatMapAttrs (
+      k: v:
+      optionalAttrs (v == "regular" && hasSuffix ".nix" k) {
+        ${removeSuffix ".nix" k} = self.callPackage (./catalogs + "/${k}") { };
+      }
+    ) (builtins.readDir ./catalogs)
+  );
+in
+{
+  # Exported to `pkgs`
+  inherit jsonSchemaCatalogs;
+}
diff --git a/pkgs/data/json-schema/lib.nix b/pkgs/data/json-schema/lib.nix
new file mode 100644
index 000000000000..6dfd96b90981
--- /dev/null
+++ b/pkgs/data/json-schema/lib.nix
@@ -0,0 +1,120 @@
+{
+  lib,
+  json-schema-catalog-rs,
+  runCommand,
+  jq,
+}:
+let
+
+  /**
+    A somewhat opinionated method for constructing a JSON Schema Catalog from files in a Nix store.
+
+    The input is a slightly simpler format:
+
+    ```nix
+    {
+      name = "my-catalog"; # derivation name, default displayName
+      displayName = "My Catalog"; # optional
+      groups = {
+        "Group One" = {
+          "https://example.com/schemas/one-v1.json" = pkgs.fetchurl { ... };
+          "https://example.com/schemas/one-v2.json" = pkgs.fetchurl { ... };
+          "https://example.com/schemas/one-common.json" = pkgs.fetchurl { ... };
+        };
+        "Group Two" = {
+          "https://example.com/schemas/two-v1.json" = ./two-v1.json; # Files can be local
+        };
+      };
+    }
+    ```
+  */
+  newCatalog =
+    {
+      name,
+      displayName ? name,
+      groups,
+      version ? null,
+      extraDescription ? null,
+      meta ? { },
+    }:
+    let
+      # lazyDerivation tidies up the package attributes
+      package = lib.lazyDerivation {
+        derivation = drv;
+        passthru = {
+          name = "catalog-${name}";
+          internals = drv;
+        }
+        // lib.optionalAttrs (version != null) {
+          inherit version;
+        };
+        meta = {
+          description = "JSON Schema Catalog for ${displayName}";
+          longDescription =
+            let
+              licenses = lib.toList meta.license;
+              show = license: license.fullName or license;
+              theLicensesApply =
+                if lib.length licenses == 1 then
+                  "The package license, ${show (lib.head licenses)}, applies"
+                else
+                  "The package licenses, ${lib.concatMapStringsSep " / " show licenses}, apply";
+            in
+            ''
+              A JSON Schema Catalog is a mapping from URIs to JSON Schema documents.
+              It enables offline use, e.g. in build processes, and therefore it improves performance, robustness and safety.
+              ${lib.optionalString (extraDescription != null) "\n${extraDescription}\n"}
+              ${theLicensesApply} to the schemas in this catalog. The catalog file itself is licensed under the terms of the Nix expression that governs it, e.g. MIT in the case of Nixpkgs.
+            '';
+        }
+        // meta;
+      };
+
+      drvArgs = {
+        pname = name;
+        catalogJson = builtins.toJSON {
+          name = displayName;
+          groups = lib.mapAttrsToList (name: group: {
+            inherit name;
+            # TODO dedup the longest common prefix by putting it in baseLocation
+            baseLocation = "/";
+            schemas = lib.mapAttrsToList (id: location: {
+              inherit id;
+              inherit location;
+            }) group;
+          }) groups;
+        };
+        passAsFile = [ "catalogJson" ];
+        passthru = {
+          inherit groups;
+        };
+        nativeBuildInputs = [
+          jq
+          json-schema-catalog-rs
+        ];
+      }
+      // lib.optionalAttrs (version != null) {
+        inherit version;
+      };
+
+      drv = runCommand "${package.name}${lib.optionalString (version != null) "-${version}"}" drvArgs ''
+        out_dir="$out/share/json-schema-catalogs"
+        out_file="$out_dir/$name.json"
+
+        mkdir -p "$out_dir"
+
+        # Write the catalog JSON. `jq` formats it nicely.
+        jq . <"$catalogJsonPath" >"$out_file"
+
+        json-schema-catalog check "$out_file"
+      '';
+    in
+    package;
+in
+{
+  lib =
+    # Exported as part of `pkgs.jsonSchemaCatalogs`
+    {
+      inherit newCatalog;
+    };
+}
diff --git a/pkgs/data/json-schema/tests.nix b/pkgs/data/json-schema/tests.nix
new file mode 100644
index 000000000000..4929c9cf9cf5
--- /dev/null
+++ b/pkgs/data/json-schema/tests.nix
@@ -0,0 +1,69 @@
+{
+  json-schema,
+  lib,
+  json-schema-catalog-rs,
+  runCommand,
+}:
+
+lib.recurseIntoAttrs {
+  test-with-json-schema-catalog-rs =
+    runCommand "json-schema-catalogs-integration-test"
+      {
+        nativeBuildInputs = [
+          json-schema
+          json-schema-catalog-rs
+        ];
+      }
+      ''
+        cat >example.json <<"EOF"
+        {
+          "$id": "https://example.com/schemas/integration-test.json",
+          "$schema": "http://json-schema.org/draft-07/schema#",
+          "title": "Integration Test",
+          "type": "object",
+          "oneOf": [
+            {
+              "$ref": "http://json-schema.org/draft-07/schema#"
+            },
+            {
+              "$ref": "http://json-schema.org/draft-07/schema#/definitions/yolo"
+            },
+            {
+              "$ref": "./foo.json#/definitions/bar"
+            }
+          ]
+        }
+        EOF
+        cat >example.json.expected <<"EOF"
+        {
+          "$id": "https://example.com/schemas/integration-test.json",
+          "$schema": "http://json-schema.org/draft-07/schema#",
+          "oneOf": [
+            {
+              "$ref": "file://${
+                json-schema.internals.groups."JSON Schema"."http://json-schema.org/draft-07/schema#"
+              }#"
+            },
+            {
+              "$ref": "file://${
+                json-schema.internals.groups."JSON Schema"."http://json-schema.org/draft-07/schema#"
+              }#/definitions/yolo"
+            },
+            {
+              "$ref": "./foo.json#/definitions/bar"
+            }
+          ],
+          "title": "Integration Test",
+          "type": "object"
+        }
+        EOF
+        ( set -x;
+          ! grep '##' example.json.expected
+        )
+
+        json-schema-catalog replace --verbose example.json > example.json.out
+
+        diff -U3 --color=always example.json.expected example.json.out
+        touch $out
+      '';
+}
diff --git a/pkgs/development/python-modules/aiocmd/default.nix b/pkgs/development/python-modules/aiocmd/default.nix
new file mode 100644
index 000000000000..a35a63f5f002
--- /dev/null
+++ b/pkgs/development/python-modules/aiocmd/default.nix
@@ -0,0 +1,35 @@
+{
+  buildPythonPackage,
+  fetchFromGitHub,
+  lib,
+  prompt-toolkit,
+  setuptools,
+}:
+buildPythonPackage rec {
+  name = "aiocmd";
+  version = "0.1.5";
+  src = fetchFromGitHub {
+    owner = "KimiNewt";
+    repo = "aiocmd";
+    tag = "v${version}";
+    hash = "sha256-C8dpeMTaoOMgfNP19JUYKUf+Vyw36Ry6dHkhaSm/QNk=";
+  };
+
+  pyproject = true;
+
+  build-system = [ setuptools ];
+
+  dependencies = [ prompt-toolkit ];
+
+  doCheck = false;
+
+  pythonImportsCheck = [ "aiocmd" ];
+
+  meta = {
+    description = "Asyncio-based automatic CLI creation tool using prompt-toolkit";
+    homepage = "https://github.com/KimiNewt/aiocmd";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.znaniye ];
+    platforms = lib.platforms.linux;
+  };
+}
diff --git a/pkgs/development/python-modules/ast-grep-py/default.nix b/pkgs/development/python-modules/ast-grep-py/default.nix
new file mode 100644
index 000000000000..e42eb3e754fc
--- /dev/null
+++ b/pkgs/development/python-modules/ast-grep-py/default.nix
@@ -0,0 +1,43 @@
+{
+  lib,
+  ast-grep,
+  buildPythonPackage,
+  rustPlatform,
+  pytestCheckHook,
+  nix-update-script,
+}:
+buildPythonPackage {
+  inherit (ast-grep) version src cargoDeps;
+  pname = "ast-grep-py";
+  pyproject = true;
+
+  buildAndTestSubdir = "crates/pyo3";
+
+  nativeBuildInputs = with rustPlatform; [
+    cargoSetupHook
+    maturinBuildHook
+  ];
+
+  prePatch = ''
+    substituteInPlace ./crates/pyo3/tests/test_register_lang.py \
+      --replace-fail '../..' ${ast-grep.src}
+  '';
+
+  nativeCheckInputs = [ pytestCheckHook ];
+
+  pythonImportsCheck = [ "ast_grep_py" ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    inherit (ast-grep.meta)
+      description
+      homepage
+      changelog
+      license
+      ;
+    maintainers = with lib.maintainers; [
+      nezia
+    ];
+  };
+}
diff --git a/pkgs/development/python-modules/compressai/default.nix b/pkgs/development/python-modules/compressai/default.nix
index 2749d88def59..79de2d7596fd 100644
--- a/pkgs/development/python-modules/compressai/default.nix
+++ b/pkgs/development/python-modules/compressai/default.nix
@@ -98,6 +98,9 @@ buildPythonPackage rec {
     # Cause pytest to hang on Darwin after the tests are done
     "tests/test_eval_model.py"
     "tests/test_train.py"
+
+    # fails in sandbox as it tries to launch a web browser (which fails due to missing `osascript`)
+    "tests/test_plot.py::test_plot[plotly-ms-ssim-rgb]"
   ];
 
   meta = {
diff --git a/pkgs/development/python-modules/flax/default.nix b/pkgs/development/python-modules/flax/default.nix
index bad48ac61bc5..ce7938805cca 100644
--- a/pkgs/development/python-modules/flax/default.nix
+++ b/pkgs/development/python-modules/flax/default.nix
@@ -38,14 +38,14 @@
 
 buildPythonPackage rec {
   pname = "flax";
-  version = "0.10.7";
+  version = "0.11.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "google";
     repo = "flax";
     tag = "v${version}";
-    hash = "sha256-T/KhlvliesBW40kyToxOkyX8PLl0acMQO+FnOKqfQJo=";
+    hash = "sha256-Epc7o8JoDkvNMbSH4D0cGyNJtg88qsDDbE881UVBxX4=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/gpytorch/default.nix b/pkgs/development/python-modules/gpytorch/default.nix
index 10eb6d95dc86..08db11be0e4f 100644
--- a/pkgs/development/python-modules/gpytorch/default.nix
+++ b/pkgs/development/python-modules/gpytorch/default.nix
@@ -1,6 +1,5 @@
 {
   lib,
-  stdenv,
   buildPythonPackage,
   fetchFromGitHub,
   jaxtyping,
@@ -57,9 +56,6 @@ buildPythonPackage rec {
     "test_t_matmul_matrix"
   ];
 
-  # Testing is broken on Darwin due to a `scikit-learn` issue, see https://github.com/NixOS/nixpkgs/issues/423831
-  doCheck = !stdenv.hostPlatform.isDarwin;
-
   meta = with lib; {
     description = "Highly efficient and modular implementation of Gaussian Processes, with GPU acceleration";
     homepage = "https://gpytorch.ai";
diff --git a/pkgs/development/python-modules/great-tables/default.nix b/pkgs/development/python-modules/great-tables/default.nix
index 624fd58d43a7..6dc61bd936e7 100644
--- a/pkgs/development/python-modules/great-tables/default.nix
+++ b/pkgs/development/python-modules/great-tables/default.nix
@@ -34,14 +34,14 @@
 
 buildPythonPackage rec {
   pname = "great-tables";
-  version = "0.17.0";
+  version = "0.18.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "posit-dev";
     repo = "great-tables";
     tag = "v${version}";
-    hash = "sha256-2XTGLlhzn1gaj1oKPoSdmMrc6E97DsCWZL6Zpa0o8U0=";
+    hash = "sha256-AuhcIQGBroWa2+Rg6qLTtB4ulq+vvCoouPcTZcZhnbQ=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/keymap-drawer/default.nix b/pkgs/development/python-modules/keymap-drawer/default.nix
index 0fe1961748d7..3591f44588fb 100644
--- a/pkgs/development/python-modules/keymap-drawer/default.nix
+++ b/pkgs/development/python-modules/keymap-drawer/default.nix
@@ -18,7 +18,7 @@
   versionCheckHook,
 }:
 let
-  version = "0.22.0";
+  version = "0.22.1";
 in
 buildPythonPackage {
   inherit version;
@@ -30,11 +30,15 @@ buildPythonPackage {
     owner = "caksoylar";
     repo = "keymap-drawer";
     tag = "v${version}";
-    hash = "sha256-SPnIfrUA0M9xznjEe60T+0VHh9lCmY4cni9hyqFlZqM=";
+    hash = "sha256-X3O5yspEdey03YQ6JsYN/DE9NUiq148u1W6LQpUQ3ns=";
   };
 
   build-system = [ poetry-core ];
 
+  pythonRelaxDeps = [
+    "tree-sitter-devicetree"
+  ];
+
   dependencies = [
     pcpp
     platformdirs
@@ -60,6 +64,7 @@ buildPythonPackage {
   meta = {
     description = "Module and CLI tool to help parse and draw keyboard layouts";
     homepage = "https://github.com/caksoylar/keymap-drawer";
+    changelog = "https://github.com/caksoylar/keymap-drawer/releases/tag/v${version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [
       MattSturgeon
diff --git a/pkgs/development/python-modules/laspy/default.nix b/pkgs/development/python-modules/laspy/default.nix
index 9e68b13137f5..39057be18dcc 100644
--- a/pkgs/development/python-modules/laspy/default.nix
+++ b/pkgs/development/python-modules/laspy/default.nix
@@ -4,6 +4,7 @@
   fetchPypi,
   numpy,
   laszip,
+  lazrs,
   setuptools,
   pytestCheckHook,
   pythonOlder,
@@ -11,14 +12,14 @@
 
 buildPythonPackage rec {
   pname = "laspy";
-  version = "2.5.4";
+  version = "2.6.1";
   format = "pyproject";
 
   disabled = pythonOlder "3.7";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-7r2/M3mvvAsk5+SBL6xWe/+IDR6FH3AXXSI3Wq7N9+E=";
+    hash = "sha256-zpy5oYUosqK5hVg99ApN6mjN2nmV5H5LALbUjfDojao=";
   };
 
   nativeBuildInputs = [ setuptools ];
@@ -26,13 +27,17 @@ buildPythonPackage rec {
   propagatedBuildInputs = [
     numpy
     laszip
+    lazrs # much faster laz reading, see https://laspy.readthedocs.io/en/latest/installation.html#laz-support
   ];
 
   nativeCheckInputs = [ pytestCheckHook ];
 
   pythonImportsCheck = [
     "laspy"
+    # `laspy` supports multiple backends and detects them dynamically.
+    # We check their importability to make sure they are all working.
     "laszip"
+    "lazrs"
   ];
 
   meta = with lib; {
@@ -42,5 +47,6 @@ buildPythonPackage rec {
     changelog = "https://github.com/laspy/laspy/blob/${version}/CHANGELOG.md";
     license = licenses.bsd2;
     maintainers = with maintainers; [ matthewcroughan ];
+    teams = [ teams.geospatial ];
   };
 }
diff --git a/pkgs/development/python-modules/lazrs/default.nix b/pkgs/development/python-modules/lazrs/default.nix
new file mode 100644
index 000000000000..f0c24b250675
--- /dev/null
+++ b/pkgs/development/python-modules/lazrs/default.nix
@@ -0,0 +1,41 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchPypi,
+  rustPlatform,
+}:
+buildPythonPackage rec {
+  pname = "lazrs";
+  version = "0.7.0";
+
+  format = "pyproject";
+
+  src = fetchPypi {
+    inherit pname version;
+    hash = "sha256-UxkbNRwdn6RfdEcWmDhL9CveFFmTCWRfudTDU/D7fyQ=";
+  };
+
+  nativeBuildInputs = [
+    rustPlatform.cargoSetupHook
+    rustPlatform.maturinBuildHook
+  ];
+
+  cargoDeps = rustPlatform.fetchCargoVendor {
+    inherit src;
+    inherit pname version;
+    hash = "sha256-GVb34eznC5/TA/SpvDq9uJ9M3nUTfx0KyfRFd4WUyCI=";
+  };
+
+  pythonImportsCheck = [ "lazrs" ];
+
+  meta = {
+    description = "Python bindings for laz-rs";
+    homepage = "https://github.com/laz-rs/laz-rs-python";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
+      nh2
+      chpatrick
+    ];
+    teams = [ lib.teams.geospatial ];
+  };
+}
diff --git a/pkgs/development/python-modules/linode-api/default.nix b/pkgs/development/python-modules/linode-api/default.nix
index faf16e8e3dde..a5888b324524 100644
--- a/pkgs/development/python-modules/linode-api/default.nix
+++ b/pkgs/development/python-modules/linode-api/default.nix
@@ -14,7 +14,7 @@
 
 buildPythonPackage rec {
   pname = "linode-api";
-  version = "5.33.0";
+  version = "5.33.1";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
@@ -24,7 +24,7 @@ buildPythonPackage rec {
     owner = "linode";
     repo = "python-linode-api";
     tag = "v${version}";
-    hash = "sha256-XCmW9rpCpJhEMgaARduQ5JqE14oQNRZv3c9shvZp3+k=";
+    hash = "sha256-RFnsz04Z3oB86VPzClYdQfgup27FNhSwvR0Q4hJclE8=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/mmh3/default.nix b/pkgs/development/python-modules/mmh3/default.nix
index 0917aa96b4d0..16cf9a30bed5 100644
--- a/pkgs/development/python-modules/mmh3/default.nix
+++ b/pkgs/development/python-modules/mmh3/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage rec {
   pname = "mmh3";
-  version = "5.1.0";
+  version = "5.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "hajimes";
     repo = "mmh3";
     tag = "v${version}";
-    hash = "sha256-56LrJuoBvhGgw+w4GIQ0XEQtf5oR87el+gZxgBYkyx0=";
+    hash = "sha256-55NWdPQIPY40oJo9VxM4HsUUXQJimIf6nqWmacc57dE=";
   };
 
   build-system = [ setuptools ];
@@ -27,7 +27,7 @@ buildPythonPackage rec {
   meta = {
     description = "Python wrapper for MurmurHash3, a set of fast and robust hash functions";
     homepage = "https://github.com/hajimes/mmh3";
-    changelog = "https://github.com/hajimes/mmh3/blob/v${version}/CHANGELOG.md";
+    changelog = "https://github.com/hajimes/mmh3/blob/${src.tag}/CHANGELOG.md";
     license = lib.licenses.cc0;
     maintainers = [ lib.maintainers.sarahec ];
   };
diff --git a/pkgs/development/python-modules/motionblinds/default.nix b/pkgs/development/python-modules/motionblinds/default.nix
index 615bc9364d60..822aa5bcc0e6 100644
--- a/pkgs/development/python-modules/motionblinds/default.nix
+++ b/pkgs/development/python-modules/motionblinds/default.nix
@@ -9,7 +9,7 @@
 
 buildPythonPackage rec {
   pname = "motionblinds";
-  version = "0.6.29";
+  version = "0.6.30";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
@@ -18,7 +18,7 @@ buildPythonPackage rec {
     owner = "starkillerOG";
     repo = "motion-blinds";
     tag = version;
-    hash = "sha256-oxBdi5NFotvSVN3b9Rno2RGFiZxB7JAKvdiY4t7L8rQ=";
+    hash = "sha256-xV9od7xTKBBE4f4Mqg57Mp0MXO8/lG+bBKzG+jv6gf4=";
   };
 
   build-system = [ setuptools ];
@@ -33,7 +33,7 @@ buildPythonPackage rec {
   meta = with lib; {
     description = "Python library for interfacing with Motion Blinds";
     homepage = "https://github.com/starkillerOG/motion-blinds";
-    changelog = "https://github.com/starkillerOG/motion-blinds/releases/tag/${version}";
+    changelog = "https://github.com/starkillerOG/motion-blinds/releases/tag/${src.tag}";
     license = with licenses; [ mit ];
     maintainers = with maintainers; [ fab ];
   };
diff --git a/pkgs/development/python-modules/nengo/default.nix b/pkgs/development/python-modules/nengo/default.nix
index a78933581c14..d33846b646b3 100644
--- a/pkgs/development/python-modules/nengo/default.nix
+++ b/pkgs/development/python-modules/nengo/default.nix
@@ -42,6 +42,6 @@ buildPythonPackage rec {
     description = "Python library for creating and simulating large-scale brain models";
     homepage = "https://nengo.ai/";
     license = licenses.unfreeRedistributable;
-    maintainers = with maintainers; [ arjix ];
+    maintainers = with maintainers; [ ];
   };
 }
diff --git a/pkgs/development/python-modules/numpyro/default.nix b/pkgs/development/python-modules/numpyro/default.nix
index 5546586b7d07..da26a2cb9c49 100644
--- a/pkgs/development/python-modules/numpyro/default.nix
+++ b/pkgs/development/python-modules/numpyro/default.nix
@@ -92,6 +92,11 @@ buildPythonPackage rec {
 
     # ValueError: compiling computation that requires 2 logical devices, but only 1 XLA devices are available (num_replicas=2)
     "test_chain"
+
+    # Failing since flax==0.11.0
+    # KeyError: "No RngStream named 'dropout' found in Rngs."
+    # https://github.com/pyro-ppl/numpyro/issues/2055
+    "test_nnx_state_dropout_smoke"
   ]
   ++ lib.optionals stdenv.hostPlatform.isDarwin [
     # AssertionError: Not equal to tolerance rtol=0.06, atol=0
diff --git a/pkgs/development/python-modules/oelint-data/default.nix b/pkgs/development/python-modules/oelint-data/default.nix
index 7564a2a0f8e5..9ef22aaebe2b 100644
--- a/pkgs/development/python-modules/oelint-data/default.nix
+++ b/pkgs/development/python-modules/oelint-data/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage rec {
   pname = "oelint-data";
-  version = "1.0.23";
+  version = "1.0.24";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "priv-kweihmann";
     repo = "oelint-data";
     tag = version;
-    hash = "sha256-JN563FGxM9Z+2dKzLBlepN1x2oKlUq0nIBwB0Obe8yY=";
+    hash = "sha256-vKXRlqpFxdmq+UOGCm59LVwjLW8h1N/fQr4kx1eW8ys=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/optuna-dashboard/default.nix b/pkgs/development/python-modules/optuna-dashboard/default.nix
index f24bc8dd0564..a5c2b932bcac 100644
--- a/pkgs/development/python-modules/optuna-dashboard/default.nix
+++ b/pkgs/development/python-modules/optuna-dashboard/default.nix
@@ -58,6 +58,12 @@ buildPythonPackage rec {
     streamlit
   ];
 
+  disabledTests = lib.optionals stdenv.hostPlatform.isDarwin [
+    # AttributeError: module 'numpy' has no attribute 'float128' ==> not available on 64-bit Darwin
+    "test_infer_sortable"
+    "test_serialize_numpy_floating"
+  ];
+
   # Disable tests that use playwright (needs network)
   disabledTestPaths = [
     "e2e_tests/test_dashboard/test_usecases/test_preferential_optimization.py"
diff --git a/pkgs/development/python-modules/pdfquery/default.nix b/pkgs/development/python-modules/pdfquery/default.nix
new file mode 100644
index 000000000000..6c71aef892ba
--- /dev/null
+++ b/pkgs/development/python-modules/pdfquery/default.nix
@@ -0,0 +1,60 @@
+{
+  buildPythonPackage,
+  fetchPypi,
+  lib,
+  cssselect,
+  chardet,
+  lxml,
+  pdfminer-six,
+  pyquery,
+  roman,
+  six,
+  setuptools,
+}:
+
+buildPythonPackage rec {
+  pname = "pdfquery";
+  version = "0.4.3";
+  pyproject = true;
+
+  # The latest version is on PyPI but not tagged on GitHub
+  src = fetchPypi {
+    inherit pname version;
+    hash = "sha256-oqKXTLMS/aT1aa3I1jN30l1cY2ckC0p7+xZTksc+Hc4=";
+  };
+
+  dependencies = [
+    cssselect
+    chardet
+    lxml
+    pdfminer-six
+    pyquery
+    roman
+
+    # Not explicitly listed in setup.py; found through trial and error
+    six
+  ];
+
+  build-system = [
+    setuptools
+  ];
+
+  # Although this package has tests, they aren't runnable with
+  # `unittestCheckHook` or `pytestCheckHook` because you're meant
+  # to run the tests with `python setup.py test`, but that's deprecated
+  # and doesn't work anymore. So there are no runnable tests.
+  doCheck = false;
+
+  # This runs as a different phase than checkPhase, so still runs
+  # despite `doCheck = false`
+  pythonImportsCheck = [
+    "pdfquery"
+  ];
+
+  meta = {
+    description = "Concise, friendly PDF scraping using JQuery or XPath syntax";
+    homepage = "https://github.com/jcushman/pdfquery";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.samasaur ];
+  };
+}
diff --git a/pkgs/development/python-modules/pyemoncms/default.nix b/pkgs/development/python-modules/pyemoncms/default.nix
index 9916a440c04e..8651b61f8863 100644
--- a/pkgs/development/python-modules/pyemoncms/default.nix
+++ b/pkgs/development/python-modules/pyemoncms/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "pyemoncms";
-  version = "0.1.1";
+  version = "0.1.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Open-Building-Management";
     repo = "pyemoncms";
     tag = "v${version}";
-    hash = "sha256-IBrYys0i9pTAw9ul8bqni0H3KNSvKQYNU6D4OSfR6ZE=";
+    hash = "sha256-61i7VKmPSMUrUSgnDtKROdDdM0QDqOTsqnLjGLkgGII=";
   };
 
   build-system = [ setuptools ];
@@ -37,7 +37,7 @@ buildPythonPackage rec {
   ];
 
   meta = {
-    changelog = "https://github.com/Open-Building-Management/pyemoncms/releases/tag/v${version}";
+    changelog = "https://github.com/Open-Building-Management/pyemoncms/releases/tag/${src.tag}";
     description = "Python library for emoncms API";
     homepage = "https://github.com/Open-Building-Management/pyemoncms";
     license = lib.licenses.mit;
diff --git a/pkgs/development/python-modules/pylance/default.nix b/pkgs/development/python-modules/pylance/default.nix
index 758c3299f513..3213913fe641 100644
--- a/pkgs/development/python-modules/pylance/default.nix
+++ b/pkgs/development/python-modules/pylance/default.nix
@@ -129,6 +129,10 @@ buildPythonPackage rec {
   ++ lib.optionals (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isAarch64) [
     # OSError: LanceError(IO): Resources exhausted: Failed to allocate additional 1245184 bytes for ExternalSorter[0]...
     "test_merge_insert_large"
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    # Build hangs after all the tests are run due to a torch subprocess not exiting
+    "test_multiprocess_loading"
   ];
 
   meta = {
diff --git a/pkgs/development/python-modules/pyshp/default.nix b/pkgs/development/python-modules/pyshp/default.nix
index 05ebc0c376d7..623fbebfb6d7 100644
--- a/pkgs/development/python-modules/pyshp/default.nix
+++ b/pkgs/development/python-modules/pyshp/default.nix
@@ -8,7 +8,7 @@
 
 buildPythonPackage rec {
   pname = "pyshp";
-  version = "2.4.0";
+  version = "2.4.1";
   format = "setuptools";
 
   disabled = pythonOlder "3.7";
@@ -17,7 +17,7 @@ buildPythonPackage rec {
     owner = "GeospatialPython";
     repo = "pyshp";
     tag = version;
-    hash = "sha256-q1++2pifLZWc562m5cKoL2jLWM4lOnIwEAOqzKArh+w=";
+    hash = "sha256-NBZCqCbrCUIowj/EwWfC1vNC1fyNdg7EC06RRi6pul0=";
   };
 
   nativeCheckInputs = [ pytestCheckHook ];
diff --git a/pkgs/development/python-modules/pytenable/default.nix b/pkgs/development/python-modules/pytenable/default.nix
index 752621713dd4..eb612b1e312d 100644
--- a/pkgs/development/python-modules/pytenable/default.nix
+++ b/pkgs/development/python-modules/pytenable/default.nix
@@ -28,7 +28,7 @@
 
 buildPythonPackage rec {
   pname = "pytenable";
-  version = "1.8.1";
+  version = "1.8.2";
   pyproject = true;
 
   disabled = pythonOlder "3.10";
@@ -37,7 +37,7 @@ buildPythonPackage rec {
     owner = "tenable";
     repo = "pyTenable";
     tag = version;
-    hash = "sha256-ayueOCgbn90vFtDfKtfOhFvWX5p3nsrg7sBQP0QBNaQ=";
+    hash = "sha256-21vKR9W2Bpi+9YfmMQ+vgQIGchb7cYA2Sx493/XuYU0=";
   };
 
   pythonRelaxDeps = [
diff --git a/pkgs/development/python-modules/sentence-transformers/default.nix b/pkgs/development/python-modules/sentence-transformers/default.nix
index 1c4f1d5a2430..4a79c6daf465 100644
--- a/pkgs/development/python-modules/sentence-transformers/default.nix
+++ b/pkgs/development/python-modules/sentence-transformers/default.nix
@@ -1,6 +1,5 @@
 {
   lib,
-  stdenv,
   buildPythonPackage,
   fetchFromGitHub,
 
@@ -123,10 +122,6 @@ buildPythonPackage rec {
     "tests/test_pretrained_stsb.py"
     "tests/test_sentence_transformer.py"
     "tests/test_train_stsb.py"
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    # Segfault
-    "tests/test_sparse_tensor.py"
   ];
 
   # Sentence-transformer needs a writable hf_home cache
diff --git a/pkgs/development/python-modules/sqlite-vec/default.nix b/pkgs/development/python-modules/sqlite-vec/default.nix
index 7a389f10d40f..fa5786b24425 100644
--- a/pkgs/development/python-modules/sqlite-vec/default.nix
+++ b/pkgs/development/python-modules/sqlite-vec/default.nix
@@ -80,9 +80,5 @@ buildPythonPackage rec {
   meta = sqlite-vec-c.meta // {
     description = "Python bindings for sqlite-vec";
     maintainers = [ lib.maintainers.sarahec ];
-    badPlatforms = [
-      # segfaults during test
-      "x86_64-darwin"
-    ];
   };
 }
diff --git a/pkgs/development/python-modules/succulent/default.nix b/pkgs/development/python-modules/succulent/default.nix
index 15648e91f617..09fa33ea2d2b 100644
--- a/pkgs/development/python-modules/succulent/default.nix
+++ b/pkgs/development/python-modules/succulent/default.nix
@@ -14,7 +14,7 @@
 
 buildPythonPackage rec {
   pname = "succulent";
-  version = "0.4.1";
+  version = "0.4.2";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
@@ -23,7 +23,7 @@ buildPythonPackage rec {
     owner = "firefly-cpp";
     repo = "succulent";
     tag = version;
-    hash = "sha256-lmN31Xdp1PCLhgInGxvTKTLBXFpz3NnHYSFjKQfRfec=";
+    hash = "sha256-3cqU1iYxvMyx0hCVl6r4RZARpsWNckXZgeBNq0kokuw=";
   };
 
   pythonRelaxDeps = [
diff --git a/pkgs/development/python-modules/torch/source/default.nix b/pkgs/development/python-modules/torch/source/default.nix
index b6ac1e57523e..5e16b0284c76 100644
--- a/pkgs/development/python-modules/torch/source/default.nix
+++ b/pkgs/development/python-modules/torch/source/default.nix
@@ -526,7 +526,9 @@ buildPythonPackage rec {
     blas
     blas.provider
   ]
-  ++ lib.optionals stdenv.cc.isClang [ llvmPackages.openmp ]
+  # Including openmp leads to two copies being used. This segfaults on ARM.
+  # https://github.com/pytorch/pytorch/issues/149201#issuecomment-2776842320
+  # ++ lib.optionals stdenv.cc.isClang [ llvmPackages.openmp ]
   ++ lib.optionals cudaSupport (
     with cudaPackages;
     [
diff --git a/pkgs/development/python-modules/torcheval/default.nix b/pkgs/development/python-modules/torcheval/default.nix
index aac1a987bf32..d3ffd678a761 100644
--- a/pkgs/development/python-modules/torcheval/default.nix
+++ b/pkgs/development/python-modules/torcheval/default.nix
@@ -136,6 +136,54 @@ buildPythonPackage {
     # -- tests/metrics/test_toolkit.py --
     "tests/metrics/test_toolkit.py::MetricToolkitTest::test_metric_sync"
     "tests/metrics/test_toolkit.py::MetricCollectionToolkitTest::test_metric_collection_sync"
+
+    # Cannot access local process over IPv6 (nodename nor servname provided) even with __darwinAllowLocalNetworking
+    # Will hang, or appear to hang, with an 5 minute (default) timeout per test
+    "tests/metrics/aggregation/test_auc.py"
+    "tests/metrics/aggregation/test_cat.py"
+    "tests/metrics/aggregation/test_max.py"
+    "tests/metrics/aggregation/test_mean.py"
+    "tests/metrics/aggregation/test_min.py"
+    "tests/metrics/aggregation/test_sum.py"
+    "tests/metrics/aggregation/test_throughput.py"
+    "tests/metrics/classification/test_accuracy.py"
+    "tests/metrics/classification/test_auprc.py"
+    "tests/metrics/classification/test_auroc.py"
+    "tests/metrics/classification/test_binned_auprc.py"
+    "tests/metrics/classification/test_binned_auroc.py"
+    "tests/metrics/classification/test_binned_precision_recall_curve.py"
+    "tests/metrics/classification/test_confusion_matrix.py"
+    "tests/metrics/classification/test_f1_score.py"
+    "tests/metrics/classification/test_normalized_entropy.py"
+    "tests/metrics/classification/test_precision_recall_curve.py"
+    "tests/metrics/classification/test_precision.py"
+    "tests/metrics/classification/test_recall_at_fixed_precision.py"
+    "tests/metrics/classification/test_recall.py"
+    "tests/metrics/functional/classification/test_auroc.py"
+    "tests/metrics/ranking/test_click_through_rate.py::TestClickThroughRate::test_ctr_with_valid_input"
+    "tests/metrics/ranking/test_hit_rate.py::TestHitRate::test_hitrate_with_valid_input"
+    "tests/metrics/ranking/test_reciprocal_rank.py::TestReciprocalRank::test_mrr_with_valid_input"
+    "tests/metrics/ranking/test_retrieval_precision.py::TestRetrievalPrecision::test_retrieval_precision_multiple_updates_1_query"
+    "tests/metrics/ranking/test_retrieval_precision.py::TestRetrievalPrecision::test_retrieval_precision_multiple_updates_n_queries_without_nan"
+    "tests/metrics/ranking/test_weighted_calibration.py::TestWeightedCalibration::test_weighted_calibration_with_valid_input"
+    "tests/metrics/regression/test_mean_squared_error.py"
+    "tests/metrics/regression/test_r2_score.py"
+    "tests/metrics/test_synclib.py::SynclibTest::test_gather_uneven_multidim"
+    "tests/metrics/test_synclib.py::SynclibTest::test_gather_uneven"
+    "tests/metrics/test_synclib.py::SynclibTest::test_numeric_sync_state"
+    "tests/metrics/test_synclib.py::SynclibTest::test_sync_list_length"
+    "tests/metrics/text/test_bleu.py::TestBleu::test_bleu_multiple_examples_per_update"
+    "tests/metrics/text/test_bleu.py::TestBleu::test_bleu_multiple_updates"
+    "tests/metrics/text/test_perplexity.py::TestPerplexity::test_perplexity_with_ignore_index"
+    "tests/metrics/text/test_perplexity.py::TestPerplexity::test_perplexity"
+    "tests/metrics/text/test_word_error_rate.py::TestWordErrorRate::test_word_error_rate_with_valid_input"
+    "tests/metrics/text/test_word_information_lost.py::TestWordInformationLost::test_word_information_lost"
+    "tests/metrics/text/test_word_information_preserved.py::TestWordInformationPreserved::test_word_information_preserved_with_valid_input"
+    "tests/metrics/window/test_auroc.py"
+    "tests/metrics/window/test_click_through_rate.py::TestClickThroughRate::test_ctr_with_valid_input"
+    "tests/metrics/window/test_mean_squared_error.py"
+    "tests/metrics/window/test_normalized_entropy.py::TestWindowedBinaryNormalizedEntropy::test_ne_with_valid_input"
+    "tests/metrics/window/test_weighted_calibration.py::TestWindowedWeightedCalibration::test_weighted_calibration_with_valid_input"
   ];
 
   meta = {
diff --git a/pkgs/development/python-modules/torchprofile/default.nix b/pkgs/development/python-modules/torchprofile/default.nix
index 2326d76c69c4..c4cee730aec0 100644
--- a/pkgs/development/python-modules/torchprofile/default.nix
+++ b/pkgs/development/python-modules/torchprofile/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "torchprofile";
-  version = "0.0.3";
+  version = "0.0.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "zhijian-liu";
     repo = "torchprofile";
     tag = "v${version}";
-    hash = "sha256-6vxZHQwBjKpy288wcANdJ9gmvIOZloLv+iN76TtqYAI=";
+    hash = "sha256-ynRrGHzroyv8T8fggJAag7u6XBOx+uN49HSIe46Bcek=";
   };
 
   build-system = [
@@ -39,7 +39,7 @@ buildPythonPackage rec {
   ];
 
   meta = {
-    changelog = "https://github.com/zhijian-liu/torchprofile/releases/tag/v${version}";
+    changelog = "https://github.com/zhijian-liu/torchprofile/releases/tag/${src.tag}";
     description = "General and accurate MACs / FLOPs profiler for PyTorch models";
     homepage = "https://github.com/zhijian-liu/torchprofile";
     license = lib.licenses.mit;
diff --git a/pkgs/development/tools/misc/travis/shell.nix b/pkgs/development/tools/misc/travis/shell.nix
deleted file mode 100644
index 0820e89b4ba3..000000000000
--- a/pkgs/development/tools/misc/travis/shell.nix
+++ /dev/null
@@ -1,12 +0,0 @@
-# Env to update Gemfile.lock / gemset.nix
-{
-  pkgs ? import ../../../../.. { },
-}:
-pkgs.stdenv.mkDerivation {
-  name = "env";
-  buildInputs = with pkgs; [
-    ruby.devEnv
-    gnumake
-    bundix
-  ];
-}
diff --git a/pkgs/games/quakespasm/vulkan.nix b/pkgs/games/quakespasm/vulkan.nix
index 496fb997a28c..1f3f25a9b119 100644
--- a/pkgs/games/quakespasm/vulkan.nix
+++ b/pkgs/games/quakespasm/vulkan.nix
@@ -112,5 +112,6 @@ stdenv.mkDerivation (finalAttrs: {
       ylh
     ];
     mainProgram = "vkquake";
+    license = lib.licenses.gpl2Plus;
   };
 })
diff --git a/pkgs/os-specific/linux/zfs/2_2.nix b/pkgs/os-specific/linux/zfs/2_2.nix
index bdd58548f2e8..487435ca5f48 100644
--- a/pkgs/os-specific/linux/zfs/2_2.nix
+++ b/pkgs/os-specific/linux/zfs/2_2.nix
@@ -10,8 +10,9 @@ callPackage ./generic.nix args {
   # You have to ensure that in `pkgs/top-level/linux-kernels.nix`
   # this attribute is the correct one for this package.
   kernelModuleAttribute = "zfs_2_2";
-  # check the release notes for compatible kernels
-  kernelCompatible = kernel: kernel.kernelOlder "6.16";
+
+  kernelMinSupportedMajorMinor = "4.18";
+  kernelMaxSupportedMajorMinor = "6.15";
 
   # this package should point to the latest release.
   version = "2.2.8";
diff --git a/pkgs/os-specific/linux/zfs/2_3.nix b/pkgs/os-specific/linux/zfs/2_3.nix
index 1b4f0e642bf5..b58a5c6480d3 100644
--- a/pkgs/os-specific/linux/zfs/2_3.nix
+++ b/pkgs/os-specific/linux/zfs/2_3.nix
@@ -10,8 +10,9 @@ callPackage ./generic.nix args {
   # You have to ensure that in `pkgs/top-level/linux-kernels.nix`
   # this attribute is the correct one for this package.
   kernelModuleAttribute = "zfs_2_3";
-  # check the release notes for compatible kernels
-  kernelCompatible = kernel: kernel.kernelOlder "6.16";
+
+  kernelMinSupportedMajorMinor = "4.18";
+  kernelMaxSupportedMajorMinor = "6.15";
 
   # this package should point to the latest release.
   version = "2.3.3";
diff --git a/pkgs/os-specific/linux/zfs/generic.nix b/pkgs/os-specific/linux/zfs/generic.nix
index 2d74e9734c56..66d850ad71d6 100644
--- a/pkgs/os-specific/linux/zfs/generic.nix
+++ b/pkgs/os-specific/linux/zfs/generic.nix
@@ -48,7 +48,9 @@ let
       extraLongDescription ? "",
       extraPatches ? [ ],
       rev ? "zfs-${version}",
-      kernelCompatible ? null,
+      kernelMinSupportedMajorMinor,
+      kernelMaxSupportedMajorMinor,
+      enableUnsupportedExperimentalKernel ? false, # allows building against unsupported Kernel versions
       maintainers ? (with lib.maintainers; [ amarshall ]),
       tests,
     }@innerArgs:
@@ -72,6 +74,22 @@ let
         "user"
         "all"
       ];
+      kernelIsCompatible =
+        kernel:
+        let
+          nextMajorMinor =
+            ver:
+            "${lib.versions.major ver}.${
+              lib.pipe ver [
+                lib.versions.minor
+                lib.toInt
+                (x: x + 1)
+                toString
+              ]
+            }";
+        in
+        (lib.versionAtLeast kernel.version kernelMinSupportedMajorMinor)
+        && (lib.versionOlder kernel.version (nextMajorMinor kernelMaxSupportedMajorMinor));
 
       # XXX: You always want to build kernel modules with the same stdenv as the
       # kernel was built with. However, since zfs can also be built for userspace we
@@ -139,6 +157,14 @@ let
               "bashcompletiondir=$out/share/bash-completion/completions"
 
           substituteInPlace ./cmd/arc_summary --replace-fail "/sbin/modinfo" "modinfo"
+        ''
+        + ''
+          echo 'Supported Kernel versions:'
+          grep '^Linux-' META
+          echo 'Checking kernelMinSupportedMajorMinor is correct...'
+          grep --quiet '^Linux-Minimum: *${lib.escapeRegex kernelMinSupportedMajorMinor}$' META
+          echo 'Checking kernelMaxSupportedMajorMinor is correct...'
+          grep --quiet '^Linux-Maximum: *${lib.escapeRegex kernelMaxSupportedMajorMinor}$' META
         '';
 
       nativeBuildInputs = [
@@ -176,6 +202,7 @@ let
         "--with-tirpc=1"
         (lib.withFeatureAs (buildUser && enablePython) "python" python3.interpreter)
       ]
+      ++ optional enableUnsupportedExperimentalKernel "--enable-linux-experimental"
       ++ optionals buildUser [
         "--with-dracutdir=$(out)/lib/dracut"
         "--with-udevdir=$(out)/lib/udev"
@@ -330,7 +357,7 @@ let
 
         inherit maintainers;
         mainProgram = "zfs";
-        broken = buildKernel && (kernelCompatible != null) && !(kernelCompatible kernel);
+        broken = buildKernel && !((kernelIsCompatible kernel) || enableUnsupportedExperimentalKernel);
       };
     };
 in
diff --git a/pkgs/os-specific/linux/zfs/unstable.nix b/pkgs/os-specific/linux/zfs/unstable.nix
index 5bd1412d6c32..269110fdc53a 100644
--- a/pkgs/os-specific/linux/zfs/unstable.nix
+++ b/pkgs/os-specific/linux/zfs/unstable.nix
@@ -8,8 +8,9 @@ callPackage ./generic.nix args {
   # You have to ensure that in `pkgs/top-level/linux-kernels.nix`
   # this attribute is the correct one for this package.
   kernelModuleAttribute = "zfs_unstable";
-  # check the release notes for compatible kernels
-  kernelCompatible = kernel: kernel.kernelOlder "6.16";
+
+  kernelMinSupportedMajorMinor = "4.18";
+  kernelMaxSupportedMajorMinor = "6.15";
 
   # this package should point to a version / git revision compatible with the latest kernel release
   # IMPORTANT: Always use a tagged release candidate or commits from the
diff --git a/pkgs/servers/monitoring/grafana/plugins/grafana-lokiexplore-app/default.nix b/pkgs/servers/monitoring/grafana/plugins/grafana-lokiexplore-app/default.nix
index 8bf7bbb6a2c9..d37ef9168ddc 100644
--- a/pkgs/servers/monitoring/grafana/plugins/grafana-lokiexplore-app/default.nix
+++ b/pkgs/servers/monitoring/grafana/plugins/grafana-lokiexplore-app/default.nix
@@ -2,8 +2,8 @@
 
 grafanaPlugin {
   pname = "grafana-lokiexplore-app";
-  version = "1.0.22";
-  zipHash = "sha256-y1WJ1RxUbJSsiSApz3xvrARefNnXdZxDVfzeGfDZbFo=";
+  version = "1.0.23";
+  zipHash = "sha256-N2YIZXqHR7/f2W3FI1Jhjf940Mq5xs0zuXCgrYPa3Fo=";
   meta = with lib; {
     description = "Browse Loki logs without the need for writing complex queries";
     license = licenses.agpl3Only;
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 6f4de0910ec4..15b7b79653f4 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -7590,8 +7590,6 @@ with pkgs;
 
   tflint-plugins = recurseIntoAttrs (callPackage ../development/tools/analysis/tflint-plugins { });
 
-  travis = callPackage ../development/tools/misc/travis { };
-
   tree-sitter = makeOverridable (callPackage ../development/tools/parsing/tree-sitter) { };
 
   tree-sitter-grammars = recurseIntoAttrs tree-sitter.builtGrammars;
@@ -11474,6 +11472,13 @@ with pkgs;
 
   iosevka-comfy = recurseIntoAttrs (callPackages ../data/fonts/iosevka/comfy.nix { });
 
+  /**
+    A JSON Schema Catalog is a mapping from URIs to JSON Schema documents.
+
+    It enables offline use, e.g. in build processes, and it improves performance, robustness and safety.
+  */
+  inherit (callPackage ../data/json-schema/default.nix { }) jsonSchemaCatalogs;
+
   kde-rounded-corners =
     kdePackages.callPackage ../data/themes/kwin-decorations/kde-rounded-corners
       { };
@@ -16484,6 +16489,10 @@ with pkgs;
     flutter = flutter324;
   };
 
+  openfreebuds = callPackage ../by-name/op/openfreebuds/package.nix {
+    python3Packages = python3Full.pkgs;
+  };
+
   davis = callPackage ../by-name/da/davis/package.nix {
     php = php83; # https://github.com/tchapi/davis/issues/195
   };
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index e159aab5557c..479eb8ef03f9 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -226,6 +226,8 @@ self: super: with self; {
 
   aiocache = callPackage ../development/python-modules/aiocache { };
 
+  aiocmd = callPackage ../development/python-modules/aiocmd { };
+
   aiocoap = callPackage ../development/python-modules/aiocoap { };
 
   aiocomelit = callPackage ../development/python-modules/aiocomelit { };
@@ -971,6 +973,8 @@ self: super: with self; {
 
   asserts = callPackage ../development/python-modules/asserts { };
 
+  ast-grep-py = callPackage ../development/python-modules/ast-grep-py { };
+
   asterisk-mbox = callPackage ../development/python-modules/asterisk-mbox { };
 
   asteroid-filterbanks = callPackage ../development/python-modules/asteroid-filterbanks { };
@@ -7931,6 +7935,8 @@ self: super: with self; {
 
   lazr-uri = callPackage ../development/python-modules/lazr-uri { };
 
+  lazrs = callPackage ../development/python-modules/lazrs { };
+
   lazy = callPackage ../development/python-modules/lazy { };
 
   lazy-imports = callPackage ../development/python-modules/lazy-imports { };
@@ -11356,6 +11362,8 @@ self: super: with self; {
 
   pdfplumber = callPackage ../development/python-modules/pdfplumber { };
 
+  pdfquery = callPackage ../development/python-modules/pdfquery { };
+
   pdfrw = callPackage ../development/python-modules/pdfrw { };
 
   pdfrw2 = callPackage ../development/python-modules/pdfrw2 { };