Merge staging-next into staging

ci/OWNERS

@@ -234,8 +234,11 @@ nixos/modules/installer/tools/nix-fallback-paths.nix  @NixOS/nix-team @raitobeza
 /nixos/tests/snapcast.nix @mweinelt
 
 # Browsers
+/pkgs/build-support/build-mozilla-mach @mweinelt
+/pkgs/applications/networking/browsers/firefox/update.nix
+/pkgs/applications/networking/browsers/firefox/packages/firefox.nix @mweinelt
+/pkgs/applications/networking/browsers/firefox/packages/firefox-esr-*.nix @mweinelt
 /pkgs/applications/networking/browsers/librewolf @squalus @DominicWrege @fpletz @LordGrimmauld
-/pkgs/applications/networking/browsers/firefox @mweinelt
 /pkgs/applications/networking/browsers/chromium @emilylange @networkException
 /nixos/tests/chromium.nix @emilylange @networkException
 

doc/release-notes/rl-2511.section.md

@@ -72,6 +72,8 @@
 
 - The systemd initrd will now respect `x-systemd.wants` and `x-systemd.requires` for reliably unlocking multi-disk bcachefs volumes.
 
+- [`homebox` 0.20.0](https://github.com/sysadminsmedia/homebox/releases/tag/v0.20.0) changed how assets are stored and hashed. It is recommended to back up your database before this update.
+
 - New hardening flags, `strictflexarrays1` and `strictflexarrays3` were made available, corresponding to the gcc/clang options `-fstrict-flex-arrays=1` and `-fstrict-flex-arrays=3` respectively.
 
 - `gramps` has been updated to 6.0.0

maintainers/maintainer-list.nix

@@ -3520,6 +3520,12 @@
     githubId = 33910565;
     name = "Abdallah Gamal";
   };
+  bohanubis = {
+    email = "BK_anubis_GG@proton.me";
+    name = "bohanubis";
+    github = "bohanubis";
+    githubId = 77834479;
+  };
   bohreromir = {
     github = "bohreromir";
     githubId = 40412303;

nixos/modules/security/audit.nix

@@ -6,7 +6,6 @@
 }:
 let
   cfg = config.security.audit;
-  enabled = cfg.enable == "lock" || cfg.enable;
 
   failureModes = {
     silent = 0;
@@ -14,43 +13,14 @@ let
     panic = 2;
   };
 
-  disableScript = pkgs.writeScript "audit-disable" ''
-    #!${pkgs.runtimeShell} -eu
-    # Explicitly disable everything, as otherwise journald might start it.
-    auditctl -D
-    auditctl -e 0 -a task,never
-  '';
-
-  # TODO: it seems like people like their rules to be somewhat secret, yet they will not be if
-  # put in the store like this. At the same time, it doesn't feel like a huge deal and working
-  # around that is a pain so I'm leaving it like this for now.
-  startScript = pkgs.writeScript "audit-start" ''
-    #!${pkgs.runtimeShell} -eu
-    # Clear out any rules we may start with
-    auditctl -D
-
-    # Put the rules in a temporary file owned and only readable by root
-    rulesfile="$(mktemp)"
-    ${lib.concatMapStrings (x: "echo '${x}' >> $rulesfile\n") cfg.rules}
-
-    # Apply the requested rules
-    auditctl -R "$rulesfile"
-
-    # Enable and configure auditing
-    auditctl \
-      -e ${if cfg.enable == "lock" then "2" else "1"} \
-      -b ${toString cfg.backlogLimit} \
-      -f ${toString failureModes.${cfg.failureMode}} \
-      -r ${toString cfg.rateLimit}
-  '';
-
-  stopScript = pkgs.writeScript "audit-stop" ''
-    #!${pkgs.runtimeShell} -eu
-    # Clear the rules
-    auditctl -D
-
-    # Disable auditing
-    auditctl -e 0
+  # The order of the fixed rules is determined by augenrules(8)
+  rules = pkgs.writeTextDir "audit.rules" ''
+    -D
+    -b ${toString cfg.backlogLimit}
+    -f ${toString failureModes.${cfg.failureMode}}
+    -r ${toString cfg.rateLimit}
+    ${lib.concatLines cfg.rules}
+    -e ${if cfg.enable == "lock" then "2" else "1"}
   '';
 in
 {
@@ -110,23 +80,35 @@ in
     };
   };
 
-  config = {
-    systemd.services.audit = {
-      description = "Kernel Auditing";
-      wantedBy = [ "basic.target" ];
+  config = lib.mkIf (cfg.enable == "lock" || cfg.enable) {
+    systemd.services.audit-rules = {
+      description = "Load Audit Rules";
+      wantedBy = [ "sysinit.target" ];
+      before = [
+        "sysinit.target"
+        "shutdown.target"
+      ];
+      conflicts = [ "shutdown.target" ];
 
       unitConfig = {
+        DefaultDependencies = false;
         ConditionVirtualization = "!container";
-        ConditionSecurity = [ "audit" ];
+        ConditionKernelCommandLine = [
+          "!audit=0"
+          "!audit=off"
+        ];
       };
 
-      path = [ pkgs.audit ];
-
       serviceConfig = {
         Type = "oneshot";
         RemainAfterExit = true;
-        ExecStart = "@${if enabled then startScript else disableScript} audit-start";
-        ExecStop = "@${stopScript} audit-stop";
+        ExecStart = "${lib.getExe' pkgs.audit "auditctl"} -R ${rules}/audit.rules";
+        ExecStopPost = [
+          # Disable auditing
+          "${lib.getExe' pkgs.audit "auditctl"} -e 0"
+          # Delete all rules
+          "${lib.getExe' pkgs.audit "auditctl"} -D"
+        ];
       };
     };
   };

nixos/modules/security/auditd.nix

@@ -9,12 +9,13 @@
   options.security.auditd.enable = lib.mkEnableOption "the Linux Audit daemon";
 
   config = lib.mkIf config.security.auditd.enable {
-    boot.kernelParams = [ "audit=1" ];
+    # Starting auditd should also enable loading the audit rules..
+    security.audit.enable = lib.mkDefault true;
 
     environment.systemPackages = [ pkgs.audit ];
 
     systemd.services.auditd = {
-      description = "Linux Audit daemon";
+      description = "Security Audit Logging Service";
       documentation = [ "man:auditd(8)" ];
       wantedBy = [ "sysinit.target" ];
       after = [
@@ -28,16 +29,26 @@
       conflicts = [ "shutdown.target" ];
 
       unitConfig = {
-        ConditionVirtualization = "!container";
-        ConditionSecurity = [ "audit" ];
         DefaultDependencies = false;
+        RefuseManualStop = true;
+        ConditionVirtualization = "!container";
+        ConditionKernelCommandLine = [
+          "!audit=0"
+          "!audit=off"
+        ];
       };
 
-      path = [ pkgs.audit ];
-
       serviceConfig = {
-        ExecStartPre = "${pkgs.coreutils}/bin/mkdir -p /var/log/audit";
+        LogsDirectory = "audit";
         ExecStart = "${pkgs.audit}/bin/auditd -l -n -s nochange";
+        Restart = "on-failure";
+        # Do not restart for intentional exits. See EXIT CODES section in auditd(8).
+        RestartPreventExitStatus = "2 4 6";
+
+        # Upstream hardening settings
+        MemoryDenyWriteExecute = true;
+        LockPersonality = true;
+        RestrictRealtime = true;
       };
     };
   };

nixos/modules/services/mail/tlsrpt.nix

@@ -222,6 +222,17 @@ in
               '';
             };
 
+            http_script = mkOption {
+              type = with types; nullOr str;
+              default = "${lib.getExe pkgs.curl} --silent --header 'Content-Type: application/tlsrpt+gzip' --data-binary @-";
+              defaultText = lib.literalExpression ''
+                ''${lib.getExe pkgs.curl} --silent --header 'Content-Type: application/tlsrpt+gzip' --data-binary @-
+              '';
+              description = ''
+                Call to an HTTPS client, that accepts the URL on the commandline and the request body from stdin.
+              '';
+            };
+
             sender_address = mkOption {
               type = types.str;
               example = "noreply@example.com";

nixos/modules/services/web-apps/lasuite-meet.nix

@@ -434,6 +434,10 @@ in
           recommendedProxySettings = true;
         };
 
+        locations."/static" = {
+          root = "${cfg.backendPackage}/share";
+        };
+
         locations."/livekit" = mkIf cfg.livekit.enable {
           proxyPass = "http://localhost:${toString config.services.livekit.settings.port}";
           recommendedProxySettings = true;

nixos/modules/services/web-servers/garage.nix

@@ -147,6 +147,8 @@ in
           NoNewPrivileges = true;
           EnvironmentFile = lib.optional (cfg.environmentFile != null) cfg.environmentFile;
           ReadWritePaths = lib.filter (x: !(isDefault x)) (lib.flatten [ paths ]);
+          # Upstream recommendation https://garagehq.deuxfleurs.fr/documentation/cookbook/systemd/
+          LimitNOFILE = 42000;
         };
       environment = {
         RUST_LOG = lib.mkDefault "garage=${cfg.logLevel}";

nixos/modules/services/web-servers/nginx/default.nix

@@ -207,6 +207,7 @@ let
             ${optionalString cfg.recommendedTlsSettings ''
               # Keep in sync with https://ssl-config.mozilla.org/#server=nginx&config=intermediate
 
+              ssl_ecdh_curve X25519:prime256v1:secp384r1;
               ssl_session_timeout 1d;
               ssl_session_cache shared:SSL:10m;
               # Breaks forward secrecy: https://github.com/mozilla/server-side-tls/issues/135
@@ -214,10 +215,6 @@ let
               # We don't enable insecure ciphers by default, so this allows
               # clients to pick the most performant, per https://github.com/mozilla/server-side-tls/issues/260
               ssl_prefer_server_ciphers off;
-
-              # OCSP stapling
-              ssl_stapling on;
-              ssl_stapling_verify on;
             ''}
 
             ${optionalString cfg.recommendedBrotliSettings ''

nixos/tests/all-tests.nix

@@ -226,6 +226,7 @@ in
   atticd = runTest ./atticd.nix;
   atuin = runTest ./atuin.nix;
   ax25 = runTest ./ax25.nix;
+  audit = runTest ./audit.nix;
   audiobookshelf = runTest ./audiobookshelf.nix;
   auth-mysql = runTest ./auth-mysql.nix;
   authelia = runTest ./authelia.nix;

nixos/tests/audit.nix

@@ -0,0 +1,37 @@
+{
+
+  name = "audit";
+
+  nodes = {
+    machine =
+      { lib, pkgs, ... }:
+      {
+        security.audit = {
+          enable = true;
+          rules = [
+            "-a always,exit -F exe=${lib.getExe pkgs.hello} -k nixos-test"
+          ];
+        };
+        security.auditd.enable = true;
+
+        environment.systemPackages = [ pkgs.hello ];
+      };
+  };
+
+  testScript = ''
+    machine.wait_for_unit("audit-rules.service")
+    machine.wait_for_unit("auditd.service")
+
+    with subtest("Audit subsystem gets enabled"):
+      assert "enabled 1" in machine.succeed("auditctl -s")
+
+    with subtest("Custom rule produces audit traces"):
+      machine.succeed("hello")
+      print(machine.succeed("ausearch -k nixos-test -sc exit_group"))
+
+    with subtest("Stopping audit-rules.service disables the audit subsystem"):
+      machine.succeed("systemctl stop audit-rules.service")
+      assert "enabled 0" in machine.succeed("auditctl -s")
+  '';
+
+}

pkgs/applications/audio/mopidy/default.nix

@@ -14,6 +14,8 @@ lib.makeScope newScope (
 
     mopidy-bandcamp = callPackage ./bandcamp.nix { };
 
+    mopidy-listenbrainz = callPackage ./listenbrainz.nix { };
+
     mopidy-iris = callPackage ./iris.nix { };
 
     mopidy-jellyfin = callPackage ./jellyfin.nix { };

pkgs/applications/audio/mopidy/listenbrainz.nix

@@ -0,0 +1,35 @@
+{
+  lib,
+  pythonPackages,
+  fetchFromGitHub,
+  mopidy,
+}:
+
+pythonPackages.buildPythonApplication rec {
+  pname = "mopidy-listenbrainz";
+  version = "0.3.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "suaviloquence";
+    repo = "mopidy-listenbrainz";
+    tag = "v${version}";
+    hash = "sha256-kYZgG2KQMTxMR8tdwwCKkfexDcxcndXG9LSdlnoN/CY=";
+  };
+
+  build-system = [
+    pythonPackages.setuptools
+  ];
+
+  dependencies = [
+    mopidy
+    pythonPackages.musicbrainzngs
+  ];
+
+  meta = {
+    homepage = "https://github.com/suaviloquence/mopidy-listenbrainz";
+    description = "Mopidy extension for recording played tracks and getting recommendations to Listenbrainz, a libre alternative to Last.fm";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ bohanubis ];
+  };
+}

pkgs/applications/editors/android-studio-for-platform/common.nix

@@ -170,7 +170,7 @@ runCommand drvName
       unwrapped = androidStudioForPlatform;
     };
     meta = with lib; {
-      description = "The Official IDE for Android platform development";
+      description = "Official IDE for Android platform development";
       longDescription = ''
         Android Studio for Platform (ASfP) is the version of the Android Studio IDE
         for Android Open Source Project (AOSP) platform developers who build with the Soong build system.

pkgs/applications/editors/kakoune/plugins/overrides.nix

@@ -180,7 +180,7 @@ self: super: {
     '';
 
     meta = with lib; {
-      description = "hinting brought to Kakoune selections";
+      description = "Hinting brought to Kakoune selections";
       homepage = "https://git.sr.ht/~hadronized/hop.kak/";
       license = licenses.bsd3;
       maintainers = with maintainers; [ oleina ];

pkgs/applications/editors/vscode/extensions/default.nix

@@ -618,7 +618,7 @@ let
           hash = "sha256-7pbl5OgvJ6S0mtZWsEyUzlg+lkUhdq3rkCCpLsvTm4g=";
         };
         meta = {
-          description = "A VSCode extension that changes the markdown preview to support GitHub markdown features";
+          description = "VSCode extension that changes the markdown preview to support GitHub markdown features";
           downloadPage = "https://marketplace.visualstudio.com/items?itemName=bierner.github-markdown-preview";
           homepage = "https://github.com/mjbvz/vscode-github-markdown-preview";
           license = lib.licenses.mit;
@@ -1919,7 +1919,7 @@ let
           hash = "sha256-YAMH5smLyBuoTdlxSCTPyMIKOWTSIdf2MQVZuOO2V1w=";
         };
         meta = {
-          description = "A VSCode extension that adds syntax highlighting for Pandoc-flavored Markdown";
+          description = "VSCode extension that adds syntax highlighting for Pandoc-flavored Markdown";
           downloadPage = "https://marketplace.visualstudio.com/items?itemName=garlicbreadcleric.pandoc-markdown-syntax";
           homepage = "https://github.com/garlicbreadcleric/vscode-pandoc-markdown";
           license = lib.licenses.mit;
@@ -2667,7 +2667,7 @@ let
         };
         meta = {
           changelog = "https://marketplace.visualstudio.com/items/wayou.vscode-todo-highlight/changelog";
-          description = "highlight TODOs, FIXMEs, and any keywords, annotations...";
+          description = "Highlight TODOs, FIXMEs, and any keywords, annotations...";
           downloadPage = "https://marketplace.visualstudio.com/items?itemName=jgclark.vscode-todo-highlight";
           homepage = "https://github.com/jgclark/vscode-todo-highlight";
           license = lib.licenses.mit;
@@ -3523,7 +3523,7 @@ let
           hash = "sha256-yeX6RAJl07d+SuYyGQFLZNcUzVKAsmPFyTKEn+y3GuM=";
         };
         meta = {
-          description = "A Visual Studio Code extension that complements the Remote SSH extension with syntax colorization, keyword intellisense, and simple snippets when editing SSH configuration files";
+          description = "Visual Studio Code extension that complements the Remote SSH extension with syntax colorization, keyword intellisense, and simple snippets when editing SSH configuration files";
           downloadPage = "https://marketplace.visualstudio.com/items?itemName=ms-vscode-remote.remote-ssh-edit";
           homepage = "https://code.visualstudio.com/docs/remote/ssh";
           license = lib.licenses.unfree;
@@ -4207,7 +4207,7 @@ let
           changelog = "https://github.com/sdras/night-owl-vscode-theme/blob/main/CHANGELOG.md#${
             builtins.replaceStrings [ "." ] [ "" ] mktplcRef.version
           }";
-          description = "A Visual Studio Code theme named Light Owl for daytime usage";
+          description = "Visual Studio Code theme named Light Owl for daytime usage";
           longDescription = ''
             A VS Code theme for the night owls out there. Now introducing
             Light Owl theme for daytime usage. Decisions were based

pkgs/applications/editors/vscode/extensions/dendron.adjust-heading-level/default.nix

@@ -8,7 +8,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
     hash = "sha256-u50RJ7ETVFUC43mp94VJsR931b9REBaTyRhZE7muoLw=";
   };
   meta = {
-    description = "A VSCode extension to adjust the heading level of the selected text";
+    description = "VSCode extension to adjust the heading level of the selected text";
     downloadPage = "https://marketplace.visualstudio.com/items?itemName=dendron.adjust-heading-level";
     homepage = "https://github.com/kevinslin/adjust-heading-level";
     license = lib.licenses.asl20;

pkgs/applications/editors/vscode/extensions/dendron.dendron-markdown-preview-enhanced/default.nix

@@ -8,7 +8,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
     hash = "sha256-uJmdsC+nKCkAJVH+szNepPcyfHD4ZQ83on195jjqZig=";
   };
   meta = {
-    description = "A SUPER POWERFUL markdown extension for Visual Studio Code to bring you a wonderful markdown writing experience";
+    description = "SUPER POWERFUL markdown extension for Visual Studio Code to bring you a wonderful markdown writing experience";
     downloadPage = "https://marketplace.visualstudio.com/items?itemName=dendron.dendron-markdown-preview-enhanced";
     homepage = "https://github.com/dendronhq/markdown-preview-enhanced";
     license = lib.licenses.ncsa;

pkgs/applications/editors/vscode/extensions/dendron.dendron/default.nix

@@ -9,7 +9,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
   };
   meta = {
     changelog = "https://github.com/dendronhq/dendron/blob/master/CHANGELOG.md";
-    description = "The personal knowledge management (PKM) tool that grows as you do";
+    description = "Personal knowledge management (PKM) tool that grows as you do";
     downloadPage = "https://marketplace.visualstudio.com/items?itemName=dendron.dendron";
     homepage = "https://www.dendron.so/";
     license = lib.licenses.asl20;

pkgs/applications/editors/vscode/extensions/fstarlang.fstar-vscode-assistant/default.nix

@@ -8,7 +8,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
     hash = "sha256-uiw3EJbYoDG5r93NIxloiF7Co3gxcZT9+hlLZFnxkBE=";
   };
   meta = {
-    description = "An interactive editing mode VS Code extension for F*";
+    description = "Interactive editing mode VS Code extension for F*";
     downloadPage = "https://marketplace.visualstudio.com/items?itemName=FStarLang.fstar-vscode-assistant";
     homepage = "https://github.com/FStarLang/fstar-vscode-assistant";
     license = lib.licenses.mit;

pkgs/applications/editors/vscode/extensions/github.copilot-chat/default.nix

@@ -15,7 +15,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
     description = "GitHub Copilot Chat is a companion extension to GitHub Copilot that houses experimental chat features";
     downloadPage = "https://marketplace.visualstudio.com/items?itemName=GitHub.copilot-chat";
     homepage = "https://github.com/features/copilot";
-    license = lib.licenses.unfree;
+    license = lib.licenses.mit;
     maintainers = [ lib.maintainers.laurent-f1z1 ];
   };
 }

pkgs/applications/editors/vscode/extensions/mongodb.mongodb-vscode/default.nix

@@ -10,7 +10,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
 
   meta = {
     changelog = "https://github.com/mongodb-js/vscode/blob/main/CHANGELOG.md";
-    description = "An extension for VS Code that makes it easy to work with your data in MongoDB";
+    description = "Extension for VS Code that makes it easy to work with your data in MongoDB";
     downloadPage = "https://marketplace.visualstudio.com/items?itemName=mongodb.mongodb-vscode";
     homepage = "https://github.com/mongodb-js/vscode";
     license = lib.licenses.asl20;

pkgs/applications/editors/vscode/extensions/ms-vscode-remote.vscode-remote-extensionpack/default.nix

@@ -12,7 +12,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
   };
 
   meta = {
-    description = "A Visual Studio Code extension pack that lets you open any folder in a container, on a remote machine, or in WSL and take advantage of VS Code's full feature set";
+    description = "Visual Studio Code extension pack that lets you open any folder in a container, on a remote machine, or in WSL and take advantage of VS Code's full feature set";
     homepage = "https://github.com/Microsoft/vscode-remote-release";
     license = lib.licenses.unfree;
     maintainers = with lib.maintainers; [ drupol ];

pkgs/applications/editors/vscode/extensions/ms-windows-ai-studio.windows-ai-studio/default.nix

@@ -12,7 +12,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
   };
 
   meta = {
-    description = "A Visual Studio Code an extension to help developers and AI engineers to easily build AI apps through developing and testing with generative AI models locally or in the cloud";
+    description = "Visual Studio Code extension to help developers and AI engineers build AI apps";
     homepage = "https://github.com/Microsoft/windows-ai-studio";
     license = lib.licenses.unfree;
     maintainers = with lib.maintainers; [ drupol ];

pkgs/applications/editors/vscode/extensions/oops418.nix-env-picker/default.nix

@@ -8,7 +8,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
     hash = "sha256-LGw7Pd72oVgMqhKPX1dV2EgluX0/4rvKVb7Fx2H6hOI=";
   };
   meta = {
-    description = "A Visual Studio Code extension for seamless switching between Nix shells and flakes";
+    description = "Visual Studio Code extension for seamless switching between Nix shells and flakes";
     downloadPage = "https://marketplace.visualstudio.com/items?itemName=io-github-oops418.nix-env-picker";
     homepage = "https://github.com/Oops418/nix-env-picker";
     license = lib.licenses.mit;

pkgs/applications/editors/vscode/extensions/pylyzer.pylyzer/default.nix

@@ -9,7 +9,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
   };
 
   meta = {
-    description = "A VS Code extension for Pylyzer, a fast static code analyzer & language server for Python";
+    description = "VS Code extension for Pylyzer, a fast static code analyzer & language server for Python";
     downloadPage = "https://marketplace.visualstudio.com/items?itemName=pylyzer.pylyzer";
     homepage = "https://github.com/mtshiba/pylyzer/";
     license = lib.licenses.mit;

pkgs/applications/editors/vscode/extensions/saoudrizwan.claude-dev/default.nix

@@ -12,7 +12,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
   };
 
   meta = {
-    description = "A VSCode extension providing an autonomous coding agent right in your IDE, capable of creating/editing files, executing commands, using the browser, and more with your permission every step of the way";
+    description = "VSCode extension providing an autonomous coding agent right in your IDE, capable of creating/editing files, executing commands, using the browser, and more with your permission every step of the way";
     downloadPage = "https://github.com/cline/cline";
     homepage = "https://github.com/cline/cline";
     license = lib.licenses.asl20;

pkgs/applications/networking/browsers/chromium/info.json

@@ -1,10 +1,10 @@
 {
   "chromium": {
-    "version": "138.0.7204.168",
+    "version": "138.0.7204.183",
     "chromedriver": {
-      "version": "138.0.7204.169",
-      "hash_darwin": "sha256-I87LWl+F8nmxpIUXUT+InLFf2nZ1Sh1nAtYVLCq9r5M=",
-      "hash_darwin_aarch64": "sha256-6DoMi5gy68tuauNGvFl0QKPZnh5lY9S73+S+FNltDow="
+      "version": "138.0.7204.184",
+      "hash_darwin": "sha256-d0lo8RPTbxqcDnyyhwM9LhZ+xxKn+rpO4pCmHRlMh88=",
+      "hash_darwin_aarch64": "sha256-e5soo3SJoPCBGrZFtgpU4ms5XEwfoxR2lUT1Ep3AmWw="
     },
     "deps": {
       "depot_tools": {
@@ -20,8 +20,8 @@
     "DEPS": {
       "src": {
         "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "3e8d82e86e9f508e88ed406c2a24657a6c691d30",
-        "hash": "sha256-6s9mkfckhibpb+L74oPZsgvOZZT58BeSo362t/s92UI=",
+        "rev": "e90faf484ddbc033fc9bf337621761d3dd5c5289",
+        "hash": "sha256-/UFIed+S9XLmR3p8KVnIncxl3a7bIqKPLh6vcEMvAsE=",
         "recompress": true
       },
       "src/third_party/clang-format/script": {
@@ -246,8 +246,8 @@
       },
       "src/third_party/devtools-frontend/src": {
         "url": "https://chromium.googlesource.com/devtools/devtools-frontend",
-        "rev": "a718e86b3dc6f1ba3c8cc8092cd79b401d428cfc",
-        "hash": "sha256-50KQk54JwwRS3ENUjB0QedQYFuwmkv9oxytfuNDTVPo="
+        "rev": "634ef4ab735f8fc717eb17935d5a0f1b9831d852",
+        "hash": "sha256-DwkvDbYKdHfpfKXYaszcK/54Zi2Q52dd9QAUR+Ex+b4="
       },
       "src/third_party/dom_distiller_js/dist": {
         "url": "https://chromium.googlesource.com/chromium/dom-distiller/dist.git",
@@ -796,8 +796,8 @@
       },
       "src/v8": {
         "url": "https://chromium.googlesource.com/v8/v8.git",
-        "rev": "f5036f509b5e147cccb298a069c40827f3d5edd6",
-        "hash": "sha256-n4/Lf5ZawqUY0QHF2jYl3JPPx9Br/wzVmtqnMvq3Vzk="
+        "rev": "54f355e9ad22c93162d7d9d94c849c729d64bee7",
+        "hash": "sha256-/2cw/iZ9zbCMMiANUfsWpxYUzA3FDfUIrjoJh/jc0XI="
       }
     }
   },

pkgs/applications/networking/irc/weechat/scripts/buffer_autoset/default.nix

@@ -24,7 +24,7 @@ stdenv.mkDerivation {
 
   meta = with lib; {
     inherit (weechat.meta) platforms;
-    description = "buffer_autoset.py is a weechat script which auto-set buffer properties when a buffer is opened";
+    description = "WeeChat script which auto-set buffer properties when a buffer is opened";
     license = licenses.gpl3Plus;
     maintainers = with maintainers; [ govanify ];
   };

pkgs/applications/networking/irc/weechat/scripts/highmon/default.nix

@@ -29,7 +29,7 @@ stdenv.mkDerivation {
   meta = with lib; {
     inherit (weechat.meta) platforms;
     homepage = "https://github.com/KenjiE20/highmon/";
-    description = "highmon.pl is a weechat script that adds 'Highlight Monitor'";
+    description = "WeeChat script that adds 'Highlight Monitor'";
     license = licenses.gpl3Plus;
     maintainers = with maintainers; [ govanify ];
   };

pkgs/applications/networking/irc/weechat/scripts/url_hint/default.nix

@@ -26,7 +26,7 @@ stdenv.mkDerivation {
 
   meta = with lib; {
     inherit (weechat.meta) platforms;
-    description = "url_hint.py is a URL opening script";
+    description = "WeeChat URL opening script";
     license = licenses.mit;
     maintainers = with maintainers; [ eraserhd ];
   };

pkgs/applications/networking/irc/weechat/scripts/weechat-go/default.nix

@@ -24,7 +24,7 @@ stdenv.mkDerivation {
 
   meta = with lib; {
     inherit (weechat.meta) platforms;
-    description = "go.py is a weechat script to quickly jump to different buffers";
+    description = "WeeChat script to quickly jump to different buffers";
     license = licenses.gpl3Plus;
     maintainers = with maintainers; [ govanify ];
   };

pkgs/applications/office/activitywatch/wrapper.nix

@@ -21,7 +21,7 @@ symlinkJoin {
   ++ (lib.forEach extraWatchers (p: p.out));
 
   meta = with lib; {
-    description = "The best free and open-source automated time tracker";
+    description = "Best free and open-source automated time tracker";
     homepage = "https://activitywatch.net/";
     downloadPage = "https://github.com/ActivityWatch/activitywatch/releases";
     changelog = "https://github.com/ActivityWatch/activitywatch/releases/tag/v${aw-server-rust.version}";

pkgs/applications/office/beancount/bean-add.nix

@@ -26,7 +26,7 @@ stdenv.mkDerivation {
 
   meta = {
     homepage = "https://github.com/simon-v/bean-add/";
-    description = "beancount transaction entry assistant";
+    description = "Beancount transaction entry assistant";
     mainProgram = "bean-add";
 
     # The (only) source file states:

pkgs/applications/science/logic/rocq-core/default.nix

@@ -162,7 +162,7 @@ let
     '';
 
     meta = with lib; {
-      description = "The Rocq Prover";
+      description = "Rocq Prover";
       longDescription = ''
         The Rocq Prover is an interactive theorem prover, or proof assistant. It provides
         a formal language to write mathematical definitions, executable

pkgs/applications/video/kodi/addons/screensaver-asteroids/default.nix

@@ -27,7 +27,7 @@ buildKodiBinaryAddon rec {
 
   meta = with lib; {
     homepage = "https://github.com/xbmc/screensaver.asteroids";
-    description = "A screensaver that plays Asteroids";
+    description = "Screensaver that plays Asteroids";
     license = licenses.gpl2Plus;
     platforms = platforms.all;
     teams = [ teams.kodi ];

pkgs/applications/video/kodi/addons/simplecache/default.nix

@@ -25,7 +25,7 @@ buildKodiAddon rec {
 
   meta = with lib; {
     homepage = "https://github.com/kodi-community-addons/script.module.simplecache";
-    description = "A simple object cache for Kodi addons";
+    description = "Simple object cache for Kodi addons";
     license = licenses.asl20;
     teams = [ teams.kodi ];
   };

pkgs/applications/video/mpv/scripts/visualizer.nix

@@ -17,7 +17,7 @@ buildLua {
   passthru.updateScript = unstableGitUpdater { };
 
   meta = with lib; {
-    description = "various audio visualization";
+    description = "Various audio visualization";
     homepage = "https://github.com/mfcc64/mpv-scripts";
     maintainers = with maintainers; [ kmein ];
   };

pkgs/applications/video/obs-studio/plugins/obs-noise.nix

@@ -26,7 +26,7 @@ stdenv.mkDerivation rec {
   '';
 
   meta = with lib; {
-    description = "A plug-in for noise generation and noise effects for OBS";
+    description = "Plug-in for noise generation and noise effects for OBS";
     homepage = "https://github.com/FiniteSingularity/obs-noise";
     maintainers = with maintainers; [ flexiondotorg ];
     license = licenses.gpl2Only;

pkgs/applications/video/obs-studio/plugins/obs-retro-effects.nix

@@ -27,7 +27,7 @@ stdenv.mkDerivation rec {
   '';
 
   meta = with lib; {
-    description = "A collection of OBS filters to give your stream that retro feel";
+    description = "Collection of OBS filters to give your stream that retro feel";
     homepage = "https://github.com/FiniteSingularity/obs-retro-effects";
     maintainers = with maintainers; [ flexiondotorg ];
     license = licenses.gpl2Plus;

pkgs/applications/video/obs-studio/plugins/obs-rgb-levels.nix

@@ -21,7 +21,7 @@ stdenv.mkDerivation rec {
   buildInputs = [ obs-studio ];
 
   meta = with lib; {
-    description = "A simple OBS Studio filter to adjust RGB levels";
+    description = "Simple OBS Studio filter to adjust RGB levels";
     homepage = "https://github.com/wimpysworld/obs-rgb-levels";
     maintainers = with maintainers; [ flexiondotorg ];
     license = licenses.gpl2Only;

pkgs/applications/video/obs-studio/plugins/obs-scene-as-transition.nix

@@ -25,7 +25,7 @@ stdenv.mkDerivation rec {
   '';
 
   meta = with lib; {
-    description = "An OBS Studio plugin that will allow you to use a Scene as a transition";
+    description = "OBS Studio plugin that will allow you to use a Scene as a transition";
     homepage = "https://github.com/andilippi/obs-scene-as-transition";
     maintainers = with maintainers; [ flexiondotorg ];
     license = licenses.gpl2Plus;

pkgs/applications/video/obs-studio/plugins/obs-stroke-glow-shadow.nix

@@ -26,7 +26,7 @@ stdenv.mkDerivation rec {
   '';
 
   meta = with lib; {
-    description = "An OBS plugin to provide efficient Stroke, Glow, and Shadow effects on masked sources";
+    description = "OBS plugin to provide efficient Stroke, Glow, and Shadow effects on masked sources";
     homepage = "https://github.com/FiniteSingularity/obs-stroke-glow-shadow";
     maintainers = with maintainers; [ flexiondotorg ];
     license = licenses.gpl2Only;

pkgs/applications/video/obs-studio/plugins/pixel-art.nix

@@ -21,7 +21,7 @@ stdenv.mkDerivation rec {
   buildInputs = [ obs-studio ];
 
   meta = with lib; {
-    description = "An OBS Plugin that can be used to create retro-inspired pixel art visuals";
+    description = "OBS Plugin that can be used to create retro-inspired pixel art visuals";
     homepage = "https://github.com/dspstanky/pixel-art";
     maintainers = with maintainers; [ flexiondotorg ];
     license = licenses.gpl2Only;

pkgs/applications/virtualization/docker/default.nix

@@ -232,7 +232,7 @@ rec {
 
           meta = docker-meta // {
             homepage = "https://mobyproject.org/";
-            description = "A collaborative project for the container ecosystem to assemble container-based systems";
+            description = "Collaborative project for the container ecosystem to assemble container-based systems";
           };
         }
       );

pkgs/applications/virtualization/qemu/default.nix

@@ -94,6 +94,8 @@
   canokey-qemu,
   capstoneSupport ? !minimal,
   capstone,
+  valgrindSupport ? false,
+  valgrind-light,
   pluginsSupport ? !stdenv.hostPlatform.isStatic,
   enableDocs ? !minimal || toolsOnly,
   enableTools ? !minimal || toolsOnly,
@@ -248,7 +250,8 @@ stdenv.mkDerivation (finalAttrs: {
   ++ lib.optionals smbdSupport [ samba ]
   ++ lib.optionals uringSupport [ liburing ]
   ++ lib.optionals canokeySupport [ canokey-qemu ]
-  ++ lib.optionals capstoneSupport [ capstone ];
+  ++ lib.optionals capstoneSupport [ capstone ]
+  ++ lib.optionals valgrindSupport [ valgrind-light ];
 
   dontUseMesonConfigure = true; # meson's configurePhase isn't compatible with qemu build
   dontAddStaticConfigureFlags = true;

pkgs/applications/window-managers/i3/lock-fancy.nix

@@ -70,7 +70,7 @@ stdenv.mkDerivation {
   '';
 
   meta = with lib; {
-    description = "A bash script that takes a screenshot of the desktop, blurs the background and adds a lock icon and text";
+    description = "Bash script that takes a screenshot of the desktop, blurs the background and adds a lock icon and text";
     homepage = "https://github.com/meskarune/i3lock-fancy";
     maintainers = [ maintainers.reedrw ];
     mainProgram = "i3lock-fancy";

pkgs/build-support/build-mozilla-mach/142-relax-apple-sdk.patch

@@ -0,0 +1,13 @@
+diff --git a/build/moz.configure/toolchain.configure b/build/moz.configure/toolchain.configure
+index 37c00230c853..dd89bea24392 100644
+--- a/build/moz.configure/toolchain.configure
++++ b/build/moz.configure/toolchain.configure
+@@ -233,7 +233,7 @@ with only_when(host_is_osx | target_is_osx):
+     )
+ 
+     def mac_sdk_min_version():
+-        return "15.5"
++        return "15.2"
+ 
+     @depends(
+         "--with-macos-sdk",

pkgs/build-support/build-mozilla-mach/default.nix

@@ -319,6 +319,9 @@ buildStdenv.mkDerivation {
     ++ lib.optionals (lib.versionAtLeast version "139" && lib.versionOlder version "142") [
       ./139-relax-apple-sdk.patch
     ]
+    ++ lib.optionals (lib.versionAtLeast version "142") [
+      ./142-relax-apple-sdk.patch
+    ]
     ++ lib.optionals (lib.versionOlder version "139") [
       # Fix for missing vector header on macOS
       # https://bugzilla.mozilla.org/show_bug.cgi?id=1959377

pkgs/build-support/testers/testBuildFailurePrime/default.nix

@@ -30,7 +30,7 @@ lib.makeOverridable (
     buildCommandPath = ./build-command.sh;
 
     meta = {
-      description = "A wrapper around testers.testBuildFailure to simplify common use cases";
+      description = "Wrapper around testers.testBuildFailure to simplify common use cases";
       maintainers = [ lib.maintainers.connorbaker ];
     };
   })

pkgs/by-name/ae/aerospike/package.nix

@@ -12,13 +12,13 @@
 
 stdenv.mkDerivation rec {
   pname = "aerospike-server";
-  version = "8.0.0.8";
+  version = "8.0.0.9";
 
   src = fetchFromGitHub {
     owner = "aerospike";
     repo = "aerospike-server";
     rev = version;
-    hash = "sha256-z80LtwEp83BJm7zQS0mttr1UZQbDcaKrWuACeEmIzKs=";
+    hash = "sha256-3cXj+U8dtPk92fjUS+EDxuE2HklCIWhChjiLfJh5vHk=";
     fetchSubmodules = true;
   };
 

pkgs/by-name/ag/agave/package.nix

@@ -34,7 +34,7 @@ stdenv.mkDerivation {
   '';
 
   meta = with lib; {
-    description = "truetype monospaced typeface designed for X environments";
+    description = "TrueType monospaced typeface designed for X environments";
     homepage = "https://b.agaric.net/page/agave";
     license = licenses.mit;
     maintainers = [ ];

pkgs/by-name/an/any-nix-shell/package.nix

@@ -42,7 +42,7 @@ stdenv.mkDerivation rec {
   '';
 
   meta = {
-    description = "fish, xonsh and zsh support for nix-shell";
+    description = "Fish, xonsh and zsh support for nix-shell";
     license = lib.licenses.mit;
     homepage = "https://github.com/haslersn/any-nix-shell";
     maintainers = with lib.maintainers; [ haslersn ];

pkgs/by-name/ap/apio-udev-rules/package.nix

@@ -33,7 +33,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   '';
 
   meta = {
-    description = "apio udev rules list";
+    description = "Apio udev rules list";
     homepage = "https://github.com/FPGAwars/apio";
     platforms = lib.platforms.linux;
     license = lib.licenses.gpl2Only;

pkgs/by-name/ar/art/package.nix

@@ -40,13 +40,13 @@
 
 stdenv.mkDerivation rec {
   pname = "art";
-  version = "1.25.6";
+  version = "1.25.7";
 
   src = fetchFromGitHub {
     owner = "artpixls";
     repo = "ART";
     tag = version;
-    hash = "sha256-m3TqtoWjrPXpSL7blrqPm+vANJcpmHyKOm2rpnQ3qQ4=";
+    hash = "sha256-VrIayD7Gj0j5Rfs6sl2tZTqPFTvQcJHgUnGQ6IGiUmU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/au/audit/package.nix

@@ -17,6 +17,7 @@
   enablePython ? stdenv.hostPlatform == stdenv.buildPlatform,
   nix-update-script,
   testers,
+  nixosTests,
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "audit";
@@ -90,6 +91,7 @@ stdenv.mkDerivation (finalAttrs: {
     tests = {
       musl = pkgsCross.musl64.audit;
       pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage;
+      audit = nixosTests.audit;
     };
   };
 

pkgs/by-name/aw/aws-encryption-sdk-cli/package.nix

@@ -34,6 +34,8 @@ localPython.pkgs.buildPythonApplication rec {
     hash = "sha256-gORrscY+Bgmz2FrKdSBd56jP0yuEklytMeA3wr8tTZU=";
   };
 
+  pythonRelaxDeps = [ "aws-encryption-sdk" ];
+
   build-system = with localPython.pkgs; [
     setuptools
   ];

pkgs/by-name/ba/bash-preexec/package.nix

@@ -43,7 +43,7 @@ stdenvNoCC.mkDerivation {
   '';
 
   meta = with lib; {
-    description = "preexec and precmd functions for Bash just like Zsh";
+    description = "Preexec and precmd functions for Bash just like Zsh";
     license = licenses.mit;
     homepage = "https://github.com/rcaloras/bash-preexec";
     maintainers = [

pkgs/by-name/ba/bazel-kazel/package.nix

@@ -22,7 +22,7 @@ buildGoModule rec {
   subPackages = [ "cmd/kazel" ];
 
   meta = with lib; {
-    description = "A BUILD file generator for go and bazel";
+    description = "BUILD file generator for go and bazel";
     homepage = "https://github.com/kubernetes/repo-infra";
     license = licenses.asl20;
     maintainers = with maintainers; [ kalbasit ];

pkgs/by-name/bu/bustools/package.nix

@@ -29,7 +29,7 @@ stdenv.mkDerivation rec {
   };
 
   meta = {
-    description = "bustools is a program for manipulating BUS files for single cell RNA-Seq datasets";
+    description = "Program for manipulating BUS files for single cell RNA-Seq datasets";
     longDescription = ''
       bustools is a program for manipulating BUS files for single cell RNA-Seq datasets. It can be used to error correct barcodes, collapse UMIs, produce gene count or transcript compatibility count matrices, and is useful for many other tasks. It is also part of the kallisto | bustools workflow for pre-processing single-cell RNA-seq data.
     '';

pkgs/by-name/bu/butt/package.nix

@@ -68,7 +68,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   meta = {
     changelog = "https://danielnoethen.de/butt/Changelog.html";
-    description = "butt (broadcast using this tool) is an easy to use, multi OS streaming tool";
+    description = "Easy to use, multi OS streaming tool";
     homepage = "https://danielnoethen.de/butt/";
     license = lib.licenses.gpl2;
     maintainers = with lib.maintainers; [ ehmry ];

pkgs/by-name/ca/caesura/package.nix

@@ -82,7 +82,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   };
 
   meta = {
-    description = "versatile command line tool for automated verifying and transcoding of all your torrents";
+    description = "Versatile command line tool for automated verifying and transcoding of all your torrents";
     homepage = "https://github.com/RogueOneEcho/caesura";
     license = lib.licenses.agpl3Only;
     maintainers = with lib.maintainers; [ ambroisie ];

pkgs/by-name/ca/cargo-gra/package.nix

@@ -16,7 +16,7 @@ rustPlatform.buildRustPackage rec {
   cargoHash = "sha256-B32GCIlFngfubwZqxMneAO24hhJ1zOgW6gXMHzgr89A=";
 
   meta = {
-    description = "gtk-rust-app cli for building flatpak apps with ease";
+    description = "CLI for building flatpak apps with ease";
     homepage = "https://gitlab.com/floers/gtk-stuff/cargo-gra/";
     license = lib.licenses.gpl3Plus;
     maintainers = with lib.maintainers; [ bot-wxt1221 ];

pkgs/by-name/ch/chatterino7/package.nix

@@ -3,12 +3,10 @@
   chatterino2,
   fetchFromGitHub,
   gitUpdater,
-  boost186,
 }:
 
 (chatterino2.buildChatterino {
   enableAvifSupport = true;
-  boost = boost186;
 }).overrideAttrs
   (
     finalAttrs: _: {

pkgs/by-name/ch/chelf/package.nix

@@ -21,7 +21,7 @@ stdenv.mkDerivation rec {
   '';
 
   meta = with lib; {
-    description = "change or display the stack size of an ELF binary";
+    description = "Change or display the stack size of an ELF binary";
     homepage = "https://github.com/Gottox/chelf";
     license = licenses.bsd2;
     maintainers = with maintainers; [ dtzWill ];

pkgs/by-name/ck/ckdl/package.nix

@@ -59,7 +59,7 @@ pkgs.stdenv.mkDerivation {
   '';
 
   meta = {
-    description = "ckdl is a C (C11) library that implements reading and writing the KDL Document Language";
+    description = "C library that implements reading and writing the KDL Document Language";
     license = lib.licenses.mit;
     platforms = lib.platforms.all;
   };

pkgs/by-name/cl/clipster/package.nix

@@ -37,7 +37,7 @@ stdenv.mkDerivation rec {
   '';
 
   meta = with lib; {
-    description = "lightweight python clipboard manager";
+    description = "Lightweight python clipboard manager";
     longDescription = ''
       Clipster was designed to try to add a good selection of useful features, while avoiding bad design decisions or becoming excessively large.
       Its feature list includes:

pkgs/by-name/co/coc-diagnostic/package.nix

@@ -41,7 +41,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   passthru.updateScript = nix-update-script { };
 
   meta = {
-    description = "diagnostic-languageserver extension for coc.nvim";
+    description = "Diagnostic-languageserver extension for coc.nvim";
     homepage = "https://github.com/iamcco/coc-diagnostic";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ pyrox0 ];

pkgs/by-name/co/coc-toml/package.nix

@@ -33,7 +33,7 @@ stdenv.mkDerivation (finalAttrs: {
   };
 
   meta = {
-    description = "toml extension for coc.nvim";
+    description = "Toml extension for coc.nvim";
     homepage = "https://github.com/kkiyama117/coc-toml";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ soopyc ];

pkgs/by-name/co/compsize/package.nix

@@ -40,7 +40,7 @@ stdenv.mkDerivation rec {
   '';
 
   meta = with lib; {
-    description = "btrfs: Find compression type/ratio on a file or set of files";
+    description = "Find compression type/ratio on a file or set of files in Btrfs filesystem";
     mainProgram = "compsize";
     homepage = "https://github.com/kilobyte/compsize";
     license = licenses.gpl2Plus;

pkgs/by-name/co/cosmopolitan/cosmocc.nix

@@ -15,7 +15,7 @@ let
         };
 
         meta = cosmopolitan.meta // {
-          description = "compilers for Cosmopolitan C/C++ programs";
+          description = "Compilers for Cosmopolitan C/C++ programs";
         };
       }
       ''

pkgs/by-name/cu/cum/package.nix

@@ -39,7 +39,7 @@ python3Packages.buildPythonApplication rec {
   '';
 
   meta = with lib; {
-    description = "comic updater, mangafied";
+    description = "Comic updater, mangafied";
     mainProgram = "cum";
     homepage = "https://github.com/Hamuko/cum";
     license = licenses.asl20;

pkgs/by-name/cu/cup-docker/package.nix

@@ -84,7 +84,7 @@ rustPlatform.buildRustPackage {
   };
 
   meta = {
-    description = "a lightweight way to check for container image updates. written in Rust";
+    description = "Lightweight way to check for container image updates. written in Rust";
     homepage = "https://cup.sergi0g.dev";
     license = lib.licenses.agpl3Only;
     platforms = lib.platforms.all;

pkgs/by-name/da/datafusion-cli/package.nix

@@ -38,7 +38,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   doCheck = false;
 
   meta = {
-    description = "cli for Apache Arrow DataFusion";
+    description = "CLI for Apache Arrow DataFusion";
     mainProgram = "datafusion-cli";
     homepage = "https://arrow.apache.org/datafusion";
     changelog = "https://github.com/apache/arrow-datafusion/blob/${finalAttrs.version}/datafusion/CHANGELOG.md";

pkgs/by-name/db/dbvisualizer/package.nix

@@ -64,7 +64,7 @@ stdenv.mkDerivation (finalAttrs: {
   '';
 
   meta = {
-    description = "The universal database tool";
+    description = "Universal database tool";
     homepage = "https://www.dbvis.com/";
     maintainers = with lib.maintainers; [ boldikoller ];
     license = lib.licenses.unfree;

pkgs/by-name/de/delve/package.nix

@@ -45,7 +45,7 @@ buildGoModule rec {
   '';
 
   meta = with lib; {
-    description = "debugger for the Go programming language";
+    description = "Debugger for the Go programming language";
     homepage = "https://github.com/go-delve/delve";
     maintainers = with maintainers; [ vdemeester ];
     license = licenses.mit;

pkgs/by-name/do/docbook2mdoc/package.nix

@@ -20,7 +20,7 @@ stdenv.mkDerivation rec {
 
   meta = with lib; {
     homepage = "http://mdocml.bsd.lv/";
-    description = "converter from DocBook V4.x and v5.x XML into mdoc";
+    description = "Converter from DocBook V4.x and v5.x XML into mdoc";
     license = licenses.isc;
     platforms = platforms.all;
     maintainers = with maintainers; [ ramkromberg ];

pkgs/by-name/ds/dsniff/package.nix

@@ -103,7 +103,7 @@ stdenv.mkDerivation rec {
   ];
 
   meta = with lib; {
-    description = "collection of tools for network auditing and penetration testing";
+    description = "Collection of tools for network auditing and penetration testing";
     longDescription = ''
       dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of network traffic normally unavailable to an attacker (e.g, due to layer-2 switching). sshmitm and webmitm implement active monkey-in-the-middle attacks against redirected SSH and HTTPS sessions by exploiting weak bindings in ad-hoc PKI.
     '';

pkgs/by-name/du/duckstation/sources.nix

@@ -158,7 +158,7 @@
 
     meta = {
       homepage = "https://github.com/stenzek/lunasvg";
-      description = "lunasvg is a standalone SVG rendering library in C++";
+      description = "Standalone SVG rendering library in C++";
       license = lib.licenses.mit;
       platforms = lib.platforms.linux;
     };

pkgs/by-name/ev/evcc/package.nix

@@ -17,16 +17,16 @@
 }:
 
 let
-  version = "0.205.0";
+  version = "0.206.0";
 
   src = fetchFromGitHub {
     owner = "evcc-io";
     repo = "evcc";
     tag = version;
-    hash = "sha256-T97f5K4TDaAdqm2zU8+cEyq1YIzwy35tX8mb3pPkhIo=";
+    hash = "sha256-ZDcfQQrybx11SenbTvTA2iY96NEkzJPMRzSOOlUP3So=";
   };
 
-  vendorHash = "sha256-gbTh9/Ny4JVCbpzz+opN92m6LQhPEBj/XuLLZ4M6tIc=";
+  vendorHash = "sha256-jiksFU0ce7RiDy7xqVZiKancEiWSMEHDazPc6+l6DNQ=";
 
   commonMeta = with lib; {
     license = licenses.mit;
@@ -52,7 +52,7 @@ buildGo124Module rec {
 
   npmDeps = fetchNpmDeps {
     inherit src;
-    hash = "sha256-OmiINzMCXbvceCDZ9zYTQKfWQ3iUgovMznmVoQkQ5DE=";
+    hash = "sha256-yQ+MnXjixNQfWSVnRzmxRtQAvLecdLMDQSXyuIdzGnU=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/fa/faq/package.nix

@@ -41,7 +41,7 @@ buildGoModule rec {
   doCheck = true;
 
   meta = with lib; {
-    description = "faq is a tool intended to be a more flexible jq, supporting additional formats";
+    description = "Intended to be a more flexible jq, supporting additional formats";
     mainProgram = "faq";
     homepage = "https://github.com/jzelinskie/faq";
     license = licenses.asl20;

pkgs/by-name/fa/fatrop/package.nix

@@ -38,7 +38,7 @@ stdenv.mkDerivation (finalAttrs: {
   doCheck = true;
 
   meta = {
-    description = "nonlinear optimal control problem solver that aims to be fast, support a broad class of optimal control problems and achieve a high numerical robustness";
+    description = "Nonlinear optimal control problem solver that aims to be fast, support a broad class of optimal control problems and achieve a high numerical robustness";
     homepage = "https://github.com/meco-group/fatrop";
     license = lib.licenses.lgpl3Only;
     maintainers = with lib.maintainers; [ nim65s ];

pkgs/by-name/fb/fbset/package.nix

@@ -30,7 +30,7 @@ stdenv.mkDerivation (finalAttrs: {
   };
 
   meta = with lib; {
-    description = "framebuffer device maintenance program";
+    description = "Framebuffer device maintenance program";
     # NOTE: the website of the original author disappeared, the only remaining
     # repository is maintained by the debian maintainer of the package at
     # https://github.com/sudipm-mukherjee/fbset

pkgs/by-name/fc/fcrackzip/package.nix

@@ -22,7 +22,7 @@ stdenv.mkDerivation rec {
   postInstall = "mv $out/bin/zipinfo $out/bin/fcrackzip-zipinfo";
 
   meta = with lib; {
-    description = "zip password cracker, similar to fzc, zipcrack and others";
+    description = "Zip password cracker, similar to fzc, zipcrack and others";
     homepage = "http://oldhome.schmorp.de/marc/fcrackzip.html";
     license = licenses.gpl2Only;
     maintainers = with maintainers; [ nico202 ];

pkgs/by-name/fs/fsatrace/package.nix

@@ -30,7 +30,7 @@ stdenv.mkDerivation rec {
 
   meta = with lib; {
     homepage = "https://github.com/jacereda/fsatrace";
-    description = "filesystem access tracer";
+    description = "Filesystem access tracer";
     mainProgram = "fsatrace";
     license = licenses.isc;
     platforms = platforms.linux;

pkgs/by-name/fz/fzf-zsh/package.nix

@@ -35,7 +35,7 @@ stdenv.mkDerivation {
 
   meta = with lib; {
     homepage = "https://github.com/wyntau/fzf-zsh";
-    description = "wrap fzf to use in oh-my-zsh";
+    description = "Wrap fzf to use in oh-my-zsh";
     license = licenses.mit;
     maintainers = [ ];
     platforms = platforms.unix;

pkgs/by-name/ge/gerbolyze/package.nix

@@ -30,7 +30,7 @@ let
     installFlags = [ "PREFIX=$(out)" ];
 
     meta = with lib; {
-      description = "svg-flatten SVG downconverter";
+      description = "SVG-flatten SVG downconverter";
       homepage = "https://github.com/jaseg/gerbolyze";
       license = with licenses; [ agpl3Plus ];
       maintainers = with maintainers; [ wulfsta ];

pkgs/by-name/gh/ghc_filesystem/package.nix

@@ -24,7 +24,7 @@ stdenv.mkDerivation (finalAttrs: {
   };
 
   meta = {
-    description = "header-only single-file C++ std::filesystem compatible helper library";
+    description = "Header-only single-file C++ std::filesystem compatible helper library";
     homepage = "https://github.com/gulrak/filesystem";
     changelog = "https://github.com/gulrak/filesystem/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;

pkgs/by-name/gi/git-cinnabar/package.nix

@@ -59,7 +59,7 @@ stdenv.mkDerivation (finalAttrs: {
   '';
 
   meta = {
-    description = "git remote helper to interact with mercurial repositories";
+    description = "Git remote helper to interact with mercurial repositories";
     homepage = "https://github.com/glandium/git-cinnabar";
     license = lib.licenses.gpl2Only;
     maintainers = with lib.maintainers; [ qyliss ];

pkgs/by-name/gn/gnss-share/package.nix

@@ -14,7 +14,7 @@ buildGoModule rec {
   };
   vendorHash = "sha256-dmE6hfKUqEr7BMNi/HMUOk4jDB0dPXEMkWQyWj6XpY4=";
   meta = with lib; {
-    description = "share GNSS data between multiple clients";
+    description = "Share GNSS data between multiple clients";
     longDescription = ''
       gnss-share is an app that facilitates sharing GNSS location data with multiple
       clients, while providing a way to perform device-specific setup beforehand. For

pkgs/by-name/gn/gnuclad/package.nix

@@ -20,7 +20,7 @@ stdenv.mkDerivation rec {
 
   meta = with lib; {
     homepage = "https://launchpad.net/gnuclad";
-    description = "gnuclad tries to help the environment by creating trees.  Its primary use will be generating cladogram trees for the GNU/Linux distro timeline project";
+    description = "Generating cladogram trees for the GNU/Linux distro timeline project";
     license = licenses.gpl3Plus;
     maintainers = with maintainers; [ mog ];
     platforms = platforms.unix;