From 232510c4739daf1070b82f0e36e76a33ab11b0b0 Mon Sep 17 00:00:00 2001
From: fe3dback <fe3dback@protonmail.com>
Date: Mon, 29 Sep 2025 17:57:19 +0300
Subject: [PATCH 01/67] maintainers: add fe3dback

---
 maintainers/maintainer-list.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index ad373cd39fc5..7eb793d1cd33 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -8274,6 +8274,12 @@
     githubId = 541748;
     name = "Felipe Espinoza";
   };
+  fe3dback = {
+    email = "fe3dback@protonmail.com";
+    github = "fe3dback";
+    githubId = 2073883;
+    name = "fe3dback";
+  };
   feathecutie = {
     name = "feathecutie";
     github = "feathecutie";

From 37676209d136a0277c88f563f1321f3c7bbfa466 Mon Sep 17 00:00:00 2001
From: fe3dback <fe3dback@protonmail.com>
Date: Mon, 29 Sep 2025 17:57:53 +0300
Subject: [PATCH 02/67] go-arch-lint: init at 1.13.0

---
 pkgs/by-name/go/go-arch-lint/package.nix | 63 ++++++++++++++++++++++++
 1 file changed, 63 insertions(+)
 create mode 100644 pkgs/by-name/go/go-arch-lint/package.nix

diff --git a/pkgs/by-name/go/go-arch-lint/package.nix b/pkgs/by-name/go/go-arch-lint/package.nix
new file mode 100644
index 000000000000..66089852b435
--- /dev/null
+++ b/pkgs/by-name/go/go-arch-lint/package.nix
@@ -0,0 +1,63 @@
+{
+  # go-arch-lint has historically required code changes to support new versions of
+  # go so always use the latest specific go version that go-arch-lint supports
+  # rather than buildGoLatestModule.
+  # This can be bumped when the release notes of go-arch-lint detail support for
+  # new version of go.
+  buildGo125Module,
+  buildPackages,
+  fetchFromGitHub,
+  installShellFiles,
+  lib,
+  stdenv,
+}:
+
+buildGo125Module (finalAttrs: {
+  pname = "go-arch-lint";
+  version = "1.13.0";
+
+  src = fetchFromGitHub {
+    owner = "fe3dback";
+    repo = "go-arch-lint";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-TtYeowoL8NEOw1coiLHJ/epcFMaxT4zsBSsnLgmhKDc=";
+  };
+
+  vendorHash = "sha256-2n7OjF4gl+qq9M5EtU0nmgWwRPZ3YvmLQDAgJ8w9S1M=";
+
+  nativeBuildInputs = [ installShellFiles ];
+
+  ldflags = [
+    "-s"
+    "-w"
+    "-X github.com/fe3dback/go-arch-lint/internal/app.Version=${finalAttrs.version}"
+    "-X github.com/fe3dback/go-arch-lint/internal/app.CommitHash=v${finalAttrs.version}"
+    "-X github.com/fe3dback/go-arch-lint/internal/app.BuildTime=19700101-00:00:00"
+  ];
+
+  postInstall =
+    let
+      goarchlintBin =
+        if stdenv.buildPlatform.canExecute stdenv.hostPlatform then
+          "$out"
+        else
+          lib.getBin buildPackages.go-arch-lint;
+    in
+    ''
+      installShellCompletion --cmd go-arch-lint \
+        --bash <(${goarchlintBin}/bin/go-arch-lint completion bash) \
+        --fish <(${goarchlintBin}/bin/go-arch-lint completion fish) \
+        --zsh <(${goarchlintBin}/bin/go-arch-lint completion zsh)
+    '';
+
+  meta = {
+    description = "GoLang architecture linter (checker) tool. Will check all project import path and compare with arch rules defined in yml file";
+    homepage = "https://github.com/fe3dback/go-arch-lint";
+    changelog = "https://github.com/fe3dback/go-arch-lint/releases/tag/v${finalAttrs.version}";
+    mainProgram = "go-arch-lint";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
+      fe3dback
+    ];
+  };
+})

From 90a2010ef6ade85abdc0c3c89bfce04470cdb42f Mon Sep 17 00:00:00 2001
From: Lukas Werling <lukas@lwrl.de>
Date: Sun, 11 Jan 2026 13:12:37 +0100
Subject: [PATCH 03/67] canon-cups-ufr2: 6.00 -> 6.20

---
 pkgs/by-name/ca/canon-cups-ufr2/package.nix               | 8 ++++----
 .../canon-cups-ufr2/replace_incorrect_int_with_char.patch | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/ca/canon-cups-ufr2/package.nix b/pkgs/by-name/ca/canon-cups-ufr2/package.nix
index 963a2040d134..740b35f73b52 100644
--- a/pkgs/by-name/ca/canon-cups-ufr2/package.nix
+++ b/pkgs/by-name/ca/canon-cups-ufr2/package.nix
@@ -38,15 +38,15 @@ let
   ld64 = "${stdenv.cc}/nix-support/dynamic-linker";
   libs = pkgs: lib.makeLibraryPath buildInputs;
 
-  version = "6.00";
-  dl = "0/0100009240/34";
+  version = "6.20";
+  dl = "8/0100007658/47";
   suffix1 = "m17n";
-  suffix2 = "00";
+  suffix2 = "20";
 
   versionNoDots = builtins.replaceStrings [ "." ] [ "" ] version;
   src_canon = fetchurl {
     url = "http://gdlp01.c-wss.com/gds/${dl}/linux-UFRII-drv-v${versionNoDots}-${suffix1}-${suffix2}.tar.gz";
-    hash = "sha256-JQAe/avYG+9TAsH26UGai6u8/upRXwZrGBc/hd4jZe8=";
+    hash = "sha256-6QJaaABubEaERpJxfVGxghB8yIb2pCaQZ6+VoqjmYrk=";
   };
 
   buildInputs = [
diff --git a/pkgs/by-name/ca/canon-cups-ufr2/replace_incorrect_int_with_char.patch b/pkgs/by-name/ca/canon-cups-ufr2/replace_incorrect_int_with_char.patch
index ce21c1d8934b..08593e4b07fc 100644
--- a/pkgs/by-name/ca/canon-cups-ufr2/replace_incorrect_int_with_char.patch
+++ b/pkgs/by-name/ca/canon-cups-ufr2/replace_incorrect_int_with_char.patch
@@ -1,5 +1,5 @@
---- ./cnrdrvcups-lb-6.00/cngplp/cngplpmod/execjob.c	2024-01-08 04:18:42.000000000 +0100
-+++ ./cnrdrvcups-lb-6.00/cngplp/cngplpmod/execjob.c	2024-08-06 17:13:52.234522912 +0200
+--- ./cnrdrvcups-lb-6.20/cngplp/cngplpmod/execjob.c	2024-01-08 04:18:42.000000000 +0100
++++ ./cnrdrvcups-lb-6.20/cngplp/cngplpmod/execjob.c	2024-08-06 17:13:52.234522912 +0200
 @@ -1161,7 +1161,7 @@
  			ptr_param += num;
  			list_num += num;

From a3c081e9c05b2cb67618fcae7c7e215f187aaa3a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 22 Feb 2026 13:25:01 +0000
Subject: [PATCH 04/67] nvc: 1.19.1 -> 1.19.2

---
 pkgs/by-name/nv/nvc/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/nv/nvc/package.nix b/pkgs/by-name/nv/nvc/package.nix
index 1f2a657c5c15..c15eb3d65c45 100644
--- a/pkgs/by-name/nv/nvc/package.nix
+++ b/pkgs/by-name/nv/nvc/package.nix
@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nvc";
-  version = "1.19.1";
+  version = "1.19.2";
 
   src = fetchFromGitHub {
     owner = "nickg";
     repo = "nvc";
     tag = "r${finalAttrs.version}";
-    hash = "sha256-r/fgOy2KnDwcNxLrOFYFYqUqBLL8NkmuaBOFbfn/gug=";
+    hash = "sha256-y2R/jEINVs7U1mkYBDjEp+2E8Td7JHCTD2h+C2+MlvE=";
   };
 
   nativeBuildInputs = [

From 9d89c3a58ec622ed3492a959c8cdd46b81819aa2 Mon Sep 17 00:00:00 2001
From: hakan-demirli <ehdemirli@proton.me>
Date: Wed, 25 Feb 2026 17:43:14 +0100
Subject: [PATCH 05/67] kissat: fix static build by setting AR for cross
 toolchains

---
 pkgs/by-name/ki/kissat/package.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/by-name/ki/kissat/package.nix b/pkgs/by-name/ki/kissat/package.nix
index 1983bc6b312e..0fb85747b31e 100644
--- a/pkgs/by-name/ki/kissat/package.nix
+++ b/pkgs/by-name/ki/kissat/package.nix
@@ -66,6 +66,11 @@ stdenv.mkDerivation (finalAttrs: {
 
     ./configure
 
+    # Kissat's configure only detects cross-compilation for *-linux-gnu-gcc,
+    # missing other cross toolchains (e.g. musl). Fix AR in the generated makefile.
+    substituteInPlace build/makefile \
+      --replace-fail "AR=ar" "AR=${stdenv.cc.targetPrefix}ar"
+
     runHook postConfigure
   '';
 

From e84430a8f4f7820b12d8cd8d5e48bd46fbcad069 Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Thu, 26 Feb 2026 00:28:32 +0100
Subject: [PATCH 06/67] python3Packages.sentry-sdk: 2.50.0 -> 2.53.0

https://github.com/getsentry/sentry-python/blob/2.53.0/CHANGELOG.md
---
 .../python-modules/sentry-sdk/default.nix          | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/pkgs/development/python-modules/sentry-sdk/default.nix b/pkgs/development/python-modules/sentry-sdk/default.nix
index 679b8a1024b1..ed374872ea05 100644
--- a/pkgs/development/python-modules/sentry-sdk/default.nix
+++ b/pkgs/development/python-modules/sentry-sdk/default.nix
@@ -65,16 +65,16 @@
   stdenv,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "sentry-sdk";
-  version = "2.50.0";
+  version = "2.53.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "getsentry";
     repo = "sentry-python";
-    tag = version;
-    hash = "sha256-wmfBLP8cTPgxb70dHL3esXPcCbW+Z8G9KgjJ49eus6c=";
+    tag = finalAttrs.version;
+    hash = "sha256-QPbfgzXPf1pp9BRaehS6e1yaeOegFsdjcAeqvrfx0zA=";
   };
 
   postPatch = ''
@@ -165,7 +165,7 @@ buildPythonPackage rec {
     pytest-watch
     pytestCheckHook
   ]
-  ++ optional-dependencies.http2;
+  ++ finalAttrs.finalPackage.optional-dependencies.http2;
 
   __darwinAllowLocalNetworking = true;
 
@@ -222,8 +222,8 @@ buildPythonPackage rec {
   meta = {
     description = "Official Python SDK for Sentry.io";
     homepage = "https://github.com/getsentry/sentry-python";
-    changelog = "https://github.com/getsentry/sentry-python/blob/${src.tag}/CHANGELOG.md";
+    changelog = "https://github.com/getsentry/sentry-python/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ hexa ];
   };
-}
+})

From e15ad59e08c0aac42c96a60835429fb8e09949bb Mon Sep 17 00:00:00 2001
From: Thomas Gerbet <thomas@gerbet.me>
Date: Thu, 26 Feb 2026 16:27:32 +0100
Subject: [PATCH 07/67] firecracker: 1.14.0 -> 1.14.1

Fixes CVE-2026-1386 / https://github.com/NixOS/nixpkgs/issues/494398

https://github.com/firecracker-microvm/firecracker/releases/tag/v1.14.1
---
 pkgs/by-name/fi/firecracker/package.nix | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/fi/firecracker/package.nix b/pkgs/by-name/fi/firecracker/package.nix
index 8da0e0b3c0c8..ed5e34b40bf1 100644
--- a/pkgs/by-name/fi/firecracker/package.nix
+++ b/pkgs/by-name/fi/firecracker/package.nix
@@ -12,16 +12,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "firecracker";
-  version = "1.14.0";
+  version = "1.14.1";
 
   src = fetchFromGitHub {
     owner = "firecracker-microvm";
     repo = "firecracker";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-J44D6LeIq/0HDLw/vd1AII+pSJMcligJkyvpQPZun4U=";
+    hash = "sha256-XMQNIIUo8LP/Ypgf5cGNE379tk4yFJ5ExIJc4+ukv7w=";
   };
 
-  cargoHash = "sha256-HG0HZes01shEtuVK7QCYmy/zsU0snbwsqCtev7u3/WI=";
+  cargoHash = "sha256-H9t2XUk/J7kcGlers8rQLWPMThGpr+XAiemWQisCjh4=";
 
   # For aws-lc-sys@0.22.0: use external bindgen.
   env.AWS_LC_SYS_EXTERNAL_BINDGEN = "true";
@@ -76,6 +76,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "--skip=env::tests::test_mknod_and_own_dev"
     "--skip=env::tests::test_setup_jailed_folder"
     "--skip=env::tests::test_userfaultfd_dev"
+    "--skip=env::tests::test_copy_exec_to_chroot"
     "--skip=resource_limits::tests::test_set_resource_limits"
   ];
 

From 815a78518bf7228fde9bcf6ba19eb1ec4de93ab8 Mon Sep 17 00:00:00 2001
From: Rafael Ieda <git@ieda.me>
Date: Thu, 26 Feb 2026 12:13:21 -0300
Subject: [PATCH 08/67] microsoft-edge: symlink /bin/microsoft-edge to
 /bin/microsoft-edge-stable

---
 pkgs/by-name/mi/microsoft-edge/package.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pkgs/by-name/mi/microsoft-edge/package.nix b/pkgs/by-name/mi/microsoft-edge/package.nix
index ac887f4cf407..f3c1d4322065 100644
--- a/pkgs/by-name/mi/microsoft-edge/package.nix
+++ b/pkgs/by-name/mi/microsoft-edge/package.nix
@@ -95,6 +95,9 @@
   makeFontsConf,
   noto-fonts-cjk-sans,
   noto-fonts-cjk-serif,
+
+  # Create a symlink at $out/bin/microsoft-edge-stable
+  withSymlink ? true,
 }:
 let
   opusWithCustomModes = libopus.override { withCustomModes = true; };
@@ -269,6 +272,10 @@ stdenvNoCC.mkDerivation (finalAttrs: {
       patchelf --set-interpreter ${bintools.dynamicLinker} $elf
     done
 
+    ${lib.optionalString withSymlink ''
+      ln -s $out/bin/microsoft-edge $out/bin/microsoft-edge-stable
+    ''}
+
     runHook postInstall
   '';
 

From 1fbf1b92730985af4b516d1803c9147c7e80d139 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 26 Feb 2026 23:55:18 +0000
Subject: [PATCH 09/67] forge-mtg: 2.0.09 -> 2.0.10

---
 pkgs/by-name/fo/forge-mtg/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fo/forge-mtg/package.nix b/pkgs/by-name/fo/forge-mtg/package.nix
index 737261cc0e6f..4d3f7cf64a2a 100644
--- a/pkgs/by-name/fo/forge-mtg/package.nix
+++ b/pkgs/by-name/fo/forge-mtg/package.nix
@@ -16,13 +16,13 @@
 }:
 
 let
-  version = "2.0.09";
+  version = "2.0.10";
 
   src = fetchFromGitHub {
     owner = "Card-Forge";
     repo = "forge";
     rev = "forge-${version}";
-    hash = "sha256-TRK6fUOLbI3lLdkSXvvuix0sGbpKLvMmYMx5ozViDRE=";
+    hash = "sha256-+HMR5fI5Ho6KyfO/IZab2cZ2N7At4Vz8vKnYXlF9Dvg=";
   };
 
   # launch4j downloads and runs a native binary during the package phase.

From 0f9917cf36837f1eab1de0d0a8c4de32a1cc3f4b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 27 Feb 2026 06:31:00 +0000
Subject: [PATCH 10/67] postgresqlPackages.pgvector: 0.8.1 -> 0.8.2

---
 pkgs/servers/sql/postgresql/ext/pgvector.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/sql/postgresql/ext/pgvector.nix b/pkgs/servers/sql/postgresql/ext/pgvector.nix
index 6483292d223e..d1bd5ec9e544 100644
--- a/pkgs/servers/sql/postgresql/ext/pgvector.nix
+++ b/pkgs/servers/sql/postgresql/ext/pgvector.nix
@@ -7,13 +7,13 @@
 
 postgresqlBuildExtension (finalAttrs: {
   pname = "pgvector";
-  version = "0.8.1";
+  version = "0.8.2";
 
   src = fetchFromGitHub {
     owner = "pgvector";
     repo = "pgvector";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-4EqazYWstczL9T3YFqq2gtbcKIj6zWU8ItYt2nnwPYo=";
+    hash = "sha256-TLPlH+amFdeI2pEsUZuvoQ1JA0sCMiIAWdkgqGBo4mI=";
   };
 
   meta = {

From e4e639ce69edb79733569c3059c575baf488386e Mon Sep 17 00:00:00 2001
From: Vincent Laporte <Vincent.Laporte@gmail.com>
Date: Fri, 27 Feb 2026 07:34:38 +0100
Subject: [PATCH 11/67] ocamlPackages.lambdapi: compatibility with cmdliner 2

---
 pkgs/development/ocaml-modules/lambdapi/default.nix | 9 +++++++++
 pkgs/top-level/ocaml-packages.nix                   | 1 -
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/ocaml-modules/lambdapi/default.nix b/pkgs/development/ocaml-modules/lambdapi/default.nix
index c567bda1f8ab..0ec480007239 100644
--- a/pkgs/development/ocaml-modules/lambdapi/default.nix
+++ b/pkgs/development/ocaml-modules/lambdapi/default.nix
@@ -1,6 +1,7 @@
 {
   lib,
   fetchurl,
+  fetchpatch,
   buildDunePackage,
   alcotest,
   dedukti,
@@ -28,6 +29,14 @@ buildDunePackage rec {
     hash = "sha256-EGau0mGP2OakAMUUfb9V6pd86NP+LlGKxnhcZ3WhuL4=";
   };
 
+  patches = [
+    # Compatibility with cmdliner ≥ 2
+    (fetchpatch {
+      url = "https://github.com/Deducteam/lambdapi/commit/8e27c0f668915fbd49e32bdac246d6d515a64dd0.patch";
+      hash = "sha256-9CkvH1o81T9LP+IPogKGhoiIDP76/nRfq59ttU7r0fI=";
+    })
+  ];
+
   nativeBuildInputs = [
     dream
     menhir
diff --git a/pkgs/top-level/ocaml-packages.nix b/pkgs/top-level/ocaml-packages.nix
index 04d368e4c4c4..ada87acabdb9 100644
--- a/pkgs/top-level/ocaml-packages.nix
+++ b/pkgs/top-level/ocaml-packages.nix
@@ -1076,7 +1076,6 @@ let
         lambda-term = callPackage ../development/ocaml-modules/lambda-term { };
 
         lambdapi = callPackage ../development/ocaml-modules/lambdapi {
-          cmdliner = cmdliner_1;
           why3 = pkgs.why3.override { ocamlPackages = self; };
         };
 

From 3a4959e145a9e037ed1c3a60aeebdac5c44abfc2 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 28 Feb 2026 00:36:00 +0000
Subject: [PATCH 12/67] claude-mergetool: 1.1.0 -> 1.2.0

---
 pkgs/by-name/cl/claude-mergetool/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/cl/claude-mergetool/package.nix b/pkgs/by-name/cl/claude-mergetool/package.nix
index 95962e9feead..f323cdc2ed54 100644
--- a/pkgs/by-name/cl/claude-mergetool/package.nix
+++ b/pkgs/by-name/cl/claude-mergetool/package.nix
@@ -6,7 +6,7 @@
   versionCheckHook,
 }:
 let
-  version = "1.1.0";
+  version = "1.2.0";
 in
 rustPlatform.buildRustPackage {
   pname = "claude-mergetool";
@@ -16,10 +16,10 @@ rustPlatform.buildRustPackage {
     owner = "9999years";
     repo = "claude-mergetool";
     tag = "v${version}";
-    hash = "sha256-MqAtr7SxbarllzDgOWvzUooiRNf08aAVaLdZHJzMnRI=";
+    hash = "sha256-d+tOjybFwWgJyI2YbAn6TF1utb7fNHrTbGp7I4yQ8UQ=";
   };
 
-  cargoHash = "sha256-RawDKKx+O79+TnLZRdatEcNDd4vLzTqHF2w1/D5zPjA=";
+  cargoHash = "sha256-9YDILRyaWxqAmrAdQ2iDvTsn1VTFfFIpv0HMqi9U0q8=";
 
   doInstallCheck = true;
   nativeInstallCheckInputs = [ versionCheckHook ];

From 8873eddfb913f00992fbee0716b264051b329c7f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 28 Feb 2026 04:01:20 +0000
Subject: [PATCH 13/67] plantuml-server: 1.2026.1 -> 1.2026.2

---
 pkgs/by-name/pl/plantuml-server/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/pl/plantuml-server/package.nix b/pkgs/by-name/pl/plantuml-server/package.nix
index 0a928b09d2a7..23bb290f0c95 100644
--- a/pkgs/by-name/pl/plantuml-server/package.nix
+++ b/pkgs/by-name/pl/plantuml-server/package.nix
@@ -7,11 +7,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "plantuml-server";
-  version = "1.2026.1";
+  version = "1.2026.2";
 
   src = fetchurl {
     url = "https://github.com/plantuml/plantuml-server/releases/download/v${finalAttrs.version}/plantuml-v${finalAttrs.version}.war";
-    hash = "sha256-+r7SL+JXXAGC0Q7wxvohXBfBucVZzQPX3TIVd/tR0t8=";
+    hash = "sha256-4lGpp8cNpRzz3gy+fG5xpeNLEFejMlJTXi4RJJLa4Wo=";
   };
 
   dontUnpack = true;

From dd6725003ce41ba9606db6c193641dbcf65e9fd9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 28 Feb 2026 14:56:43 +0000
Subject: [PATCH 14/67] nix-your-shell: 1.4.8 -> 1.4.9

---
 pkgs/by-name/ni/nix-your-shell/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ni/nix-your-shell/package.nix b/pkgs/by-name/ni/nix-your-shell/package.nix
index 447d1cb756e5..9a42d2dea0f2 100644
--- a/pkgs/by-name/ni/nix-your-shell/package.nix
+++ b/pkgs/by-name/ni/nix-your-shell/package.nix
@@ -8,16 +8,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "nix-your-shell";
-  version = "1.4.8";
+  version = "1.4.9";
 
   src = fetchFromGitHub {
     owner = "MercuryTechnologies";
     repo = "nix-your-shell";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-2KiqDqKKT28yjCEtU0vFd+dFktGd6Xp+yxSSI/R7fjc=";
+    hash = "sha256-mpgVlM3mFbjugEcWyhayEwSQvgj64jlAiy/RLgSTlyw=";
   };
 
-  cargoHash = "sha256-BBKnA/QX37qEtWw69+nS1NjurI2GXASUrfY1E0iL/0Q=";
+  cargoHash = "sha256-ReK85FRyl+4Epr11XsIiPUR3wFl6/HJ5MmYDX9Impes=";
 
   passthru = {
     generate-config =

From 60f99b444878b5d5f26c37786b28009211a91c29 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Tue, 24 Feb 2026 14:18:35 +0100
Subject: [PATCH 15/67] postgresqlTestHook: use meta.badPlatforms to allow
 usage of lib.meta.availableOn

---
 pkgs/by-name/pg/pgadmin4/package.nix          |   2 +-
 .../by-name/po/postgresqlTestHook/package.nix |   4 +-
 .../haskell-modules/configuration-nix.nix     | 107 ++++++++++--------
 .../sql/postgresql/ext/pointcloud/package.nix |   3 +-
 4 files changed, 66 insertions(+), 50 deletions(-)

diff --git a/pkgs/by-name/pg/pgadmin4/package.nix b/pkgs/by-name/pg/pgadmin4/package.nix
index 21ce2e8285fe..5e397226dd4b 100644
--- a/pkgs/by-name/pg/pgadmin4/package.nix
+++ b/pkgs/by-name/pg/pgadmin4/package.nix
@@ -217,7 +217,7 @@ pythonPackages.buildPythonApplication rec {
   ];
 
   # sandboxing issues on aarch64-darwin, see https://github.com/NixOS/nixpkgs/issues/198495
-  doCheck = !postgresqlTestHook.meta.broken;
+  doCheck = lib.meta.availableOn stdenv.buildPlatform postgresqlTestHook;
 
   # for replication testing in regression tests for PostgreSql >= 17
   env.postgresqlExtraSettings = "wal_level = logical";
diff --git a/pkgs/by-name/po/postgresqlTestHook/package.nix b/pkgs/by-name/po/postgresqlTestHook/package.nix
index 89da82df502e..4b67c7716e07 100644
--- a/pkgs/by-name/po/postgresqlTestHook/package.nix
+++ b/pkgs/by-name/po/postgresqlTestHook/package.nix
@@ -1,7 +1,7 @@
 {
   callPackage,
   makeSetupHook,
-  stdenv,
+  lib,
 }:
 
 makeSetupHook {
@@ -10,5 +10,5 @@ makeSetupHook {
     simple = callPackage ./test.nix { };
   };
   # See comment in postgresql's generic.nix doInstallCheck section.
-  meta.broken = stdenv.hostPlatform.isDarwin;
+  meta.badPlatforms = lib.platforms.darwin;
 } ./postgresql-test-hook.sh
diff --git a/pkgs/development/haskell-modules/configuration-nix.nix b/pkgs/development/haskell-modules/configuration-nix.nix
index 2e0aee58aa7b..ab7fe762e66f 100644
--- a/pkgs/development/haskell-modules/configuration-nix.nix
+++ b/pkgs/development/haskell-modules/configuration-nix.nix
@@ -352,7 +352,7 @@ builtins.intersectAttrs super {
   gtk-traymanager = addPkgconfigDepend pkgs.gtk3 super.gtk-traymanager;
 
   # These require postgres and pass the connection string manually via the CLI in tests.
-  consumers = dontCheckIf pkgs.postgresqlTestHook.meta.broken (
+  consumers = dontCheckIf (!lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook) (
     overrideCabal (drv: {
       preCheck = ''
         export postgresqlTestUserOptions="LOGIN SUPERUSER"
@@ -368,23 +368,25 @@ builtins.intersectAttrs super {
       ];
     }) super.consumers
   );
-  hpqtypes-extras = dontCheckIf pkgs.postgresqlTestHook.meta.broken (
-    overrideCabal (drv: {
-      preCheck = ''
-        export postgresqlTestUserOptions="LOGIN SUPERUSER"
-        export PGDATABASE=hpqtypes-extras
-      '';
-      testToolDepends = drv.testToolDepends or [ ] ++ [
-        pkgs.postgresql
-        pkgs.postgresqlTestHook
-      ];
-      testTargets = [
-        "hpqtypes-extras-tests"
-        "--test-option=--connection-string=\"host=$PGHOST user=$PGUSER dbname=$PGDATABASE\""
-      ];
-    }) super.hpqtypes-extras
-  );
-  hpqtypes = dontCheckIf pkgs.postgresqlTestHook.meta.broken (
+  hpqtypes-extras =
+    dontCheckIf (!lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook)
+      (
+        overrideCabal (drv: {
+          preCheck = ''
+            export postgresqlTestUserOptions="LOGIN SUPERUSER"
+            export PGDATABASE=hpqtypes-extras
+          '';
+          testToolDepends = drv.testToolDepends or [ ] ++ [
+            pkgs.postgresql
+            pkgs.postgresqlTestHook
+          ];
+          testTargets = [
+            "hpqtypes-extras-tests"
+            "--test-option=--connection-string=\"host=$PGHOST user=$PGUSER dbname=$PGDATABASE\""
+          ];
+        }) super.hpqtypes-extras
+      );
+  hpqtypes = dontCheckIf (!lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook) (
     overrideCabal (drv: {
       preCheck = ''
         export postgresqlTestUserOptions="LOGIN SUPERUSER"
@@ -400,26 +402,28 @@ builtins.intersectAttrs super {
       ];
     }) (super.hpqtypes.override { libpq = pkgs.libpq; })
   );
-  hpqtypes-effectful = dontCheckIf pkgs.postgresqlTestHook.meta.broken (
-    overrideCabal
-      (drv: {
-        preCheck = ''
-          export postgresqlTestUserOptions="LOGIN SUPERUSER"
-          export PGDATABASE=hpqtypes-effectful
-        '';
-        testToolDepends = drv.testToolDepends or [ ] ++ [
-          pkgs.postgresql
-          pkgs.postgresqlTestHook
-        ];
-      })
+  hpqtypes-effectful =
+    dontCheckIf (!lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook)
       (
-        super.hpqtypes-effectful.overrideAttrs (drv: {
-          postgresqlTestSetupPost = ''
-            export DATABASE_URL="host=$PGHOST user=$PGUSER dbname=$PGDATABASE"
-          '';
-        })
-      )
-  );
+        overrideCabal
+          (drv: {
+            preCheck = ''
+              export postgresqlTestUserOptions="LOGIN SUPERUSER"
+              export PGDATABASE=hpqtypes-effectful
+            '';
+            testToolDepends = drv.testToolDepends or [ ] ++ [
+              pkgs.postgresql
+              pkgs.postgresqlTestHook
+            ];
+          })
+          (
+            super.hpqtypes-effectful.overrideAttrs (drv: {
+              postgresqlTestSetupPost = ''
+                export DATABASE_URL="host=$PGHOST user=$PGUSER dbname=$PGDATABASE"
+              '';
+            })
+          )
+      );
 
   shelly = overrideCabal (drv: {
     # /usr/bin/env is unavailable in the sandbox
@@ -570,7 +574,7 @@ builtins.intersectAttrs super {
       pkgs.postgresql
       pkgs.postgresqlTestHook
     ])
-    (dontCheckIf pkgs.postgresqlTestHook.meta.broken)
+    (dontCheckIf (!lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook))
   ];
 
   # Test suite requires a running postgresql server,
@@ -1353,7 +1357,8 @@ builtins.intersectAttrs super {
       pkgs.postgresql
       pkgs.postgresqlTestHook
     ];
-    doCheck = drv.doCheck or true && !(pkgs.postgresqlTestHook.meta.broken);
+    doCheck =
+      drv.doCheck or true && lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook;
   }) super.relocant;
 
   # https://gitlab.iscpif.fr/gargantext/haskell-pgmq/blob/9a869df2842eccc86a0f31a69fb8dc5e5ca218a8/README.md#running-test-cases
@@ -1366,7 +1371,8 @@ builtins.intersectAttrs super {
       (lib.getBin (pkgs.postgresql.withPackages (ps: [ ps.pgmq ])))
       pkgs.postgresqlTestHook
     ];
-    doCheck = drv.doCheck or true && !(pkgs.postgresqlTestHook.meta.broken);
+    doCheck =
+      drv.doCheck or true && lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook;
   }) super.haskell-pgmq;
   # Needs pgmq available at test time with somehow preinitialized database (?)
   stakhanov = dontCheck super.stakhanov;
@@ -1381,7 +1387,7 @@ builtins.intersectAttrs super {
       pkgs.postgresql
       pkgs.postgresqlTestHook
     ])
-    (dontCheckIf pkgs.postgresqlTestHook.meta.broken)
+    (dontCheckIf (!lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook))
   ];
 
   postgresql-simple-migration = overrideCabal (drv: {
@@ -1394,7 +1400,8 @@ builtins.intersectAttrs super {
       pkgs.postgresqlTestHook
     ];
     jailbreak = true;
-    doCheck = drv.doCheck or true && !(pkgs.postgresqlTestHook.meta.broken);
+    doCheck =
+      drv.doCheck or true && lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook;
   }) super.postgresql-simple-migration;
 
   postgresql-simple = lib.pipe super.postgresql-simple [
@@ -1402,7 +1409,7 @@ builtins.intersectAttrs super {
       pkgs.postgresql
       pkgs.postgresqlTestHook
     ])
-    (dontCheckIf pkgs.postgresqlTestHook.meta.broken)
+    (dontCheckIf (!lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook))
   ];
 
   beam-postgres = lib.pipe super.beam-postgres [
@@ -1416,7 +1423,7 @@ builtins.intersectAttrs super {
       pkgs.postgresql
       pkgs.postgresqlTestHook
     ])
-    (dontCheckIf pkgs.postgresqlTestHook.meta.broken)
+    (dontCheckIf (!lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook))
   ];
 
   esqueleto =
@@ -1442,7 +1449,11 @@ builtins.intersectAttrs super {
         ];
       })
       # https://github.com/NixOS/nixpkgs/issues/198495
-      (dontCheckIf (pkgs.postgresqlTestHook.meta.broken) super.esqueleto);
+      (
+        dontCheckIf (
+          !lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook
+        ) super.esqueleto
+      );
 
   persistent-postgresql =
     # TODO: move this override to configuration-nix.nix
@@ -1464,7 +1475,11 @@ builtins.intersectAttrs super {
         ];
       })
       # https://github.com/NixOS/nixpkgs/issues/198495
-      (dontCheckIf (pkgs.postgresqlTestHook.meta.broken) super.persistent-postgresql);
+      (
+        dontCheckIf (
+          !lib.meta.availableOn pkgs.stdenv.buildPlatform pkgs.postgresqlTestHook
+        ) super.persistent-postgresql
+      );
 
   # https://gitlab.iscpif.fr/gargantext/haskell-bee/blob/19c8775f0d960c669235bf91131053cb6f69a1c1/README.md#redis
   haskell-bee-redis = overrideCabal (drv: {
diff --git a/pkgs/servers/sql/postgresql/ext/pointcloud/package.nix b/pkgs/servers/sql/postgresql/ext/pointcloud/package.nix
index 0a6849652b5e..7e2f75da868d 100644
--- a/pkgs/servers/sql/postgresql/ext/pointcloud/package.nix
+++ b/pkgs/servers/sql/postgresql/ext/pointcloud/package.nix
@@ -14,6 +14,7 @@
   postgresqlTestExtension,
   postgresqlTestHook,
   sphinx,
+  stdenv,
   which,
   zlib,
 }:
@@ -49,7 +50,7 @@ postgresqlBuildExtension (finalAttrs: {
     zlib
   ];
 
-  doCheck = !(postgresqlTestHook.meta.broken);
+  doCheck = lib.meta.availableOn stdenv.buildPlatform postgresqlTestHook;
 
   checkInputs = [
     cunit

From f1d081c57073e7337b0d19ff18614e1b6136fcc7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Tue, 24 Feb 2026 14:18:53 +0100
Subject: [PATCH 16/67] libpqxx: use lib.meta.availableOn to only run tests
 when supported

---
 pkgs/by-name/li/libpqxx/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/li/libpqxx/package.nix b/pkgs/by-name/li/libpqxx/package.nix
index 4eff4a03f24e..e98cfecd72c4 100644
--- a/pkgs/by-name/li/libpqxx/package.nix
+++ b/pkgs/by-name/li/libpqxx/package.nix
@@ -58,7 +58,7 @@ gcc14Stdenv.mkDerivation (finalAttrs: {
     "--enable-shared"
   ];
 
-  doCheck = true;
+  doCheck = lib.meta.availableOn stdenv.hostPlatform postgresqlTestHook;
 
   enableParallelBuilding = true;
 

From 629ddcaaab4a09877b405dc67e6cd0ae6123168f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 1 Mar 2026 05:49:49 +0000
Subject: [PATCH 17/67] laravel: 5.24.6 -> 5.24.7

---
 pkgs/by-name/la/laravel/composer.lock | 88 +++++++++++++--------------
 pkgs/by-name/la/laravel/package.nix   |  6 +-
 2 files changed, 47 insertions(+), 47 deletions(-)

diff --git a/pkgs/by-name/la/laravel/composer.lock b/pkgs/by-name/la/laravel/composer.lock
index 2a9d700173a5..506f0e116d14 100644
--- a/pkgs/by-name/la/laravel/composer.lock
+++ b/pkgs/by-name/la/laravel/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "68e4857d05b187b0f49a9eb15dda2c5a",
+    "content-hash": "eea005815db4191a8533c86641935c67",
     "packages": [
         {
             "name": "carbonphp/carbon-doctrine-types",
@@ -167,7 +167,7 @@
         },
         {
             "name": "illuminate/collections",
-            "version": "v12.52.0",
+            "version": "v12.53.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/illuminate/collections.git",
@@ -227,7 +227,7 @@
         },
         {
             "name": "illuminate/conditionable",
-            "version": "v12.52.0",
+            "version": "v12.53.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/illuminate/conditionable.git",
@@ -273,16 +273,16 @@
         },
         {
             "name": "illuminate/contracts",
-            "version": "v12.52.0",
+            "version": "v12.53.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/illuminate/contracts.git",
-                "reference": "620d82bad07f55fcb7f5125f44c9d9b93335fb8c"
+                "reference": "099fd9b56ccaf776facaa27699b960a3f2451127"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/illuminate/contracts/zipball/620d82bad07f55fcb7f5125f44c9d9b93335fb8c",
-                "reference": "620d82bad07f55fcb7f5125f44c9d9b93335fb8c",
+                "url": "https://api.github.com/repos/illuminate/contracts/zipball/099fd9b56ccaf776facaa27699b960a3f2451127",
+                "reference": "099fd9b56ccaf776facaa27699b960a3f2451127",
                 "shasum": ""
             },
             "require": {
@@ -317,11 +317,11 @@
                 "issues": "https://github.com/laravel/framework/issues",
                 "source": "https://github.com/laravel/framework"
             },
-            "time": "2026-02-10T18:16:44+00:00"
+            "time": "2026-02-20T14:37:40+00:00"
         },
         {
             "name": "illuminate/filesystem",
-            "version": "v12.52.0",
+            "version": "v12.53.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/illuminate/filesystem.git",
@@ -388,7 +388,7 @@
         },
         {
             "name": "illuminate/macroable",
-            "version": "v12.52.0",
+            "version": "v12.53.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/illuminate/macroable.git",
@@ -434,7 +434,7 @@
         },
         {
             "name": "illuminate/reflection",
-            "version": "v12.52.0",
+            "version": "v12.53.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/illuminate/reflection.git",
@@ -485,16 +485,16 @@
         },
         {
             "name": "illuminate/support",
-            "version": "v12.52.0",
+            "version": "v12.53.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/illuminate/support.git",
-                "reference": "6e9de455bcb232372db11531b72a01d4eca83ef2"
+                "reference": "18d7d75366ddb9eded3b7f05173f791da47faf34"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/illuminate/support/zipball/6e9de455bcb232372db11531b72a01d4eca83ef2",
-                "reference": "6e9de455bcb232372db11531b72a01d4eca83ef2",
+                "url": "https://api.github.com/repos/illuminate/support/zipball/18d7d75366ddb9eded3b7f05173f791da47faf34",
+                "reference": "18d7d75366ddb9eded3b7f05173f791da47faf34",
                 "shasum": ""
             },
             "require": {
@@ -561,7 +561,7 @@
                 "issues": "https://github.com/laravel/framework/issues",
                 "source": "https://github.com/laravel/framework"
             },
-            "time": "2026-02-14T23:03:41+00:00"
+            "time": "2026-02-23T15:44:06+00:00"
         },
         {
             "name": "laravel/prompts",
@@ -958,16 +958,16 @@
         },
         {
             "name": "symfony/console",
-            "version": "v7.4.4",
+            "version": "v7.4.6",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/console.git",
-                "reference": "41e38717ac1dd7a46b6bda7d6a82af2d98a78894"
+                "reference": "6d643a93b47398599124022eb24d97c153c12f27"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/console/zipball/41e38717ac1dd7a46b6bda7d6a82af2d98a78894",
-                "reference": "41e38717ac1dd7a46b6bda7d6a82af2d98a78894",
+                "url": "https://api.github.com/repos/symfony/console/zipball/6d643a93b47398599124022eb24d97c153c12f27",
+                "reference": "6d643a93b47398599124022eb24d97c153c12f27",
                 "shasum": ""
             },
             "require": {
@@ -1032,7 +1032,7 @@
                 "terminal"
             ],
             "support": {
-                "source": "https://github.com/symfony/console/tree/v7.4.4"
+                "source": "https://github.com/symfony/console/tree/v7.4.6"
             },
             "funding": [
                 {
@@ -1052,7 +1052,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-01-13T11:36:38+00:00"
+            "time": "2026-02-25T17:02:47+00:00"
         },
         {
             "name": "symfony/deprecation-contracts",
@@ -1123,16 +1123,16 @@
         },
         {
             "name": "symfony/finder",
-            "version": "v7.4.5",
+            "version": "v7.4.6",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/finder.git",
-                "reference": "ad4daa7c38668dcb031e63bc99ea9bd42196a2cb"
+                "reference": "8655bf1076b7a3a346cb11413ffdabff50c7ffcf"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/finder/zipball/ad4daa7c38668dcb031e63bc99ea9bd42196a2cb",
-                "reference": "ad4daa7c38668dcb031e63bc99ea9bd42196a2cb",
+                "url": "https://api.github.com/repos/symfony/finder/zipball/8655bf1076b7a3a346cb11413ffdabff50c7ffcf",
+                "reference": "8655bf1076b7a3a346cb11413ffdabff50c7ffcf",
                 "shasum": ""
             },
             "require": {
@@ -1167,7 +1167,7 @@
             "description": "Finds files and directories via an intuitive fluent interface",
             "homepage": "https://symfony.com",
             "support": {
-                "source": "https://github.com/symfony/finder/tree/v7.4.5"
+                "source": "https://github.com/symfony/finder/tree/v7.4.6"
             },
             "funding": [
                 {
@@ -1187,7 +1187,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-01-26T15:07:59+00:00"
+            "time": "2026-01-29T09:40:50+00:00"
         },
         {
             "name": "symfony/polyfill-ctype",
@@ -1918,16 +1918,16 @@
         },
         {
             "name": "symfony/string",
-            "version": "v8.0.4",
+            "version": "v8.0.6",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/string.git",
-                "reference": "758b372d6882506821ed666032e43020c4f57194"
+                "reference": "6c9e1108041b5dce21a9a4984b531c4923aa9ec4"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/string/zipball/758b372d6882506821ed666032e43020c4f57194",
-                "reference": "758b372d6882506821ed666032e43020c4f57194",
+                "url": "https://api.github.com/repos/symfony/string/zipball/6c9e1108041b5dce21a9a4984b531c4923aa9ec4",
+                "reference": "6c9e1108041b5dce21a9a4984b531c4923aa9ec4",
                 "shasum": ""
             },
             "require": {
@@ -1984,7 +1984,7 @@
                 "utf8"
             ],
             "support": {
-                "source": "https://github.com/symfony/string/tree/v8.0.4"
+                "source": "https://github.com/symfony/string/tree/v8.0.6"
             },
             "funding": [
                 {
@@ -2004,20 +2004,20 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-01-12T12:37:40+00:00"
+            "time": "2026-02-09T10:14:57+00:00"
         },
         {
             "name": "symfony/translation",
-            "version": "v8.0.4",
+            "version": "v8.0.6",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/translation.git",
-                "reference": "db70c8ce7db74fd2da7b1d268db46b2a8ce32c10"
+                "reference": "13ff19bcf2bea492d3c2fbeaa194dd6f4599ce1b"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/translation/zipball/db70c8ce7db74fd2da7b1d268db46b2a8ce32c10",
-                "reference": "db70c8ce7db74fd2da7b1d268db46b2a8ce32c10",
+                "url": "https://api.github.com/repos/symfony/translation/zipball/13ff19bcf2bea492d3c2fbeaa194dd6f4599ce1b",
+                "reference": "13ff19bcf2bea492d3c2fbeaa194dd6f4599ce1b",
                 "shasum": ""
             },
             "require": {
@@ -2077,7 +2077,7 @@
             "description": "Provides tools to internationalize your application",
             "homepage": "https://symfony.com",
             "support": {
-                "source": "https://github.com/symfony/translation/tree/v8.0.4"
+                "source": "https://github.com/symfony/translation/tree/v8.0.6"
             },
             "funding": [
                 {
@@ -2097,7 +2097,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-01-13T13:06:50+00:00"
+            "time": "2026-02-17T13:07:04+00:00"
         },
         {
             "name": "symfony/translation-contracts",
@@ -2495,11 +2495,11 @@
         },
         {
             "name": "phpstan/phpstan",
-            "version": "2.1.39",
+            "version": "2.1.40",
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/c6f73a2af4cbcd99c931d0fb8f08548cc0fa8224",
-                "reference": "c6f73a2af4cbcd99c931d0fb8f08548cc0fa8224",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/9b2c7aeb83a75d8680ea5e7c9b7fca88052b766b",
+                "reference": "9b2c7aeb83a75d8680ea5e7c9b7fca88052b766b",
                 "shasum": ""
             },
             "require": {
@@ -2544,7 +2544,7 @@
                     "type": "github"
                 }
             ],
-            "time": "2026-02-11T14:48:56+00:00"
+            "time": "2026-02-23T15:04:35+00:00"
         },
         {
             "name": "phpunit/php-code-coverage",
diff --git a/pkgs/by-name/la/laravel/package.nix b/pkgs/by-name/la/laravel/package.nix
index b041677fc955..b661092e5260 100644
--- a/pkgs/by-name/la/laravel/package.nix
+++ b/pkgs/by-name/la/laravel/package.nix
@@ -7,19 +7,19 @@
 }:
 php.buildComposerProject2 (finalAttrs: {
   pname = "laravel";
-  version = "5.24.6";
+  version = "5.24.7";
 
   src = fetchFromGitHub {
     owner = "laravel";
     repo = "installer";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-zXgLIp2tTPwGvZTT0rJqbbsO0Od/8sf6NQIgx/xhfJE=";
+    hash = "sha256-szyoqX4wgJpQZO9H/WVq70A5n/3qV1SdBCKQc9vm4WY=";
   };
 
   nativeBuildInputs = [ makeWrapper ];
 
   composerLock = ./composer.lock;
-  vendorHash = "sha256-pegatl+tktcTSFV5GuxiyXvmZGVC+57DzWAIsOoZJWE=";
+  vendorHash = "sha256-yX6EmbopVUpbbVBfep1Rk84wUK5sxjrlzvii+s39SqA=";
 
   # Adding npm (nodejs) and php composer to path
   postInstall = ''

From c62afbb1851d331a24383821c9d65783c39de911 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 1 Mar 2026 08:34:14 +0000
Subject: [PATCH 18/67] pcb2gcode: 2.5.0 -> 3.0.1

---
 pkgs/by-name/pc/pcb2gcode/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/pc/pcb2gcode/package.nix b/pkgs/by-name/pc/pcb2gcode/package.nix
index 93a5fb1514d3..64a82666e27b 100644
--- a/pkgs/by-name/pc/pcb2gcode/package.nix
+++ b/pkgs/by-name/pc/pcb2gcode/package.nix
@@ -13,13 +13,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pcb2gcode";
-  version = "2.5.0";
+  version = "3.0.1";
 
   src = fetchFromGitHub {
     owner = "pcb2gcode";
     repo = "pcb2gcode";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-c5YabBqZn6ilIkF3lifTsYyLZMsZN21jDj1hNu0PRAc=";
+    hash = "sha256-PCBROFFo+yE6ojoNImk+9hdXzt/Y8JEvmvKwES2KBwM=";
   };
 
   configureFlags = [

From 2768dccab39f2588fde93a15447d5a955ebdad8e Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 1 Mar 2026 08:48:59 +0000
Subject: [PATCH 19/67] typos: 1.43.5 -> 1.44.0

---
 pkgs/by-name/ty/typos/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ty/typos/package.nix b/pkgs/by-name/ty/typos/package.nix
index 7f52d9312fd1..d2d6f556e9dc 100644
--- a/pkgs/by-name/ty/typos/package.nix
+++ b/pkgs/by-name/ty/typos/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "typos";
-  version = "1.43.5";
+  version = "1.44.0";
 
   src = fetchFromGitHub {
     owner = "crate-ci";
     repo = "typos";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-lRh7f04DJx3DSmRUA0XpL1aQWrxcqY87yz/9jx512nA=";
+    hash = "sha256-0cDkLeYMQH2rXUfIjUQm1XjvHTYqLWbqHCxFIvC+jKk=";
   };
 
-  cargoHash = "sha256-mfdKF1Nup/RqANRQzRtezr6iwgMJwqKHSEgeReD3EoY=";
+  cargoHash = "sha256-H+nXNfnrJXXTZsXgLXrrdvYzN6k38imcmY17tvGM21s=";
 
   passthru.updateScript = nix-update-script { };
 

From b509d6df99aed23992b75210a31fdd1072b8a7ee Mon Sep 17 00:00:00 2001
From: Sizhe Zhao <prc.zhao@outlook.com>
Date: Sun, 1 Mar 2026 18:25:20 +0800
Subject: [PATCH 20/67] nb: 7.25.0 -> 7.25.2

---
 pkgs/by-name/nb/nb/package.nix | 22 ++++++++++++----------
 1 file changed, 12 insertions(+), 10 deletions(-)

diff --git a/pkgs/by-name/nb/nb/package.nix b/pkgs/by-name/nb/nb/package.nix
index 7729074ddf02..e319049499e3 100644
--- a/pkgs/by-name/nb/nb/package.nix
+++ b/pkgs/by-name/nb/nb/package.nix
@@ -1,23 +1,22 @@
 {
-  stdenv,
+  stdenvNoCC,
   lib,
   fetchFromGitHub,
   installShellFiles,
   testers,
   nix-update-script,
-  nb,
   bashInteractive,
 }:
 
-stdenv.mkDerivation (finalAttrs: {
+stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "nb";
-  version = "7.25.0";
+  version = "7.25.2";
 
   src = fetchFromGitHub {
     owner = "xwmx";
     repo = "nb";
-    rev = finalAttrs.version;
-    hash = "sha256-+QRKv+zKOz8qDD1Ecpavl0ybf4nIcy0flNLHhyR+fxA=";
+    tag = finalAttrs.version;
+    hash = "sha256-G/4BDOsrBqN92noEzDCG9lkZTblsz/HbYl0D+oyLEXc=";
   };
 
   nativeBuildInputs = [ installShellFiles ];
@@ -27,8 +26,8 @@ stdenv.mkDerivation (finalAttrs: {
   dontBuild = true;
 
   installPhase = ''
-    mkdir -p $out/bin/
-    mv nb $out/bin/
+    runHook preInstall
+    install -Dm755 -t $out/bin nb
     runHook postInstall
   '';
 
@@ -38,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   passthru = {
     tests.version = testers.testVersion {
-      package = nb;
+      package = finalAttrs.finalPackage;
       # Setting EDITOR to avoid: "Command line text editor not found"
       command = "EDITOR=nano nb --version";
     };
@@ -81,7 +80,10 @@ stdenv.mkDerivation (finalAttrs: {
     '';
     homepage = "https://xwmx.github.io/nb/";
     license = lib.licenses.agpl3Plus;
-    maintainers = [ lib.maintainers.toonn ];
+    maintainers = with lib.maintainers; [
+      prince213
+      toonn
+    ];
     platforms = lib.platforms.all;
     mainProgram = "nb";
   };

From 3111b5b712ca01cc22f4a22d416fe1cbf4af3479 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 1 Mar 2026 20:46:03 +0000
Subject: [PATCH 21/67] asciinema_3: 3.1.0 -> 3.2.0

---
 pkgs/by-name/as/asciinema_3/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/as/asciinema_3/package.nix b/pkgs/by-name/as/asciinema_3/package.nix
index 86527d5761c4..5d93445c8101 100644
--- a/pkgs/by-name/as/asciinema_3/package.nix
+++ b/pkgs/by-name/as/asciinema_3/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "asciinema";
-  version = "3.1.0";
+  version = "3.2.0";
 
   src = fetchFromGitHub {
     owner = "asciinema";
     repo = "asciinema";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-luIGJ4OvQSnNzyuTrjXliuMeIzPZwRnyKYdAo8mnvGg=";
+    hash = "sha256-03olFWB/6O7V/B9gz6QACMxugrIx560fpp81IGVWv58=";
   };
 
-  cargoHash = "sha256-5hPk9rtpjK5dk1fgYXQ5KdHNvbuOTWYGpCQVLxlEvq4=";
+  cargoHash = "sha256-B6s3uUPGL8m076dl3P26j+frHWLi+wzED41BQ/rQAM8=";
 
   env.ASCIINEMA_GEN_DIR = "gendir";
 

From 8ae97b43c5c6dee8be40c27778863b7c1897588b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 1 Mar 2026 22:12:19 +0000
Subject: [PATCH 22/67] python3Packages.python-aodhclient: 3.10.0 -> 3.10.1

---
 pkgs/development/python-modules/python-aodhclient/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/python-aodhclient/default.nix b/pkgs/development/python-modules/python-aodhclient/default.nix
index 38943e805d59..f40a029c2a33 100644
--- a/pkgs/development/python-modules/python-aodhclient/default.nix
+++ b/pkgs/development/python-modules/python-aodhclient/default.nix
@@ -20,14 +20,14 @@
 
 buildPythonPackage rec {
   pname = "python-aodhclient";
-  version = "3.10.0";
+  version = "3.10.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "openstack";
     repo = "python-aodhclient";
     tag = version;
-    hash = "sha256-+VBtsx9bjO7YIS5mGd6AaxvQyxg4En5gP5mKmoIFAtU=";
+    hash = "sha256-xm42ZicdBxxm4LTDHPhEIeNU6evBZtp2PGvGy6V2t8c=";
   };
 
   env.PBR_VERSION = version;

From d59d89f9835a7739bef6cd8506aa9a1eb71b5ef9 Mon Sep 17 00:00:00 2001
From: rafaelrc7 <contact@rafaelrc.com>
Date: Sun, 1 Mar 2026 19:41:57 -0300
Subject: [PATCH 23/67] gforth: 0.7.9_20251203 -> 0.7.9_20260224

---
 pkgs/by-name/gf/gforth/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/gf/gforth/package.nix b/pkgs/by-name/gf/gforth/package.nix
index 54cdecf7fcf1..db1e2d5f37e8 100644
--- a/pkgs/by-name/gf/gforth/package.nix
+++ b/pkgs/by-name/gf/gforth/package.nix
@@ -17,13 +17,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "gforth";
-  version = "0.7.9_20251203";
+  version = "0.7.9_20260224";
 
   src = fetchFromGitHub {
     owner = "forthy42";
     repo = "gforth";
     rev = finalAttrs.version;
-    hash = "sha256-d1LU6FGnGOzL5Tdl0VLkYzHH+pUevGNCNwIqudS8emg=";
+    hash = "sha256-8qHfoqhzDn3FmKqTCo/72xtjWFUo9+crFFcGvbHxI0E=";
   };
 
   patches = [ ./use-nproc-instead-of-fhs.patch ];

From a7aa6a06a0907bd74f849e9a1c0a841c3b81ca4a Mon Sep 17 00:00:00 2001
From: rafaelrc7 <contact@rafaelrc.com>
Date: Wed, 15 Oct 2025 00:01:56 -0300
Subject: [PATCH 24/67] gforth: Add rafaelrc as maintainer

---
 pkgs/by-name/gf/gforth/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/gf/gforth/package.nix b/pkgs/by-name/gf/gforth/package.nix
index db1e2d5f37e8..874841ff5a13 100644
--- a/pkgs/by-name/gf/gforth/package.nix
+++ b/pkgs/by-name/gf/gforth/package.nix
@@ -65,5 +65,6 @@ stdenv.mkDerivation (finalAttrs: {
     broken = stdenv.hostPlatform.isDarwin;
     platforms = lib.platforms.all;
     mainProgram = "gforth";
+    maintainers = with lib.maintainers; [ rafaelrc ];
   };
 })

From 01744e51b8c4e01eb52bb38ca36076c04e6fc0cb Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 1 Mar 2026 23:56:46 +0000
Subject: [PATCH 25/67] echoip: 0-unstable-2026-02-17 -> 0-unstable-2026-02-28

---
 pkgs/by-name/ec/echoip/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ec/echoip/package.nix b/pkgs/by-name/ec/echoip/package.nix
index c606f2fa1bd3..dc16580e47d6 100644
--- a/pkgs/by-name/ec/echoip/package.nix
+++ b/pkgs/by-name/ec/echoip/package.nix
@@ -9,13 +9,13 @@
 
 buildGoModule {
   pname = "echoip";
-  version = "0-unstable-2026-02-17";
+  version = "0-unstable-2026-02-28";
 
   src = fetchFromGitHub {
     owner = "mpolden";
     repo = "echoip";
-    rev = "c3394af786b05879fc1219eb0d33b82b8dd806b0";
-    hash = "sha256-L1cLLEhPGtLYaJcbc26YPuUCZh8pmbceIWQ5iIEh4i4=";
+    rev = "746db5ebf42f87da5d487de444dccc884f9d1c39";
+    hash = "sha256-yWkEHBWVLEofC6to60R6nMtF4mpMxHMDO22QntNkYGY=";
   };
 
   vendorHash = "sha256-gNXu1yfvJnviPDeG0oNJ9MD5R93rjEV/n8hrADi8ZnM=";

From 25599606fd876f49562d63a0812805f7812e9394 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 02:31:18 +0000
Subject: [PATCH 26/67] ytdl-sub: 2026.02.04 -> 2026.02.23

---
 pkgs/by-name/yt/ytdl-sub/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/yt/ytdl-sub/package.nix b/pkgs/by-name/yt/ytdl-sub/package.nix
index 000182307ced..f77046e95ffc 100644
--- a/pkgs/by-name/yt/ytdl-sub/package.nix
+++ b/pkgs/by-name/yt/ytdl-sub/package.nix
@@ -9,14 +9,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "ytdl-sub";
-  version = "2026.02.04";
+  version = "2026.02.23";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jmbannon";
     repo = "ytdl-sub";
     tag = finalAttrs.version;
-    hash = "sha256-c6TQMWp7vlC5T5ZjS+uLVS2vfoSk1+g/4LS+bRYilSc=";
+    hash = "sha256-Wux6qSjhu3J6N9SqjT6S2M9KPUMQ9kWs4kA4mvF/CKY=";
   };
 
   postPatch = ''

From 0ae3fc65ff05400fd883fe5c159b9ef86251b252 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 03:58:44 +0000
Subject: [PATCH 27/67] hifile: 0.9.15.7 -> 0.9.15.9

---
 pkgs/by-name/hi/hifile/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/hi/hifile/package.nix b/pkgs/by-name/hi/hifile/package.nix
index 309fea01e16f..cc0645df5232 100644
--- a/pkgs/by-name/hi/hifile/package.nix
+++ b/pkgs/by-name/hi/hifile/package.nix
@@ -2,8 +2,8 @@
   lib,
   appimageTools,
   fetchurl,
-  version ? "0.9.15.7",
-  hash ? "sha256-VscfmpCM4tpywaJrjF5I9htzDg/z98BKAU63ajr+lVM=",
+  version ? "0.9.15.9",
+  hash ? "sha256-aJaygIDn3LxP5KhIpyLpof3OaNJrdWh0InBlb90p/uk=",
 }:
 
 let

From 3f72b74ed6dde6cadf7f7d56f35d211dedb2a3c8 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 06:45:08 +0000
Subject: [PATCH 28/67] dns-collector: 2.0.0 -> 2.1.0

---
 pkgs/by-name/dn/dns-collector/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/dn/dns-collector/package.nix b/pkgs/by-name/dn/dns-collector/package.nix
index 953e5cfd5978..c17f2e2fdaf9 100644
--- a/pkgs/by-name/dn/dns-collector/package.nix
+++ b/pkgs/by-name/dn/dns-collector/package.nix
@@ -7,13 +7,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "dns-collector";
-  version = "2.0.0";
+  version = "2.1.0";
 
   src = fetchFromGitHub {
     owner = "dmachard";
     repo = "dns-collector";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-d6FFxVGolXfZF4Ulklxg8u26DdV9yHeDUf2IEEryELw=";
+    hash = "sha256-b1fKxjdZpCuPg+lRhpYn8tjVOqQU1kyhta63G+8Pxr4=";
   };
   subPackages = [ "." ];
 
@@ -27,7 +27,7 @@ buildGoModule (finalAttrs: {
     "-X github.com/prometheus/common/version.Version=${finalAttrs.version}"
   ];
 
-  vendorHash = "sha256-4gk7LwRDrTiMCrR6JJpdSvCmNa7wQ5Hk06OGd6/SACc=";
+  vendorHash = "sha256-UNp2lttwBQM9Xx6+aOQGKdOgeMBsyCHQdhCAbyvDCN4=";
 
   passthru.updateScript = nix-update-script { };
 

From 0ba29ee2c1ceb32074c976be8eae68e878c7b6c4 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 06:55:21 +0000
Subject: [PATCH 29/67] xournalpp: 1.3.2 -> 1.3.3

---
 pkgs/by-name/xo/xournalpp/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/xo/xournalpp/package.nix b/pkgs/by-name/xo/xournalpp/package.nix
index 0440748876fe..56657672070d 100644
--- a/pkgs/by-name/xo/xournalpp/package.nix
+++ b/pkgs/by-name/xo/xournalpp/package.nix
@@ -33,13 +33,13 @@
 
 stdenv.mkDerivation rec {
   pname = "xournalpp";
-  version = "1.3.2";
+  version = "1.3.3";
 
   src = fetchFromGitHub {
     owner = "xournalpp";
     repo = "xournalpp";
     rev = "v${version}";
-    hash = "sha256-adzL/2zQlG4hBPV0rQzkQrOyGROv73GyjIH8Debhhq8=";
+    hash = "sha256-AHW3LfGAXoP9F3EJiRgVBQ9NuYdVJrh0cQKSEiG48rc=";
   };
 
   nativeBuildInputs = [

From 36ac27ac6bdc4e3dc20a6363133612fdfb55a14c Mon Sep 17 00:00:00 2001
From: Guanran Wang <guanran928@outlook.com>
Date: Mon, 2 Mar 2026 15:34:42 +0800
Subject: [PATCH 30/67] fcitx5-pinyin-moegirl: fix license

---
 pkgs/by-name/fc/fcitx5-pinyin-moegirl/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/fc/fcitx5-pinyin-moegirl/package.nix b/pkgs/by-name/fc/fcitx5-pinyin-moegirl/package.nix
index 9e8633590174..a4f8452b6ab2 100644
--- a/pkgs/by-name/fc/fcitx5-pinyin-moegirl/package.nix
+++ b/pkgs/by-name/fc/fcitx5-pinyin-moegirl/package.nix
@@ -29,7 +29,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     description = "Fcitx 5 pinyin dictionary from zh.moegirl.org.cn";
     homepage = "https://github.com/outloudvi/mw2fcitx";
     license = with lib.licenses; [
-      unlicense
+      mit
       cc-by-nc-sa-30
     ];
     maintainers = with lib.maintainers; [ Guanran928 ];

From e1cc0d981756a80acdb89f390cd6f99a458b95df Mon Sep 17 00:00:00 2001
From: Guanran Wang <guanran928@outlook.com>
Date: Mon, 2 Mar 2026 15:34:53 +0800
Subject: [PATCH 31/67] rime-moegirl: fix license

---
 pkgs/by-name/ri/rime-moegirl/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ri/rime-moegirl/package.nix b/pkgs/by-name/ri/rime-moegirl/package.nix
index c0ba17f0c8ea..9dcb3d6679ed 100644
--- a/pkgs/by-name/ri/rime-moegirl/package.nix
+++ b/pkgs/by-name/ri/rime-moegirl/package.nix
@@ -27,7 +27,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     description = "RIME dictionary file for entries from zh.moegirl.org.cn";
     homepage = "https://github.com/outloudvi/mw2fcitx/releases";
     license = with lib.licenses; [
-      unlicense # the tool packaging dictionary
+      mit # the tool packaging dictionary
       cc-by-nc-sa-30 # moegirl wiki itself
     ];
   };

From a3e2f176a3db8f3dd9a81a3be8896529ec95a681 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 08:05:40 +0000
Subject: [PATCH 32/67] hydrus: 660 -> 661

---
 pkgs/by-name/hy/hydrus/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/hy/hydrus/package.nix b/pkgs/by-name/hy/hydrus/package.nix
index 1b97b23d419b..adc84d216ddb 100644
--- a/pkgs/by-name/hy/hydrus/package.nix
+++ b/pkgs/by-name/hy/hydrus/package.nix
@@ -16,14 +16,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "hydrus";
-  version = "660";
+  version = "661";
   pyproject = false;
 
   src = fetchFromGitHub {
     owner = "hydrusnetwork";
     repo = "hydrus";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-nIXzSwdf/9Pd2mQoFYzttYvmUOFhytYQSEmIkFdaKTY=";
+    hash = "sha256-H7dL8hbWWEVZUs9tlisoDVJc60bxX4k/AURm5SIEhWI=";
   };
 
   nativeBuildInputs = [

From 4c67b3664cc141e0ccd46d112c44f98bb5adb659 Mon Sep 17 00:00:00 2001
From: Defelo <mail@defelo.de>
Date: Mon, 2 Mar 2026 09:19:21 +0100
Subject: [PATCH 33/67] radicle-tui: use canonical release tag

---
 pkgs/by-name/ra/radicle-tui/package.nix |  1 -
 pkgs/by-name/ra/radicle-tui/update.sh   | 17 ++---------------
 2 files changed, 2 insertions(+), 16 deletions(-)

diff --git a/pkgs/by-name/ra/radicle-tui/package.nix b/pkgs/by-name/ra/radicle-tui/package.nix
index 52e1a9502fc0..ac536ae1bc59 100644
--- a/pkgs/by-name/ra/radicle-tui/package.nix
+++ b/pkgs/by-name/ra/radicle-tui/package.nix
@@ -17,7 +17,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
   src = fetchFromRadicle {
     seed = "seed.radicle.xyz";
     repo = "z39mP9rQAaGmERfUMPULfPUi473tY";
-    node = "z6MkgFq6z5fkF2hioLLSNu1zP2qEL1aHXHZzGH1FLFGAnBGz";
     tag = "releases/${finalAttrs.version}";
     hash = "sha256-2/pLlhilJyrZl9eLFWIh4YxlJwBbzjmb1Cg1xFSSl5k=";
     leaveDotGit = true;
diff --git a/pkgs/by-name/ra/radicle-tui/update.sh b/pkgs/by-name/ra/radicle-tui/update.sh
index 8acbcf00aa85..3c95cbbd1579 100755
--- a/pkgs/by-name/ra/radicle-tui/update.sh
+++ b/pkgs/by-name/ra/radicle-tui/update.sh
@@ -1,18 +1,5 @@
 #!/usr/bin/env nix-shell
-#!nix-shell -i bash -p coreutils gnused gitMinimal nix-update
+#!nix-shell -i bash -p coreutils gnugrep common-updater-scripts nix-update
 
-set -euo pipefail
-
-dirname="$(dirname "${BASH_SOURCE[0]}")"
-
-url=$(nix-instantiate --eval --raw -A radicle-tui.src.url)
-old_node=$(nix-instantiate --eval --raw -A radicle-tui.src.node)
-
-ref=$(git ls-remote "$url" 'refs/namespaces/*/refs/tags/releases/*' \
-  | cut -f2 | grep -Ev '\^\{\}$' | sort -t/ -k6rV | head -1)
-[[ "$ref" =~ ^refs/namespaces/([^/]+)/refs/tags/releases/([^/]+)$ ]]
-new_node="${BASH_REMATCH[1]}"
-version="${BASH_REMATCH[2]}"
-
-sed -i "s/${old_node}/${new_node}/g" "${dirname}/package.nix"
+version=$(list-git-tags | grep -oP '^releases/\K\d+\.\d+\.\d+$' | sort -rV | head -1)
 nix-update --version="$version" radicle-tui

From 077a12bbe98e2ca745e2d95490a6229b75848a30 Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Mon, 2 Mar 2026 00:53:49 -0800
Subject: [PATCH 34/67] golden-cheetah{,-bin}: move icon to spec-compliant
 location

---
 pkgs/by-name/go/golden-cheetah-bin/linux.nix | 4 ++--
 pkgs/by-name/go/golden-cheetah/package.nix   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/go/golden-cheetah-bin/linux.nix b/pkgs/by-name/go/golden-cheetah-bin/linux.nix
index f37a78c302d2..ef8c7063c4f1 100644
--- a/pkgs/by-name/go/golden-cheetah-bin/linux.nix
+++ b/pkgs/by-name/go/golden-cheetah-bin/linux.nix
@@ -27,11 +27,11 @@ appimageTools.wrapType2 rec {
   extraInstallCommands = ''
     mv $out/bin/${pname} $out/bin/GoldenCheetah
     mkdir -p $out/share/applications
-    mkdir -p $out/share/pixmaps
+    mkdir -p $out/share/icons/hicolor/512x512/apps
     cp ${appimageContents}/GoldenCheetah.desktop $out/share/applications/
     substituteInPlace $out/share/applications/GoldenCheetah.desktop --replace-fail \
       "Exec=GoldenCheetah" "Exec=env QT_PLUGIN_PATH= GoldenCheetah"
-    cp ${appimageContents}/gc.png $out/share/pixmaps/
+    cp ${appimageContents}/gc.png $out/share/icons/hicolor/512x512/apps/
   '';
   meta = {
     inherit (commonMeta)
diff --git a/pkgs/by-name/go/golden-cheetah/package.nix b/pkgs/by-name/go/golden-cheetah/package.nix
index cb4e9681d113..6cd729e4b1d6 100644
--- a/pkgs/by-name/go/golden-cheetah/package.nix
+++ b/pkgs/by-name/go/golden-cheetah/package.nix
@@ -100,7 +100,7 @@ stdenv.mkDerivation (finalAttrs: {
         mkdir -p $out/bin
         cp src/GoldenCheetah $out/bin
         install -Dm644 "${desktopItem}/share/applications/"* -t $out/share/applications/
-        install -Dm644 src/Resources/images/gc.png $out/share/pixmaps/goldencheetah.png
+        install -Dm644 src/Resources/images/gc.png $out/share/icons/hicolor/512x512/apps/goldencheetah.png
 
         runHook postInstall
       ''

From f797c11c6a3225ceb5d36485a331a47ad34fda42 Mon Sep 17 00:00:00 2001
From: uku <hi@uku.moe>
Date: Mon, 2 Mar 2026 10:59:59 +0100
Subject: [PATCH 35/67] zipline: set NODE_PATH for sharp

When building sharp from source, it tries to `require("node-gyp")`,
which will not be found since it's not in zipline's deps. We therefore
set NODE_PATH with nixpkgs's node-gyp, so that it can be imported by the
sharp build script.

See:
https://github.com/lovell/sharp/blame/7b4c4762432b14c62676e860c8034b5cd326f464/install/build.js#L24
---
 pkgs/by-name/zi/zipline/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/zi/zipline/package.nix b/pkgs/by-name/zi/zipline/package.nix
index c0a8197983e9..d8a51297cddf 100644
--- a/pkgs/by-name/zi/zipline/package.nix
+++ b/pkgs/by-name/zi/zipline/package.nix
@@ -75,6 +75,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   env = environment // {
     DATABASE_URL = "dummy";
+    NODE_PATH = "${node-gyp}/lib/node_modules";
   };
 
   buildPhase = ''

From db2899d4e83d2ab2d9e12cd29e9e2575c922372c Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Mon, 2 Mar 2026 03:01:56 -0800
Subject: [PATCH 36/67] ssb-patchwork: move icon to spec-compliant location

---
 pkgs/by-name/ss/ssb-patchwork/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ss/ssb-patchwork/package.nix b/pkgs/by-name/ss/ssb-patchwork/package.nix
index 7e4264a64e78..64c456fc7ecd 100644
--- a/pkgs/by-name/ss/ssb-patchwork/package.nix
+++ b/pkgs/by-name/ss/ssb-patchwork/package.nix
@@ -42,8 +42,8 @@ symlinkJoin {
   paths = [ binary ];
 
   postBuild = ''
-    mkdir -p $out/share/pixmaps/ $out/share/applications
-    cp ${appimage-contents}/ssb-patchwork.png $out/share/pixmaps
+    mkdir -p $out/share/applications
+    install -D ${appimage-contents}/ssb-patchwork.png -t $out/share/icons/hicolor/512x512/apps
     cp ${desktopItem}/share/applications/* $out/share/applications/
   '';
 

From a0a30435eeb38d1853c112e9e3546dfebe994675 Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Mon, 2 Mar 2026 03:08:54 -0800
Subject: [PATCH 37/67] lact: move icon to spec-compliant location

---
 pkgs/by-name/la/lact/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/la/lact/package.nix b/pkgs/by-name/la/lact/package.nix
index 1e4ab43fac33..cdeb661187f2 100644
--- a/pkgs/by-name/la/lact/package.nix
+++ b/pkgs/by-name/la/lact/package.nix
@@ -100,7 +100,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   postInstall = ''
     install -Dm444 res/lactd.service -t $out/lib/systemd/system
     install -Dm444 res/io.github.ilya_zlobintsev.LACT.desktop -t $out/share/applications
-    install -Dm444 res/io.github.ilya_zlobintsev.LACT.svg -t $out/share/pixmaps
+    install -Dm444 res/io.github.ilya_zlobintsev.LACT.svg -t $out/share/icons/hicolor/scalable/apps
   '';
 
   preFixup = ''

From 70ff5d67556791b2ec458db850b533c542018082 Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:51 +0200
Subject: [PATCH 38/67] firezone-gui-client: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/fi/firezone-gui-client/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fi/firezone-gui-client/package.nix b/pkgs/by-name/fi/firezone-gui-client/package.nix
index b45ab51dd27e..d4772f53b473 100644
--- a/pkgs/by-name/fi/firezone-gui-client/package.nix
+++ b/pkgs/by-name/fi/firezone-gui-client/package.nix
@@ -43,8 +43,8 @@ let
       inherit pname version;
       pnpm = pnpm_9;
       src = "${src}/rust/gui-client";
-      fetcherVersion = 1;
-      hash = "sha256-ttbTYBuUv0vyiYzrFATF4x/zngsRXjuLPfL3qW2HEe4=";
+      fetcherVersion = 3;
+      hash = "sha256-akanXiWehhQRx6WHN75PjYvFxFiSsJ5dJaguJBTM9J0=";
     };
     pnpmRoot = "rust/gui-client";
 

From a4620fa2c3b30ed8ab824e29e06abc803939d523 Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:52 +0200
Subject: [PATCH 39/67] firezone-server: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/fi/firezone-server/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fi/firezone-server/package.nix b/pkgs/by-name/fi/firezone-server/package.nix
index 5b1014691275..0e44d761a1e2 100644
--- a/pkgs/by-name/fi/firezone-server/package.nix
+++ b/pkgs/by-name/fi/firezone-server/package.nix
@@ -36,8 +36,8 @@ beam27Packages.mixRelease rec {
     inherit pname version;
     pnpm = pnpm_9;
     src = "${src}/apps/web/assets";
-    fetcherVersion = 1;
-    hash = "sha256-40vtQIBhJNnzdxkAOVAcPN57IuD0IB6LFxGICo68AbQ=";
+    fetcherVersion = 3;
+    hash = "sha256-tB0y3T/dZBe8BHz7AV913zQ4oQu7VLyqHCnzBycNg18=";
   };
   pnpmRoot = "apps/web/assets";
 

From 61a01ba020bf29f5c8e7f554556e9bd5d012096c Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:53 +0200
Subject: [PATCH 40/67] folo: migrate from fetcherVersion = 1 to fetcherVersion
 = 3

---
 pkgs/by-name/fo/folo/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fo/folo/package.nix b/pkgs/by-name/fo/folo/package.nix
index d0d2e7bc09d7..56385c1c24be 100644
--- a/pkgs/by-name/fo/folo/package.nix
+++ b/pkgs/by-name/fo/folo/package.nix
@@ -38,8 +38,8 @@ stdenv.mkDerivation rec {
       src
       ;
     pnpm = pnpm_10;
-    fetcherVersion = 1;
-    hash = "sha256-6I10NSmTDd/wmL/HfAgLH+G2MDfuPmrTePNDDy08nRA=";
+    fetcherVersion = 3;
+    hash = "sha256-EP7bpbJUcKmHm7KMlKc0Fz2u0niQ3jC7YN/9pp7vucE=";
   };
 
   env = {

From a3421205e6ab066a0b2794a17ade829eba268e6f Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:53 +0200
Subject: [PATCH 41/67] froide: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/fr/froide/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fr/froide/package.nix b/pkgs/by-name/fr/froide/package.nix
index bd26443f82e9..cc7bde39533a 100644
--- a/pkgs/by-name/fr/froide/package.nix
+++ b/pkgs/by-name/fr/froide/package.nix
@@ -121,8 +121,8 @@ python.pkgs.buildPythonApplication rec {
 
   pnpmDeps = fetchPnpmDeps {
     inherit pname version src;
-    fetcherVersion = 1;
-    hash = "sha256-g7YX2fVXGmb3Qq9NNCb294bk4/0khcIZVSskYbE8Mdw=";
+    fetcherVersion = 3;
+    hash = "sha256-NbfCVD+gmtoxuYUCumTKj9P72utK787VdlnuU4lMMGc=";
   };
 
   postBuild = ''

From 11d5039062272478e8bdce33a0425b2d8a88925f Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:54 +0200
Subject: [PATCH 42/67] goaway: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/go/goaway/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/go/goaway/package.nix b/pkgs/by-name/go/goaway/package.nix
index edbbd99ac19b..0c2cdd335551 100644
--- a/pkgs/by-name/go/goaway/package.nix
+++ b/pkgs/by-name/go/goaway/package.nix
@@ -28,8 +28,8 @@ let
     pnpmDeps = fetchPnpmDeps {
       inherit (finalAttrs) pname version src;
       sourceRoot = "${finalAttrs.src.name}/client";
-      fetcherVersion = 1;
-      hash = "sha256-cJLJMJNDPr73w5IiB1/zIloIdsUhqI+o/JqoKNwNweI=";
+      fetcherVersion = 3;
+      hash = "sha256-1YZf32lDwX3e9EC0Uixyo+yDczfU4/ZSlG+jFZwf+38=";
     };
 
     pnpmRoot = "client";

From fb7791755e14f21b6afcbf74624b5043d93b3dac Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:54 +0200
Subject: [PATCH 43/67] goofcord: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/go/goofcord/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/go/goofcord/package.nix b/pkgs/by-name/go/goofcord/package.nix
index bef68c681061..1e53cb891323 100644
--- a/pkgs/by-name/go/goofcord/package.nix
+++ b/pkgs/by-name/go/goofcord/package.nix
@@ -46,8 +46,8 @@ stdenv.mkDerivation (finalAttrs: {
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     inherit pnpm;
-    fetcherVersion = 1;
-    hash = "sha256-8dSyU9arSvISc2kDWbg/CP6L4sZjZi/Zv7TZN4ONOjQ=";
+    fetcherVersion = 3;
+    hash = "sha256-NKind57XDW7I5XNmjAu4cqkK5UVNAaKewpfOTNzF2BM=";
   };
 
   env = {

From 6936d7e34ae9eb5bc9defda273a6b7cf6322603e Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:54 +0200
Subject: [PATCH 44/67] homebox: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/ho/homebox/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ho/homebox/package.nix b/pkgs/by-name/ho/homebox/package.nix
index c5345c606f6f..fde6481fbd52 100644
--- a/pkgs/by-name/ho/homebox/package.nix
+++ b/pkgs/by-name/ho/homebox/package.nix
@@ -41,8 +41,8 @@ buildGoModule {
     inherit pname version;
     src = "${src}/frontend";
     pnpm = pnpm_9;
-    fetcherVersion = 1;
-    hash = "sha256-MG2IzSOjdGIjuKOtbDlI6UY+67+6/AAsnBscFvs2V4o=";
+    fetcherVersion = 3;
+    hash = "sha256-105HgNiC7QCsUn6mcYyRCqhOuMl8bZQlwoaOavi3dkk=";
   };
   pnpmRoot = "../frontend";
 

From 9bce06998f1e36803d62062525fd7f27cbc16a2e Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:55 +0200
Subject: [PATCH 45/67] it-tools: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/it/it-tools/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/it/it-tools/package.nix b/pkgs/by-name/it/it-tools/package.nix
index 17229c9aa69f..860c50322e23 100644
--- a/pkgs/by-name/it/it-tools/package.nix
+++ b/pkgs/by-name/it/it-tools/package.nix
@@ -31,8 +31,8 @@ stdenv.mkDerivation rec {
       src
       ;
     pnpm = pnpm_8;
-    fetcherVersion = 1;
-    hash = "sha256-m1eXBE5rakcq8NGnPC9clAAvNJQrN5RuSQ94zfgGZxw=";
+    fetcherVersion = 3;
+    hash = "sha256-dsjf2TyLAqPzR8OXJgNcoOdDZj2t+H+tLfRhfPsu1G8=";
   };
 
   buildPhase = ''

From 460bb88d1edf97b67b62e823f20ce8d37d9fcf61 Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:55 +0200
Subject: [PATCH 46/67] jellyseerr: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/je/jellyseerr/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/je/jellyseerr/package.nix b/pkgs/by-name/je/jellyseerr/package.nix
index 130986325b0b..6cb7b8b855e4 100644
--- a/pkgs/by-name/je/jellyseerr/package.nix
+++ b/pkgs/by-name/je/jellyseerr/package.nix
@@ -32,8 +32,8 @@ stdenv.mkDerivation (finalAttrs: {
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     inherit pnpm;
-    fetcherVersion = 1;
-    hash = "sha256-3df72m/ARgfelBLE6Bhi8+ThHytowVOBL2Ndk7auDgg=";
+    fetcherVersion = 3;
+    hash = "sha256-kCM6oNfBlVsjItzBDxSbeLu0+53I5XzxcerpCTEvZ0M=";
   };
 
   buildInputs = [ sqlite ];

From 327d4f64b4124933db19db27090c4e0a3994d92c Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:55 +0200
Subject: [PATCH 47/67] legcord: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/le/legcord/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/le/legcord/package.nix b/pkgs/by-name/le/legcord/package.nix
index 8c7e1d0abcc3..7fe9bea8c55e 100644
--- a/pkgs/by-name/le/legcord/package.nix
+++ b/pkgs/by-name/le/legcord/package.nix
@@ -47,8 +47,8 @@ stdenv.mkDerivation (finalAttrs: {
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
-    fetcherVersion = 1;
-    hash = "sha256-9sdN5tbCCe/euTo8zRkU0C3yQ8sAufPyN8a4GeJW/Us=";
+    fetcherVersion = 3;
+    hash = "sha256-MgUOOr188t+t/4sTXVpbr+xYT/1qf7/B0ZG0w+QkVxc=";
   };
 
   buildPhase = ''

From acd65916d10f1765dd5922da21ea4eca3a4d0f71 Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:55 +0200
Subject: [PATCH 48/67] memos: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/me/memos/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/me/memos/package.nix b/pkgs/by-name/me/memos/package.nix
index b8ac005f212b..805ca74c1352 100644
--- a/pkgs/by-name/me/memos/package.nix
+++ b/pkgs/by-name/me/memos/package.nix
@@ -24,8 +24,8 @@ let
     pnpmDeps = fetchPnpmDeps {
       inherit (finalAttrs) pname version src;
       sourceRoot = "${finalAttrs.src.name}/web";
-      fetcherVersion = 1;
-      hash = "sha256-k+pykzAiZ72cMMH+6qtnNxjaq4m4QyCQuWvQPbZSZho=";
+      fetcherVersion = 3;
+      hash = "sha256-xEOnxCgBD4uLypcZzCO+31S4r0sSfz8PpgEmZASeRZ4=";
     };
     pnpmRoot = "web";
     nativeBuildInputs = [

From e8a567de569cad1832cb7e94c9cd66f6f221293b Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Mon, 2 Mar 2026 13:13:22 +0200
Subject: [PATCH 49/67] metacubexd: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/me/metacubexd/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/me/metacubexd/package.nix b/pkgs/by-name/me/metacubexd/package.nix
index ab9161d97bd3..bce953d8a947 100644
--- a/pkgs/by-name/me/metacubexd/package.nix
+++ b/pkgs/by-name/me/metacubexd/package.nix
@@ -28,8 +28,8 @@ stdenv.mkDerivation (finalAttrs: {
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_10;
-    fetcherVersion = 1;
-    hash = "sha256-UVf9ti4Cu4IACQQ16g7R6pIArJUUVn2XOC7CjXMMS9I=";
+    fetcherVersion = 3;
+    hash = "sha256-i6MSmv6dS/bkpKvId6oroKPAtFYk5OUIvUWyfFa/NJU=";
   };
 
   buildPhase = ''

From 2c3573fc1f80410ae531d6f565a51c8b7ab502ba Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:56 +0200
Subject: [PATCH 50/67] modrinth-app-unwrapped: migrate from fetcherVersion = 1
 to fetcherVersion = 3

---
 pkgs/by-name/mo/modrinth-app-unwrapped/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/mo/modrinth-app-unwrapped/package.nix b/pkgs/by-name/mo/modrinth-app-unwrapped/package.nix
index 3bd95f8b1322..8e04d1281217 100644
--- a/pkgs/by-name/mo/modrinth-app-unwrapped/package.nix
+++ b/pkgs/by-name/mo/modrinth-app-unwrapped/package.nix
@@ -76,8 +76,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_9;
-    fetcherVersion = 1;
-    hash = "sha256-+/PGCoHAC9Hsl2YEdjvUBzDJi9iBf+ZxT/6yjDE3yBo=";
+    fetcherVersion = 3;
+    hash = "sha256-1ZBIMqG6YPZ8++jG6qzhHEgFx1Y6JR8BBLB3JfuNyNU=";
   };
 
   nativeBuildInputs = [

From abc023161fbd5a446dc36658bb1ae0c9f5b4513f Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:56 +0200
Subject: [PATCH 51/67] moonfire-nvr: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/mo/moonfire-nvr/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/mo/moonfire-nvr/package.nix b/pkgs/by-name/mo/moonfire-nvr/package.nix
index dde5333a8592..42a9e5e1db0e 100644
--- a/pkgs/by-name/mo/moonfire-nvr/package.nix
+++ b/pkgs/by-name/mo/moonfire-nvr/package.nix
@@ -36,8 +36,8 @@ let
       inherit (finalAttrs) pname version src;
       pnpm = pnpm_9;
       sourceRoot = "${finalAttrs.src.name}/ui";
-      fetcherVersion = 1;
-      hash = "sha256-7fMhUFlV5lz+A9VG8IdWoc49C2CTdLYQlEgBSBqJvtw=";
+      fetcherVersion = 3;
+      hash = "sha256-1bkuou8jfWqdev4ZlpqvC4BRrFj//LK6ImVvSeMUEuM=";
     };
     installPhase = ''
       runHook preInstall

From 1ceef3aaede98d879f7bc40b540b6bff882e3ba0 Mon Sep 17 00:00:00 2001
From: Aliaksandr <grubian2@gmail.com>
Date: Thu, 26 Feb 2026 03:42:57 +0200
Subject: [PATCH 52/67] opencloud: migrate from fetcherVersion = 1 to
 fetcherVersion = 3

---
 pkgs/by-name/op/opencloud/web.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/op/opencloud/web.nix b/pkgs/by-name/op/opencloud/web.nix
index 586971f2073b..4cefe40349a0 100644
--- a/pkgs/by-name/op/opencloud/web.nix
+++ b/pkgs/by-name/op/opencloud/web.nix
@@ -22,8 +22,8 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_10;
-    fetcherVersion = 1;
-    hash = "sha256-v2XOBO1/BWaJslj2Z2k9RanSS2CsW2Yx72o/lX7Eo2I=";
+    fetcherVersion = 3;
+    hash = "sha256-tPU16r0hc0DYwGnvnukivUz3a+Bz6urUZPtokN/lbuA=";
   };
 
   nativeBuildInputs = [

From 86ccf05e1b316551f08b9c9a02ca8c3f361a31aa Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Mon, 2 Mar 2026 03:22:28 -0800
Subject: [PATCH 53/67] librecad: move icon to spec-compliant location

---
 pkgs/by-name/li/librecad/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/li/librecad/package.nix b/pkgs/by-name/li/librecad/package.nix
index 8ca3008eddf8..eb39505995df 100644
--- a/pkgs/by-name/li/librecad/package.nix
+++ b/pkgs/by-name/li/librecad/package.nix
@@ -69,7 +69,7 @@ stdenv.mkDerivation (finalAttrs: {
     ${lib.optionalString (!stdenv.hostPlatform.isDarwin) ''
       install -Dm555 -t $out/bin                unix/{librecad,ttf2lff}
       install -Dm444 -t $out/share/applications desktop/librecad.desktop
-      install -Dm644 -t $out/share/pixmaps      librecad/res/main/librecad.png
+      install -Dm644 -t $out/share/icons/hicolor/128x128/apps librecad/res/main/librecad.png
       install -Dm444 desktop/librecad.sharedmimeinfo $out/share/mime/packages/librecad.xml
       install -Dm444 desktop/graphics_icons_and_splash/Icon\ LibreCAD/Icon_Librecad.svg \
         $out/share/icons/hicolor/scalable/apps/librecad.svg

From 626ffe902ba09abf3fbcf8edb3b0c4ec0828133a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 11:55:38 +0000
Subject: [PATCH 54/67] proton-pass-cli: 1.5.1 -> 1.5.2

---
 pkgs/by-name/pr/proton-pass-cli/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/pr/proton-pass-cli/package.nix b/pkgs/by-name/pr/proton-pass-cli/package.nix
index 69c4c26bf659..4e7459037e56 100644
--- a/pkgs/by-name/pr/proton-pass-cli/package.nix
+++ b/pkgs/by-name/pr/proton-pass-cli/package.nix
@@ -14,7 +14,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "proton-pass-cli";
-  version = "1.5.1";
+  version = "1.5.2";
 
   src = finalAttrs.passthru.sources.${stdenv.hostPlatform.system};
 
@@ -47,19 +47,19 @@ stdenv.mkDerivation (finalAttrs: {
     sources = {
       "aarch64-darwin" = fetchurl {
         url = "https://proton.me/download/pass-cli/${finalAttrs.version}/pass-cli-macos-aarch64";
-        hash = "sha256-9EYufGQtnu68NjrBZ4Sb/MUB546rr6MKPrDGqkIQSUg=";
+        hash = "sha256-8k6stQFVUC8vmytYV/zUJRsJxVRnm2eFeql7HTfCsuc=";
       };
       "aarch64-linux" = fetchurl {
         url = "https://proton.me/download/pass-cli/${finalAttrs.version}/pass-cli-linux-aarch64";
-        hash = "sha256-TQiIzN5Y93hzQKdbjw0sq4ayi+KQc1dO7B9WbxXLCy0=";
+        hash = "sha256-rIji6/FaR5nFCECMDPgd2RgDE/5FtnlBVn69MMT7rbI=";
       };
       "x86_64-darwin" = fetchurl {
         url = "https://proton.me/download/pass-cli/${finalAttrs.version}/pass-cli-macos-x86_64";
-        hash = "sha256-i3EOR6R6wRsJD+WXDfHE6JT+3vppSYIMkOh+9VauZi0=";
+        hash = "sha256-z7LAfw/J2P7NSyUIr0uw8g7pylSkF0EjUX1MFzuJmIk=";
       };
       "x86_64-linux" = fetchurl {
         url = "https://proton.me/download/pass-cli/${finalAttrs.version}/pass-cli-linux-x86_64";
-        hash = "sha256-8pndh8MzBtrOYg1qXZOaV2HibA6yyryP2/NzLgcHrMA=";
+        hash = "sha256-tuAqx5zuJ3dnAj3aIbbOonbVb9sL+F2W6vAi/2In3rw=";
       };
     };
     updateScript = writeShellScript "update-proton-pass-cli" ''

From 5ba1e251c913e1e7101ac246b53a6feb3787bf24 Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Wed, 18 Feb 2026 22:39:50 +0100
Subject: [PATCH 55/67] python3Packages.pyaes: raise on default IV

The pyaes library when no IV passed constructs an all zero default IV,
which is not safe in the implemented AES modes.
---
 .../python-modules/pyaes/default-iv.patch     | 51 +++++++++++++++++++
 .../python-modules/pyaes/default.nix          |  6 +++
 2 files changed, 57 insertions(+)
 create mode 100644 pkgs/development/python-modules/pyaes/default-iv.patch

diff --git a/pkgs/development/python-modules/pyaes/default-iv.patch b/pkgs/development/python-modules/pyaes/default-iv.patch
new file mode 100644
index 000000000000..404df0bc88f5
--- /dev/null
+++ b/pkgs/development/python-modules/pyaes/default-iv.patch
@@ -0,0 +1,51 @@
+From 034c7eea63a155582109233d2fc1de8e14121908 Mon Sep 17 00:00:00 2001
+From: Martin Weinelt <hexa@darmstadt.ccc.de>
+Date: Mon, 2 Mar 2026 12:55:44 +0100
+Subject: [PATCH] Raise on default IV
+
+This disables the static default IV for CBC, CFB and OFB by raising when
+not IV gets passed. We make sure not to break the API contract this way,
+so that existing consumers who rely on the default IV get a useful
+exception message instead of an API break, which could be done in a
+future version.
+
+In CBC mode an IV cannot be predictable or it breaks IND-CPA, this is
+also described as CWE-329.
+
+In CFB and OFB mode an IV still requires to be unique, which does not
+really hold when initializing it statically.
+---
+ pyaes/aes.py | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/pyaes/aes.py b/pyaes/aes.py
+index c6e8bc0..fd25547 100644
+--- a/pyaes/aes.py
++++ b/pyaes/aes.py
+@@ -376,7 +376,7 @@ class AESModeOfOperationCBC(AESBlockModeOfOperation):
+ 
+     def __init__(self, key, iv = None):
+         if iv is None:
+-            self._last_cipherblock = [ 0 ] * 16
++            raise ValueError("Missing IV parameter. This is a security problem, see https://github.com/ricmoo/pyaes/issues/56.")
+         elif len(iv) != 16:
+             raise ValueError('initialization vector must be 16 bytes')
+         else:
+@@ -423,7 +423,7 @@ def __init__(self, key, iv, segment_size = 1):
+         if segment_size == 0: segment_size = 1
+ 
+         if iv is None:
+-            self._shift_register = [ 0 ] * 16
++            raise ValueError("Missing IV parameter. This is a security problem, see https://github.com/ricmoo/pyaes/issues/56.")
+         elif len(iv) != 16:
+             raise ValueError('initialization vector must be 16 bytes')
+         else:
+@@ -495,7 +495,7 @@ class AESModeOfOperationOFB(AESStreamModeOfOperation):
+ 
+     def __init__(self, key, iv = None):
+         if iv is None:
+-            self._last_precipherblock = [ 0 ] * 16
++            raise ValueError("Missing IV parameter. This is a security problem, see https://github.com/ricmoo/pyaes/issues/56.")
+         elif len(iv) != 16:
+             raise ValueError('initialization vector must be 16 bytes')
+         else:
diff --git a/pkgs/development/python-modules/pyaes/default.nix b/pkgs/development/python-modules/pyaes/default.nix
index e38123f54e24..58cd4f155081 100644
--- a/pkgs/development/python-modules/pyaes/default.nix
+++ b/pkgs/development/python-modules/pyaes/default.nix
@@ -14,6 +14,12 @@ buildPythonPackage rec {
     sha256 = "02c1b1405c38d3c370b085fb952dd8bea3fadcee6411ad99f312cc129c536d8f";
   };
 
+  patches = [
+    # https://github.com/ricmoo/pyaes/issues/56
+    # https://blog.trailofbits.com/2026/02/18/carelessness-versus-craftsmanship-in-cryptography/
+    ./default-iv.patch
+  ];
+
   meta = {
     description = "Pure-Python AES";
     license = lib.licenses.mit;

From 93f4025a832cabfb1f8f0c8b91f724859e633914 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 12:39:45 +0000
Subject: [PATCH 56/67] kdePackages.ktextaddons: 1.9.1 -> 2.0.0

---
 pkgs/kde/misc/ktextaddons/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/kde/misc/ktextaddons/default.nix b/pkgs/kde/misc/ktextaddons/default.nix
index 39e467fad836..9e95cb4f3ad5 100644
--- a/pkgs/kde/misc/ktextaddons/default.nix
+++ b/pkgs/kde/misc/ktextaddons/default.nix
@@ -8,11 +8,11 @@
 }:
 mkKdeDerivation rec {
   pname = "ktextaddons";
-  version = "1.9.1";
+  version = "2.0.0";
 
   src = fetchurl {
     url = "mirror://kde/stable/ktextaddons/ktextaddons-${version}.tar.xz";
-    hash = "sha256-Nm1alMdAVILDptJhNHwbmV3nOghwWZlrEX1hK/wSkcI=";
+    hash = "sha256-AQHazKYL75LSsEU0LIgOFBnz3WsemKH4UKFPR7P53nk=";
   };
 
   extraBuildInputs = [

From 7bc4661b0abc55adb84b0559316c24c6cfa65300 Mon Sep 17 00:00:00 2001
From: Nikolay Korotkiy <sikmir@disroot.org>
Date: Mon, 2 Mar 2026 18:11:58 +0400
Subject: [PATCH 57/67] xournalpp: modernize

---
 pkgs/by-name/xo/xournalpp/package.nix | 45 +++++++++++++--------------
 1 file changed, 21 insertions(+), 24 deletions(-)

diff --git a/pkgs/by-name/xo/xournalpp/package.nix b/pkgs/by-name/xo/xournalpp/package.nix
index 56657672070d..37760fc9dff3 100644
--- a/pkgs/by-name/xo/xournalpp/package.nix
+++ b/pkgs/by-name/xo/xournalpp/package.nix
@@ -31,14 +31,14 @@
   nix-update-script,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "xournalpp";
   version = "1.3.3";
 
   src = fetchFromGitHub {
     owner = "xournalpp";
     repo = "xournalpp";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-AHW3LfGAXoP9F3EJiRgVBQ9NuYdVJrh0cQKSEiG48rc=";
   };
 
@@ -50,26 +50,23 @@ stdenv.mkDerivation rec {
     help2man
   ];
 
-  buildInputs =
-    lib.optionals stdenv.hostPlatform.isLinux [
-      alsa-lib
-    ]
-    ++ [
-      glib
-      gsettings-desktop-schemas
-      gtk3
-      gtksourceview4
-      librsvg
-      libsndfile
-      libxml2
-      libzip
-      pcre
-      poppler
-      portaudio
-      qpdf
-      zlib
-    ]
-    ++ lib.optional withLua lua5_3;
+  buildInputs = [
+    glib
+    gsettings-desktop-schemas
+    gtk3
+    gtksourceview4
+    librsvg
+    libsndfile
+    libxml2
+    libzip
+    pcre
+    poppler
+    portaudio
+    qpdf
+    zlib
+  ]
+  ++ lib.optional stdenv.hostPlatform.isLinux alsa-lib
+  ++ lib.optional withLua lua5_3;
 
   buildFlags = [ "translations" ];
 
@@ -84,7 +81,7 @@ stdenv.mkDerivation rec {
   meta = {
     description = "Xournal++ is a handwriting Notetaking software with PDF annotation support";
     homepage = "https://xournalpp.github.io/";
-    changelog = "https://github.com/xournalpp/xournalpp/blob/v${version}/CHANGELOG.md";
+    changelog = "https://github.com/xournalpp/xournalpp/blob/v${finalAttrs.version}/CHANGELOG.md";
     license = lib.licenses.gpl2Plus;
     maintainers = with lib.maintainers; [
       iedame
@@ -93,4 +90,4 @@ stdenv.mkDerivation rec {
     platforms = lib.platforms.unix;
     mainProgram = "xournalpp";
   };
-}
+})

From 44eaa96c64bc3f4370bd9b927fb62b34920e9541 Mon Sep 17 00:00:00 2001
From: isabel <isabel@isabelroses.com>
Date: Mon, 2 Mar 2026 13:21:32 +0000
Subject: [PATCH 58/67] wakapi: 2.17.1 -> 2.17.2

Diff: https://github.com/muety/wakapi/compare/2.17.1...2.17.2

Changelog: https://github.com/muety/wakapi/releases/tag/2.17.2
---
 pkgs/by-name/wa/wakapi/package.nix | 21 ++++++++++++++++-----
 1 file changed, 16 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/wa/wakapi/package.nix b/pkgs/by-name/wa/wakapi/package.nix
index 985240c16377..6ebf57d2f7dc 100644
--- a/pkgs/by-name/wa/wakapi/package.nix
+++ b/pkgs/by-name/wa/wakapi/package.nix
@@ -6,7 +6,7 @@
   nix-update-script,
 }:
 let
-  version = "2.17.1";
+  version = "2.17.2";
 in
 buildGoLatestModule {
   pname = "wakapi";
@@ -16,10 +16,10 @@ buildGoLatestModule {
     owner = "muety";
     repo = "wakapi";
     tag = version;
-    hash = "sha256-/7jYfLs9IcAWYVWISdDeXWV+PfHGFjkxcFkpqH2lxS8=";
+    hash = "sha256-UK6m8d+Yf5JQgDV/TdPpQ9TL2Y4aG4tR/WOP11IFzfg=";
   };
 
-  vendorHash = "sha256-AA9gIIUsoJG4RnDZ1fAJu+iqeXXbRbprBVxuVvR1tzo=";
+  vendorHash = "sha256-oXHTb7DLwWa/qOMSn3EhMTnDeUm1bIVGvuJzcxkiPF0=";
 
   # Not a go module required by the project, contains development utilities
   excludedPackages = [ "scripts" ];
@@ -32,8 +32,19 @@ buildGoLatestModule {
     "-w"
   ];
 
-  # Skip tests that require network access
-  checkFlags = [ "-skip=TestLoginHandlerTestSuite" ];
+  # <https://github.com/muety/wakapi/blob/8c9442b348e4280b388e1073d805058a951ae78e/.github/workflows/release.yml#L60>
+  env.GOEXPERIMENT = "greenteagc,jsonv2";
+
+  checkFlags =
+    let
+      skippedTests = [
+        # Skip tests that require network access
+        "TestLoginHandlerTestSuite"
+        "Test_Load_OidcProviders"
+        "TestUser_MinDataAge"
+      ];
+    in
+    [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];
 
   passthru = {
     nixos = nixosTests.wakapi;

From 939e1b8f65354be2099907d05968ec19104ad441 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Sun, 22 Feb 2026 15:13:48 +0200
Subject: [PATCH 59/67] matrix-appservice-discord: rewrite using
 yarn{Config,Build}Hooks

Addresses #324246 .
---
 .../ma/matrix-appservice-discord/package.json |  84 ----------
 .../ma/matrix-appservice-discord/package.nix  | 145 ++++++++++--------
 .../ma/matrix-appservice-discord/pin.json     |   5 -
 .../ma/matrix-appservice-discord/update.sh    |  42 -----
 4 files changed, 78 insertions(+), 198 deletions(-)
 delete mode 100644 pkgs/by-name/ma/matrix-appservice-discord/package.json
 delete mode 100644 pkgs/by-name/ma/matrix-appservice-discord/pin.json
 delete mode 100755 pkgs/by-name/ma/matrix-appservice-discord/update.sh

diff --git a/pkgs/by-name/ma/matrix-appservice-discord/package.json b/pkgs/by-name/ma/matrix-appservice-discord/package.json
deleted file mode 100644
index f2ea8a3d924d..000000000000
--- a/pkgs/by-name/ma/matrix-appservice-discord/package.json
+++ /dev/null
@@ -1,84 +0,0 @@
-{
-  "name": "matrix-appservice-discord",
-  "version": "4.0.0",
-  "description": "A bridge between Matrix and Discord",
-  "main": "discordas.js",
-  "engines": {
-    "npm": "please-use-yarn",
-    "node": ">=18 <=20"
-  },
-  "scripts": {
-    "test": "mocha -r ts-node/register test/config.ts test/test_*.ts test/**/test_*.ts",
-    "lint": "eslint -c .eslintrc --max-warnings 200 src/**/*.ts test/**/*.ts",
-    "coverage": "tsc && nyc mocha build/test/config.js build/test",
-    "build": "tsc",
-    "postinstall": "yarn build",
-    "start": "node ./build/src/discordas.js",
-    "debug": "node --inspect ./build/src/discordas.js",
-    "addbot": "node ./build/tools/addbot.js",
-    "adminme": "node ./build/tools/adminme.js",
-    "usertool": "node ./build/tools/userClientTools.js",
-    "directoryfix": "node ./build/tools/addRoomsToDirectory.js",
-    "ghostfix": "node ./build/tools/ghostfix.js",
-    "chanfix": "node ./build/tools/chanfix.js"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Half-Shot/matrix-appservice-discord.git"
-  },
-  "keywords": [
-    "matrix",
-    "discord",
-    "bridge",
-    "application-service",
-    "as"
-  ],
-  "author": "Half-Shot",
-  "license": "Apache-2.0",
-  "bugs": {
-    "url": "https://github.com/Half-Shot/matrix-appservice-discord/issues"
-  },
-  "homepage": "https://github.com/Half-Shot/matrix-appservice-discord#readme",
-  "dependencies": {
-    "@mx-puppet/better-discord.js": "^12.5.1",
-    "@mx-puppet/matrix-discord-parser": "^0.1.10",
-    "better-sqlite3": "^8.6.0",
-    "command-line-args": "^5.1.1",
-    "command-line-usage": "^6.1.0",
-    "escape-html": "^1.0.3",
-    "escape-string-regexp": "^4.0.0",
-    "js-yaml": "^3.14.0",
-    "marked": "^1.2.2",
-    "matrix-appservice-bridge": "^9.0.1",
-    "mime": "^2.4.6",
-    "p-queue": "^6.4.0",
-    "pg-promise": "^10.5.6",
-    "prom-client": "^12.0.0",
-    "uuid": "^8.3.1",
-    "winston": "^3.2.1",
-    "winston-daily-rotate-file": "^4.5.0"
-  },
-  "devDependencies": {
-    "@istanbuljs/nyc-config-typescript": "^1.0.1",
-    "@types/better-sqlite3": "^5.4.1",
-    "@types/chai": "^4.2.11",
-    "@types/command-line-args": "^5.0.0",
-    "@types/express": "^4.17.9",
-    "@types/js-yaml": "^3.12.4",
-    "@types/marked": "^1.1.0",
-    "@types/mime": "^2.0.2",
-    "@types/mocha": "^7.0.2",
-    "@types/node": "^14",
-    "@typescript-eslint/eslint-plugin": "^5.4.0",
-    "@typescript-eslint/parser": "^5.4.0",
-    "chai": "^4.2.0",
-    "eslint": "^7.4.0",
-    "mocha": "^8.0.1",
-    "nyc": "^15.1.0",
-    "proxyquire": "^1.7.11",
-    "source-map-support": "^0.5.19",
-    "ts-node": "^8.10.2",
-    "typescript": "^4.2.3",
-    "why-is-node-running": "^2.2.0"
-  }
-}
diff --git a/pkgs/by-name/ma/matrix-appservice-discord/package.nix b/pkgs/by-name/ma/matrix-appservice-discord/package.nix
index bd8f6d9c5db4..a397c6226bde 100644
--- a/pkgs/by-name/ma/matrix-appservice-discord/package.nix
+++ b/pkgs/by-name/ma/matrix-appservice-discord/package.nix
@@ -1,74 +1,108 @@
 {
   lib,
-  mkYarnPackage,
+  stdenv,
   fetchYarnDeps,
   fetchFromGitHub,
-  srcOnly,
-  makeWrapper,
-  removeReferencesTo,
+
+  # native
+  yarn,
+  yarnConfigHook,
+  node-gyp,
   python3,
+  srcOnly,
+  removeReferencesTo,
+  yarnBuildHook,
+  makeWrapper,
+
+  # buildInputs
   nodejs_20,
   matrix-sdk-crypto-nodejs,
+  napi-rs-cli,
 }:
 
 let
-  nodejs = nodejs_20; # only supports nodejs v18.X - v20.X
-  pin = lib.importJSON ./pin.json;
-  nodeSources = srcOnly nodejs;
-
+  yarn' = yarn.override {
+    nodejs = nodejs_20;
+  };
+  yarnConfigHook' = yarnConfigHook.override {
+    nodejs = nodejs_20;
+    yarn = yarn';
+  };
+  yarnBuildHook' = yarnBuildHook.override {
+    nodejs = nodejs_20;
+    yarn = yarn';
+  };
+  matrix-sdk-crypto-nodejs' = matrix-sdk-crypto-nodejs.override {
+    nodejs = nodejs_20;
+    napi-rs-cli = napi-rs-cli.override {
+      nodejs = nodejs_20;
+    };
+  };
+  nodeSources = srcOnly nodejs_20;
 in
-mkYarnPackage rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "matrix-appservice-discord";
-  inherit (pin) version;
-  inherit nodejs;
+  version = "4.0.0";
 
   src = fetchFromGitHub {
     owner = "matrix-org";
     repo = "matrix-appservice-discord";
-    rev = "v${version}";
-    hash = pin.srcHash;
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-UyRMMbnX4aJVv8oQfgn/rkZT1cRATtcgFj4fXszDKqo=";
   };
 
-  packageJSON = ./package.json;
-  offlineCache = fetchYarnDeps {
-    yarnLock = "${src}/yarn.lock";
-    sha256 = pin.yarnSha256;
+  yarnOfflineCache = fetchYarnDeps {
+    yarnLock = "${finalAttrs.src}/yarn.lock";
+    hash = "sha256-s8ictJX65mSU2oxaIuCswfb2flo2RN9a1JZevacN/Ic=";
   };
 
-  pkgConfig = {
-    "@matrix-org/matrix-sdk-crypto-nodejs" = {
-      postInstall = ''
-        # replace with the built package
-        cd ..
-        rm -r matrix-sdk-crypto-nodejs
-        ln -s ${matrix-sdk-crypto-nodejs}/lib/node_modules/@matrix-org/* ./
-      '';
-    };
+  nativeBuildInputs = [
+    yarnConfigHook'
+    yarnBuildHook'
+    nodejs_20
+    node-gyp
+    python3
+    removeReferencesTo
+    makeWrapper
+  ];
 
-    better-sqlite3 = {
-      nativeBuildInputs = [ python3 ];
-      postInstall = ''
-        # build native sqlite bindings
-        npm run build-release --offline --nodedir="${nodeSources}"
-        find build -type f -exec \
-          ${removeReferencesTo}/bin/remove-references-to \
-          -t "${nodeSources}" {} \;
-      '';
-    };
-  };
+  preBuild = ''
+    cp -r ${matrix-sdk-crypto-nodejs'}/lib/node_modules/@matrix-org ./node_modules
+    cd ./node_modules/better-sqlite3
+    npm run build-release --offline --nodedir="${nodeSources}"
+    find build -type f -exec remove-references-to -t "${nodeSources}" {} \;
+    cd ../../
+  '';
 
-  nativeBuildInputs = [ makeWrapper ];
+  # npmHooks.npmInstallHook and yarnInstallHook don't work for this package
+  # because:
+  #
+  # - There is no `bin` key in
+  #   package.json, which instructs it to create a binary file for the package.
+  # - The build/ directory, containing the compiled `.js` files from some
+  #   doesn't get picked up by `yarn pack`.
+  installPhase = ''
+    runHook preInstall
 
-  buildPhase = ''
-    runHook preBuild
+    mkdir -p $out/lib/node_modules
 
-    # compile TypeScript sources
-    yarn --offline build
+    mv build $out/lib/node_modules/matrix-appservice-discord
+    cp -r node_modules $out/lib/node_modules/matrix-appservice-discord
+    makeWrapper '${nodejs_20}/bin/node' "$out/bin/matrix-appservice-discord" \
+      --add-flags "$out/lib/node_modules/matrix-appservice-discord/src/discordas.js"
 
-    runHook postBuild
+    # admin tools wrappers
+    for toolPath in $out/lib/node_modules/matrix-appservice-discord/tools/*; do
+      makeWrapper '${nodejs_20}/bin/node' \
+        "$out/bin/matrix-appservice-discord-$(basename $toolPath .js)" \
+        --add-flags "$toolPath"
+    done
+
+    runHook postInstall
   '';
 
   doCheck = true;
+
   checkPhase = ''
     runHook preCheck
 
@@ -78,29 +112,6 @@ mkYarnPackage rec {
     runHook postCheck
   '';
 
-  postInstall = ''
-    OUT_JS_DIR="$out/${passthru.nodeAppDir}/build"
-
-    # server wrapper
-    makeWrapper '${nodejs}/bin/node' "$out/bin/${pname}" \
-      --add-flags "$OUT_JS_DIR/src/discordas.js"
-
-    # admin tools wrappers
-    for toolPath in $OUT_JS_DIR/tools/*; do
-      makeWrapper '${nodejs}/bin/node' \
-        "$out/bin/${pname}-$(basename $toolPath .js)" \
-        --add-flags "$toolPath"
-    done
-  '';
-
-  # don't generate the dist tarball
-  doDist = false;
-
-  passthru = {
-    nodeAppDir = "libexec/${pname}/deps/${pname}";
-    updateScript = ./update.sh;
-  };
-
   meta = {
     description = "Bridge between Matrix and Discord";
     homepage = "https://github.com/matrix-org/matrix-appservice-discord";
@@ -109,4 +120,4 @@ mkYarnPackage rec {
     platforms = lib.platforms.linux;
     mainProgram = "matrix-appservice-discord";
   };
-}
+})
diff --git a/pkgs/by-name/ma/matrix-appservice-discord/pin.json b/pkgs/by-name/ma/matrix-appservice-discord/pin.json
deleted file mode 100644
index 7dc4bdcff293..000000000000
--- a/pkgs/by-name/ma/matrix-appservice-discord/pin.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "version": "4.0.0",
-  "srcHash": "sha256-UyRMMbnX4aJVv8oQfgn/rkZT1cRATtcgFj4fXszDKqo=",
-  "yarnSha256": "11zw1nkvsplnsiddyi1nb9zgdxn1mkh24nlcvaa69rpsjns9rj5k"
-}
diff --git a/pkgs/by-name/ma/matrix-appservice-discord/update.sh b/pkgs/by-name/ma/matrix-appservice-discord/update.sh
deleted file mode 100755
index 6e6359dfa373..000000000000
--- a/pkgs/by-name/ma/matrix-appservice-discord/update.sh
+++ /dev/null
@@ -1,42 +0,0 @@
-#!/usr/bin/env nix-shell
-#!nix-shell -I nixpkgs=../../../ -i bash -p nix curl jq prefetch-yarn-deps nix-prefetch-github
-
-ORG="matrix-org"
-PROJ="matrix-appservice-discord"
-
-if [ "$#" -gt 1 ] || [[ "$1" == -* ]]; then
-  echo "Regenerates packaging data for $PROJ."
-  echo "Usage: $0 [git release tag]"
-  exit 1
-fi
-
-tag="$1"
-
-set -euo pipefail
-
-if [ -z "$tag" ]; then
-  tag="$(
-    curl "https://api.github.com/repos/$ORG/$PROJ/releases?per_page=1" |
-    jq -r '.[0].tag_name'
-  )"
-fi
-
-src="https://raw.githubusercontent.com/$ORG/$PROJ/$tag"
-src_hash=$(nix-prefetch-github $ORG $PROJ --rev ${tag} | jq -r .hash)
-
-tmpdir=$(mktemp -d)
-trap 'rm -rf "$tmpdir"' EXIT
-
-pushd $tmpdir
-curl -O "$src/yarn.lock"
-yarn_sha256=$(prefetch-yarn-deps yarn.lock)
-popd
-
-curl -O "$src/package.json"
-cat > pin.json << EOF
-{
-  "version": "$(echo $tag | grep -P '(\d|\.)+' -o)",
-  "srcHash": "$src_hash",
-  "yarnSha256": "$yarn_sha256"
-}
-EOF

From f8682ca4eb36472c46f33e6d8338c4e116919e92 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 15:18:03 +0000
Subject: [PATCH 60/67] avdl: 0.1.6+1.12.1 -> 0.1.7+1.12.1

---
 pkgs/by-name/av/avdl/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/av/avdl/package.nix b/pkgs/by-name/av/avdl/package.nix
index 5a3a757463ac..b0462db08ba7 100644
--- a/pkgs/by-name/av/avdl/package.nix
+++ b/pkgs/by-name/av/avdl/package.nix
@@ -6,17 +6,17 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "avdl";
-  version = "0.1.6+1.12.1";
+  version = "0.1.7+1.12.1";
 
   src = fetchFromGitHub {
     owner = "jonhoo";
     repo = "avdl";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-ReTsyIZ+w7wWhREmkZT6tNsEFkpF2KVJsFAhCfL5CZQ=";
+    hash = "sha256-hqZt+3Bewr4+0Uh4u0pXErcLzlmL1AY4Gq41WNnQNN8=";
     fetchSubmodules = true;
   };
 
-  cargoHash = "sha256-WiAPUD5AAsYSxJ5tn8/6ZjMf3hEOtTXzOMIVXd6f9l0=";
+  cargoHash = "sha256-B0TAJHTrpDT6C57FAc9wqgyA3kkI77P2RzrInQluR2M=";
 
   meta = {
     description = "Rust port of avro-tools' IDL tooling";

From 6ec1a9d74701242d246874ec6403f00ea2b37d5a Mon Sep 17 00:00:00 2001
From: Gliczy <129636582+Gliczy@users.noreply.github.com>
Date: Mon, 2 Mar 2026 14:40:30 +0100
Subject: [PATCH 61/67] signal-desktop-bin: drop

---
 .../si/signal-desktop-bin/copy-noto-emoji.py  |  70 ----
 .../by-name/si/signal-desktop-bin/generic.nix | 316 ------------------
 .../by-name/si/signal-desktop-bin/package.nix |  11 -
 .../si/signal-desktop-bin/pyproject.toml      |  15 -
 .../signal-desktop-aarch64.nix                |  15 -
 .../signal-desktop-darwin.nix                 |  61 ----
 .../si/signal-desktop-bin/signal-desktop.nix  |  12 -
 pkgs/by-name/si/signal-desktop-bin/update.sh  |  35 --
 pkgs/top-level/aliases.nix                    |   1 +
 9 files changed, 1 insertion(+), 535 deletions(-)
 delete mode 100644 pkgs/by-name/si/signal-desktop-bin/copy-noto-emoji.py
 delete mode 100644 pkgs/by-name/si/signal-desktop-bin/generic.nix
 delete mode 100644 pkgs/by-name/si/signal-desktop-bin/package.nix
 delete mode 100644 pkgs/by-name/si/signal-desktop-bin/pyproject.toml
 delete mode 100644 pkgs/by-name/si/signal-desktop-bin/signal-desktop-aarch64.nix
 delete mode 100644 pkgs/by-name/si/signal-desktop-bin/signal-desktop-darwin.nix
 delete mode 100644 pkgs/by-name/si/signal-desktop-bin/signal-desktop.nix
 delete mode 100755 pkgs/by-name/si/signal-desktop-bin/update.sh

diff --git a/pkgs/by-name/si/signal-desktop-bin/copy-noto-emoji.py b/pkgs/by-name/si/signal-desktop-bin/copy-noto-emoji.py
deleted file mode 100644
index c873c0b0db4d..000000000000
--- a/pkgs/by-name/si/signal-desktop-bin/copy-noto-emoji.py
+++ /dev/null
@@ -1,70 +0,0 @@
-"""Copy Noto Color Emoji PNGs into an extracted Signal ASAR archive.
-
-Signal loads small Apple emoji PNGs directly from
-`node_modules/emoji-datasource-apple/img/apple/64`, and downloads and
-caches large Apple emoji WebP files in `.proto` bundles on the fly. The
-latter are not a copyright concern for the Nixpkgs cache, but would
-result in inconsistent presentation between small and large emoji.
-
-We skip the complexity and buy some additional privacy by replacing the
-`emoji://jumbo?emoji=` URL prefix with a `file://` path to the copied
-PNGs inside the ASAR archive, and linking the `node_modules` PNG paths
-directly to them.
-"""
-
-import json
-import shutil
-import sys
-from pathlib import Path
-
-
-def emoji_to_noto_name(emoji: str) -> str:
-    r"""Return the Noto emoji name of an emoji.
-
-    Noto emoji names are underscore‐separated Unicode scalar values,
-    represented in lowercase big‐endian hex padded to at least four
-    digits. Any U+FE0F variant selectors are omitted.
-
-    >>> emoji_to_noto_name("😶‍🌫️")
-    '1f636_200d_1f32b'
-    >>> emoji_to_noto_name("\U0001f636\u200d\U0001f32b\ufe0f")
-    '1f636_200d_1f32b'
-    """
-    return "_".join(
-        f"{ord(scalar_value):04x}"
-        for scalar_value in emoji
-        if scalar_value != "\ufe0f"
-    )
-
-
-def _main() -> None:
-    noto_png_path, asar_root = (Path(arg) for arg in sys.argv[1:])
-    asar_root = asar_root.absolute()
-
-    out_path = asar_root / "images" / "nixpkgs-emoji"
-    out_path.mkdir(parents=True)
-
-    jumbomoji_json_path = asar_root / "build" / "jumbomoji.json"
-    with jumbomoji_json_path.open() as jumbomoji_json_file:
-        jumbomoji_packs = json.load(jumbomoji_json_file)
-
-    for signal_emoji_names in jumbomoji_packs.values():
-        for signal_emoji_name in signal_emoji_names:
-
-            try:
-                shutil.copy(
-                    noto_png_path / f"emoji_u{emoji_to_noto_name(signal_emoji_name)}.png",
-                    out_path / signal_emoji_name,
-                )
-            except FileNotFoundError:
-                print(
-                    f"Missing Noto emoji: {signal_emoji_name}",
-                    file=sys.stderr,
-                )
-                continue
-
-    print(out_path.relative_to(asar_root))
-
-
-if __name__ == "__main__":
-    _main()
diff --git a/pkgs/by-name/si/signal-desktop-bin/generic.nix b/pkgs/by-name/si/signal-desktop-bin/generic.nix
deleted file mode 100644
index d020f58a6e34..000000000000
--- a/pkgs/by-name/si/signal-desktop-bin/generic.nix
+++ /dev/null
@@ -1,316 +0,0 @@
-{
-  stdenv,
-  lib,
-  fetchurl,
-  autoPatchelfHook,
-  noto-fonts-color-emoji,
-  dpkg,
-  libarchive,
-  asar,
-  rsync,
-  python3,
-  buildPackages,
-  nixosTests,
-  gtk3,
-  atk,
-  at-spi2-atk,
-  cairo,
-  pango,
-  pipewire,
-  gdk-pixbuf,
-  glib,
-  freetype,
-  fontconfig,
-  dbus,
-  libx11,
-  libxshmfence,
-  libxcb,
-  libxi,
-  libxcursor,
-  libxdamage,
-  libxrandr,
-  libxcomposite,
-  libxext,
-  libxfixes,
-  libxrender,
-  libxtst,
-  libxscrnsaver,
-  nss,
-  nspr,
-  alsa-lib,
-  cups,
-  expat,
-  libuuid,
-  at-spi2-core,
-  libappindicator-gtk3,
-  libgbm,
-  libwebp,
-  # Runtime dependencies:
-  systemdLibs,
-  libnotify,
-  libdbusmenu,
-  libpulseaudio,
-  xdg-utils,
-  wayland,
-
-  # command line arguments which are always set e.g "--password-store=kwallet6"
-  commandLineArgs,
-}:
-
-{
-  pname,
-  libdir,
-  bindir,
-  extractPkg,
-  version,
-  hash,
-  url,
-}:
-
-let
-  inherit (stdenv) targetPlatform;
-  ARCH = if targetPlatform.isAarch64 then "arm64" else "x64";
-
-  # Noto Color Emoji PNG files for emoji replacement; see below.
-  noto-fonts-color-emoji-png = noto-fonts-color-emoji.overrideAttrs (prevAttrs: {
-    pname = "noto-fonts-color-emoji-png";
-
-    # The build produces 136×128 PNGs by default for arcane font
-    # reasons, but we want square PNGs.
-    buildFlags = prevAttrs.buildFlags or [ ] ++ [ "BODY_DIMENSIONS=128x128" ];
-
-    makeTargets = [ "compressed" ];
-
-    installPhase = ''
-      runHook preInstall
-
-      mkdir -p $out/share
-      mv build/compressed_pngs $out/share/noto-fonts-color-emoji-png
-      python3 add_aliases.py --srcdir=$out/share/noto-fonts-color-emoji-png
-
-      runHook postInstall
-    '';
-  });
-
-  noto-emoji-sheet-32 = fetchurl {
-    url = "https://raw.githubusercontent.com/iamcal/emoji-data/refs/tags/v16.0.0/sheet_google_32.png";
-    hash = "sha256-tBfp9s1LvBBla7/V4TtumiVFtV5qTPcxLXW+H6qjSVI=";
-  };
-  noto-emoji-sheet-64 = fetchurl {
-    url = "https://raw.githubusercontent.com/iamcal/emoji-data/refs/tags/v16.0.0/sheet_google_64.png";
-    hash = "sha256-eVoMWY0WLJpKriPyGIxge4ybwZEst9hDgkWfjekaOuE=";
-  };
-in
-stdenv.mkDerivation (finalAttrs: {
-  inherit pname version;
-
-  # Please backport all updates to the stable channel.
-  # All releases have a limited lifetime and "expire" 90 days after the release.
-  # When releases "expire" the application becomes unusable until an update is
-  # applied. The expiration date for the current release can be extracted with:
-  # $ grep -a "^{\"buildExpiration" "${signal-desktop}/lib/${dir}/resources/app.asar"
-  # (Alternatively we could try to patch the asar archive, but that requires a
-  # few additional steps and might not be the best idea.)
-
-  src = fetchurl {
-    inherit url hash;
-    recursiveHash = true;
-    downloadToTemp = true;
-    nativeBuildInputs = [
-      (if ARCH == "x64" then dpkg else libarchive)
-      asar
-    ];
-    # Signal ships the Apple emoji set without a licence via an npm
-    # package and upstream does not seem terribly interested in fixing
-    # this; see:
-    #
-    # * <https://github.com/signalapp/Signal-Android/issues/5862>
-    # * <https://whispersystems.discoursehosting.net/t/signal-is-likely-violating-apple-license-terms-by-using-apple-emoji-in-the-sticker-creator-and-android-and-desktop-apps/52883>
-    #
-    # We work around this by replacing it with the Noto Color Emoji
-    # set, which is available under a FOSS licence and more likely to
-    # be used on a NixOS machine anyway. The Apple emoji are removed
-    # during `fetchurl` to ensure that the build doesn’t cache the
-    # unlicensed emoji files, but the rest of the work is done in the
-    # main derivation.
-    postFetch = ''
-      ${extractPkg}
-      asar extract "$out/${libdir}/resources/app.asar" $out/asar-contents
-      rm -r \
-        "$out/${libdir}/resources/app.asar"{,.unpacked} \
-        $out/asar-contents/images/emoji-sheet-32.webp \
-        $out/asar-contents/images/emoji-sheet-64.webp
-    '';
-  };
-
-  nativeBuildInputs = [
-    rsync
-    asar
-    python3
-    autoPatchelfHook
-    # override doesn't preserve splicing https://github.com/NixOS/nixpkgs/issues/132651
-    # Has to use `makeShellWrapper` from `buildPackages` even though `makeShellWrapper` from the inputs is spliced because `propagatedBuildInputs` would pick the wrong one because of a different offset.
-    (buildPackages.wrapGAppsHook3.override { makeWrapper = buildPackages.makeShellWrapper; })
-    libwebp
-  ];
-
-  buildInputs = [
-    alsa-lib
-    at-spi2-atk
-    at-spi2-core
-    atk
-    cairo
-    cups
-    dbus
-    expat
-    fontconfig
-    freetype
-    gdk-pixbuf
-    glib
-    gtk3
-    libx11
-    libxscrnsaver
-    libxcomposite
-    libxcursor
-    libxdamage
-    libxext
-    libxfixes
-    libxi
-    libxrandr
-    libxrender
-    libxtst
-    libappindicator-gtk3
-    libpulseaudio
-    libnotify
-    libuuid
-    libgbm
-    nspr
-    nss
-    pango
-    systemdLibs
-    libxcb
-    libxshmfence
-  ];
-
-  runtimeDependencies = [
-    systemdLibs
-    libappindicator-gtk3
-    libnotify
-    libdbusmenu
-    pipewire
-    xdg-utils
-    wayland
-  ];
-
-  dontBuild = true;
-  dontConfigure = true;
-
-  unpackPhase = ''
-    rsync -a --chmod=+w $src/ .
-  '';
-
-  installPhase = ''
-    runHook preInstall
-
-    mkdir -p $out/lib
-
-    mv usr/share $out/share
-    mv "${libdir}" "$out/lib/signal-desktop"
-
-    # Symlink to bin
-    mkdir -p $out/bin
-    ln -s "$out/lib/signal-desktop/signal-desktop" $out/bin/${finalAttrs.meta.mainProgram}
-
-    # Create required symlinks:
-    ln -s libGLESv2.so "$out/lib/signal-desktop/libGLESv2.so.2"
-
-    # Compress the emoji sheets to webp, as signal expects webp images. The flags used are the same as those used upstream.
-    cwebp -progress -mt -preset icon -alpha_filter best -alpha_q 20 -pass 10 -q 75 ${noto-emoji-sheet-32} -o asar-contents/images/emoji-sheet-32.webp
-    cwebp -progress -mt -preset icon -alpha_filter best -alpha_q 20 -pass 10 -q 75 ${noto-emoji-sheet-64} -o asar-contents/images/emoji-sheet-64.webp
-
-    # Copy the Noto Color Emoji PNGs into the ASAR contents. See `src`
-    # for the motivation, and the script for the technical details.
-    emojiPrefix=$(
-      python3 ${./copy-noto-emoji.py} \
-      ${noto-fonts-color-emoji-png}/share/noto-fonts-color-emoji-png \
-      asar-contents
-    )
-
-    # Replace the URL used for fetching large versions of emoji with
-    # the local path to our copied PNGs.
-    substituteInPlace asar-contents/preload.bundle.js \
-      --replace-fail \
-        'emoji://jumbo?emoji=' \
-        "file://$out/lib/signal-desktop/resources/app.asar/$emojiPrefix/"
-
-    # `asar(1)` copies files from the corresponding `.unpacked`
-    # directory when extracting, and will put them back in the modified
-    # archive if you don’t specify them again when repacking. Signal
-    # leaves their native `.node` libraries unpacked, so we match that.
-    asar pack \
-      --unpack '*.node' \
-      asar-contents \
-      "$out/lib/signal-desktop/resources/app.asar"
-
-    runHook postInstall
-  '';
-
-  preFixup = ''
-    gappsWrapperArgs+=(
-      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}"
-      --suffix PATH : ${lib.makeBinPath [ xdg-utils ]}
-      --add-flags ${lib.escapeShellArg commandLineArgs}
-    )
-
-    # Fix the desktop link
-    substituteInPlace $out/share/applications/signal-desktop.desktop \
-      --replace-fail "/${bindir}/signal-desktop" ${finalAttrs.meta.mainProgram}
-
-    mv $out/share/applications/signal{-desktop,}.desktop
-
-    # Note: The following path contains bundled libraries:
-    # $out/lib/signal-desktop/resources/app.asar.unpacked/node_modules/
-    patchelf --add-needed ${libpulseaudio}/lib/libpulse.so "$out/lib/signal-desktop/resources/app.asar.unpacked/node_modules/@signalapp/ringrtc/build/linux/libringrtc-${ARCH}.node"
-  '';
-
-  passthru = {
-    # Tests if the application launches and waits for "Link your phone to Signal Desktop":
-    tests.application-launch = nixosTests.signal-desktop;
-    updateScript.command = [ ./update.sh ];
-  };
-
-  meta = {
-    description = "Private, simple, and secure messenger";
-    longDescription = ''
-      Signal Desktop is an Electron application that links with your
-      "Signal Android" or "Signal iOS" app.
-    '';
-    homepage = "https://signal.org/";
-    changelog = "https://github.com/signalapp/Signal-Desktop/releases/tag/v${finalAttrs.version}";
-    license = [
-      lib.licenses.agpl3Only
-
-      # Various npm packages
-      lib.licenses.free
-
-      lib.licenses.asl20 # noto-emoji
-      lib.licenses.mit # emoji-data
-    ];
-    maintainers = with lib.maintainers; [
-      eclairevoyant
-      mic92
-      equirosa
-      bkchr
-      emily
-      Gliczy
-    ];
-    mainProgram = "signal-desktop";
-    platforms = [
-      "x86_64-linux"
-      "aarch64-linux"
-      "x86_64-darwin"
-      "aarch64-darwin"
-    ];
-    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-  };
-})
diff --git a/pkgs/by-name/si/signal-desktop-bin/package.nix b/pkgs/by-name/si/signal-desktop-bin/package.nix
deleted file mode 100644
index 79e6becbe892..000000000000
--- a/pkgs/by-name/si/signal-desktop-bin/package.nix
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  stdenv,
-  callPackage,
-  commandLineArgs ? "",
-}:
-if stdenv.hostPlatform.system == "aarch64-linux" then
-  callPackage ./signal-desktop-aarch64.nix { inherit commandLineArgs; }
-else if stdenv.hostPlatform.isDarwin then
-  callPackage ./signal-desktop-darwin.nix { }
-else
-  callPackage ./signal-desktop.nix { inherit commandLineArgs; }
diff --git a/pkgs/by-name/si/signal-desktop-bin/pyproject.toml b/pkgs/by-name/si/signal-desktop-bin/pyproject.toml
deleted file mode 100644
index eeee9c7287a0..000000000000
--- a/pkgs/by-name/si/signal-desktop-bin/pyproject.toml
+++ /dev/null
@@ -1,15 +0,0 @@
-[tool.mypy]
-files = ["*.py"]
-strict = true
-
-[tool.ruff]
-line-length = 80
-
-[tool.ruff.lint]
-select = ["ALL"]
-ignore = ["COM812", "D203", "D213", "ISC001", "T201"]
-allowed-confusables = ["‐"]
-
-[tool.ruff.format]
-docstring-code-format = true
-docstring-code-line-length = "dynamic"
diff --git a/pkgs/by-name/si/signal-desktop-bin/signal-desktop-aarch64.nix b/pkgs/by-name/si/signal-desktop-bin/signal-desktop-aarch64.nix
deleted file mode 100644
index 9a8ff69c487b..000000000000
--- a/pkgs/by-name/si/signal-desktop-bin/signal-desktop-aarch64.nix
+++ /dev/null
@@ -1,15 +0,0 @@
-{ callPackage, commandLineArgs }:
-callPackage ./generic.nix { inherit commandLineArgs; } {
-  pname = "signal-desktop-bin";
-  version = "7.90.0";
-
-  libdir = "usr/lib64/signal-desktop";
-  bindir = "usr/bin";
-  extractPkg = ''
-    mkdir -p $out
-    bsdtar -xf $downloadedFile -C "$out"
-  '';
-
-  url = "https://download.copr.fedorainfracloud.org/results/useidel/signal-desktop/fedora-42-aarch64/10149422-signal-desktop/signal-desktop-7.90.0-1.fc42.aarch64.rpm";
-  hash = "sha256-+6aIB/UF7oZ7I4MtDsYCOhQxiaTpIyXGZ5WLdJto7Us=";
-}
diff --git a/pkgs/by-name/si/signal-desktop-bin/signal-desktop-darwin.nix b/pkgs/by-name/si/signal-desktop-bin/signal-desktop-darwin.nix
deleted file mode 100644
index 1e8dab02080b..000000000000
--- a/pkgs/by-name/si/signal-desktop-bin/signal-desktop-darwin.nix
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  stdenv,
-  lib,
-  fetchurl,
-  _7zz,
-}:
-stdenv.mkDerivation (finalAttrs: {
-  pname = "signal-desktop-bin";
-  version = "7.90.0";
-
-  src = fetchurl {
-    url = "https://updates.signal.org/desktop/signal-desktop-mac-universal-${finalAttrs.version}.dmg";
-    hash = "sha256-61JsAPeGVNJpuUDAv3nA0WNr15C+e5NvsT0ICT2dolc=";
-  };
-  sourceRoot = ".";
-
-  nativeBuildInputs = [ _7zz ];
-
-  dontConfigure = true;
-  dontBuild = true;
-  installPhase = ''
-    runHook preInstall
-
-    mkdir -p $out/Applications
-    cp -r Signal.app $out/Applications
-
-    runHook postInstall
-  '';
-
-  passthru = {
-    updateScript.command = [ ./update.sh ];
-  };
-
-  meta = {
-    description = "Private, simple, and secure messenger";
-    longDescription = ''
-      Signal Desktop is an Electron application that links with your
-      "Signal Android" or "Signal iOS" app.
-    '';
-    homepage = "https://signal.org/";
-    downloadPage = "https://signal.org/download/macos/";
-    changelog = "https://github.com/signalapp/Signal-Desktop/releases/tag/v${finalAttrs.version}";
-    license = with lib.licenses; [
-      agpl3Only
-
-      # Various npm packages
-      free
-
-      # has non-redistributable Apple emoji packaged, see main derivation
-      unfree
-    ];
-    maintainers = with lib.maintainers; [ nickhu ];
-    platforms = [
-      "x86_64-linux"
-      "aarch64-linux"
-      "x86_64-darwin"
-      "aarch64-darwin"
-    ];
-    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
-  };
-})
diff --git a/pkgs/by-name/si/signal-desktop-bin/signal-desktop.nix b/pkgs/by-name/si/signal-desktop-bin/signal-desktop.nix
deleted file mode 100644
index 3a5c5b3d8f2d..000000000000
--- a/pkgs/by-name/si/signal-desktop-bin/signal-desktop.nix
+++ /dev/null
@@ -1,12 +0,0 @@
-{ callPackage, commandLineArgs }:
-callPackage ./generic.nix { inherit commandLineArgs; } rec {
-  pname = "signal-desktop-bin";
-  version = "7.90.0";
-
-  libdir = "opt/Signal";
-  bindir = libdir;
-  extractPkg = "dpkg-deb -x $downloadedFile $out";
-
-  url = "https://updates.signal.org/desktop/apt/pool/s/signal-desktop/signal-desktop_${version}_amd64.deb";
-  hash = "sha256-m9tBldv1WvfdLrORIuJQYBQ72rBRHgXSAk0PrwZtAB4=";
-}
diff --git a/pkgs/by-name/si/signal-desktop-bin/update.sh b/pkgs/by-name/si/signal-desktop-bin/update.sh
deleted file mode 100755
index 7d3696642b58..000000000000
--- a/pkgs/by-name/si/signal-desktop-bin/update.sh
+++ /dev/null
@@ -1,35 +0,0 @@
-#!/usr/bin/env nix-shell
-#!nix-shell -i bash -p bash common-updater-scripts curl coreutils jq
-
-set -ex
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" &>/dev/null && pwd)"
-
-latestTag=$(curl ${GITHUB_TOKEN:+" -u \":$GITHUB_TOKEN\""} \
-  "https://api.github.com/repos/signalapp/Signal-Desktop/releases/latest" \
-  | jq -r ".tag_name")
-latestVersion="$(expr "$latestTag" : 'v\(.*\)')"
-
-latestBuildInfoAarch64=$(curl \
-  "https://copr.fedorainfracloud.org/api_3/package/?ownername=useidel&projectname=signal-desktop&packagename=signal-desktop&with_latest_succeeded_build=true" \
-  | jq '.builds.latest_succeeded')
-latestBuildAarch64=$(jq '.id' <<< $latestBuildInfoAarch64)
-latestVersionAarch64=$(jq -r '.source_package.version' <<< $latestBuildInfoAarch64)
-latestPrettyVersionAarch64="${latestVersionAarch64%-*}"
-
-darwinHash="$(nix --extra-experimental-features nix-command hash to-sri --type sha256 "$(nix-prefetch-url "https://updates.signal.org/desktop/signal-desktop-mac-universal-${latestVersion}.dmg")")"
-
-echo "Updating signal-desktop for x86_64-linux"
-update-source-version signal-desktop-bin "$latestVersion" \
-  --system=x86_64-linux \
-  --file="$SCRIPT_DIR/signal-desktop.nix"
-
-echo "Updating signal-desktop for aarch64-linux"
-update-source-version signal-desktop-bin "$latestPrettyVersionAarch64" "" \
-  "https://download.copr.fedorainfracloud.org/results/useidel/signal-desktop/fedora-42-aarch64/$(printf "%08d" $latestBuildAarch64)-signal-desktop/signal-desktop-$latestVersionAarch64.fc42.aarch64.rpm" \
-  --system=aarch64-linux \
-  --file="$SCRIPT_DIR/signal-desktop-aarch64.nix"
-
-echo "Updating signal-desktop for darwin"
-sed -i "s|version = \".*\";|version = \"${latestVersion}\";|" "$SCRIPT_DIR/signal-desktop-darwin.nix"
-sed -i "s|hash = \"sha256-[^\"]*\";|hash = \"${darwinHash}\";|" "$SCRIPT_DIR/signal-desktop-darwin.nix"
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index c23f1000ce40..610d3c109ba9 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -1758,6 +1758,7 @@ mapAliases {
   shipyard = throw "'shipyard' has been renamed to/replaced by 'jumppad'"; # Converted to throw 2025-10-27
   siduck76-st = throw "'siduck76-st' has been renamed to/replaced by 'st-snazzy'"; # Converted to throw 2025-10-27
   sierra-breeze-enhanced = throw "'sierra-breeze-enhanced' has been removed, as it is only compatible with Plasma 5, which is EOL"; # Added 2025-08-20
+  signal-desktop-bin = throw "'signal-desktop-bin' has been replaced by 'signal-desktop' which is built from source"; # Added 2026-03-02
   signal-desktop-source = throw "'signal-desktop-source' has been renamed to/replaced by 'signal-desktop'"; # Converted to throw 2025-10-27
   simpleBluez = warnAlias "'simpleBluez' has been renamed to 'simplebluez'" simplebluez; # Added 2026-02-18
   simpleDBus = warnAlias "'simpleDBus' has been renamed to 'simpledbus'" simpledbus; # Added 2026-02-12

From 10e771b751ab24783f9818d983cc09ea4c2ba0fc Mon Sep 17 00:00:00 2001
From: Gliczy <129636582+Gliczy@users.noreply.github.com>
Date: Mon, 2 Mar 2026 14:40:59 +0100
Subject: [PATCH 62/67] signal-desktop: update meta.description

---
 pkgs/by-name/si/signal-desktop/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/si/signal-desktop/package.nix b/pkgs/by-name/si/signal-desktop/package.nix
index a5594d081bcb..6d15835e67c7 100644
--- a/pkgs/by-name/si/signal-desktop/package.nix
+++ b/pkgs/by-name/si/signal-desktop/package.nix
@@ -316,7 +316,7 @@ stdenv.mkDerivation (finalAttrs: {
   };
 
   meta = {
-    description = "Private, simple, and secure messenger (nixpkgs build)";
+    description = "Private, simple, and secure messenger";
     longDescription = ''
       Signal Desktop is an Electron application that links with your
       "Signal Android" or "Signal iOS" app.

From 207e93f599897fde8d866d11968ef0bd4e9df4ad Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 15:52:44 +0000
Subject: [PATCH 63/67] tail-tray: 0.2.29 -> 0.2.30

---
 pkgs/by-name/ta/tail-tray/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ta/tail-tray/package.nix b/pkgs/by-name/ta/tail-tray/package.nix
index 96fdb4fe3a26..76e5e8211c58 100644
--- a/pkgs/by-name/ta/tail-tray/package.nix
+++ b/pkgs/by-name/ta/tail-tray/package.nix
@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "tail-tray";
-  version = "0.2.29";
+  version = "0.2.30";
 
   src = fetchFromGitHub {
     owner = "SneWs";
     repo = "tail-tray";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-X2NYzUUP7zuQ+JIeLviOvfGpGlKqrtj5tOszX6gDYTc=";
+    hash = "sha256-MqofvOaqpQdUbYsxvnu/ZJJswa2bwLMKqJZtOCulbys=";
   };
 
   nativeBuildInputs = with kdePackages; [

From fe5c00ea0d11d4d648a65ed46cf91056cdafec44 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 16:28:45 +0000
Subject: [PATCH 64/67] jsonschema-cli: 0.42.1 -> 0.44.0

---
 pkgs/by-name/js/jsonschema-cli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/js/jsonschema-cli/package.nix b/pkgs/by-name/js/jsonschema-cli/package.nix
index e5ace0589e4f..5f4dcea86851 100644
--- a/pkgs/by-name/js/jsonschema-cli/package.nix
+++ b/pkgs/by-name/js/jsonschema-cli/package.nix
@@ -9,15 +9,15 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "jsonschema-cli";
-  version = "0.42.1";
+  version = "0.44.0";
 
   src = fetchCrate {
     pname = "jsonschema-cli";
     inherit (finalAttrs) version;
-    hash = "sha256-tjjgj0PHb1vNe07yNgeU1vC9OiCwcjJ8dyt9k0tRZwY=";
+    hash = "sha256-rytVrWBvUMaUZvHV4emXSnTUl4eC4uR8HS/1J4j9GwA=";
   };
 
-  cargoHash = "sha256-r/Yc6PX1wT2hpGxqisrIcoVF/dZmafCJ244l8KiMXT0=";
+  cargoHash = "sha256-P8o0tAcFQPu5ta8qc8basn1+XjHvyjn1aGCW16kuYug=";
 
   preCheck = ''
     export SSL_CERT_FILE=${cacert}/etc/ssl/certs/ca-bundle.crt

From e7649c39cf09910bedbb5b861b516f3a41cedaca Mon Sep 17 00:00:00 2001
From: Pavol Rusnak <pavol@rusnak.io>
Date: Mon, 2 Mar 2026 17:48:07 +0100
Subject: [PATCH 65/67] radicle-desktop: fix build on darwin

---
 pkgs/by-name/ra/radicle-desktop/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/ra/radicle-desktop/package.nix b/pkgs/by-name/ra/radicle-desktop/package.nix
index c97b2c2a3e5d..68e5ad476bad 100644
--- a/pkgs/by-name/ra/radicle-desktop/package.nix
+++ b/pkgs/by-name/ra/radicle-desktop/package.nix
@@ -1,4 +1,5 @@
 {
+  stdenv,
   fetchFromGitHub,
   cargo-tauri,
   fetchFromRadicle,
@@ -83,6 +84,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
     gtk3
     libsoup_3
     openssl
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
     webkitgtk_4_1
   ];
 

From 98b727581520371a354b60ec5c427a85d35781e3 Mon Sep 17 00:00:00 2001
From: Weijia Wang <9713184+wegank@users.noreply.github.com>
Date: Mon, 2 Mar 2026 17:44:25 +0100
Subject: [PATCH 66/67] stanc: 2.37.0 -> 2.38.0

---
 pkgs/by-name/st/stanc/package.nix | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/st/stanc/package.nix b/pkgs/by-name/st/stanc/package.nix
index 9bdab90f50d8..0bad4160a49b 100644
--- a/pkgs/by-name/st/stanc/package.nix
+++ b/pkgs/by-name/st/stanc/package.nix
@@ -6,7 +6,7 @@
 
 ocamlPackages.buildDunePackage rec {
   pname = "stanc";
-  version = "2.37.0";
+  version = "2.38.0";
 
   minimalOCamlVersion = "4.12";
 
@@ -14,10 +14,13 @@ ocamlPackages.buildDunePackage rec {
     owner = "stan-dev";
     repo = "stanc3";
     tag = "v${version}";
-    hash = "sha256-d+sInQfnlT1gLbtIRPD+LUZgIdl519OrfvgSNYdYeII=";
+    hash = "sha256-j05PMQKIqkM9UWJzSVnkYWe6d+iUnmFOh1W8pZ7Fdyk=";
   };
 
-  nativeBuildInputs = with ocamlPackages; [ menhir ];
+  nativeBuildInputs = with ocamlPackages; [
+    cmdliner
+    menhir
+  ];
 
   buildInputs = with ocamlPackages; [
     core_unix
@@ -25,7 +28,7 @@ ocamlPackages.buildDunePackage rec {
     ppx_deriving
     fmt
     yojson
-    cmdliner_1
+    cmdliner
   ];
 
   meta = {

From 1351eb2f3cfa02e2df341b7e2a09a1acb07bff6e Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 13 Jan 2026 20:59:03 +0000
Subject: [PATCH 67/67] cmdstan: 2.37.0 -> 2.38.0

---
 pkgs/by-name/cm/cmdstan/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/cm/cmdstan/package.nix b/pkgs/by-name/cm/cmdstan/package.nix
index 87d0feed6a6a..d490a39095c6 100644
--- a/pkgs/by-name/cm/cmdstan/package.nix
+++ b/pkgs/by-name/cm/cmdstan/package.nix
@@ -12,14 +12,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cmdstan";
-  version = "2.37.0";
+  version = "2.38.0";
 
   src = fetchFromGitHub {
     owner = "stan-dev";
     repo = "cmdstan";
     tag = "v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-bKkzzFkMF8+Ufz/EdKLJdB290Fvc2t8b47xB8oPz/sk=";
+    hash = "sha256-4Mx4LvXW2lYOSSOgNT0f+unry6mBobgGTDLwtiypHBU=";
   };
 
   postPatch = ''