Merge master into staging-next

2026-07-11 00:30:36 +00:00
parent 56bb2cc56a ffc7f8ce99
commit b1c249ab19
140 changed files with 1594 additions and 852 deletions
@@ -19,6 +19,7 @@ runs:
        TARGET_SHA: ${{ inputs.target-as-trusted-at }}
        PIN_BUMP_SHA: ${{ inputs.untrusted-pin-bump }}
      with:
+        retries: 3
        script: |
          const { rm, writeFile } = require('node:fs/promises')
          const { spawn } = require('node:child_process')
@@ -91,7 +91,7 @@ jobs:
          GH_TOKEN: ${{ steps.app-token.outputs.token || github.token }}
        run: gh api /rate_limit | jq

-      - uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6.1.0
+      - uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0
        name: Labels from touched files
        if: |
          github.event_name == 'pull_request_target' &&
@@ -101,7 +101,7 @@ jobs:
          configuration-path: .github/labeler.yml # default
          sync-labels: true

-      - uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6.1.0
+      - uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0
        name: Labels from touched files (no sync)
        if: |
          github.event_name == 'pull_request_target' &&
@@ -111,7 +111,7 @@ jobs:
          configuration-path: .github/labeler-no-sync.yml
          sync-labels: false

-      - uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6.1.0
+      - uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0
        name: Labels from touched files (development branches)
        # Development branches like staging-next, haskell-updates and python-updates get special labels.
        # This is to avoid the mass of labels there, which is mostly useless - and really annoying for
@@ -59,7 +59,7 @@ jobs:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}
          target-as-trusted-at: ${{ inputs.targetSha }}

-      - uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
+      - uses: cachix/install-nix-action@a49548c11d9846ad46ecc0115273879b045f001c # v31.10.7
        with:
          # Sandbox is disabled on MacOS by default.
          extra_nix_config: sandbox = true
@@ -147,7 +147,7 @@ jobs:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}
          target-as-trusted-at: ${{ inputs.targetSha }}

-      - uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
+      - uses: cachix/install-nix-action@a49548c11d9846ad46ecc0115273879b045f001c # v31.10.7

      - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
        continue-on-error: true
@@ -139,7 +139,7 @@ jobs:
            core.info(`Found pinned.json commit: ${ciPinBumpCommit}`)

      - name: Install Nix
-        uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
+        uses: cachix/install-nix-action@a49548c11d9846ad46ecc0115273879b045f001c # v31.10.7

      - name: Load supported versions
        id: versions
@@ -187,7 +187,7 @@ jobs:
          target-as-trusted-at: ${{ inputs.targetSha }}

      - name: Install Nix
-        uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
+        uses: cachix/install-nix-action@a49548c11d9846ad46ecc0115273879b045f001c # v31.10.7

      - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
        continue-on-error: true
@@ -277,7 +277,7 @@ jobs:
          merge-multiple: true

      - name: Install Nix
-        uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
+        uses: cachix/install-nix-action@a49548c11d9846ad46ecc0115273879b045f001c # v31.10.7

      - name: Combine all output paths and eval stats
        run: |
@@ -486,7 +486,7 @@ jobs:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}

      - name: Install Nix
-        uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
+        uses: cachix/install-nix-action@a49548c11d9846ad46ecc0115273879b045f001c # v31.10.7

      - name: Ensure flake outputs on all systems still evaluate
        run: nix flake check --all-systems --no-build './nixpkgs/untrusted?shallow=1'
@@ -35,7 +35,7 @@ jobs:
        with:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}

-      - uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
+      - uses: cachix/install-nix-action@a49548c11d9846ad46ecc0115273879b045f001c # v31.10.7

      # TODO: Figure out how to best enable caching for the treefmt job. Cachix won't work well,
      # because the cache would be invalidated on every commit - treefmt checks every file.
@@ -70,7 +70,7 @@ jobs:
        with:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}

-      - uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
+      - uses: cachix/install-nix-action@a49548c11d9846ad46ecc0115273879b045f001c # v31.10.7

      - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
        continue-on-error: true
@@ -100,7 +100,7 @@ jobs:
          merged-as-untrusted-at: ${{ inputs.mergedSha }}
          target-as-trusted-at: ${{ inputs.targetSha }}

-      - uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
+      - uses: cachix/install-nix-action@a49548c11d9846ad46ecc0115273879b045f001c # v31.10.7

      - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
        continue-on-error: true
@@ -29355,6 +29355,11 @@
    githubId = 223833;
    name = "Klaas van Schelven";
  };
+  VarNepvius = {
+    name = "VarNapvius";
+    github = "VarNapvius";
+    githubId = 14352929;
+  };
  varunpatro = {
    email = "varun.kumar.patro@gmail.com";
    github = "varunpatro";
@@ -29833,7 +29838,7 @@
  VZstless = {
    name = "VZstless";
    email = "i@vzstless.moe";
-    github = "atlarator";
+    github = "VZstless";
    githubId = 233668878;
  };
  w-lfchen = {
@@ -50,6 +50,8 @@

 - [stash-clipboard](https://github.com/NotAShelf/stash), a Wayland clipboard "manager" with fast persistent history and multi-media support. Available as [services.stash-clipboard](#opt-services.stash-clipboard.enable).

+- [OO7](https://github.com/linux-credentials/oo7) is a desktop-agnostic Secret Service provider. Available as [services.oo7](#opt-services.oo7.enable)
+
 ## Backward Incompatibilities {#sec-release-26.11-incompatibilities}

 <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->
@@ -593,6 +593,7 @@
  ./services/desktops/linyaps.nix
  ./services/desktops/malcontent.nix
  ./services/desktops/neard.nix
+  ./services/desktops/oo7.nix
  ./services/desktops/pipewire/pipewire.nix
  ./services/desktops/pipewire/wireplumber.nix
  ./services/desktops/playerctld.nix
@@ -678,6 +678,14 @@ let
          '';
        };

+        oo7 = {
+          enable = lib.mkEnableOption ''
+            automatically unlock the user's default Session Keyring using pam_oo7.
+            If the user's login password does not match their keyring password,
+            oo7 will prompt separately after login.
+          '';
+        };
+
        enableUMask = lib.mkOption {
          default = config.security.pam.enableUMask;
          defaultText = lib.literalExpression "config.security.pam.enableUMask";
@@ -1198,6 +1206,7 @@ let
                      || cfg.pamMount
                      || cfg.kwallet.enable
                      || cfg.enableGnomeKeyring
+                      || cfg.oo7.enable
                      || config.services.intune.enable
                      || cfg.googleAuthenticator.enable
                      || cfg.gnupg.enable
@@ -1261,6 +1270,12 @@ let
                      control = "optional";
                      modulePath = "${pkgs.gnome-keyring}/lib/security/pam_gnome_keyring.so";
                    }
+                    {
+                      name = "oo7";
+                      enable = cfg.oo7.enable;
+                      control = "optional";
+                      modulePath = "${pkgs.oo7-pam}/lib/security/pam_oo7.so";
+                    }
                    {
                      name = "intune";
                      enable = config.services.intune.enable;
@@ -1477,6 +1492,12 @@ let
                  use_authtok = true;
                };
              }
+              {
+                name = "oo7";
+                enable = cfg.oo7.enable;
+                control = "optional";
+                modulePath = "${pkgs.oo7-pam}/lib/security/pam_oo7.so";
+              }
            ];

            session = utils.pam.autoOrderRules [
@@ -1695,6 +1716,15 @@ let
                  auto_start = true;
                };
              }
+              {
+                name = "oo7";
+                enable = cfg.oo7.enable;
+                control = "optional";
+                modulePath = "${pkgs.oo7-pam}/lib/security/pam_oo7.so";
+                settings = {
+                  auto_start = true;
+                };
+              }
              {
                name = "gnupg";
                enable = cfg.gnupg.enable;
@@ -146,9 +146,12 @@ in
        ++ lib.optionals (lib.elem "airplay_receiver" cfg.providers) [
          shairport-sync
        ]
-        ++ lib.optionals (lib.elem "spotify" cfg.providers || lib.elem "spotify_connect" cfg.providers) [
+        ++ lib.optionals (lib.elem "spotify" cfg.providers) [
          librespot-ma
        ]
+        ++ lib.optionals (lib.elem "spotify_connect" cfg.providers) [
+          go-librespot
+        ]
        ++ lib.optionals (lib.elem "snapcast" cfg.providers) [
          snapcast
        ]
@@ -0,0 +1,41 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+let
+  cfg = config.services.oo7;
+in
+{
+  options.services.oo7 = {
+    enable = lib.mkEnableOption ''
+      oo7, a service providing the Secret Service D-Bus API.
+    '';
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.dbus.packages = [ pkgs.oo7-server ];
+
+    systemd.packages = [ pkgs.oo7-server ];
+
+    systemd.user.services.oo7-daemon.wantedBy = [ "default.target" ];
+
+    xdg.portal.extraPortals = [ pkgs.oo7-portal ];
+
+    security.pam.services.login.oo7.enable = true;
+
+    security.wrappers.oo7-daemon = {
+      owner = "root";
+      group = "root";
+      capabilities = "cap_ipc_lock=ep";
+      source = "${pkgs.oo7-server}/libexec/oo7-daemon";
+    };
+  };
+
+  meta = {
+    inherit (pkgs.oo7.meta)
+      maintainers
+      ;
+  };
+}
@@ -3513,8 +3513,8 @@ let
        mktplcRef = {
          name = "veriloghdl";
          publisher = "mshr-h";
-          version = "1.27.4";
-          hash = "sha256-VmxvSryOkZTKb4AfH/zBdVilPNHroDh/ORicPi5Mfxo=";
+          version = "1.28.1";
+          hash = "sha256-+Pc9blI/n6JeokdUhWjLzicwBv90p4MjhK2rvpQ2xrA=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/mshr-h.VerilogHDL/changelog";
@@ -3924,8 +3924,8 @@ let
        mktplcRef = {
          publisher = "redhat";
          name = "vscode-yaml";
-          version = "1.23.0";
-          hash = "sha256-GC7AIQIUw+F5rBscTe+ulKt/97s7p636TLRvmcT9b9c=";
+          version = "1.24.0";
+          hash = "sha256-Bmh1gxKn+mvtolnKWmhJ2QxdUZ32QV7b4kbBNeBtcWg=";
        };
        meta = {
          description = "YAML Language Support by Red Hat, with built-in Kubernetes syntax support";
@@ -5238,8 +5238,8 @@ let
        mktplcRef = {
          name = "volar";
          publisher = "Vue";
-          version = "3.3.5";
-          hash = "sha256-Oz4or7AtfrlcAXmFB4lkNk4Uqmpm1AsGP4RLcdpzRbo=";
+          version = "3.3.7";
+          hash = "sha256-qXbJCRzHc7QS4QLCGso5orfSiRYp6V2wz/4tvyU3rfg=";
        };
        meta = {
          changelog = "https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md";
@@ -5498,8 +5498,8 @@ let
        mktplcRef = {
          name = "markdown-editor";
          publisher = "zaaack";
-          version = "0.1.16";
-          hash = "sha256-rBpC3YIG4M4QDPg/zViinDGXk3U6GvJfiwVUe5NW2vU=";
+          version = "0.1.17";
+          hash = "sha256-j7K1MS9XBLwCjER41NsSt22LUh0Zmm2sUK9JqZLiSfk=";
        };
        meta = {
          description = "Visual Studio Code extension for WYSIWYG markdown editing";
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "bluemsx";
-  version = "0-unstable-2026-06-26";
+  version = "0-unstable-2026-07-04";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "bluemsx-libretro";
-    rev = "4f74bf22d2730d989502943784f217aed8cea5c1";
-    hash = "sha256-/o8EnfPVLAN/3b9nHVsmnTyXJ3b6fk9IIu1xKCwPQaY=";
+    rev = "fe7173f801fd2d6c3564ebe816797a44524e4bbf";
+    hash = "sha256-NcDcFexU2jPWwQmWo9CK+jbYtEFiqZmzKLfrQrB9Cmg=";
  };

  meta = {
@@ -10,16 +10,16 @@

 buildGoModule (finalAttrs: {
  pname = "kubernetes-helm";
-  version = "4.2.2";
+  version = "4.2.3";

  src = fetchFromGitHub {
    owner = "helm";
    repo = "helm";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-khyxnEeyxpgEO7rWKsEPqPLNSDZmFGqAZBrfb0TY8BU=";
+    hash = "sha256-t7cdJjazG38T49y+x2B1akBNvZNXhN2ig3eNnHirV2g=";
  };

-  vendorHash = "sha256-XIKQF9PWgxKJUt66wQ/mPhWVfJnra0vV9ZuyclgQ21U=";
+  vendorHash = "sha256-6TJWtGTdTtzOpPvWsk4rtJwxZxkIxIA6QSAemOnHcJ4=";

  subPackages = [ "cmd/helm" ];
  ldflags = [
@@ -265,13 +265,13 @@
    "vendorHash": "sha256-vT1n4FN0s9rQFj4HuXPm6lvNdzWZMyrzeWAanHOQqCg="
  },
  "cyrilgdn_postgresql": {
-    "hash": "sha256-q4duDY9//BK5Jkg6stn0Ig4DJfzkc0gAkUua18XPgSM=",
+    "hash": "sha256-Z0hgD+tRi5tf+1k/KsktKNWGAgqeJNGzmUFGKNMUVJs=",
    "homepage": "https://registry.terraform.io/providers/cyrilgdn/postgresql",
    "owner": "cyrilgdn",
    "repo": "terraform-provider-postgresql",
-    "rev": "v1.26.0",
+    "rev": "v1.27.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-wUd5cFXX/oc96WFyNKgQxw8kvYDiqwpDM84wbNml7LA="
+    "vendorHash": "sha256-Gcrdn6bKVS0Y7dNCo/cg+GpDE7b9NMP/au73jgY4aU0="
  },
  "cyrilgdn_rabbitmq": {
    "hash": "sha256-313I7E3mMiZfa7i5lZGIZolPMcGuSqhrTWVt3MVpEGA=",
@@ -616,13 +616,13 @@
    "vendorHash": "sha256-hh0tOG9HY0cWTda5vjpGwCGntD7I/wCJf6B92EMKRrQ="
  },
  "hashicorp_kubernetes": {
-    "hash": "sha256-P0V0bUkRDwo1EK9D5VE/F7BIz0uov3XsRr5tPbevAI8=",
+    "hash": "sha256-B/BPhNlQytohgRWdO4oA1FcB8zneVieXlOqYzr+HJX4=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/kubernetes",
    "owner": "hashicorp",
    "repo": "terraform-provider-kubernetes",
-    "rev": "v3.2.0",
+    "rev": "v3.2.1",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-TUs0DTfbNYOwKdUTJmiB1/ja97r+GsVH+k5VMp/wKrI="
+    "vendorHash": "sha256-GyuSdDpsOqd1ntwAm09AKCoxeFOLhXo0jPTTxYZC+vg="
  },
  "hashicorp_local": {
    "hash": "sha256-qntV0gfxEVV24gqiVOvUai+pai4vvU+KtLmLBqOBQbY=",
@@ -1436,13 +1436,13 @@
    "vendorHash": "sha256-lWBMihP6oX7qPpTuPQQwQS3IDwdyb/rEYqtBsTozb7Q="
  },
  "venafi_venafi": {
-    "hash": "sha256-oEyrnKMe+cMLSajI2wxkjXfHySM198NviiSqX0hGduk=",
+    "hash": "sha256-tCjeApdanKPNEy7snb6QJoCvwjpNa2fdDryoD+7wn8Y=",
    "homepage": "https://registry.terraform.io/providers/Venafi/venafi",
    "owner": "Venafi",
    "repo": "terraform-provider-venafi",
-    "rev": "v0.24.0",
+    "rev": "v0.24.1",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-UnC3dob6idNgitHo4uGs1BPb3T7UQTR8wAJ2faYVvhE="
+    "vendorHash": "sha256-MXkMUXhE5oUIni9nlZgyN5rXCUl52NmYqMwAnvXpBBo="
  },
  "vinyldns_vinyldns": {
    "hash": "sha256-/M+HFMDeKpIzzdn04TkMxriVeE6vvORRiqonxF38B9Q=",
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "docker-buildx";
-  version = "0.31.1";
+  version = "0.35.0";

  src = fetchFromGitHub {
    owner = "docker";
    repo = "buildx";
    rev = "v${version}";
-    hash = "sha256-9O/vdgVQF3TPyN+WdUYAuVWjAa1ZRKGCCyQ6eZ+EZAs=";
+    hash = "sha256-Q4f7tejn0LO4eiEq+ske53WJ1oe5JxtCVZA2Im+7dv8=";
  };

  doCheck = false;
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "arkade";
-  version = "0.11.95";
+  version = "0.11.106";

  src = fetchFromGitHub {
    owner = "alexellis";
    repo = "arkade";
    tag = finalAttrs.version;
-    hash = "sha256-iVWpSXCVK+FMTQiJC0Ar9HlL/7RA8pWv/UHN+TBQJGg=";
+    hash = "sha256-D6Vq263mo77CSTOwLLPqBbM31bb+d0I8DiuQElx1z70=";
  };

  env.CGO_ENABLED = 0;
@@ -11,16 +11,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "avml";
-  version = "0.19.0";
+  version = "0.20.0";

  src = fetchFromGitHub {
    owner = "microsoft";
    repo = "avml";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-2oVqweq06pzFVcUVq1lCJ4rGmiZG0A7xq6g1RSwR12M=";
+    hash = "sha256-ziK2s4Wwy+WB45O7OU3TKyTujrLsQV6hRUSm5Jr4NO4=";
  };

-  cargoHash = "sha256-40NKzbxNY9t5e7OJnw9Kfvx86YsPAolcezeWeFsD0C4=";
+  cargoHash = "sha256-72c2914higGji0vDUwjtQoil/LdEaECv+HqANTcSRdE=";

  nativeBuildInputs = [ pkg-config ];
  buildInputs = [ openssl ];
@@ -55,14 +55,14 @@ let
 in
 py.pkgs.buildPythonApplication rec {
  pname = "awscli2";
-  version = "2.34.24"; # N.B: if you change this, check if overrides are still up-to-date
+  version = "2.35.11"; # N.B: if you change this, check if overrides are still up-to-date
  pyproject = true;

  src = fetchFromGitHub {
    owner = "aws";
    repo = "aws-cli";
    tag = version;
-    hash = "sha256-PDoztQYKfH6FjdSyMQGsT8No3LB56naQ/AxTPN/dslQ=";
+    hash = "sha256-sjbuzDRFvqTD087vSwOM2IyG++El3NaDNCqHlyQwsxo=";
  };

  postPatch = ''
@@ -7,13 +7,13 @@

 buildGoModule (finalAttrs: {
  pname = "c2FmZQ";
-  version = "0.5.6";
+  version = "0.5.7";

  src = fetchFromGitHub {
    owner = "c2FmZQ";
    repo = "photos";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-qIJnrMqsaa7GcsJpyWHhi6nea72XCQy5BaGWBtQKzFo=";
+    hash = "sha256-7Jguv2T6x3zKRWcp7XGzmVakwXcsVz2BWcY6uADGPsg=";
  };

  ldflags = [
@@ -23,7 +23,7 @@ buildGoModule (finalAttrs: {

  sourceRoot = "${finalAttrs.src.name}/c2FmZQ";

-  vendorHash = "sha256-hJHnbG/NlhibY8e59hk0u5vi50x4s4mH/awPdCRkDFk=";
+  vendorHash = "sha256-6rKFgCKhJQSquMhv7iuzMsm+84qz3V0ynIyB4rv2Kk8=";

  subPackages = [
    "c2FmZQ-client"
@@ -22,13 +22,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "cage";
-  version = "0.3.0";
+  version = "0.3.1";

  src = fetchFromGitHub {
    owner = "cage-kiosk";
    repo = "cage";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-NLoz11bfeZwesmwLmyytuB6/vSwIsnDWKzyAXFe+YZ0=";
+    hash = "sha256-FHIOicRBL881Kvvui4HTKy0g7K9HcQ0ineLECh6MqFI=";
  };

  depsBuildBuild = [
@@ -71,11 +71,11 @@ in

 python3Packages.buildPythonApplication rec {
  pname = "copyparty${nameSuffix}";
-  version = "1.20.17";
+  version = "1.20.18";

  src = fetchurl {
    url = "https://github.com/9001/copyparty/releases/download/v${version}/copyparty-${version}.tar.gz";
-    hash = "sha256-lJVTrv/qlCoN2r0+EtKKZD/qhi14kwuzbgrMxmxMlHU=";
+    hash = "sha256-6hNHouMLQmEoKsRgnJuER2ipJe7XF6yK8f+HqKMmUI4=";
  };

  pyproject = true;
@@ -11,13 +11,13 @@

 buildGoModule (finalAttrs: {
  pname = "coroot";
-  version = "1.23.2";
+  version = "1.23.3";

  src = fetchFromGitHub {
    owner = "coroot";
    repo = "coroot";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-aOTn7keIM5xTcYLOUW+8pmfpXyMSE/+Yq42Uitlr4OE=";
+    hash = "sha256-93WJv11NDk2/ScmdE4D2E8JmyBlP4FYuX7j4Jbm8bDE=";
  };

  vendorHash = "sha256-npMQah59pJqF6wgD2dlEleneIZbP/atDGEpjjb+KCpI=";
@@ -9,13 +9,13 @@

 stdenv.mkDerivation {
  pname = "cosmic-protocols";
-  version = "0-unstable-2026-06-25";
+  version = "0-unstable-2026-07-10";

  src = fetchFromGitHub {
    owner = "pop-os";
    repo = "cosmic-protocols";
-    rev = "32283d76a8d0342da74c4cc022a533c52dcf378f";
-    hash = "sha256-LUAmB+3+doRZOJbVURaIInaQuV/LXCKfoWHA28ihAMo=";
+    rev = "e95d89504513e1407f89a189aca328fbecc9eeef";
+    hash = "sha256-u1Ur9lPm2HE60jCEJVhKtbGYfzV8pdiDjrsGwgKf3nA=";
  };

  __structuredAttrs = true;
@@ -10,13 +10,13 @@

 buildGoModule (finalAttrs: {
  pname = "databricks-cli";
-  version = "1.2.1";
+  version = "1.7.0";

  src = fetchFromGitHub {
    owner = "databricks";
    repo = "cli";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-pIcLZQm/53AMk51jEgM0j1yUR2FU3fhDgVGDBk7yaj4=";
+    hash = "sha256-08fYKWJRYkT48ivM9miPyoQ3fNNm6etdeqvqPZehtaM=";
  };

  # Otherwise these tests fail asserting that the version is 0.0.0-dev
@@ -25,21 +25,9 @@ buildGoModule (finalAttrs: {
      --replace-fail "cli/0.0.0-dev" "cli/${finalAttrs.version}"
  '';

-  vendorHash = "sha256-TAyB9hpiNDDct2We7bbOiNr7ZkbRtF5cYjPmeLfUDkE=";
+  vendorHash = "sha256-1K722pdIXdYkc2HMlnjyjrZb/L2iUoRx2vY1szcF7aY=";

-  excludedPackages = [
-    "bundle/internal"
-    "acceptance"
-    "integration"
-    "tools/testrunner"
-    "tools/testmask"
-    "cmd/auth"
-    "cmd/root"
-    "cmd/labs/project"
-    "libs/auth"
-    "libs/databrickscfg"
-    "libs/hostmetadata"
-  ];
+  subPackages = [ "." ];

  ldflags = [
    "-X github.com/databricks/cli/internal/build.buildVersion=${finalAttrs.version}"
@@ -20,13 +20,13 @@ let
 in
 buildGoModule (finalAttrs: {
  pname = "ddev";
-  version = "1.25.2";
+  version = "1.25.3";

  src = fetchFromGitHub {
    owner = "ddev";
    repo = "ddev";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-JcZTKGjYTvrUT6IAKfVJsJj3e4Q60uiIdK3Y9GzeIVw=";
+    hash = "sha256-IsFay9UqvRdllLzyQLg3YUPFlg6MugYVWRXxUpBV9n0=";
  };

  postPatch = ''
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "dgraph";
-  version = "25.3.7";
+  version = "25.3.8";

  src = fetchFromGitHub {
    owner = "dgraph-io";
    repo = "dgraph";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-5v2+RooZD6LOfU5UgcfEffMURB6qasrpXtn/KofmVQs=";
+    hash = "sha256-RrOlJVkekZ3xWGtjc013YyCycJmlPowVzqrttnZD8BI=";
  };

-  vendorHash = "sha256-9JC2Bcd6ldY4t439nTDnd58mcSOg6DdjYqzN/9EvHYc=";
+  vendorHash = "sha256-gD91KGWLqd6a7YkqQSeW1eS2MQI+1/RbI5X1/Xwrz90=";

  doCheck = false;

@@ -7,26 +7,26 @@

 buildGoModule (finalAttrs: {
  pname = "ecspresso";
-  version = "2.8.4";
+  version = "2.8.5";

  src = fetchFromGitHub {
    owner = "kayac";
    repo = "ecspresso";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Mt4jXMPav82267lUlyI8MZ1g2LFsAylgoHo7QV4N0CQ=";
+    hash = "sha256-IXvCWuE1KJFCckZjGP9LvEY0S9WzrKPqPx759YIYe4A=";
  };

  subPackages = [
    "cmd/ecspresso"
  ];

-  vendorHash = "sha256-xdj1wPg8YpcLW3QoDe/lBNkoMQR41oca1KI3sptXi9w=";
+  vendorHash = "sha256-bvmGvJwjh1tZcKiwIBAveN0Js61/+sh+X6lrJfUYPZ0=";

  ldflags = [
    "-s"
    "-w"
    "-X main.buildDate=none"
-    "-X main.Version=${finalAttrs.version}"
+    "-X github.com/kayac/ecspresso/v2.Version=${finalAttrs.version}"
  ];

  doInstallCheck = true;
@@ -28,13 +28,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "edhm-ui";
-  version = "3.0.67";
+  version = "3.0.69";

  strictDeps = true;

  src = fetchzip {
    url = "https://github.com/BlueMystical/EDHM_UI/releases/download/v${finalAttrs.version}/edhm-ui-v3-linux-x64.zip";
-    hash = "sha256-JhWHub1YmdSJXZcyOK97/5TnBsKVN0dg7nwqg0EP7H8=";
+    hash = "sha256-t/K8VohJjjP/VgreHZWYtlsMXp1gp9Gme/joHywfeH4=";
  };

  nativeBuildInputs = [
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "envconsul";
-  version = "0.13.4";
+  version = "0.14.0";

  src = fetchFromGitHub {
    owner = "hashicorp";
    repo = "envconsul";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-7F+Zsvh13r38FTxgwKbHSaH9cdnnOl8A+nXSbW4XyXA=";
+    hash = "sha256-F04Cq9iOGP+z6x59pkRye1Fx8ZAgsSnbr7tGsNK2LxM=";
  };

-  vendorHash = "sha256-7AXWQ/+rWBGvjkSSWIIGLFY32t3v05GXE7IJwFFsJt4=";
+  vendorHash = "sha256-poRw02L/py6H8Dtd4gAqJ70lFJOYjzYU7lRkpHS8u8A=";

  ldflags = [
    "-s"
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "files-cli";
-  version = "2.15.371";
+  version = "2.15.381";

  src = fetchFromGitHub {
    repo = "files-cli";
    owner = "files-com";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-buIG/U51GembJuFJF5ngzSlYzMiej0e44eg7KCQrx/0=";
+    hash = "sha256-p990MRYRaucbORv13k8q1lXIKdtvylEfJC6iufpq2F0=";
  };

-  vendorHash = "sha256-qNm/3FWhzH5BfKO1oqlB0g7Ecv6tteMROWyZCis1Ngk=";
+  vendorHash = "sha256-nlYyCCO+DKqnZZ1NUcvXttDfPMlcasaJl6H/YZUZqjI=";

  ldflags = [
    "-s"
@@ -24,18 +24,18 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "flare";
-  version = "0.20.6";
+  version = "0.21.0";

  src = fetchFromGitLab {
    owner = "schmiddi-on-mobile";
    repo = "flare";
    tag = finalAttrs.version;
-    hash = "sha256-X+3fwIDqRC9S0SYkN3knjQ5wFSptxuM0iggu4pgZ89Q=";
+    hash = "sha256-Vt83VsqylFSM2rUj5egu1FEFjaVLVUI8SeGHAXmgKW4=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) pname version src;
-    hash = "sha256-EEIZjK8bVPg1AFkmOvckkVMCRHXLoiBz5CITwpolJ4k=";
+    hash = "sha256-GlkrQtMGFqujEiwAVMts6nsPbQ2GTxwYIJsu6axeg0Q=";
  };

  nativeBuildInputs = [
@@ -8,11 +8,11 @@

 stdenvNoCC.mkDerivation rec {
  pname = "flix";
-  version = "0.75.0";
+  version = "0.75.1";

  src = fetchurl {
    url = "https://github.com/flix/flix/releases/download/v${version}/flix.jar";
-    sha256 = "sha256-Zk9CvLQkBe+vRDj2dCfC7sFq3wxbNyNrDev3Q8ZrRXs=";
+    sha256 = "sha256-4xd3AK6tiiKkLJEOc7+4oyb+/bq04+rq9tVcMopr2Tg=";
  };

  dontUnpack = true;
@@ -1,72 +1,103 @@
 GEM
  remote: https://rubygems.org/
  specs:
-    addressable (2.8.7)
-      public_suffix (>= 2.0.2, < 7.0)
-    aws-eventstream (1.3.2)
-    aws-partitions (1.1064.0)
-    aws-sdk-cloudwatchlogs (1.109.0)
-      aws-sdk-core (~> 3, >= 3.216.0)
+    addressable (2.9.0)
+      public_suffix (>= 2.0.2, < 8.0)
+    async (2.42.0)
+      console (~> 1.29)
+      fiber-annotation
+      io-event (~> 1.11)
+      metrics (~> 0.12)
+      traces (~> 0.18)
+    async-http (0.95.1)
+      async (>= 2.10.2)
+      async-pool (~> 0.11)
+      io-endpoint (~> 0.14)
+      io-stream (~> 0.6)
+      metrics (~> 0.12)
+      protocol-http (~> 0.62)
+      protocol-http1 (~> 0.39)
+      protocol-http2 (~> 0.26)
+      protocol-url (~> 0.2)
+      traces (~> 0.10)
+    async-pool (0.11.2)
+      async (>= 2.0)
+    aws-eventstream (1.4.0)
+    aws-partitions (1.1267.0)
+    aws-sdk-cloudwatchlogs (1.159.0)
+      aws-sdk-core (~> 3, >= 3.254.0)
      aws-sigv4 (~> 1.5)
-    aws-sdk-core (3.220.1)
+    aws-sdk-core (3.254.0)
      aws-eventstream (~> 1, >= 1.3.0)
      aws-partitions (~> 1, >= 1.992.0)
      aws-sigv4 (~> 1.9)
      base64
+      bigdecimal
      jmespath (~> 1, >= 1.6.1)
-    aws-sdk-firehose (1.89.0)
-      aws-sdk-core (~> 3, >= 3.216.0)
+      logger
+    aws-sdk-firehose (1.112.0)
+      aws-sdk-core (~> 3, >= 3.254.0)
      aws-sigv4 (~> 1.5)
-    aws-sdk-kinesis (1.74.0)
-      aws-sdk-core (~> 3, >= 3.216.0)
+    aws-sdk-kinesis (1.103.0)
+      aws-sdk-core (~> 3, >= 3.254.0)
      aws-sigv4 (~> 1.5)
-    aws-sdk-kms (1.99.0)
-      aws-sdk-core (~> 3, >= 3.216.0)
+    aws-sdk-kms (1.130.0)
+      aws-sdk-core (~> 3, >= 3.254.0)
      aws-sigv4 (~> 1.5)
-    aws-sdk-s3 (1.182.0)
-      aws-sdk-core (~> 3, >= 3.216.0)
+    aws-sdk-s3 (1.227.0)
+      aws-sdk-core (~> 3, >= 3.254.0)
      aws-sdk-kms (~> 1)
      aws-sigv4 (~> 1.5)
-    aws-sdk-sqs (1.93.0)
-      aws-sdk-core (~> 3, >= 3.216.0)
+    aws-sdk-sqs (1.117.0)
+      aws-sdk-core (~> 3, >= 3.254.0)
      aws-sigv4 (~> 1.5)
-    aws-sigv4 (1.11.0)
+    aws-sigv4 (1.12.1)
      aws-eventstream (~> 1, >= 1.0.2)
-    base64 (0.2.0)
+    base64 (0.3.0)
+    bigdecimal (4.1.2)
    bson (4.15.0)
-    concurrent-ruby (1.3.5)
-    cool.io (1.9.0)
-    csv (3.3.2)
+    concurrent-ruby (1.3.7)
+    console (1.36.0)
+      fiber-annotation
+      fiber-local (~> 1.1)
+      json
+    cool.io (1.9.4)
+    csv (3.3.5)
    digest-crc (0.7.0)
      rake (>= 12.0.0, < 14.0.0)
-    drb (2.2.1)
-    elastic-transport (8.4.0)
+    drb (2.2.3)
+    elastic-transport (8.5.3)
      faraday (< 3)
      multi_json
-    elasticsearch (8.17.1)
+    elasticsearch (9.4.3)
      elastic-transport (~> 8.3)
-      elasticsearch-api (= 8.17.1)
-    elasticsearch-api (8.17.1)
+      elasticsearch-api (= 9.4.3)
+    elasticsearch-api (9.4.3)
+      base64
      multi_json
-    excon (1.2.5)
+    excon (1.5.0)
      logger
-    faraday (2.12.2)
+    faraday (2.14.3)
      faraday-net_http (>= 2.0, < 3.5)
      json
      logger
-    faraday-excon (2.3.0)
+    faraday-excon (2.4.0)
      excon (>= 1.0.0)
      faraday (>= 2.11.0, < 3)
-    faraday-net_http (3.4.0)
-      net-http (>= 0.5.0)
+    faraday-net_http (3.4.4)
+      net-http (~> 0.5)
+    fiber-annotation (0.2.0)
+    fiber-local (1.1.0)
+      fiber-storage
+    fiber-storage (1.0.1)
    fluent-config-regexp-type (1.0.0)
      fluentd (> 1.0.0, < 2)
-    fluent-plugin-cloudwatch-logs (0.14.3)
+    fluent-plugin-cloudwatch-logs (0.15.0)
      aws-sdk-cloudwatchlogs (~> 1.0)
      fluentd (>= 1.8.0)
-    fluent-plugin-concat (2.5.0)
+    fluent-plugin-concat (2.6.2)
      fluentd (>= 0.14.0, < 2)
-    fluent-plugin-elasticsearch (5.4.3)
+    fluent-plugin-elasticsearch (6.0.0)
      elasticsearch
      excon
      faraday (>= 2.0.0)
@@ -76,12 +107,13 @@ GEM
      fluentd (>= 0.10.58, < 2)
      ltsv
      ruby-kafka (>= 1.5.0, < 2)
-    fluent-plugin-kinesis (3.5.0)
+    fluent-plugin-kinesis (3.7.0)
      aws-sdk-firehose (~> 1, != 1.9, != 1.5, != 1.15)
      aws-sdk-kinesis (~> 1, != 1.5, != 1.4, != 1.14)
      fluentd (>= 0.14.22, < 2)
-      google-protobuf (~> 3)
-    fluent-plugin-mongo (1.6.0)
+      google-protobuf (~> 4)
+    fluent-plugin-mongo (1.6.3)
+      bigdecimal (~> 4.0)
      fluentd (>= 0.14.22, < 2)
      mongo (>= 2.15.0, < 2.19.0)
    fluent-plugin-record-reformer (0.9.1)
@@ -89,14 +121,15 @@ GEM
    fluent-plugin-rewrite-tag-filter (2.4.0)
      fluent-config-regexp-type
      fluentd (>= 0.14.2, < 2)
-    fluent-plugin-s3 (1.8.3)
+    fluent-plugin-s3 (1.8.5)
      aws-sdk-s3 (~> 1.60)
      aws-sdk-sqs (~> 1.23)
      fluentd (>= 0.14.22, < 2)
    fluent-plugin-webhdfs (1.6.0)
      fluentd (>= 0.14.22)
      webhdfs (>= 0.11.0)
-    fluentd (1.18.0)
+    fluentd (1.19.3)
+      async-http (~> 0.86)
      base64 (~> 0.2)
      bundler
      cool.io (>= 1.4.5, < 2.0.0)
@@ -105,31 +138,46 @@ GEM
      http_parser.rb (>= 0.5.1, < 0.9.0)
      logger (~> 1.6)
      msgpack (>= 1.3.1, < 2.0.0)
+      net-http (~> 0.8)
+      ostruct (~> 0.6)
      serverengine (>= 2.3.2, < 3.0.0)
      sigdump (~> 0.2.5)
      strptime (>= 0.2.4, < 1.0.0)
      tzinfo (>= 1.0, < 3.0)
      tzinfo-data (~> 1.0)
+      uri (~> 1.0)
      webrick (~> 1.4)
      yajl-ruby (~> 1.0)
-    google-protobuf (3.25.6)
-    google-protobuf (3.25.6-aarch64-linux)
-    google-protobuf (3.25.6-arm64-darwin)
-    google-protobuf (3.25.6-x86-linux)
-    google-protobuf (3.25.6-x86_64-darwin)
-    http_parser.rb (0.8.0)
+      zstd-ruby (~> 1.5)
+    google-protobuf (4.35.1)
+      bigdecimal
+      rake (~> 13.3)
+    http_parser.rb (0.8.1)
+    io-endpoint (0.17.2)
+    io-event (1.19.1)
+    io-stream (0.13.1)
    jmespath (1.6.2)
-    json (2.10.1)
-    logger (1.6.6)
+    json (2.20.0)
+    logger (1.7.0)
    ltsv (0.1.2)
+    metrics (0.15.0)
    mongo (2.18.3)
      bson (>= 4.14.1, < 5.0.0)
-    msgpack (1.8.0)
-    multi_json (1.15.0)
-    net-http (0.6.0)
-      uri
-    public_suffix (6.0.1)
-    rake (13.2.1)
+    msgpack (1.8.3)
+    multi_json (1.21.1)
+    net-http (0.9.1)
+      uri (>= 0.11.1)
+    ostruct (0.6.3)
+    protocol-hpack (1.5.1)
+    protocol-http (0.62.2)
+    protocol-http1 (0.39.0)
+      protocol-http (~> 0.62)
+    protocol-http2 (0.26.0)
+      protocol-hpack (~> 1.4)
+      protocol-http (~> 0.62)
+    protocol-url (0.4.0)
+    public_suffix (7.0.5)
+    rake (13.4.2)
    ruby-kafka (1.5.0)
      digest-crc
    serverengine (2.4.0)
@@ -138,22 +186,20 @@ GEM
      sigdump (~> 0.2.2)
    sigdump (0.2.5)
    strptime (0.2.5)
+    traces (0.18.2)
    tzinfo (2.0.6)
      concurrent-ruby (~> 1.0)
-    tzinfo-data (1.2025.1)
+    tzinfo-data (1.2026.3)
      tzinfo (>= 1.0.0)
-    uri (1.0.3)
+    uri (1.1.1)
    webhdfs (0.11.0)
      addressable
-    webrick (1.9.1)
+    webrick (1.9.2)
    yajl-ruby (1.4.3)
+    zstd-ruby (1.5.7.1)

 PLATFORMS
-  aarch64-linux
-  arm64-darwin
  ruby
-  x86-linux
-  x86_64-darwin

 DEPENDENCIES
  fluent-plugin-cloudwatch-logs
@@ -169,4 +215,4 @@ DEPENDENCIES
  fluentd

 BUNDLED WITH
-   2.6.2
+   2.7.2
@@ -5,30 +5,80 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0cl2qpvwiffym62z991ynks7imsm87qmgxf0yfsmlwzkgi9qcaa6";
+      sha256 = "1by7h2lwziiblizpd5yx87jsq8ppdhzvwf08ga34wzqgcv1nmpvz";
      type = "gem";
    };
-    version = "2.8.7";
+    version = "2.9.0";
+  };
+  async = {
+    dependencies = [
+      "console"
+      "fiber-annotation"
+      "io-event"
+      "metrics"
+      "traces"
+    ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1ik5p6pgx01mrg2c5pj6rmjwr2s5sbvip84zcysxb5cc7clphq2k";
+      type = "gem";
+    };
+    version = "2.42.0";
+  };
+  async-http = {
+    dependencies = [
+      "async"
+      "async-pool"
+      "io-endpoint"
+      "io-stream"
+      "metrics"
+      "protocol-http"
+      "protocol-http1"
+      "protocol-http2"
+      "protocol-url"
+      "traces"
+    ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "0v3q2kn9j5vfag7b4zv2vc1i4jkrqjz1pc109df6vh04q9cd8g8c";
+      type = "gem";
+    };
+    version = "0.95.1";
+  };
+  async-pool = {
+    dependencies = [ "async" ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1vg3lwb3yhq0rad3dm00vp35vrahkbxgl4kx3d2rqkdh09xs2hqa";
+      type = "gem";
+    };
+    version = "0.11.2";
  };
  aws-eventstream = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1mvjjn8vh1c3nhibmjj9qcwxagj6m9yy961wblfqdmvhr9aklb3y";
+      sha256 = "0fqqdqg15rgwgz3mn4pj91agd20csk9gbrhi103d20328dfghsqi";
      type = "gem";
    };
-    version = "1.3.2";
+    version = "1.4.0";
  };
  aws-partitions = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0jdajznsdc0niv68xqp9sv29l9piyn32grq1y367l14hbm17mnf2";
+      sha256 = "07i2n8f7cpbcckj6zqlivhw05khsrg77bijj2jdb00y3z2zcd90m";
      type = "gem";
    };
-    version = "1.1064.0";
+    version = "1.1267.0";
  };
  aws-sdk-cloudwatchlogs = {
    dependencies = [
@@ -39,10 +89,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1izd0al8i8wmi0cx18w4y8nriw623c21rb7c8vwpgk4mzd2kqxhw";
+      sha256 = "1ja3j4a3mvgcdrcpzisip40h5f4mix0724p14w8c1phxd794xz5r";
      type = "gem";
    };
-    version = "1.109.0";
+    version = "1.159.0";
  };
  aws-sdk-core = {
    dependencies = [
@@ -50,16 +100,18 @@
      "aws-partitions"
      "aws-sigv4"
      "base64"
+      "bigdecimal"
      "jmespath"
+      "logger"
    ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0cjdqmy5hjbgzc0iac1i143va76qgp7jc7hg1aviy1n8cgywq44y";
+      sha256 = "1zhj444iybzs1ikw1p4arv3zayw9xkk1ifnsb6g3r2j6p0h34gpf";
      type = "gem";
    };
-    version = "3.220.1";
+    version = "3.254.0";
  };
  aws-sdk-firehose = {
    dependencies = [
@@ -70,10 +122,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1sryh7fjg525ddwlbd37mi3ygjcc6qn9r0md64d6ssrvk2ah0v1i";
+      sha256 = "0sxr068m9fxw04m79ainsr3fniq7pxdwcp9syxbxxyq65bgq300g";
      type = "gem";
    };
-    version = "1.89.0";
+    version = "1.112.0";
  };
  aws-sdk-kinesis = {
    dependencies = [
@@ -84,10 +136,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1qfwsc373a674y8xcy8g1ykc84d21vbz0dqpbh1f1k2mny2cxz7s";
+      sha256 = "0g7m6ii4m03h6prd21z42yll259qlk08agfydkcikrixq1nlf3rz";
      type = "gem";
    };
-    version = "1.74.0";
+    version = "1.103.0";
  };
  aws-sdk-kms = {
    dependencies = [
@@ -98,10 +150,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1a3mh89kfh6flqxw48wfv9wfwkj2zxazw096mqm56wnnzz1jyads";
+      sha256 = "0jfpgjyhq3f7w67p3361f1racrc1m502zan934m7mdrir9i3ds52";
      type = "gem";
    };
-    version = "1.99.0";
+    version = "1.130.0";
  };
  aws-sdk-s3 = {
    dependencies = [
@@ -113,10 +165,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "03a55dbihv6xvgfwhx0f35rwc7q3rr0555vfpxlwpdjw75wkbz6h";
+      sha256 = "0fd9xq7xyadlldgd9l9iry3fi38wwr1iaag9ax4xpirpkazj6asm";
      type = "gem";
    };
-    version = "1.182.0";
+    version = "1.227.0";
  };
  aws-sdk-sqs = {
    dependencies = [
@@ -127,10 +179,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "16b5jdnmk93l86nnqpij4zac7srx8c2yvx07xxbazmkawcnrd27g";
+      sha256 = "0wj489w3v5canns7c5lnp38hjf954gxfvlva76vwrw9618cvzznd";
      type = "gem";
    };
-    version = "1.93.0";
+    version = "1.117.0";
  };
  aws-sigv4 = {
    dependencies = [ "aws-eventstream" ];
@@ -138,20 +190,30 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1nx1il781qg58nwjkkdn9fw741cjjnixfsh389234qm8j5lpka2h";
+      sha256 = "003ch8qzh3mppsxch83ns0jra8d222ahxs96p9cdrl0grfazywv9";
      type = "gem";
    };
-    version = "1.11.0";
+    version = "1.12.1";
  };
  base64 = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "01qml0yilb9basf7is2614skjp8384h2pycfx86cr8023arfj98g";
+      sha256 = "0yx9yn47a8lkfcjmigk79fykxvr80r4m1i35q82sxzynpbm7lcr7";
      type = "gem";
    };
-    version = "0.2.0";
+    version = "0.3.0";
+  };
+  bigdecimal = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1g9zi8c4i7g8zz0c3hxrw6mblrjvgn7akys60clb9si7c1k1gljk";
+      type = "gem";
+    };
+    version = "4.1.2";
  };
  bson = {
    groups = [ "default" ];
@@ -168,30 +230,45 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1ipbrgvf0pp6zxdk5ascp6i29aybz2bx9wdrlchjmpx6mhvkwfw1";
+      sha256 = "1c2i64xsd35vijnb50rxb70g508s0x674xi0qpyyb8jy7bncl4j4";
      type = "gem";
    };
-    version = "1.3.5";
+    version = "1.3.7";
+  };
+  console = {
+    dependencies = [
+      "fiber-annotation"
+      "fiber-local"
+      "json"
+    ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "01vg83f2q7n0q5dsq2sfjmm6mrizhyzkmw21i4ysg06g0slrwna5";
+      type = "gem";
+    };
+    version = "1.36.0";
  };
  "cool.io" = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0cl3ri6zsnpm3hixmlkrmyjir1w7m9szjfizwvccn05qb40a4apa";
+      sha256 = "0lzay9zxgf7j2avpl19334si092f3xyfd819wq75nmbrdwp4l0m5";
      type = "gem";
    };
-    version = "1.9.0";
+    version = "1.9.4";
  };
  csv = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0kmx36jjh2sahd989vcvw74lrlv07dqc3rnxchc5sj2ywqsw3w3g";
+      sha256 = "0gz7r2kazwwwyrwi95hbnhy54kwkfac5swh2gy5p5vw36fn38lbf";
      type = "gem";
    };
-    version = "3.3.2";
+    version = "3.3.5";
  };
  digest-crc = {
    dependencies = [ "rake" ];
@@ -209,10 +286,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0h5kbj9hvg5hb3c7l425zpds0vb42phvln2knab8nmazg2zp5m79";
+      sha256 = "0wrkl7yiix268s2md1h6wh91311w95ikd8fy8m5gx589npyxc00b";
      type = "gem";
    };
-    version = "2.2.1";
+    version = "2.2.3";
  };
  elastic-transport = {
    dependencies = [
@@ -223,10 +300,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0xz5q3zlbkwdb9zipallvqxdw6gnz8ljyz4w7b3pv1lar43f9sdm";
+      sha256 = "1i2qzvf40hvp1s0m44kvpzi9zsinsy7w8fsrj62saa07n6pkdw1v";
      type = "gem";
    };
-    version = "8.4.0";
+    version = "8.5.3";
  };
  elasticsearch = {
    dependencies = [
@@ -237,21 +314,24 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1nbwd1f5s060hiqcs2bmwzvsli3l3vcyyd3khxcxzzxvysqq0zb9";
+      sha256 = "0hpvj11mbn74z8ph17qjs1n7jkpjv5csr1x1nhrnk9zi04xnwjnw";
      type = "gem";
    };
-    version = "8.17.1";
+    version = "9.4.3";
  };
  elasticsearch-api = {
-    dependencies = [ "multi_json" ];
+    dependencies = [
+      "base64"
+      "multi_json"
+    ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1iwl70xid303nyhfv5342yj5kk37rjbgdzkjdi83fnvyhisi5166";
+      sha256 = "14n9mypalmi9f1gv9xkdirjxhihv3wiks2vsgdnl7q19wyfq2626";
      type = "gem";
    };
-    version = "8.17.1";
+    version = "9.4.3";
  };
  excon = {
    dependencies = [ "logger" ];
@@ -259,10 +339,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "17asr18vawi08g3wbif0wdi8bnyj01d125saydl9j1f03fv0n16a";
+      sha256 = "0l3dpg45i74ap1d7c4wyrdlc67l9vj4kgzv2l2r8mg1304fss0y5";
      type = "gem";
    };
-    version = "1.2.5";
+    version = "1.5.0";
  };
  faraday = {
    dependencies = [
@@ -274,10 +354,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1mls9g490k63rdmjc9shqshqzznfn1y21wawkxrwp2vvbk13jwqm";
+      sha256 = "0y7j6yzv07zggic6g0p2v1ivnvkzsbqjnfdl4215qqb6cxz290hq";
      type = "gem";
    };
-    version = "2.12.2";
+    version = "2.14.3";
  };
  faraday-excon = {
    dependencies = [
@@ -288,10 +368,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0xdmwnkkms7bnx0bpkdk52qcazjqa3skb7jmjr21cjr8mdsp3z65";
+      sha256 = "1xn867jjsy4dj0sxrrwd58l3kpdjs1in4p1jcbmni126hcszy1ra";
      type = "gem";
    };
-    version = "2.3.0";
+    version = "2.4.0";
  };
  faraday-net_http = {
    dependencies = [ "net-http" ];
@@ -299,10 +379,41 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0jp5ci6g40d6i50bsywp35l97nc2fpi9a592r2cibwicdb6y9wd1";
+      sha256 = "125m3qri52vwh5v9dhq0dkqxf8629cxrf99yyc01pva72wasyy0f";
      type = "gem";
    };
-    version = "3.4.0";
+    version = "3.4.4";
+  };
+  fiber-annotation = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "00vcmynyvhny8n4p799rrhcx0m033hivy0s1gn30ix8rs7qsvgvs";
+      type = "gem";
+    };
+    version = "0.2.0";
+  };
+  fiber-local = {
+    dependencies = [ "fiber-storage" ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "01lz929qf3xa90vra1ai1kh059kf2c8xarfy6xbv1f8g457zk1f8";
+      type = "gem";
+    };
+    version = "1.1.0";
+  };
+  fiber-storage = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1qa0j9qjwav9xb0n3isx0rbh0942xrfback392n6vs8bidnmp3pl";
+      type = "gem";
+    };
+    version = "1.0.1";
  };
  fluent-config-regexp-type = {
    dependencies = [ "fluentd" ];
@@ -324,10 +435,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "139d7qv4my818mhjp0104ns9dlndlvrb6dgxa2rkv6jlzlamjpjb";
+      sha256 = "0d4vr7mkha72f65pnisqp26gppas0zhz4xvpyqk0ka9mkwyj2m2m";
      type = "gem";
    };
-    version = "0.14.3";
+    version = "0.15.0";
  };
  fluent-plugin-concat = {
    dependencies = [ "fluentd" ];
@@ -335,10 +446,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1b9z6hrjcsvccfimmgczzcbhvf2zwyqzvsdc29i2biqhk1mcwn3k";
+      sha256 = "18vsv1lh41hk12ji11zsf2ipqzw0l6isxw748yhrlzfz55lh2j99";
      type = "gem";
    };
-    version = "2.5.0";
+    version = "2.6.2";
  };
  fluent-plugin-elasticsearch = {
    dependencies = [
@@ -352,10 +463,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "19psa92z4zsmbwz8n4rizkwws58qlgb30325rhmqpnsp9h8b0cbb";
+      sha256 = "0lnz56kaxqp28dckn5f7xb6mywf5dr0v56lvskx5jr67z97wsich";
      type = "gem";
    };
-    version = "5.4.3";
+    version = "6.0.0";
  };
  fluent-plugin-kafka = {
    dependencies = [
@@ -383,13 +494,14 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "12wx84a9h1xjldxa3yxxsmkyn620m2knw47dmfnr9rvgw2s4dlrz";
+      sha256 = "0jq7ci8h243g23dhx9vbqz1sb2kipz7v7y318wvj4lnq2xgpmmj5";
      type = "gem";
    };
-    version = "3.5.0";
+    version = "3.7.0";
  };
  fluent-plugin-mongo = {
    dependencies = [
+      "bigdecimal"
      "fluentd"
      "mongo"
    ];
@@ -397,10 +509,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1m3fa6fwpzxw08lnczsif5c7v33yryyvgb1lbp7a7qjhipvb6jfm";
+      sha256 = "09h70j007gb7ia66fm67b9842vbdfp18h1bf8mgjxvhz4ylx4p26";
      type = "gem";
    };
-    version = "1.6.0";
+    version = "1.6.3";
  };
  fluent-plugin-record-reformer = {
    dependencies = [ "fluentd" ];
@@ -437,10 +549,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0c7l7y51j5fz99086ghj99rjv16frj5kl4wcclvfws1jc5c38mj9";
+      sha256 = "1r6vqs2zlsck2v6pd89g9s2mxk064y0pls0s3awbq4186a8kpn9r";
      type = "gem";
    };
-    version = "1.8.3";
+    version = "1.8.5";
  };
  fluent-plugin-webhdfs = {
    dependencies = [
@@ -458,6 +570,7 @@
  };
  fluentd = {
    dependencies = [
+      "async-http"
      "base64"
      "cool.io"
      "csv"
@@ -465,42 +578,80 @@
      "http_parser.rb"
      "logger"
      "msgpack"
+      "net-http"
+      "ostruct"
      "serverengine"
      "sigdump"
      "strptime"
      "tzinfo"
      "tzinfo-data"
+      "uri"
      "webrick"
      "yajl-ruby"
+      "zstd-ruby"
    ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "100fd0ihgpqddkdqmbvlp51v09rnr4xb25l5lq776ai21hc4gj8d";
+      sha256 = "1n2f3lfc99ry640i1j2xar2fp9yn6fhrbzdw0ilpdicrclnmb3y2";
      type = "gem";
    };
-    version = "1.18.0";
+    version = "1.19.3";
  };
  google-protobuf = {
+    dependencies = [
+      "bigdecimal"
+      "rake"
+    ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0g0h7rwiivx93jddfws5pdkcpnhma3694k2jfv2i1k80qkrqnrmv";
+      sha256 = "09ipzsijxkrgwnyic0l4yhnazw46ca7ll0adza6za66r649lg9m3";
      type = "gem";
    };
-    version = "3.25.6";
+    version = "4.35.1";
  };
  "http_parser.rb" = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1gj4fmls0mf52dlr928gaq0c0cb0m3aqa9kaa6l0ikl2zbqk42as";
+      sha256 = "0yh924g697spcv4hfigyxgidhyy6a7b9007rnac57airbcadzs4s";
      type = "gem";
    };
-    version = "0.8.0";
+    version = "0.8.1";
+  };
+  io-endpoint = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "0f1kzf4d5qgqgfjh52a8pf3pii5dmav6ib0zq4wmicqnq5kggsiz";
+      type = "gem";
+    };
+    version = "0.17.2";
+  };
+  io-event = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1rkfxcydk07qa9zs2ll7fj9zhl374v6vb0m9m7dbz74832isj6l5";
+      type = "gem";
+    };
+    version = "1.19.1";
+  };
+  io-stream = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1pi0vr60l3ld4mlfrhgbiyvxkribi82258mlh1s7dg8gzd6pq3ap";
+      type = "gem";
+    };
+    version = "0.13.1";
  };
  jmespath = {
    groups = [ "default" ];
@@ -517,20 +668,20 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1p4l5ycdxfsr8b51gnvlvhq6s21vmx9z4x617003zbqv3bcqmj6x";
+      sha256 = "0ay31y1yl208xrpcsw6b0k4q309magq7q5prmdbb0lm9ampbqqlk";
      type = "gem";
    };
-    version = "2.10.1";
+    version = "2.20.0";
  };
  logger = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "05s008w9vy7is3njblmavrbdzyrwwc1fsziffdr58w9pwqj8sqfx";
+      sha256 = "00q2zznygpbls8asz5knjvvj2brr3ghmqxgr83xnrdj4rk3xwvhr";
      type = "gem";
    };
-    version = "1.6.6";
+    version = "1.7.0";
  };
  ltsv = {
    groups = [ "default" ];
@@ -542,6 +693,16 @@
    };
    version = "0.1.2";
  };
+  metrics = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "0wlh0g4xmfqa41dsh4m3514q3jcvy6jx97mwn6ayj62ir6xdbpk1";
+      type = "gem";
+    };
+    version = "0.15.0";
+  };
  mongo = {
    dependencies = [ "bson" ];
    groups = [ "default" ];
@@ -558,20 +719,20 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0cnpnbn2yivj9gxkh8mjklbgnpx6nf7b8j2hky01dl0040hy0k76";
+      sha256 = "18g6ps30z6m365bly7sfialavnsf6m6qamdxsr84w96k51j4mnlb";
      type = "gem";
    };
-    version = "1.8.0";
+    version = "1.8.3";
  };
  multi_json = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0pb1g1y3dsiahavspyzkdy39j4q377009f6ix0bh1ag4nqw43l0z";
+      sha256 = "1040lr5y2phn7avdyam6zw6ikprlmk77biw3yhclsfwfh0qnl4p6";
      type = "gem";
    };
-    version = "1.15.0";
+    version = "1.21.1";
  };
  net-http = {
    dependencies = [ "uri" ];
@@ -579,30 +740,95 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1ysrwaabhf0sn24jrp0nnp51cdv0jf688mh5i6fsz63q2c6b48cn";
+      sha256 = "15k96fj6qwbaiv6g52l538ass95ds1qwgynqdridz29yqrkhpfi5";
      type = "gem";
    };
-    version = "0.6.0";
+    version = "0.9.1";
+  };
+  ostruct = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "04nrir9wdpc4izqwqbysxyly8y7hsfr4fsv69rw91lfi9d5fv8lm";
+      type = "gem";
+    };
+    version = "0.6.3";
+  };
+  protocol-hpack = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "14ddqg5mcs9ysd1hdzkm5pwil0660vrxcxsn576s3387p0wa5v3g";
+      type = "gem";
+    };
+    version = "1.5.1";
+  };
+  protocol-http = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "0fvpza7nnbyd3nfxkn5gych6diwns386g2ib9s6azh99c3sz5hg1";
+      type = "gem";
+    };
+    version = "0.62.2";
+  };
+  protocol-http1 = {
+    dependencies = [ "protocol-http" ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1syqgaklsn9rf11xmll2s3ms7jvpd5zjng9jdb3r8pbgv963z6z4";
+      type = "gem";
+    };
+    version = "0.39.0";
+  };
+  protocol-http2 = {
+    dependencies = [
+      "protocol-hpack"
+      "protocol-http"
+    ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "11kl6768hpzgvvvlpyvmr74v0jqf2vslcwngs3643cl2h3brrj5s";
+      type = "gem";
+    };
+    version = "0.26.0";
+  };
+  protocol-url = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1qd9vsn9sif58swfqsyj429aynqyv6hpgbzxqrd83baidcxw1m34";
+      type = "gem";
+    };
+    version = "0.4.0";
  };
  public_suffix = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0vqcw3iwby3yc6avs1vb3gfd0vcp2v7q310665dvxfswmcf4xm31";
+      sha256 = "08znfv30pxmdkjyihvbjqbvv874dj3nybmmyscl958dy3f7v12qs";
      type = "gem";
    };
-    version = "6.0.1";
+    version = "7.0.5";
  };
  rake = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "17850wcwkgi30p7yqh60960ypn7yibacjjha0av78zaxwvd3ijs6";
+      sha256 = "009p524zl0p0kfa65nii8wdmaigkmawv9pbvlcffky7islmmp0nb";
      type = "gem";
    };
-    version = "13.2.1";
+    version = "13.4.2";
  };
  ruby-kafka = {
    dependencies = [ "digest-crc" ];
@@ -650,6 +876,16 @@
    };
    version = "0.2.5";
  };
+  traces = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "05722prvh34n96irnxa762wz0yj2nyrz70ab2zby3b6snjf69wc0";
+      type = "gem";
+    };
+    version = "0.18.2";
+  };
  tzinfo = {
    dependencies = [ "concurrent-ruby" ];
    groups = [ "default" ];
@@ -667,20 +903,20 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "02yz3x0qxnnwbf7k18yck5pggbnyy43rq0d5w2r6rwlk3981m31d";
+      sha256 = "1ygpikd3hdqsi16gqh33r5al1b9xdwrv2wl3rw210g7iar9vr3s7";
      type = "gem";
    };
-    version = "1.2025.1";
+    version = "1.2026.3";
  };
  uri = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "04bhfvc25b07jaiaf62yrach7khhr5jlr5bx6nygg8pf11329wp9";
+      sha256 = "1ijpbj7mdrq7rhpq2kb51yykhrs2s54wfs6sm9z3icgz4y6sb7rp";
      type = "gem";
    };
-    version = "1.0.3";
+    version = "1.1.1";
  };
  webhdfs = {
    dependencies = [ "addressable" ];
@@ -698,10 +934,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "12d9n8hll67j737ym2zw4v23cn4vxyfkb6vyv1rzpwv6y6a3qbdl";
+      sha256 = "0ca1hr2rxrfw7s613rp4r4bxb454i3ylzniv9b9gxpklqigs3d5y";
      type = "gem";
    };
-    version = "1.9.1";
+    version = "1.9.2";
  };
  yajl-ruby = {
    groups = [ "default" ];
@@ -713,4 +949,14 @@
    };
    version = "1.4.3";
  };
+  zstd-ruby = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "08gxd4hm9qpiyf9bvwwxba75g70j8vascj44y89xccps7bwgplfy";
+      type = "gem";
+    };
+    version = "1.5.7.1";
+  };
 }
@@ -9,16 +9,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "flux9s";
-  version = "0.10.2";
+  version = "0.11.0";

  src = fetchFromGitHub {
    owner = "dgunzy";
    repo = "flux9s";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-pphw27LHz+TrU5QcUZZ7zS5k02AaFWBEEHsiV+I+05E=";
+    hash = "sha256-eX9qLhxSieZGxyLrHb2txrxekMElLIOeuVuxmOZH4Ak=";
  };

-  cargoHash = "sha256-M2UCpSwKVFGXACcYkxJ8TzRHYgTLqt29RBMMdRvHZv8=";
+  cargoHash = "sha256-bAgkDJnmcvH3aGhLjY1hn+tnAYmuDFewQ12K8qKTnsY=";

  nativeBuildInputs = [ pkg-config ];

@@ -8,7 +8,7 @@

 stdenv.mkDerivation rec {
  pname = "fotowall";
-  version = "1.1.1";
+  version = "1.1.2";
  strictDeps = true;
  __structuredAttrs = true;

@@ -16,7 +16,7 @@ stdenv.mkDerivation rec {
    owner = "fotowall";
    repo = "fotowall";
    rev = "v${version}";
-    hash = "sha256-0iW3S3E7g/osnwBTSh0ruBThVyI422EhlMjuA9kQWnY=";
+    hash = "sha256-icZUT17vgpI65Vyx7/TuTP4ISDkb7mrXwuyVzDHcoNE=";
  };

  nativeBuildInputs = [
@@ -9,14 +9,14 @@

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "git-machete";
-  version = "3.44.0";
+  version = "3.44.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "virtuslab";
    repo = "git-machete";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-3yUzHzhc6qHw8jPbO9ZMsffhXgEyAlT2NzYCuC9/qsc=";
+    hash = "sha256-OqNfKqp3nOXij9dSvStmRyYIQOF91F+pA+9rSGPp7gQ=";
  };

  build-system = with python3.pkgs; [ setuptools ];
@@ -2,7 +2,7 @@
  lib,
  fetchFromGitHub,
  python3Packages,
-  awscli2,
+  awscli,
 }:

 python3Packages.buildPythonApplication (finalAttrs: {
@@ -30,7 +30,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
  dependencies = with python3Packages; [ botocore ];

  nativeCheckInputs = [
-    awscli2
+    awscli
  ]
  ++ (with python3Packages; [
    pytestCheckHook
@@ -8,14 +8,14 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "gitfetch";
-  version = "1.3.3";
+  version = "1.4.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Matars";
    repo = "gitfetch";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-dVJdc0iqcl/+s3v+ui6XtKRlOuYoFVYWlG0GtTZLr5o=";
+    hash = "sha256-WiMLpdj9p4fGxdMUlsNnGv0METgrCtpaCvTVm2474oE=";
  };

  build-system = with python3Packages; [ setuptools ];
@@ -14,13 +14,13 @@

 buildGo125Module (finalAttrs: {
  pname = "go-arch-lint";
-  version = "1.15.0";
+  version = "1.16.0";

  src = fetchFromGitHub {
    owner = "fe3dback";
    repo = "go-arch-lint";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-RHU7MJAuNcJhdHVzu25Vie6Q8e95ISsJsNB+MVTqAQc=";
+    hash = "sha256-oEbHuwQOHWglYHDG8gOKndjl6avSwK4+GyQHOj76ojA=";
  };

  vendorHash = "sha256-2n7OjF4gl+qq9M5EtU0nmgWwRPZ3YvmLQDAgJ8w9S1M=";
@@ -9,16 +9,16 @@

 buildGo125Module rec {
  pname = "go-camo";
-  version = "2.7.4";
+  version = "2.7.5";

  src = fetchFromGitHub {
    owner = "cactus";
    repo = "go-camo";
    tag = "v${version}";
-    hash = "sha256-CWyTqQdgf37Kx3E+/aTstsQ/mdLFAGrHJndc4foNt0A=";
+    hash = "sha256-P0n1rnxR9GQQw53MvHII7EXc4gWRThL4k1kulHTz9FU=";
  };

-  vendorHash = "sha256-lNCMz2wJLZRXjQ5MF+4nu/tNitQb86tvPeD+NvSHW2c=";
+  vendorHash = "sha256-Fl+amgzolwcuz+eVQzD6mfBdMNzUm6UCwf9BbAt+85U=";

  nativeBuildInputs = [
    installShellFiles
@@ -0,0 +1,60 @@
+{
+  alsa-lib,
+  buildGoModule,
+  fetchFromGitHub,
+  flac,
+  lib,
+  libogg,
+  libvorbis,
+  pkg-config,
+  stdenv,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "go-librespot";
+  version = "0.7.4";
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "devgianlu";
+    repo = "go-librespot";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-TJQMfZRuWDu83QZeCU+EQ90WX6gT5+nXbYRIqfvXRp8=";
+  };
+
+  vendorHash = "sha256-kCzzybOEP4Tp7OGFZBjIP1FgcQ9u+lgO3931gbaG9hA=";
+
+  subPackages = [ "cmd/daemon" ];
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [
+    flac
+    libogg
+    libvorbis
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    alsa-lib
+  ];
+
+  ldflags = [
+    "-s"
+    "-X github.com/devgianlu/go-librespot.version=v${finalAttrs.version}"
+  ];
+
+  postInstall = ''
+    mv $out/bin/daemon $out/bin/go-librespot
+  '';
+
+  meta = {
+    description = "Yet another open source Spotify client, written in Go";
+    mainProgram = "go-librespot";
+    homepage = "https://github.com/devgianlu/go-librespot";
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [
+      sweenu
+      emilylange
+    ];
+  };
+})
@@ -179,11 +179,11 @@ let

  linux = stdenvNoCC.mkDerivation (finalAttrs: {
    inherit pname meta passthru;
-    version = "150.0.7871.100";
+    version = "150.0.7871.114";

    src = fetchurl {
      url = "https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_${finalAttrs.version}-1_amd64.deb";
-      hash = "sha256-SbV/ACzm31CA1fglQtxc8RdBuTeal/HXXXtUFa0IYHk=";
+      hash = "sha256-DxnmjcpXSEljLiUinxWFPSvqwz+gZJj+7UPzRii8LVM=";
    };

    # With strictDeps on, some shebangs were not being patched correctly
@@ -289,11 +289,11 @@ let

  darwin = stdenvNoCC.mkDerivation (finalAttrs: {
    inherit pname meta passthru;
-    version = "150.0.7871.101";
+    version = "150.0.7871.115";

    src = fetchurl {
-      url = "http://dl.google.com/release2/chrome/fwvlzsetnpzv5sb7rdxd5a6nke_150.0.7871.101/GoogleChrome-150.0.7871.101.dmg";
-      hash = "sha256-cumG2dMFXZuYCWWdIn6iJT0Bd24hauVMfXZzbDFVvuU=";
+      url = "http://dl.google.com/release2/chrome/acd57hhfrcygivr2dnxpq2q56zka_150.0.7871.115/GoogleChrome-150.0.7871.115.dmg";
+      hash = "sha256-AB16I7Tl/E4F4ydXHSLeyoKAWNwP7JSL0wLyrUvn3FE=";
    };

    dontPatch = true;
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "govc";
-  version = "0.55.0";
+  version = "0.55.1";

  src = fetchFromGitHub {
    owner = "vmware";
    repo = "govmomi";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-wz0+x0abPEScOYdwm94YW7KxGX6SANh0nf2TpgcyHmk=";
+    hash = "sha256-jhehpkwLa8wWdwMSazbZCT3zV4IUopUciSgPE71nTgQ=";
  };

-  vendorHash = "sha256-pPni473N8W3hrAITQ2hhIfcRiKZu1XvDzJH9rOrSxt8=";
+  vendorHash = "sha256-6DKE4rs7w070ZreAffs3i7bcJ075eCn9MrvVlOTANPo=";

  sourceRoot = "${finalAttrs.src.name}/govc";

@@ -8,13 +8,13 @@

 buildGoLatestModule (finalAttrs: {
  pname = "govulncheck";
-  version = "1.5.0";
+  version = "1.6.0";

  src = fetchFromGitHub {
    owner = "golang";
    repo = "vuln";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Bd1YLR0grKXrvvWxDzDG2ZZ1moqY1EA9NyOtp0eBegk=";
+    hash = "sha256-6gPOteVgKe9ARGkS2wseorG3X0+ep/PD5qAA+59klWs=";
  };

  patches = [
@@ -24,7 +24,7 @@ buildGoLatestModule (finalAttrs: {
    })
  ];

-  vendorHash = "sha256-9daNbbrw0ZVw2aWPkMEGgIA6rhiEkL3OlhYGWUSplQw=";
+  vendorHash = "sha256-n3U2vX6ByF61oz6BWjMk0Ehwz3W/zMuUNM2+T0rbxPw=";

  subPackages = [
    "cmd/govulncheck"
@@ -26,13 +26,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "gvm-libs";
-  version = "23.7.0";
+  version = "23.8.0";

  src = fetchFromGitHub {
    owner = "greenbone";
    repo = "gvm-libs";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-cRSvrmasKrk0xMnq7/bF0F6wWSKNcXDRm+p/JlciPGo=";
+    hash = "sha256-+fd/f5bYjKaeDGj0cpe4vNqm6TvIcWxJ3pfy90oQkbI=";
  };

  postPatch = ''
@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "hcloud";
-  version = "1.64.1";
+  version = "1.66.0";

  src = fetchFromGitHub {
    owner = "hetznercloud";
    repo = "cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-vhkajr/p64FkRMvtGLZZjCCB6Xc59SbumDaIiNX53ts=";
+    hash = "sha256-Ixx92yY0dC8g8YPQtqYUCMA5k2W9IAwRreSzwg73/04=";
  };

-  vendorHash = "sha256-JtaI5v8H6Co7BuUS25zfhLYiqLKXMFlP7L2d9UEyZAo=";
+  vendorHash = "sha256-f960IUoBBxOEIdFTuJG6J5CKFdcSrZBrKDrMk28RzM4=";

  ldflags = [
    "-s"
@@ -11,16 +11,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "hddfancontrol";
-  version = "2.1.1";
+  version = "2.1.2";

  src = fetchFromGitHub {
    owner = "desbma";
    repo = "hddfancontrol";
    tag = finalAttrs.version;
-    hash = "sha256-Fqkx2pO97RCFa1vFTCuMsO+WVs/2WGLsHwyKcuEnq5I=";
+    hash = "sha256-SQXzVUv+l14xUNJ7riXFwEq/T0HnL1Gmo6/bjU33Qz0=";
  };

-  cargoHash = "sha256-8NNFL5aeQjdXP/qw9yxL2fFOJaLUVM2GJ0YSW5OuR4A=";
+  cargoHash = "sha256-MJ9Cm/mzas8mapRF0vmwR6ivWTZevnhkxT5987dypD8=";

  nativeBuildInputs = [
    makeWrapper
@@ -1,78 +1,68 @@
 {
  buildDotnetModule,
-  buildNpmPackage,
  dotnet-sdk,
  fetchFromGitHub,
+  fetchNpmDeps,
  lib,
  nixosTests,
-  writeShellApplication,
-  _experimental-update-script-combinators,
+  nodejs,
+  npmHooks,
  nix-update-script,
 }:

-let
-  version = "1.0.33.0";
+buildDotnetModule (finalAttrs: {
+  pname = "immichframe";
+  version = "1.0.35.0";
+
  src = fetchFromGitHub {
    owner = "immichFrame";
    repo = "immichFrame";
-    tag = "v${version}";
-    hash = "sha256-b8hfzNZJz9XCRO4UfzwK5OsrgqV2F5wnZlRH7h3Eo9Q=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-VET0em+CyJzXPlCXjozj6SDhjD26lH94AETFKGG895I=";
  };

-  api = buildDotnetModule {
-    pname = "immichframe";
-    inherit version src;
-    projectFile = "ImmichFrame.WebApi/ImmichFrame.WebApi.csproj";
-    nugetDeps = ./deps.json;
-    dotnet-runtime = dotnet-sdk.aspnetcore;
+  projectFile = "ImmichFrame.WebApi/ImmichFrame.WebApi.csproj";
+  nugetDeps = ./deps.json;
+  dotnet-runtime = dotnet-sdk.aspnetcore;

-    meta.mainProgram = "ImmichFrame.WebApi";
+  nativeBuildInputs = [
+    npmHooks.npmConfigHook
+    nodejs
+  ];
+
+  npmRoot = "immichFrame.Web";
+
+  npmDeps = fetchNpmDeps {
+    src = "${finalAttrs.src}/${finalAttrs.npmRoot}";
+    hash = "sha256-RyMY5ooC6Q+W+Y24ILv+WCcWLMDToZ52yefFuoAYubY=";
  };

-  frontend = buildNpmPackage {
-    pname = "immichframe-frontend";
-    inherit version src;
-
-    sourceRoot = "${src.name}/immichFrame.Web";
-
-    npmBuildScript = "build";
-    npmDepsHash = "sha256-PjbbBpYYUHH4oucJuk0FCdJa0LzTlkQnjkZ5MLziqTY=";
-
-    installPhase = ''
-      runHook preInstall
-
-      mkdir $out
-      cp -r build/ $out/wwwroot
-
-      runHook postInstall
-    '';
-  };
-in
-writeShellApplication {
-  name = "ImmichFrame";
-
-  text = ''
-    cd ${frontend}
-    exec ${lib.getExe api} "$@"
+  preBuild = ''
+    pushd ${finalAttrs.npmRoot}
+    npm run build
+    popd
  '';

+  postInstall = ''
+    cp -r ${finalAttrs.npmRoot}/build/* $out/lib/immichframe/wwwroot/
+  '';
+
+  makeWrapperArgs = [
+    "--chdir ${placeholder "out"}/lib/immichframe"
+  ];
+
  passthru = {
-    inherit api frontend;
-    updateScript = _experimental-update-script-combinators.sequence [
-      (nix-update-script { attrPath = "immichframe.api"; })
-      (nix-update-script {
-        attrPath = "immichframe.frontend";
-        extraArgs = [ "--version=skip" ];
-      })
-    ];
+    updateScript = nix-update-script { };
    tests = { inherit (nixosTests) immichframe; };
  };

  meta = {
+    changelog = "https://github.com/immichFrame/ImmichFrame/releases/tag/${finalAttrs.src.tag}";
    description = "Display your photos from Immich as a digital photo frame";
    homepage = "https://immichframe.dev";
    license = lib.licenses.gpl3Only;
+    mainProgram = "ImmichFrame.WebApi";
    maintainers = with lib.maintainers; [ jfly ];
    platforms = lib.platforms.all;
  };
-}
+})
@@ -8,15 +8,15 @@

 buildGoModule (finalAttrs: {
  pname = "infracost";
-  version = "0.10.44";
+  version = "0.10.45";

  src = fetchFromGitHub {
    owner = "infracost";
    rev = "v${finalAttrs.version}";
    repo = "infracost";
-    sha256 = "sha256-7TH7ZWANQMlhfpCP5OdiQCL6OsFP1RK5YGV8hGuouBY=";
+    sha256 = "sha256-ionW8XChMCQxekKqbiNc6wSu5pxdG59WX2CxlCqStXk=";
  };
-  vendorHash = "sha256-ZG6DjYcHvEii55ayx6x168L2v04n/pAZRqqQ7DKvugA=";
+  vendorHash = "sha256-fwMVYzbCHENra1ySNMQnWF/JnYngO/oHgxZvMZ2+3TQ=";

  ldflags = [
    "-s"
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "ipatool";
-  version = "2.3.0";
+  version = "2.3.1";

  src = fetchFromGitHub {
    owner = "majd";
    repo = "ipatool";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-ME3fvYziI3fjlQ0KBPMJJXsCG3hW0z2iz1gKoBh0grk=";
+    hash = "sha256-ZGy7Oxpjb5ONe//ImAN3bQwl+G9udvaf9V7heLq625c=";
  };

-  vendorHash = "sha256-TmP7NjDrxTcsnVU9Hi4S1wXSzQNCJOVH02j5QpjvMgw=";
+  vendorHash = "sha256-3H7ct0FIvOabXp8ShpRWltdMhyPRyuUAAxtLQTvgzF8=";

  ldflags = [
    "-s"
@@ -8,7 +8,7 @@

 buildGoModule (finalAttrs: {
  pname = "k8sgpt";
-  version = "0.4.35";
+  version = "0.4.36";

  nativeBuildInputs = [
    installShellFiles
@@ -18,10 +18,10 @@ buildGoModule (finalAttrs: {
    owner = "k8sgpt-ai";
    repo = "k8sgpt";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-JqoBjCxw2Zx/E3mXYApODUiJiC3XNpaYLXPCie5GOVA=";
+    hash = "sha256-J8imL+Rkp7/0xMppjMSXFdLTH3CwLvS1+Tbt6CWI6SQ=";
  };

-  vendorHash = "sha256-tkS38PK86jp2uEWiB8eh4jQGWPirAilmgIqt1TOAPL8=";
+  vendorHash = "sha256-XLlBDFbvjr+Bun9V36MYwknz7SPw39ovd0b9gCht7L8=";

  # https://nixos.org/manual/nixpkgs/stable/#var-go-CGO_ENABLED
  env.CGO_ENABLED = 0;
@@ -35,7 +35,7 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
    description = "Keyboard Layout Maker";
    homepage = "https://github.com/OneDeadKey/kalamine/";
    license = lib.licenses.mit;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ xaltsc ];
    mainProgram = "kalamine";
  };
 })
@@ -5,14 +5,14 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "kin-openapi";
-  version = "0.140.0";
-  vendorHash = "sha256-o6JX0WWT0402VUDz2Y7Clq7txcjvAQhrLJk+8+Xj78k=";
+  version = "0.141.0";
+  vendorHash = "sha256-uprdzJnaxd1UyEdZFFPvmo2Xu/QXJdheC1eqkyKY9Zc=";

  src = fetchFromGitHub {
    owner = "getkin";
    repo = "kin-openapi";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-KmESbc9oPlBBTN9Mgx5xlBWcT6/tVXepxqd/uTWVpAk=";
+    hash = "sha256-1qyOCA5R+OWnPsEX0I5AJf/6ckWGz5dtMiKFCCA3TQY=";
  };

  checkFlags =
@@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "kine";
-  version = "0.16.0";
+  version = "0.16.3";

  src = fetchFromGitHub {
    owner = "k3s-io";
    repo = "kine";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-1hVhmWWVqhFceJhzFKuqF66YFHRoue+wrqrF0KtW3No=";
+    hash = "sha256-6/aaG8SE8spR0vNCHSkIRTQf5HoBnRFKjkO01uJHorc=";
  };

-  vendorHash = "sha256-LJ9CxLxIzydXyz5EdgXzo16X6oJWguIQwKlzQ33fGeU=";
+  vendorHash = "sha256-8AWGYrnawnPnAqGr8pDzh6ePzyuY5Q5fy4cdphYELB8=";

  ldflags = [
    "-s"
@@ -13,14 +13,7 @@ let
  python = python3.override {
    self = python;
    packageOverrides = self: super: {
-      mistune = super.mistune.overridePythonAttrs (old: rec {
-        version = "2.0.5";
-        src = fetchPypi {
-          inherit (old) pname;
-          inherit version;
-          hash = "sha256-AkYRPLJJLbh1xr5Wl0p8iTMzvybNkokchfYxUc7gnTQ=";
-        };
-      });
+      mistune = self.mistune_2;
    };
  };
 in
@@ -8,17 +8,17 @@

 buildGoModule (finalAttrs: {
  pname = "matrix-alertmanager-receiver";
-  version = "2026.6.24";
+  version = "2026.7.8";
  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "metio";
    repo = "matrix-alertmanager-receiver";
    tag = finalAttrs.version;
-    hash = "sha256-NEe75EptmzDqoWlrDmW6lNioFse3cZGsza1VcDJBr80=";
+    hash = "sha256-BOPdEgAhzY5o4YaPxVKkwsWZRdsaymAK0c13FTmLzMQ=";
  };

-  vendorHash = "sha256-6CDR3V44EQRCgsGBE/SvNbh4dYVAW/dg/HZntiCoxWI=";
+  vendorHash = "sha256-hVJZ+SoWCe9juq5ut7yHr+4nshORH1uHLIPCzpB+4Nc=";

  env.CGO_ENABLED = "0";

@@ -7,7 +7,7 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "mdns-scanner";
-  version = "0.27.3";
+  version = "0.27.4";

  __structuredAttrs = true;

@@ -15,10 +15,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "CramBL";
    repo = "mdns-scanner";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-daJEiYOF1N2m4zVbsBuRl8KGrDs62GGDP9lCok9r/3w=";
+    hash = "sha256-oEXqaatURQxLnWY1086Gf6AJDpc6q+4Yreffsw2egEI=";
  };

-  cargoHash = "sha256-eCB5nVEucMFX/wz9zrAKO9d3yI7BK/URpjlU39Y4g4I=";
+  cargoHash = "sha256-lRxGqNIctckQZioP2jjMEjSyLUlI0wN9nIv0ym3YCrI=";

  passthru.updateScript = nix-update-script { };

@@ -38,6 +38,15 @@ stdenv.mkDerivation (finalAttrs: {
      url = "https://github.com/Komet/MediaElch/commit/dbea12fbf2c1fe603819392aa2a181cffa168548.patch";
      hash = "sha256-Lv6rvjKbRNr5XrdZhPyw4S4RRCOnfAGhWgcSLo0gqS8=";
    })
+
+    # fix from: https://github.com/Komet/MediaElch/pull/1995
+    # TMDb rejects a duplicate include_adult query param with HTTP 400 (issue #1992).
+    # Remove once MediaElch > 2.12.0 is released.
+    (fetchpatch {
+      name = "fix-tmdb-duplicate-include-adult.patch";
+      url = "https://github.com/Komet/MediaElch/commit/f68419e746455d3c7eb6d95a4a1da7a6f7a5c505.patch";
+      hash = "sha256-u+ScJDFX2IIpjXV58MCp1uJGx9QU+7cbq+e1qZPMWns=";
+    })
  ];

  nativeBuildInputs = [
@@ -40,7 +40,7 @@ assert

 pythonPackages.buildPythonApplication (finalAttrs: {
  pname = "music-assistant";
-  version = "2.9.4";
+  version = "2.9.6";
  pyproject = true;
  __structuredAttrs = true;

@@ -48,7 +48,7 @@ pythonPackages.buildPythonApplication (finalAttrs: {
    owner = "music-assistant";
    repo = "server";
    tag = finalAttrs.version;
-    hash = "sha256-PiSBghhlxknijRqghkO8wn1CB2XqaJrjrvGNvZUlNbo=";
+    hash = "sha256-lEbWQi6iUvqL2MXk/ZqkdX4Ou5pFWIVi6qfSyWCs8uQ=";
  };

  patches = [
@@ -146,6 +146,7 @@ pythonPackages.buildPythonApplication (finalAttrs: {
      gql
      ifaddr
      librosa
+      markdownify
      mashumaro
      modern-colorthief
      music-assistant-frontend
@@ -1,7 +1,7 @@
 # Do not edit manually, run ./update-providers.py

 {
-  version = "2.9.4";
+  version = "2.9.6";
  builtins = [
    "builtin"
    "coverartarchive"
@@ -272,10 +272,8 @@
      ps: with ps; [
        pkce
      ];
-    spotify_connect =
-      ps: with ps; [
-        pkce
-      ];
+    spotify_connect = ps: [
+    ];
    squeezelite =
      ps: with ps; [
        aioslimproto
@@ -8,13 +8,13 @@

 stdenv.mkDerivation {
  pname = "nanosvg";
-  version = "0-unstable-2026-05-18";
+  version = "0-unstable-2026-07-10";

  src = fetchFromGitHub {
    owner = "memononen";
    repo = "nanosvg";
-    rev = "48120e91e64b2f409ed600cdfd6d790a49ba11ab";
-    hash = "sha256-onjmiWQPftr4AWySwJOpMLZ3WQGvUp9wj9isdUyNIPc=";
+    rev = "239e102ec2c691f2902e20ace2ed36ee4a35cfe6";
+    hash = "sha256-Vc0cehgA39WSXFEekVva+0gEARz7QTFc1nK85IQf1KI=";
  };

  nativeBuildInputs = [ cmake ];
@@ -20,13 +20,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "neatvnc";
-  version = "1.0.0";
+  version = "1.0.1";

  src = fetchFromGitHub {
    owner = "any1";
    repo = "neatvnc";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-yEWNiazRxc8G7ToqOcTtCXEuBCgXO64v31Xx1YeOPCM=";
+    hash = "sha256-ZQdx3NvoFh+lubF1tglYBeEBb4XpD5I1mN3ufibD+uA=";
  };

  strictDeps = true;
@@ -36,7 +36,7 @@ let
 in
 effectiveStdenv.mkDerivation (finalAttrs: {
  pname = "nixl";
-  version = "1.3.0";
+  version = "1.3.1";

  __structuredAttrs = true;
  strictDeps = true;
@@ -45,7 +45,7 @@ effectiveStdenv.mkDerivation (finalAttrs: {
    owner = "ai-dynamo";
    repo = "nixl";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-rEeR7UnpIill/QLNZAbjPhtggJn/fO9SNEcPwqKgTGc=";
+    hash = "sha256-nimu8WSeG+BHPx0VQ56TwL0ThVwuGOi2OHLvso46oe4=";
  };

  postPatch =
@@ -7,7 +7,7 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "nvitop";
-  version = "1.7.0";
+  version = "1.7.1";
  pyproject = true;
  __structuredAttrs = true;

@@ -15,7 +15,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
    owner = "XuehaiPan";
    repo = "nvitop";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-If32hdXWABv8UgSrUlarelQxZEe1h0B3poAAxuN/tN0=";
+    hash = "sha256-x6ONS9tGzRa+z2djZ17w14lyyluuTMam75TwujHrH1E=";
  };

  build-system = with python3Packages; [ setuptools ];
@@ -34,13 +34,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "nzbget";
-  version = "26.1";
+  version = "26.2";

  src = fetchFromGitHub {
    owner = "nzbgetcom";
    repo = "nzbget";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-sZwUixSoqs0l2KOx6WnvLTCUGsSAO4QCTKqnhD58r70=";
+    hash = "sha256-0HNTEpaXD9tpMNsJ5UPPwW/XO2TX0IwibskSjpjvxHw=";
  };

  patches = [
@@ -0,0 +1,46 @@
+{
+  cargo,
+  meson,
+  ninja,
+  oo7,
+  pkg-config,
+  rustPlatform,
+  rustc,
+  stdenv,
+  systemdLibs,
+}:
+stdenv.mkDerivation (finalAttrs: {
+  pname = "oo7-pam";
+  inherit (oo7) version src cargoDeps;
+
+  sourceRoot = "${finalAttrs.src.name}/pam";
+  cargoRoot = "../";
+
+  strictDeps = true;
+  __structuredAttrs = true;
+  separateDebugInfo = true;
+
+  nativeBuildInputs = [
+    pkg-config
+    meson
+    ninja
+    rustPlatform.cargoSetupHook
+    rustc
+    cargo
+  ];
+
+  buildInputs = [
+    systemdLibs
+  ];
+
+  meta = {
+    inherit (oo7.meta)
+      homepage
+      changelog
+      license
+      maintainers
+      platforms
+      ;
+    description = "${oo7.meta.description} (PAM modules)";
+  };
+})
@@ -1,4 +1,5 @@
 {
+  lib,
  cargo,
  meson,
  ninja,
@@ -8,6 +9,7 @@
  rustc,
  stdenv,
  systemdLibs,
+  useWrappedDaemon ? true,
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "oo7-server";
@@ -29,6 +31,11 @@ stdenv.mkDerivation (finalAttrs: {
    systemdLibs
  ];

+  postFixup = lib.optionalString useWrappedDaemon ''
+    substituteInPlace "$out/share/systemd/user/oo7-daemon.service" \
+      --replace-fail "$out/libexec/oo7-daemon" "/run/wrappers/bin/oo7-daemon"
+  '';
+
  meta = {
    inherit (oo7.meta)
      homepage
@@ -144,7 +144,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
      (lib.optionalString stdenvNoCC.hostPlatform.isDarwin ''
        mkdir -p $out/Applications $out/bin
        mv packages/desktop/dist/mac-*/OpenCode.app "$out/Applications/OpenCode.app"
-        ln -s "$out/Applications/OpenCode.app/Contents/MacOS/OpenCode" $out/bin/OpenCode
+        ln -s "$out/Applications/OpenCode.app/Contents/MacOS/OpenCode" $out/bin/opencode-desktop
      '')
      (lib.optionalString stdenvNoCC.hostPlatform.isLinux ''
        mkdir -p $out/opt/opencode-desktop
@@ -180,7 +180,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
    homepage = "https://opencode.ai";
    inherit (opencode.meta) platforms;
    license = lib.licenses.mit;
-    mainProgram = if stdenvNoCC.hostPlatform.isDarwin then "OpenCode" else "opencode-desktop";
+    mainProgram = "opencode-desktop";
    maintainers = with lib.maintainers; [ xiaoxiangmoe ];
  };
 })
@@ -2,7 +2,7 @@

 source "https://rubygems.org"

-gem "puppet"
+gem "openvox", "~> 8.26"

 # ruby used to provide these in stdlib but now they must be defined
 gem "base64"
@@ -5,33 +5,42 @@ GEM
    benchmark (0.4.1)
    concurrent-ruby (1.3.5)
    deep_merge (1.2.2)
-    facter (4.10.0)
-      hocon (~> 1.3)
-      thor (>= 1.0.1, < 1.3)
    fast_gettext (3.1.0)
      prime
+    fiddle (1.1.8)
    forwardable (1.3.3)
    getoptlong (0.2.1)
    hocon (1.4.0)
    locale (2.1.4)
    logger (1.7.0)
-    multi_json (1.17.0)
+    openfact (5.5.0)
+      base64 (>= 0.1, < 0.4)
+      benchmark (< 0.6)
+      hocon (~> 1.3)
+      logger (~> 1.5)
+      ostruct (< 0.7)
+      thor (>= 1.0.1, < 2)
+      tsort (< 0.3)
+    openvox (8.26.2)
+      base64 (>= 0.1, < 0.4)
+      benchmark (>= 0.2, < 0.6)
+      concurrent-ruby (~> 1.0)
+      deep_merge (~> 1.0)
+      fast_gettext (>= 2.1, < 5)
+      fiddle (~> 1.1)
+      getoptlong (~> 0.2.0)
+      locale (~> 2.1)
+      openfact (~> 5.0)
+      ostruct (>= 0.5.5, < 0.7)
+      puppet-resource_api (~> 2.0)
+      racc (~> 1.5)
+      scanf (~> 1.0)
+      semantic_puppet (~> 1.0)
    ostruct (0.6.3)
    prime (0.1.4)
      forwardable
      singleton
-    puppet (8.10.0)
-      concurrent-ruby (~> 1.0)
-      deep_merge (~> 1.0)
-      facter (>= 4.3.0, < 5)
-      fast_gettext (>= 2.1, < 4)
-      getoptlong (~> 0.2.0)
-      locale (~> 2.1)
-      multi_json (~> 1.13)
-      puppet-resource_api (~> 1.5)
-      scanf (~> 1.0)
-      semantic_puppet (~> 1.0)
-    puppet-resource_api (1.9.0)
+    puppet-resource_api (2.0.0)
      hocon (>= 1.0)
    racc (1.8.1)
    scanf (1.0.0)
@@ -40,6 +49,7 @@ GEM
    syslog (0.3.0)
      logger
    thor (1.2.2)
+    tsort (0.2.0)

 PLATFORMS
  aarch64-linux
@@ -48,10 +58,10 @@ PLATFORMS
 DEPENDENCIES
  base64
  benchmark
+  openvox (~> 8.26)
  ostruct
-  puppet
  racc
  syslog

 BUNDLED WITH
-   2.6.9
+   2.7.2
@@ -39,20 +39,6 @@
    };
    version = "1.2.2";
  };
-  facter = {
-    dependencies = [
-      "hocon"
-      "thor"
-    ];
-    groups = [ "default" ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "17d561xf4s5016fm9jkfkkafn6660g04fz1yp5xfvkb0j4xj32mp";
-      type = "gem";
-    };
-    version = "4.10.0";
-  };
  fast_gettext = {
    dependencies = [ "prime" ];
    groups = [ "default" ];
@@ -64,6 +50,16 @@
    };
    version = "3.1.0";
  };
+  fiddle = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "1vifygrkw22gcd4wzh8gc4pv6h1zpk6kll6mmprrf5174wvfxa3z";
+      type = "gem";
+    };
+    version = "1.1.8";
+  };
  forwardable = {
    groups = [ "default" ];
    platforms = [ ];
@@ -114,15 +110,50 @@
    };
    version = "1.7.0";
  };
-  multi_json = {
+  openfact = {
+    dependencies = [
+      "base64"
+      "benchmark"
+      "hocon"
+      "logger"
+      "ostruct"
+      "thor"
+      "tsort"
+    ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "06sabsvnw0x1aqdcswc6bqrqz6705548bfd8z22jxgxfjrn1yn3n";
+      sha256 = "1pjghgn87hfarldbv6104n1yydlq3fsxy05rx34nrpi3z7qiwqi0";
      type = "gem";
    };
-    version = "1.17.0";
+    version = "5.5.0";
+  };
+  openvox = {
+    dependencies = [
+      "base64"
+      "benchmark"
+      "concurrent-ruby"
+      "deep_merge"
+      "fast_gettext"
+      "fiddle"
+      "getoptlong"
+      "locale"
+      "openfact"
+      "ostruct"
+      "puppet-resource_api"
+      "racc"
+      "scanf"
+      "semantic_puppet"
+    ];
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "14c6bqfmmqp43z4jpv21g1m5amn3m0anyz3w6zz3v3ci0ma32b7h";
+      type = "gem";
+    };
+    version = "8.26.2";
  };
  ostruct = {
    groups = [ "default" ];
@@ -148,38 +179,16 @@
    };
    version = "0.1.4";
  };
-  puppet = {
-    dependencies = [
-      "concurrent-ruby"
-      "deep_merge"
-      "facter"
-      "fast_gettext"
-      "getoptlong"
-      "locale"
-      "multi_json"
-      "puppet-resource_api"
-      "scanf"
-      "semantic_puppet"
-    ];
-    groups = [ "default" ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "0fia3ji6isnqz4a31aq8k4nd8p7vkxn80hhgqfdc8kkrba7xxxgj";
-      type = "gem";
-    };
-    version = "8.10.0";
-  };
  puppet-resource_api = {
    dependencies = [ "hocon" ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0rxy5s7hl707x4sc1b4v2yqyii6pkym2gmsam3ri0f0xmmzyg0jb";
+      sha256 = "1i6rdwkc75h4py7cx66gkc42mdg5bfwhdxw713dcpy75snszqja6";
      type = "gem";
    };
-    version = "1.9.0";
+    version = "2.0.0";
  };
  racc = {
    groups = [ "default" ];
@@ -242,4 +251,14 @@
    };
    version = "1.2.2";
  };
+  tsort = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "17q8h020dw73wjmql50lqw5ddsngg67jfw8ncjv476l5ys9sfl4n";
+      type = "gem";
+    };
+    version = "0.2.0";
+  };
 }
@@ -0,0 +1,38 @@
+{
+  bundlerApp,
+  bundlerUpdateScript,
+  lib,
+  openvox,
+  ruby_3_4,
+  testers,
+}:
+((bundlerApp.override { ruby = ruby_3_4; }) {
+  pname = "openvox";
+  gemdir = ./.;
+  exes = [ "puppet" ];
+
+  passthru = {
+    tests.version = testers.testVersion {
+      package = openvox;
+      command = "HOME=$(mktemp -d) puppet --version";
+      inherit ((import ./gemset.nix).openvox) version;
+    };
+    updateScript = bundlerUpdateScript "openvox";
+  };
+
+  meta = {
+    description = "Server automation framework and application";
+    homepage = "https://github.com/OpenVoxProject/openvox";
+    changelog = "https://github.com/OpenVoxProject/openvox/blob/main/CHANGELOG.md";
+    license = lib.licenses.asl20;
+    mainProgram = "puppet";
+    maintainers = with lib.maintainers; [ skyethepinkcat ];
+  };
+}).overrideAttrs
+  # Workaround `bundlerApp` not specifying `__structuredAttrs = true` and `strictDeps = true` for its result package.
+  {
+    # TODO(@ShamrockLee, @skyethepinkcat): Revert/remove after PR #539303 lands on the master branch.
+    __structuredAttrs = true;
+    # TODO(@ShamrockLee, @skyethepinkcat): Revert/remove after PR #540069 lands on the master branch.
+    strictDeps = true;
+  }
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "ory";
-  version = "1.3.0";
+  version = "1.3.1";

  src = fetchFromGitHub {
    owner = "ory";
    repo = "cli";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-NO4F9QE0wMsHDDcmJWx+1QVg/RI7ZsqkLJDbgigZIjs=";
+    hash = "sha256-MhqUg0rQigCfvbFEGrm+mBsO8ARDCxQztzK+05/4cvc=";
  };

  nativeBuildInputs = [
@@ -34,7 +34,7 @@ buildGoModule (finalAttrs: {
    "sqlite"
  ];

-  vendorHash = "sha256-YoEM/dhBWLzpx2J0/uQrUhfMdRRH++9/MzycHTnHlRQ=";
+  vendorHash = "sha256-CbiFE/kq0w8lFJKlJt3e/ONv3ucLYHec6dWoqAJ3yuk=";
  postInstall = ''
    mv $out/bin/cli $out/bin/ory
  ''
@@ -7,13 +7,13 @@

 buildGoModule (finalAttrs: {
  pname = "oui";
-  version = "2.0.7";
+  version = "2.1.0";

  src = fetchFromGitHub {
    owner = "thatmattlove";
    repo = "oui";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-lwjDFd2rxMh7kHOuwgIeA2/gnzHoNkGKTQGd/xqshZY=";
+    hash = "sha256-8hzemGUeUU1QmXJogkr4LLpSgwt1BMqTNTft8PxwmDQ=";
  };

  vendorHash = "sha256-EOu9imj0YwYhHX7ZzE9BzhkoDitC5AHjlwoWmQs0Rj4=";
@@ -1,28 +1,20 @@
 {
  lib,
  stdenvNoCC,
-  fetchFromGitHub,
+  fetchzip,
+  installFonts,
 }:

-stdenvNoCC.mkDerivation {
+stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "oxygenfonts";
-  version = "20160824";
+  version = "5.4.3";

-  src = fetchFromGitHub {
-    owner = "vernnobile";
-    repo = "oxygenFont";
-    rev = "62db0ebe3488c936406685485071a54e3d18473b";
-    hash = "sha256-0LKq8nChkDAb6U1sOUyga/DvzpDmIjoRn+2PB9rok4w=";
+  src = fetchzip {
+    url = "https://invent.kde.org/unmaintained/oxygen-fonts/-/archive/v${finalAttrs.version}/oxygen-fonts-v${finalAttrs.version}.zip";
+    hash = "sha256-N8fU5/iqgtFqaqdGuqbEVDsFCmVcHXLodo/T5NZMu8U=";
  };

-  installPhase = ''
-    runHook preInstall
-
-    mkdir -p $out/share/fonts/truetype
-    cp */Oxygen-Sans.ttf */Oxygen-Sans-Bold.ttf */OxygenMono-Regular.ttf $out/share/fonts/truetype
-
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];

  meta = {
    description = "Desktop/gui font for integrated use with the KDE desktop";
@@ -53,6 +45,7 @@ stdenvNoCC.mkDerivation {

    homepage = "https://github.com/vernnobile/oxygenFont";
    license = lib.licenses.ofl;
+    maintainers = with lib.maintainers; [ VarNepvius ];
    platforms = lib.platforms.all;
  };
-}
+})
@@ -29,7 +29,7 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "pandora-launcher-unwrapped";
-  version = "5.2.2";
+  version = "5.3.0";

  strictDeps = true;
  __structuredAttrs = true;
@@ -38,7 +38,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "Moulberry";
    repo = "PandoraLauncher";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-jUvCrz8srRRlXcrFWQ5Kx8V6KLc8cozZg+QYrcnMOUE=";
+    hash = "sha256-L8rUjbCrAV6D0HIKUzONYS9kY5rz2JLNzXg50u4GPJQ=";
  };

  # Currently the client id is hardcoded and must be patched like this.
@@ -0,0 +1,48 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  pkg-config,
+  openssl,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "pikpaktui";
+  version = "0.0.56";
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "Bengerthelorf";
+    repo = "pikpaktui";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-LUOVfjNutjtXk4omjSoJNA+b2sACnXZsRNlUB7oWD60=";
+  };
+
+  cargoHash = "sha256-lTLZm+gPH4qYfZSsZ4YXcz5Zd8U7JYX+b9U2wwm08ew=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  env.OPENSSL_NO_VENDOR = 1;
+
+  buildInputs = [ openssl ];
+
+  __darwinAllowLocalNetworking = true;
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { extraArgs = [ "--use-github-releases" ]; };
+
+  meta = {
+    description = "TUI and CLI client for PikPak cloud storage";
+    homepage = "https://app.snaix.homes/pikpaktui/";
+    downloadPage = "https://github.com/Bengerthelorf/pikpaktui/releases";
+    license = lib.licenses.asl20;
+    mainProgram = "pikpaktui";
+    maintainers = with lib.maintainers; [ chillcicada ];
+  };
+})
@@ -8,14 +8,7 @@ let
  # https://github.com/NixOS/nixpkgs/issues/348788
  pythonPackages = python3Packages.overrideScope (
    self: super: {
-      mistune = super.mistune.overridePythonAttrs (oldAttrs: rec {
-        version = "2.0.5";
-        src = fetchPypi {
-          inherit (oldAttrs) pname;
-          inherit version;
-          hash = "sha256-AkYRPLJJLbh1xr5Wl0p8iTMzvybNkokchfYxUc7gnTQ=";
-        };
-      });
+      mistune = self.mistune_2;
    }
  );
 in
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "prometheus-klipper-exporter";
-  version = "0.15.0";
+  version = "0.16.0";

  src = fetchFromGitHub {
    owner = "scross01";
    repo = "prometheus-klipper-exporter";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-TcGD7WjExo1/rgwVUSPmKFJEQZhttSgBIY3gKyfcwtQ=";
+    sha256 = "sha256-gKI39j4YGWRbKAD79QzhLyueDK0yrDviffifQkpeZio=";
  };

  vendorHash = "sha256-VebaCzdPGl0hOHRXvwZb4aDzXlDZ57v/QVYzuagvvOM=";
@@ -6,13 +6,13 @@

 buildGoModule (finalAttrs: {
  pname = "pulumi-esc";
-  version = "0.25.0";
+  version = "0.26.0";

  src = fetchFromGitHub {
    owner = "pulumi";
    repo = "esc";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-mtsbd66vjvy30khJxrCLd9RzUZGO9VPi9hfa7HIiq8s=";
+    hash = "sha256-hj2eRt/223kEWcgy8UdgQAn3oLS3Rr4A2srN+Iw0fKw=";
  };

  subPackages = "cmd/esc";
@@ -1,31 +0,0 @@
-{
-  bundlerApp,
-  bundlerUpdateScript,
-  lib,
-  puppet,
-  ruby_3_4,
-  testers,
-}:
-
-(bundlerApp.override { ruby = ruby_3_4; }) {
-  pname = "puppet";
-  gemdir = ./.;
-  exes = [ "puppet" ];
-
-  passthru = {
-    tests.version = testers.testVersion {
-      package = puppet;
-      command = "HOME=$(mktemp -d) puppet --version";
-      inherit ((import ./gemset.nix).puppet) version;
-    };
-    updateScript = bundlerUpdateScript "puppet";
-  };
-
-  meta = {
-    description = "Server automation framework and application";
-    homepage = "https://github.com/puppetlabs/puppet";
-    license = lib.licenses.asl20;
-    mainProgram = "puppet";
-    maintainers = with lib.maintainers; [ baloo ];
-  };
-}
@@ -9,16 +9,16 @@

 buildGoModule (finalAttrs: {
  pname = "roadrunner";
-  version = "2025.1.14";
+  version = "2025.1.15";

  src = fetchFromGitHub {
    owner = "roadrunner-server";
    repo = "roadrunner";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-0Mfu/De28tWCygJ5/QJnOzxk88aajx4Oq/Xm0TOXR0M=";
+    hash = "sha256-T7JWA/O25s7A/jSrWJJF4oJbQD0hQyCRt6vFiuz8kwE=";
  };

-  vendorHash = "sha256-KuATz7rVsDuGiyILvILaEpznI63sCHx0G+9D2vR+dx0=";
+  vendorHash = "sha256-OhfqfLYHCoBU8QyrpaHwKXtGZf5eK8ocfTyjtZxsgSg=";
  env.GOWORK = "off";

  subPackages = [ "cmd/rr" ];
@@ -14,7 +14,7 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "rufin";
-  version = "0.7.13";
+  version = "0.8.0";

  __structuredAttrs = true;

@@ -22,10 +22,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "screwys";
    repo = "Rufin";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-gY/Y+9D/9VlVrmYH+Cf7uP787yxhTyb0RyFRhiTjynM=";
+    hash = "sha256-N2JM0sRg32lQhRhajwfla0SVhxBgEp5cVEetFOXBqKE=";
  };

-  cargoHash = "sha256-DQRURA9IvUZC9gTvKIsAmO8uq8DwGGYTySDI7cGSxMU=";
+  cargoHash = "sha256-1KTEVLqlvgUO02hLnTbqjdfPS5z8Ra6qQG5s5H0S2fY=";

  strictDeps = true;

@@ -13,16 +13,16 @@

 buildGoModule (finalAttrs: {
  pname = "runme";
-  version = "3.16.17";
+  version = "3.17.1";

  src = fetchFromGitHub {
    owner = "runmedev";
    repo = "runme";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-1N1VQT+VJd+Pd9rltyEiF6s45GjB/ORqpbzzy9/ABGs=";
+    hash = "sha256-RnbyVVXxPw6w55ulhK3XIB/RPAsZqDLUXY4x/BLeAi8=";
  };

-  vendorHash = "sha256-51Hp00t/FlOL99uEe5R6ehTkLUfjrR8rw2LE8ERB1og=";
+  vendorHash = "sha256-bTXLDu2oF2HcPSPeEMyLvSm2SHjfWUMfkltMUnSwxIc=";

  nativeBuildInputs = [
    installShellFiles
@@ -9,7 +9,7 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "seaweedfs";
-  version = "4.38";
+  version = "4.39";

  src = fetchFromGitHub {
    owner = "seaweedfs";
@@ -22,10 +22,10 @@ buildGoModule (finalAttrs: {
      find "$out" -name .git -print0 | xargs -0 rm -rf
      popd
    '';
-    hash = "sha256-aSgww0a79FOphPKXo8l24ZA8eiOPW6jYtbJYB59qV90=";
+    hash = "sha256-cgjSdtdAk+C5Z3MXVfzcHZZ5ry60Y7n1OE0aIFb3/qI=";
  };

-  vendorHash = "sha256-xr1v41BMHSK/zxQM1CKzp8fCG6AdIEMb0TMsO2oaoXA=";
+  vendorHash = "sha256-Irc0AW/aZ5NApe3+teMDTAOswr8Wd9wxTWyZYKv2RFo=";

  nativeBuildInputs = [ installShellFiles ];

@@ -1,26 +1,33 @@
 {
  lib,
+  stdenv,
  rustPlatform,
  fetchCrate,

  fontconfig,
  libGL,
+  libx11,
+  libxcursor,
+  libxi,
+  libxkbcommon,
  pkg-config,
  qt6,
+  wayland,

+  autoPatchelfHook,
  nix-update-script,
  versionCheckHook,
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "slint-viewer";
-  version = "1.17.0";
+  version = "1.17.1";

  src = fetchCrate {
    inherit (finalAttrs) pname version;
-    hash = "sha256-2Zjt7kt9tCxDyixa7Az0cPXh3noR2BN7Nxrq2bdxkSs=";
+    hash = "sha256-Jo2nAYUx6N2fJvX4hHckRKr2gr6xsGW9lNMD45+/uNY=";
  };

-  cargoHash = "sha256-KaVPQ14QQpabaJVsyhsQ3j546j63Lp16AzQtuz49niY=";
+  cargoHash = "sha256-TsM2CFsNDu4SRPcDwAWoPOtWPMf/Z3R9HlSlh4Ly92s=";

  buildInputs = [
    qt6.qtbase
@@ -30,10 +37,21 @@ rustPlatform.buildRustPackage (finalAttrs: {
  ];

  nativeBuildInputs = [
+    autoPatchelfHook
    pkg-config
    qt6.wrapQtAppsHook
  ];

+  # stolen from the surfer package
+  runtimeDependencies = lib.optionals stdenv.hostPlatform.isLinux [
+    libGL
+    libx11
+    libxcursor
+    libxi
+    libxkbcommon
+    wayland
+  ];
+
  # There are no tests
  doCheck = false;
  doInstallCheck = true;
@@ -24,16 +24,16 @@
 let
  sparkle-service = buildGoModule {
    pname = "sparkle-service";
-    version = "0-unstable-2025-10-24";
+    version = "0-unstable-2026-07-04";

    src = fetchFromGitHub {
      owner = "xishang0128";
      repo = "sparkle-service";
-      rev = "fb7006438d6335c7ee9fbf4530b1821428385cab";
-      hash = "sha256-V1HwYbdUunLTWFhfW7EHDDkIQyKFq2mbUysndttIlTE=";
+      rev = "5acde12bde599553ffa3a95179897da60aaaf8a5";
+      hash = "sha256-urBrY+znJ9wNnyCWVrIE+IwIRgKUqgJQz+hrQ848lNI=";
    };

-    vendorHash = "sha256-1n4CJT7zh6uxg6fGAVQz/KVKqXelFoTtETFPARcbPb8=";
+    vendorHash = "sha256-gg9hcHyVDVFibVwErwCsJtru3TEFnSCpLbGXSgG6XxU=";

    meta.mainProgram = "sparkle-service";
  };
@@ -7,6 +7,7 @@
  extras ? [
    "decompress"
  ],
+  fetchpatch2,
 }:

 python3Packages.buildPythonApplication rec {
@@ -23,6 +24,12 @@ python3Packages.buildPythonApplication rec {
    (replaceVars ./ffmpeg-path.patch {
      ffmpeg = lib.getExe ffmpeg;
    })
+    # remove when bumping to >8.4.0
+    (fetchpatch2 {
+      name = "fix-read-timeout-test.patch";
+      url = "https://github.com/streamlink/streamlink/commit/a1875a2c85cef47ddf6b1375c3651d52c8e799a1.patch?full_index=1";
+      hash = "sha256-9C4NedVyuk0ed3JvpKtvxei3Wo+r4SPlQXbBpoRXZ4k=";
+    })
  ];

  nativeBuildInputs = with python3Packages; [
@@ -10,18 +10,18 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "svix-server";
-  version = "1.92.2";
+  version = "1.96.1";

  src = fetchFromGitHub {
    owner = "svix";
    repo = "svix-webhooks";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-6PFD/b2Jc9VQIO+9LTkNldc+eq/6eG/2ZyixkSUh11U=";
+    hash = "sha256-NRzumAmgpqCfoLC0s6cAUcQYCFMFD6MElhDFpW79CQs=";
  };

  sourceRoot = "${finalAttrs.src.name}/server";

-  cargoHash = "sha256-n+VY0C8ekJu3JRhUCMiiBS/PeMJoqM054CkrD+LEq2o=";
+  cargoHash = "sha256-IZ3YPEU4QpTia3ekvr1AQDZCrg4xUmEj82ZU0y/dDzM=";

  nativeBuildInputs = [ pkg-config ];

@@ -6,16 +6,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "ttdl";
-  version = "6.1.1";
+  version = "6.2.1";

  src = fetchFromGitHub {
    owner = "VladimirMarkelov";
    repo = "ttdl";
    rev = "v${finalAttrs.version}";
-    sha256 = "sha256-E2rhhg1RJOQDD0zAAYGfC52goLLmnWhbgfx6C7VSlAc=";
+    sha256 = "sha256-KapM/3SSBahJERNbotB4VkLGBXabU4vgPgaYKVaSmCU=";
  };

-  cargoHash = "sha256-e+cpHAdJzH6UYG2Bv4DpsItLx+lcCFch+K/pTLxMNS4=";
+  cargoHash = "sha256-/leNAKgCUjp7haQV831QY0qAOv7iVLPj2PNEpwPSYRA=";

  meta = {
    description = "CLI tool to manage todo lists in todo.txt format";
@@ -11,7 +11,7 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "unifi-controller";
-  version = "10.4.57";
+  version = "10.5.54";

  # See https://community.ui.com/releases or https://www.ui.com/download/unifi.
  #
@@ -19,7 +19,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  # as well.
  src = fetchurl {
    url = "https://dl.ui.com/unifi/${finalAttrs.version}/unifi_sysvinit_all.deb";
-    hash = "sha256-/DeM+M0r7D0zS/e3Lqv80YYeX65nucFnNUcRMhBbIHI=";
+    hash = "sha256-Ed6N6lbxPgCaDm7w9m8H/nlw9hBJELnzIKr0s7MoaYU=";
  };

  nativeBuildInputs = [
@@ -12,16 +12,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "usage";
-  version = "3.5.3";
+  version = "3.5.4";

  src = fetchFromGitHub {
    owner = "jdx";
    repo = "usage";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-j5aS+zjGyQhUNv59GACMwZuSpN/jBzZNbe2VoBfxF/Y=";
+    hash = "sha256-fqBcdbhoFOnlPqRSSaKPhG6IYilQHvwjgUGEkwQfBQY=";
  };

-  cargoHash = "sha256-xAENsXf/VW4nkRiXIA9DppD/PyjoU3fxu4UNPYGYTho=";
+  cargoHash = "sha256-0j17jlqEy+zbtaIS+pKZKE73j/QMaAvEExoS2TTunEs=";

  postPatch = ''
    substituteInPlace ./examples/*.sh \
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "vals";
-  version = "0.44.3";
+  version = "0.44.4";

  src = fetchFromGitHub {
    rev = "v${finalAttrs.version}";
    owner = "helmfile";
    repo = "vals";
-    sha256 = "sha256-Ll15CcLxlq72pfZdkC1TH8ajmIWh93oJ+wxUnf+smkk=";
+    sha256 = "sha256-R9TVsajh/IaXWAwdz2b85GuhNP9G/rP1CAxeMEqApt8=";
  };

-  vendorHash = "sha256-NiNPD0OISlxb3cJEmtYHejSYNIrPrIfWKAHoFhz576c=";
+  vendorHash = "sha256-xSeT1QnQBj66n9hexSxFi3NHdR2PArljJQqL9p6pdPc=";

  proxyVendor = true;

@@ -5,6 +5,7 @@
  darwin,
  fetchFromGitHub,
  fetchpatch2,
+  llvmPackages,
  nix-update-script,
  testers,
  vfkit,
@@ -33,12 +34,17 @@ buildGoModule rec {

  nativeBuildInputs = [
    darwin.sigtool
+    # TODO: Remove this when NixOS/nixpkgs#536365 reaches master.
+    llvmPackages.lld
  ];

  buildInputs = [
    apple-sdk_15
  ];

+  # TODO: Remove this when NixOS/nixpkgs#536365 reaches master.
+  env.NIX_CFLAGS_LINK = "-fuse-ld=${lib.getExe' llvmPackages.lld "ld64.lld"}";
+
  postFixup = ''
    codesign --entitlements vf.entitlements -f -s - $out/bin/vfkit
  '';
@@ -9,13 +9,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "video-compare";
-  version = "20260502";
+  version = "20260708";

  src = fetchFromGitHub {
    owner = "pixop";
    repo = "video-compare";
    tag = finalAttrs.version;
-    hash = "sha256-o03WamkeP+6pViDtmDr5yzHzR0A+UvPT9o/bHuxmDbY=";
+    hash = "sha256-4wmbw+6BBMl+dY6UXYDFAyHA7RRHPwqhppn52Tkvz2k=";
  };

  postPatch = ''
@@ -66,6 +66,8 @@ stdenv.mkDerivation (finalAttrs: {
    "-DBUILD_LAYER_SUPPORT_FILES=ON"
    # Hide dev warnings that are useless for packaging
    "-Wno-dev"
+    # Don't run update_deps.py which tries to git clone dependencies
+    "-DUPDATE_DEPS=OFF"
  ];

  # Tests require access to vulkan-compatible GPU, which isn't
@@ -20,13 +20,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "wayvnc";
-  version = "0.10.0";
+  version = "0.10.1";

  src = fetchFromGitHub {
    owner = "any1";
    repo = "wayvnc";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-+CAH2jcIIQqImonWeWxMQyTtEEuuQlaGyl/ajPfClh8=";
+    hash = "sha256-XVu+sj7O6usFXljkGvQHU9KARjW9jYhFltgbY900TyA=";
  };

  strictDeps = true;
--- a/Show More
+++ b/Show More