Merge remote-tracking branch 'origin/staging-next' into staging

2025-09-24 10:23:46 +03:00
parent 0a07ae8da2 d39406e5f1
commit b2dfadf1a3
309 changed files with 3676 additions and 1571 deletions
@@ -3510,12 +3510,6 @@
    githubId = 52386117;
    name = "Blusk";
  };
-  bmanuel = {
-    name = "Benjamin Manuel";
-    email = "ben@benmanuel.com";
-    github = "bmanuel";
-    githubId = 3662307;
-  };
  bmilanov = {
    name = "Biser Milanov";
    email = "bmilanov11+nixpkgs@gmail.com";
@@ -4775,6 +4769,12 @@
    name = "Alex Zero";
    keys = [ { fingerprint = "A0AA 4646 B8F6 9D45 4553  5A88 A515 50ED B450 302C"; } ];
  };
+  cizniarova = {
+    email = "gabriel.hosquet@epitech.eu";
+    github = "Ciznia";
+    githubId = 114656678;
+    name = "Gabriel Hosquet";
+  };
  cizra = {
    email = "todurov+nix@gmail.com";
    github = "cizra";
@@ -15491,6 +15491,11 @@
    githubId = 1809783;
    name = "Marco Maggesi";
  };
+  magicquark = {
+    name = "magicquark";
+    github = "magicquark";
+    githubId = 198001825;
+  };
  magistau = {
    name = "Mg. Tau";
    email = "nix@alice-carroll.pet";
@@ -132,6 +132,8 @@

 - [Sshwifty](https://github.com/nirui/sshwifty), a Telnet and SSH client for your browser. Available as [services.sshwifty](#opt-services.sshwifty.enable).

+- Added `nixos-init`, a Rust-based bashless initialization system for systemd initrd. This allows to build NixOS systems without any interpreter. Enable via `system.nixos-init.enable = true;`.
+
 ## Backward Incompatibilities {#sec-release-25.11-incompatibilities}

 <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->
@@ -168,6 +170,8 @@

 - The default `kops` version is now 1.33.0 and versions 1.30 and older have been dropped. See [Upgrading Kubernetes](https://kops.sigs.k8s.io/tutorial/upgrading-kubernetes/) for instructions on how to update kOps.

+- `programs.skim.fuzzyCompletions` has been removed in favor of adding the completions to the package itself.
+
 - `Prosody` has been updated to major release 13 which removed some obsoleted modules and brought a couple of major and breaking changes:
  - The `http_files` module is now disabled by default because it now requires `http_files_dir` to be configured.
  - The `vcard_muc` module has been removed and got replaced by the inbuilt `muc_vcard` module.
@@ -1803,6 +1803,7 @@
  ./system/activation/activatable-system.nix
  ./system/activation/activation-script.nix
  ./system/activation/bootspec.nix
+  ./system/activation/nixos-init.nix
  ./system/activation/pre-switch-check.nix
  ./system/activation/specialisation.nix
  ./system/activation/switchable-system.nix
@@ -8,38 +8,37 @@ let
  inherit (lib)
    mkEnableOption
    mkPackageOption
-    optional
+    mkRemovedOptionModule
    optionalString
+    mkIf
    ;
  cfg = config.programs.skim;
 in
 {
+  imports = [
+    (mkRemovedOptionModule [ "programs" "skim" "fuzzyCompletion" ]
+      "programs.skim.fuzzyCompletion has been removed. Completions are now included in the package itself."
+    )
+  ];
+
  options = {
    programs.skim = {
-      fuzzyCompletion = mkEnableOption "fuzzy completion with skim";
+      enable = mkEnableOption "skim fuzzy finder";
      keybindings = mkEnableOption "skim keybindings";
      package = mkPackageOption pkgs "skim" { };
    };
  };

-  config = {
-    environment.systemPackages = optional (cfg.keybindings || cfg.fuzzyCompletion) cfg.package;
+  config = mkIf cfg.enable {
+    environment.systemPackages = [ cfg.package ];

-    programs.bash.interactiveShellInit =
-      optionalString cfg.fuzzyCompletion ''
-        source ${cfg.package}/share/skim/completion.bash
-      ''
-      + optionalString cfg.keybindings ''
-        source ${cfg.package}/share/skim/key-bindings.bash
-      '';
+    programs.bash.interactiveShellInit = optionalString cfg.keybindings ''
+      source ${cfg.package}/share/skim/key-bindings.bash
+    '';

-    programs.zsh.interactiveShellInit =
-      optionalString cfg.fuzzyCompletion ''
-        source ${cfg.package}/share/skim/completion.zsh
-      ''
-      + optionalString cfg.keybindings ''
-        source ${cfg.package}/share/skim/key-bindings.zsh
-      '';
+    programs.zsh.interactiveShellInit = optionalString cfg.keybindings ''
+      source ${cfg.package}/share/skim/key-bindings.zsh
+    '';

    programs.fish.interactiveShellInit = optionalString cfg.keybindings ''
      source ${cfg.package}/share/skim/key-bindings.fish && skim_key_bindings
@@ -15,6 +15,7 @@ let
      comment = list.description;
    };
  payloads = map makePayload cfg.lists;
+  macvendorURL = lib.strings.escapeShellArg cfg.macvendorURL;
 in
 ''
  # Can't use -u (unset) because api.sh uses API_URL before it is set
@@ -22,8 +23,10 @@ in
  pihole="${lib.getExe pihole}"
  jq="${lib.getExe pkgs.jq}"

+  ${lib.getExe pkgs.curl} --retry 3 --retry-delay 5 "${macvendorURL}" -o "${cfg.settings.files.macvendor}" || echo "Failed to download MAC database from ${macvendorURL}"
+
  # If the database doesn't exist, it needs to be created with gravity.sh
-  if [ ! -f '${cfg.stateDirectory}'/gravity.db ]; then
+  if [ ! -f '${cfg.settings.files.gravity}' ]; then
    $pihole -g
    # Send SIGRTMIN to FTL, which makes it reload the database, opening the newly created one
    ${lib.getExe' pkgs.procps "kill"} -s SIGRTMIN $(systemctl show --property MainPID --value ${config.systemd.services.pihole-ftl.name})
@@ -118,6 +118,14 @@ in
      '';
    };

+    macvendorURL = mkOption {
+      type = types.str;
+      default = "https://ftl.pi-hole.net/macvendor.db";
+      description = ''
+        URL from which to download the macvendor.db file.
+      '';
+    };
+
    pihole = mkOption {
      type = types.package;
      default = piholeScript;
@@ -260,7 +268,7 @@ in
        files = {
          database = "${cfg.stateDirectory}/pihole-FTL.db";
          gravity = "${cfg.stateDirectory}/gravity.db";
-          macvendor = "${cfg.stateDirectory}/gravity.db";
+          macvendor = "${cfg.stateDirectory}/macvendor.db";
          log.ftl = "${cfg.logDirectory}/FTL.log";
          log.dnsmasq = "${cfg.logDirectory}/pihole.log";
          log.webserver = "${cfg.logDirectory}/webserver.log";
@@ -594,7 +594,7 @@ in
      ]
      ++ lib.optionals (cfg.settings.capi.credentialsFile != null) [
        ''
-          if ! grep -q password "${cfg.settings.capi.credentialsFile}" ]; then
+          if ! ${lib.getExe pkgs.gnugrep} -q password "${cfg.settings.capi.credentialsFile}" ]; then
            ${lib.getExe cscli} capi register
          fi
        ''
@@ -0,0 +1,31 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+let
+  cfg = config.system.nixos-init;
+in
+{
+  options.system.nixos-init = {
+    enable = lib.mkEnableOption ''
+      nixos-init, a system for bashless initialization.
+
+      This doesn't use any `activationScripts`. Anything set in these options is
+      a no-op here.
+    '';
+
+    package = lib.mkPackageOption pkgs "nixos-init" { };
+  };
+
+  config = lib.mkIf cfg.enable {
+    assertions = [
+      {
+        assertion = config.boot.initrd.systemd.enable;
+        message = "nixos-init can only be used with systemd initrd";
+      }
+    ];
+  };
+}
@@ -14,12 +14,15 @@ let
    ${
      if config.boot.initrd.enable && config.boot.initrd.systemd.enable then
        ''
-          cp ${config.system.build.bootStage2} $out/prepare-root
-          substituteInPlace $out/prepare-root --subst-var-by systemConfig $out
          # This must not be a symlink or the abs_path of the grub builder for the tests
          # will resolve the symlink and we end up with a path that doesn't point to a
          # system closure.
          cp "$systemd/lib/systemd/systemd" $out/init
+
+          ${lib.optionalString (!config.system.nixos-init.enable) ''
+            cp ${config.system.build.bootStage2} $out/prepare-root
+            substituteInPlace $out/prepare-root --subst-var-by systemConfig $out
+          ''}
        ''
      else
        ''
@@ -559,7 +559,12 @@ in
        "${pkgs.glibc}/lib/libnss_files.so.2"

        # Resolving sysroot symlinks without code exec
-        "${pkgs.chroot-realpath}/bin/chroot-realpath"
+        "${config.system.nixos-init.package}/bin/chroot-realpath"
+        # Find the etc paths
+        "${config.system.nixos-init.package}/bin/find-etc"
+      ]
+      ++ lib.optionals config.system.nixos-init.enable [
+        "${config.system.nixos-init.package}/bin/initrd-init"
      ]
      ++ jobScripts
      ++ map (c: builtins.removeAttrs c [ "text" ]) (builtins.attrValues cfg.contents);
@@ -591,7 +596,7 @@ in
          ) cfg.automounts
        );

-      services.initrd-find-nixos-closure = {
+      services.initrd-find-nixos-closure = lib.mkIf (!config.system.nixos-init.enable) {
        description = "Find NixOS closure";

        unitConfig = {
@@ -612,7 +617,12 @@ in
        script = # bash
          ''
            set -uo pipefail
-            export PATH="/bin:${cfg.package.util-linux}/bin:${pkgs.chroot-realpath}/bin"
+            export PATH="/bin:${
+              lib.makeBinPath [
+                cfg.package.util-linux
+                config.system.nixos-init.package
+              ]
+            }"

            # Figure out what closure to boot
            closure=
@@ -667,7 +677,7 @@ in
        }
      ];

-      services.initrd-nixos-activation = {
+      services.initrd-nixos-activation = lib.mkIf (!config.system.nixos-init.enable) {
        after = [ "initrd-switch-root.target" ];
        requiredBy = [ "initrd-switch-root.service" ];
        before = [ "initrd-switch-root.service" ];
@@ -694,17 +704,46 @@ in
          '';
      };

-      # This will either call systemctl with the new init as the last parameter (which
-      # is the case when not booting a NixOS system) or with an empty string, causing
-      # systemd to bypass its verification code that checks whether the next file is a systemd
-      # and using its compiled-in value
-      services.initrd-switch-root.serviceConfig = {
-        EnvironmentFile = "-/etc/switch-root.conf";
-        ExecStart = [
-          ""
-          ''systemctl --no-block switch-root /sysroot "''${NEW_INIT}"''
-        ];
-      };
+      services.initrd-switch-root =
+        if config.system.nixos-init.enable then
+          {
+            path = [
+              cfg.package
+              cfg.package.util-linux
+              config.system.nixos-init.package
+            ];
+            environment = {
+              FIRMWARE = "${config.hardware.firmware}/lib/firmware";
+              MODPROBE_BINARY = "${pkgs.kmod}/bin/modprobe";
+              NIX_STORE_MOUNT_OPTS = lib.concatStringsSep "," config.boot.nixStoreMountOpts;
+            }
+            // lib.optionalAttrs (config.environment.usrbinenv != null) {
+              ENV_BINARY = config.environment.usrbinenv;
+            }
+            // lib.optionalAttrs (config.environment.binsh != null) {
+              SH_BINARY = config.environment.binsh;
+            };
+            serviceConfig = {
+              ExecStart = [
+                ""
+                "${config.system.nixos-init.package}/bin/initrd-init"
+              ];
+            };
+          }
+        else
+          # This will either call systemctl with the new init as the last parameter (which
+          # is the case when not booting a NixOS system) or with an empty string, causing
+          # systemd to bypass its verification code that checks whether the next file is a systemd
+          # and using its compiled-in value
+          {
+            serviceConfig = {
+              EnvironmentFile = "-/etc/switch-root.conf";
+              ExecStart = [
+                ""
+                ''systemctl --no-block switch-root /sysroot "''${NEW_INIT}"''
+              ];
+            };
+          };

      services.panic-on-fail = {
        wantedBy = [ "emergency.target" ];
@@ -144,15 +144,10 @@
          {
            initrd-find-etc = {
              description = "Find the path to the etc metadata image and based dir";
-              requires = [
-                config.boot.initrd.systemd.services.initrd-find-nixos-closure.name
-              ];
-              after = [
-                config.boot.initrd.systemd.services.initrd-find-nixos-closure.name
-              ];
              before = [ "shutdown.target" ];
              conflicts = [ "shutdown.target" ];
              requiredBy = [ "initrd.target" ];
+              path = [ config.system.nixos-init.package ];
              unitConfig = {
                DefaultDependencies = false;
                RequiresMountsFor = "/sysroot/nix/store";
@@ -160,20 +155,8 @@
              serviceConfig = {
                Type = "oneshot";
                RemainAfterExit = true;
+                ExecStart = "${config.system.nixos-init.package}/bin/find-etc";
              };
-
-              script = # bash
-                ''
-                  set -uo pipefail
-
-                  closure="$(realpath /nixos-closure)"
-
-                  metadata_image="$(${pkgs.chroot-realpath}/bin/chroot-realpath /sysroot "$closure/etc-metadata-image")"
-                  ln -s "/sysroot$metadata_image" /etc-metadata-image
-
-                  basedir="$(${pkgs.chroot-realpath}/bin/chroot-realpath /sysroot "$closure/etc-basedir")"
-                  ln -s "/sysroot$basedir" /etc-basedir
-                '';
            };
          }
        ];
@@ -0,0 +1,54 @@
+{ lib, pkgs, ... }:
+
+{
+  name = "nixos-init";
+
+  meta.maintainers = with lib.maintainers; [ nikstur ];
+
+  nodes.machine =
+    { modulesPath, ... }:
+    {
+      imports = [
+        "${modulesPath}/profiles/perlless.nix"
+      ];
+      virtualisation.mountHostNixStore = false;
+      virtualisation.useNixStoreImage = true;
+
+      system.nixos-init.enable = true;
+      # Forcibly set this to only these specific values.
+      boot.nixStoreMountOpts = lib.mkForce [
+        "nodev"
+        "nosuid"
+      ];
+    };
+
+  testScript =
+    { nodes, ... }: # python
+    ''
+      with subtest("init"):
+        with subtest("/nix/store is mounted with the correct options"):
+          findmnt_output = machine.succeed("findmnt --direction backward --first-only --noheadings --output OPTIONS /nix/store").strip()
+          print(findmnt_output)
+          t.assertIn("nodev", findmnt_output)
+          t.assertIn("nosuid", findmnt_output)
+
+        t.assertEqual("${nodes.machine.system.build.toplevel}", machine.succeed("readlink /run/booted-system").strip())
+
+      with subtest("activation"):
+        t.assertEqual("${nodes.machine.system.build.toplevel}", machine.succeed("readlink /run/current-system").strip())
+        t.assertEqual("${nodes.machine.hardware.firmware}/lib/firmware", machine.succeed("cat /sys/module/firmware_class/parameters/path").strip())
+        t.assertEqual("${pkgs.kmod}/bin/modprobe", machine.succeed("cat /proc/sys/kernel/modprobe").strip())
+        t.assertEqual("${nodes.machine.environment.usrbinenv}", machine.succeed("readlink /usr/bin/env").strip())
+        t.assertEqual("${nodes.machine.environment.binsh}", machine.succeed("readlink /bin/sh").strip())
+
+      machine.wait_for_unit("multi-user.target")
+      with subtest("systemd state passing"):
+        systemd_analyze_output = machine.succeed("systemd-analyze")
+        print(systemd_analyze_output)
+        t.assertIn("(initrd)", systemd_analyze_output, "systemd-analyze has no information about the initrd")
+
+        ps_output = machine.succeed("ps ax -o command | grep systemd | head -n 1")
+        print(ps_output)
+        t.assertIn("--deserialize", ps_output, "--deserialize flag wasn't passed to systemd")
+    '';
+}
@@ -190,6 +190,7 @@ in
  activation-etc-overlay-mutable = runTest ./activation/etc-overlay-mutable.nix;
  activation-lib = pkgs.callPackage ../modules/system/activation/lib/test.nix { };
  activation-nix-channel = runTest ./activation/nix-channel.nix;
+  activation-nixos-init = runTest ./activation/nixos-init.nix;
  activation-perlless = runTest ./activation/perlless.nix;
  activation-var = runTest ./activation/var.nix;
  actual = runTest ./actual.nix;
@@ -774,7 +774,7 @@ let
                  config.boot.bootspec.package
                ]
                ++ optionals clevisTest [ pkgs.klibc ]
-                ++ optional systemdStage1 pkgs.chroot-realpath;
+                ++ optional systemdStage1 config.system.nixos-init.package;

              nix.settings = {
                substituters = mkForce [ ];
@@ -11,10 +11,10 @@
    "clion": {
      "update-channel": "CLion RELEASE",
      "url-template": "https://download.jetbrains.com/cpp/CLion-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "f50e1a1e5172f652efdb7d72dc8c2a6222564671983b0c8b03caa68c56630648",
-      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.1.tar.gz",
-      "build_number": "252.25557.127"
+      "version": "2025.2.2",
+      "sha256": "47b84f1c853a63586743b28834dfd6b949672f3b0a7a67435907a7ef51730606",
+      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.2.tar.gz",
+      "build_number": "252.26199.153"
    },
    "datagrip": {
      "update-channel": "DataGrip RELEASE",
@@ -35,34 +35,34 @@
    "gateway": {
      "update-channel": "Gateway RELEASE",
      "url-template": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "bf96140b50e890215104f0806f5f160161a2889ebf7362a3b936ca0eb304bf67",
-      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.1.tar.gz",
-      "build_number": "252.25557.133"
+      "version": "2025.2.2",
+      "sha256": "d1e8c8c61da42adcc9300a2a005830db386698912071eace9813a5c170a9fff8",
+      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.2.tar.gz",
+      "build_number": "252.26199.160"
    },
    "goland": {
      "update-channel": "GoLand RELEASE",
      "url-template": "https://download.jetbrains.com/go/goland-{version}.tar.gz",
-      "version": "2025.2.1.2",
-      "sha256": "66cb93202b9c4bc34688838a8c39e0d0ed876d01ca651d9f2b0d455139b27169",
-      "url": "https://download.jetbrains.com/go/goland-2025.2.1.2.tar.gz",
-      "build_number": "252.25557.189"
+      "version": "2025.2.2",
+      "sha256": "e5816136312a419b67cdfab203bd30e305cb2f8952eea76445e908c01f3113c0",
+      "url": "https://download.jetbrains.com/go/goland-2025.2.2.tar.gz",
+      "build_number": "252.26199.158"
    },
    "idea-community": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIC-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "fc76fe8b6693b18d5d7385bb005f415287dbd5897b313287b9ef56dd0df9d5bd",
-      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.1.tar.gz",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "3f1adc095bf78f0949e3f62f6cf02be0c5c9e6528271f16caa3baa041e637664",
+      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.2.tar.gz",
+      "build_number": "252.26199.169"
    },
    "idea-ultimate": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIU-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "ac36d03153894f393fb65c05f57be4722c2a2374d03b7374b37baf856705d5fd",
-      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.1.tar.gz",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "7150ece389a4bc8649f68b103018edeeb09205559671549410ded11de523da62",
+      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.2.tar.gz",
+      "build_number": "252.26199.169"
    },
    "mps": {
      "update-channel": "MPS RELEASE",
@@ -75,10 +75,10 @@
    "phpstorm": {
      "update-channel": "PhpStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webide/PhpStorm-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "0cc9235210dc09fb54602f176de881c4f2b6852d7a5f2ae9f7750d83a3ffa8f6",
-      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.1.tar.gz",
-      "build_number": "252.25557.128",
+      "version": "2025.2.2",
+      "sha256": "1010c4cfed0d74a0088c80e966c0ea75ed1238dc5b8ae25111e8be3e06bde741",
+      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.2.tar.gz",
+      "build_number": "252.26199.163",
      "version-major-minor": "2022.3"
    },
    "pycharm-community": {
@@ -100,34 +100,34 @@
    "rider": {
      "update-channel": "Rider RELEASE",
      "url-template": "https://download.jetbrains.com/rider/JetBrains.Rider-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "bdccdc837ab6683082bef1ab76b7699ee3ed44ec6fe037db5be7161837ca0701",
-      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.1.tar.gz",
-      "build_number": "252.25557.182"
+      "version": "2025.2.2",
+      "sha256": "1ebffac91d70f8ce64567955de35738bb52d5e81b45d8c67dd494ff3fa0301df",
+      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.2.tar.gz",
+      "build_number": "252.26199.154"
    },
    "ruby-mine": {
      "update-channel": "RubyMine RELEASE",
      "url-template": "https://download.jetbrains.com/ruby/RubyMine-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "fbed517b4c60623c04b045dd6cfff08105783a56dd1b831b164a72aa2ead6a38",
-      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.1.tar.gz",
-      "build_number": "252.25557.135"
+      "version": "2025.2.2",
+      "sha256": "f103c2c5ab074aace1ce4678d32fa80d8521a25bb6497130d1185662244cf46d",
+      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.2.tar.gz",
+      "build_number": "252.26199.157"
    },
    "rust-rover": {
      "update-channel": "RustRover RELEASE",
      "url-template": "https://download.jetbrains.com/rustrover/RustRover-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "19fde47a5c3c8e1b21b402c3351018eed64e2cff575f32a86c884168b522074a",
-      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.1.tar.gz",
-      "build_number": "252.25557.134"
+      "version": "2025.2.2",
+      "sha256": "cc2cfd0af3967a5ce65af5064ccac03bfb2ee2a1ed7e18e8a2c1a009a6d3721c",
+      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.2.tar.gz",
+      "build_number": "252.26199.159"
    },
    "webstorm": {
      "update-channel": "WebStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webstorm/WebStorm-{version}.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "8d03ae22e4bac309edbf58310b4fc758fedaee5dc065467eeda005fac5217d2b",
-      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.1.tar.gz",
-      "build_number": "252.25557.126"
+      "version": "2025.2.2",
+      "sha256": "8bb3bed5c670514ced8614b29848c5d3b7ff4f4e86056cf5cdc5930951c87ff6",
+      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.2.tar.gz",
+      "build_number": "252.26199.162"
    },
    "writerside": {
      "update-channel": "Writerside EAP",
@@ -150,10 +150,10 @@
    "clion": {
      "update-channel": "CLion RELEASE",
      "url-template": "https://download.jetbrains.com/cpp/CLion-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "7fff28163607d3a6da7eceb788829cb81ac03e90f694d7b2c0a47b2821b47f4a",
-      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.127"
+      "version": "2025.2.2",
+      "sha256": "b8749bbec247544767023a25b9e955a9cd462c573e1d08a24ef68c864d5d6859",
+      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.153"
    },
    "datagrip": {
      "update-channel": "DataGrip RELEASE",
@@ -174,34 +174,34 @@
    "gateway": {
      "update-channel": "Gateway RELEASE",
      "url-template": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "8c4a8c0d15f5afbb17f0ea54e4455f4d69407536459d0d4986fce966e8ae9290",
-      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.133"
+      "version": "2025.2.2",
+      "sha256": "331407afc012f97b5a80fcfced59e256222549038bfe028c7d00b0b4793ebc4a",
+      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.160"
    },
    "goland": {
      "update-channel": "GoLand RELEASE",
      "url-template": "https://download.jetbrains.com/go/goland-{version}-aarch64.tar.gz",
-      "version": "2025.2.1.2",
-      "sha256": "c8059924c4e92756905114c6e6806c59d070b332c87bc966237474363f212876",
-      "url": "https://download.jetbrains.com/go/goland-2025.2.1.2-aarch64.tar.gz",
-      "build_number": "252.25557.189"
+      "version": "2025.2.2",
+      "sha256": "5873b53e586c1f376ec6e159c962be3400f0be964f8f0d542b55b4a99ff6c870",
+      "url": "https://download.jetbrains.com/go/goland-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.158"
    },
    "idea-community": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIC-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "ca454bcfe40196adacf12c726d8d44876d8a03c88884f7a08715e5562a45d1a2",
-      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "3ea855820772e36be4b37dd9e503e4fee9b1877dcb614b5baa36819370fa0208",
+      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.169"
    },
    "idea-ultimate": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIU-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "bf292cf0a2822c4b697e4d1e6a7c049c6b91f8cab3d457259d52fd65bbdcdea9",
-      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "d40c5fa210a28a23b9e1d736057a711b41c785e32841f5a27969074feee5df4d",
+      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.169"
    },
    "mps": {
      "update-channel": "MPS RELEASE",
@@ -214,10 +214,10 @@
    "phpstorm": {
      "update-channel": "PhpStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webide/PhpStorm-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "68f4d7f3ca81e25023a08a34d1163fdcf0ef8f803cbdd9bc81efdcadd2ccf7ae",
-      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.128",
+      "version": "2025.2.2",
+      "sha256": "edc147816c4fed704206d3ca03e7fcdefde23208599d7732eb0a22af2af6f2ff",
+      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.163",
      "version-major-minor": "2022.3"
    },
    "pycharm-community": {
@@ -239,34 +239,34 @@
    "rider": {
      "update-channel": "Rider RELEASE",
      "url-template": "https://download.jetbrains.com/rider/JetBrains.Rider-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "14c5cc877b213d7da53eea0585c1ebd13c5f43316a39ed9e6a1a745246fe42cb",
-      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.182"
+      "version": "2025.2.2",
+      "sha256": "36523ab3b94d1ee1b92794476870727faa1ca29fbd365b7c3239f199399f6dbe",
+      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.154"
    },
    "ruby-mine": {
      "update-channel": "RubyMine RELEASE",
      "url-template": "https://download.jetbrains.com/ruby/RubyMine-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "2dc93b1eb3d40eea193eb313632f13440fa34add912a1ab0ad201349811bbcb8",
-      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.135"
+      "version": "2025.2.2",
+      "sha256": "f75616b41eff86d75f51dadb49f1033ff9af021f1d9ca354fc8f99eca251c4ac",
+      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.157"
    },
    "rust-rover": {
      "update-channel": "RustRover RELEASE",
      "url-template": "https://download.jetbrains.com/rustrover/RustRover-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "60d22c93e3924f3defa51ace317fc6f715a6a5ef4e8ec18f1f361e6aa1d2a9d5",
-      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.134"
+      "version": "2025.2.2",
+      "sha256": "d76cb3f3d7affbd9cab937e813f44bafdd2675160b909f27baa7fac042de0765",
+      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.159"
    },
    "webstorm": {
      "update-channel": "WebStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webstorm/WebStorm-{version}-aarch64.tar.gz",
-      "version": "2025.2.1",
-      "sha256": "ce335848f4771392c971d054b4a378a98ee6f77347c1e64d0631981715a034e3",
-      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.1-aarch64.tar.gz",
-      "build_number": "252.25557.126"
+      "version": "2025.2.2",
+      "sha256": "aa8eaa8bb200a6fce42582cb37235f3abf77ca7bcad2c9b98c318686c45772e1",
+      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.2-aarch64.tar.gz",
+      "build_number": "252.26199.162"
    },
    "writerside": {
      "update-channel": "Writerside EAP",
@@ -289,10 +289,10 @@
    "clion": {
      "update-channel": "CLion RELEASE",
      "url-template": "https://download.jetbrains.com/cpp/CLion-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "1cc896ae584c51009674f12d9c43d481b108b8e59243e60b094e7a967bb64652",
-      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.1.dmg",
-      "build_number": "252.25557.127"
+      "version": "2025.2.2",
+      "sha256": "f9c42a3417db66bc88fc039829840662a650fdf79fc02619c5d6fd8a633f6606",
+      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.2.dmg",
+      "build_number": "252.26199.153"
    },
    "datagrip": {
      "update-channel": "DataGrip RELEASE",
@@ -313,34 +313,34 @@
    "gateway": {
      "update-channel": "Gateway RELEASE",
      "url-template": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "4f48557a9a1ded6a88bc6bf17d65879f54b2314142c65e65d844df92d770de03",
-      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.1.dmg",
-      "build_number": "252.25557.133"
+      "version": "2025.2.2",
+      "sha256": "1be3476dc9065e9b95f399cb24ff2e5793e09a390bf541695bc932a9f46a2321",
+      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.2.dmg",
+      "build_number": "252.26199.160"
    },
    "goland": {
      "update-channel": "GoLand RELEASE",
      "url-template": "https://download.jetbrains.com/go/goland-{version}.dmg",
-      "version": "2025.2.1.2",
-      "sha256": "e3c8195cbf54ac77d6f715b1d6ed3c91f3b5288c0bdd67b254ebb938019e4271",
-      "url": "https://download.jetbrains.com/go/goland-2025.2.1.2.dmg",
-      "build_number": "252.25557.189"
+      "version": "2025.2.2",
+      "sha256": "d23f16afaa67f120ce987b59280805f01025e5b971d85544f33f0960035f3a1c",
+      "url": "https://download.jetbrains.com/go/goland-2025.2.2.dmg",
+      "build_number": "252.26199.158"
    },
    "idea-community": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIC-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "48d3f6523cc6fe94ad8020357b6de5e977fb2a49c8041773ffae7f946d418224",
-      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.1.dmg",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "112bfa1e1c065ec641f1a242e95b63d4fed1b7dfa1d7b57b6591d8230531adae",
+      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.2.dmg",
+      "build_number": "252.26199.169"
    },
    "idea-ultimate": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIU-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "a768de8ff17cfb940d402ed907777e50c669e770ccd7515613086cd6d35f81d4",
-      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.1.dmg",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "7e7b672525e29554e503eecc656de025a96b680d1ee223dfbfd762a1ca6430dd",
+      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.2.dmg",
+      "build_number": "252.26199.169"
    },
    "mps": {
      "update-channel": "MPS RELEASE",
@@ -353,10 +353,10 @@
    "phpstorm": {
      "update-channel": "PhpStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webide/PhpStorm-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "8ea7143923c6f18c130e8d85530c423fa4eea5a81543094af9ad4c8155a26215",
-      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.1.dmg",
-      "build_number": "252.25557.128",
+      "version": "2025.2.2",
+      "sha256": "60413cba4c4492a51af0dd3a439a615a08ec5fbc31c28ee7bb1af8638708eb05",
+      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.2.dmg",
+      "build_number": "252.26199.163",
      "version-major-minor": "2022.3"
    },
    "pycharm-community": {
@@ -378,34 +378,34 @@
    "rider": {
      "update-channel": "Rider RELEASE",
      "url-template": "https://download.jetbrains.com/rider/JetBrains.Rider-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "37feeae3929be95bd6f405c6d5760af7d2e43bff55e03a4256c1232b61714809",
-      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.1.dmg",
-      "build_number": "252.25557.182"
+      "version": "2025.2.2",
+      "sha256": "ccc7b35691ceb87e3b3103909617e1616c36dcc69cb73c1f7668591c6256ba35",
+      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.2.dmg",
+      "build_number": "252.26199.154"
    },
    "ruby-mine": {
      "update-channel": "RubyMine RELEASE",
      "url-template": "https://download.jetbrains.com/ruby/RubyMine-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "389d7e790bc745126e838191d14984acaf7f3beae4ef7d669c0fed1219b8a8e6",
-      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.1.dmg",
-      "build_number": "252.25557.135"
+      "version": "2025.2.2",
+      "sha256": "9ced0e4a5ebb0e47821d25a7b8d9a2c4a9a8ad821ffefa9b429821379da8486e",
+      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.2.dmg",
+      "build_number": "252.26199.157"
    },
    "rust-rover": {
      "update-channel": "RustRover RELEASE",
      "url-template": "https://download.jetbrains.com/rustrover/RustRover-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "9143fa9bfcab98ed2a5215c006bb6bf5521ee5c9a9f08f6f321d0a873cfb39cc",
-      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.1.dmg",
-      "build_number": "252.25557.134"
+      "version": "2025.2.2",
+      "sha256": "bcb442e4d22a71cd312cae2821187da82f9c58cdd03e5343a070b12af6a11f85",
+      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.2.dmg",
+      "build_number": "252.26199.159"
    },
    "webstorm": {
      "update-channel": "WebStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webstorm/WebStorm-{version}.dmg",
-      "version": "2025.2.1",
-      "sha256": "38ba2b01c688d838f5cb533eb9d575223135eb753d7f38865aaf4d27b56b5bf5",
-      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.1.dmg",
-      "build_number": "252.25557.126"
+      "version": "2025.2.2",
+      "sha256": "74af775f515e7cc847ee572cf7720498e6afec3387af285a6685337272c61611",
+      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.2.dmg",
+      "build_number": "252.26199.162"
    },
    "writerside": {
      "update-channel": "Writerside EAP",
@@ -428,10 +428,10 @@
    "clion": {
      "update-channel": "CLion RELEASE",
      "url-template": "https://download.jetbrains.com/cpp/CLion-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "d8256fee77311192ffcb45d9efa5fa57fb2ea83a22925f49bc5880106f7b9ee4",
-      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.127"
+      "version": "2025.2.2",
+      "sha256": "4dceb6ba2ae1d2fcaaa7f76090bbb18664da30d371d2e950afdffb0f9589ce7e",
+      "url": "https://download.jetbrains.com/cpp/CLion-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.153"
    },
    "datagrip": {
      "update-channel": "DataGrip RELEASE",
@@ -452,34 +452,34 @@
    "gateway": {
      "update-channel": "Gateway RELEASE",
      "url-template": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "94bb0fb41eaaea744173fe321b7e17cac898088eb7738c68b8d271ca437dee80",
-      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.133"
+      "version": "2025.2.2",
+      "sha256": "1d9be57de8075eeefcc81ef249b15a60762f82909ca4002846dce13acedba56d",
+      "url": "https://download.jetbrains.com/idea/gateway/JetBrainsGateway-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.160"
    },
    "goland": {
      "update-channel": "GoLand RELEASE",
      "url-template": "https://download.jetbrains.com/go/goland-{version}-aarch64.dmg",
-      "version": "2025.2.1.2",
-      "sha256": "2c174e4fbd1485f3e402b9e0b693d196b8e38bc7b7bba2c33896391181c92940",
-      "url": "https://download.jetbrains.com/go/goland-2025.2.1.2-aarch64.dmg",
-      "build_number": "252.25557.189"
+      "version": "2025.2.2",
+      "sha256": "38dd5a302eba4ee5f92c5c5aa810b449b72301c89d209139e75c0efb6bdff919",
+      "url": "https://download.jetbrains.com/go/goland-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.158"
    },
    "idea-community": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIC-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "dcafd8e623819b0696044d23874423f905224462844155a3c282fd4f62a7d578",
-      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "cc83bbb9531522085d2892499ddb5cb87909291d58ee3e34c06b131aeb2413fe",
+      "url": "https://download.jetbrains.com/idea/ideaIC-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.169"
    },
    "idea-ultimate": {
      "update-channel": "IntelliJ IDEA RELEASE",
      "url-template": "https://download.jetbrains.com/idea/ideaIU-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "96523081d1d686425b166698870a4467600724faac060a938a05838b0b9f8a9c",
-      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.131"
+      "version": "2025.2.2",
+      "sha256": "c93ef0205c18f8b9fd127df2d5f3486e3ad190a0408c374e1795aeaa7899dc8a",
+      "url": "https://download.jetbrains.com/idea/ideaIU-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.169"
    },
    "mps": {
      "update-channel": "MPS RELEASE",
@@ -492,10 +492,10 @@
    "phpstorm": {
      "update-channel": "PhpStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webide/PhpStorm-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "9da242618b2f540d8fc34937743e2ebcd71af6341420474b0bf9285464a81a68",
-      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.128",
+      "version": "2025.2.2",
+      "sha256": "08c30cee02829ebca2956a5dc84221322cbd0ce02f33fb023d3d340cdcc2dac3",
+      "url": "https://download.jetbrains.com/webide/PhpStorm-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.163",
      "version-major-minor": "2022.3"
    },
    "pycharm-community": {
@@ -517,34 +517,34 @@
    "rider": {
      "update-channel": "Rider RELEASE",
      "url-template": "https://download.jetbrains.com/rider/JetBrains.Rider-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "80f3f99311e8f225a6475b81dab014b13dd1782a59c6dc8abe5e5d3e614489b3",
-      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.182"
+      "version": "2025.2.2",
+      "sha256": "f6d1a148123519c33d2ec8822e7d83856af68cbb518ac822c638bbd4b1127ad2",
+      "url": "https://download.jetbrains.com/rider/JetBrains.Rider-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.154"
    },
    "ruby-mine": {
      "update-channel": "RubyMine RELEASE",
      "url-template": "https://download.jetbrains.com/ruby/RubyMine-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "27c6648ec738e29bdd22fab0ed46a321ed6c8354348cb39ac3ae863c4ffe4c78",
-      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.135"
+      "version": "2025.2.2",
+      "sha256": "4fa2260b6ca45a3e21bd3aa64517cb5216113a4177ec2b7808f9883cf4a071b5",
+      "url": "https://download.jetbrains.com/ruby/RubyMine-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.157"
    },
    "rust-rover": {
      "update-channel": "RustRover RELEASE",
      "url-template": "https://download.jetbrains.com/rustrover/RustRover-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "469b4b7c42aa808a5f9d94315f4cc412ad74ef76ff51654d441ef16c5063dc27",
-      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.134"
+      "version": "2025.2.2",
+      "sha256": "a673c45f2183d28ac6ac37df9a8cd7084af432793f505589164096a425fa7801",
+      "url": "https://download.jetbrains.com/rustrover/RustRover-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.159"
    },
    "webstorm": {
      "update-channel": "WebStorm RELEASE",
      "url-template": "https://download.jetbrains.com/webstorm/WebStorm-{version}-aarch64.dmg",
-      "version": "2025.2.1",
-      "sha256": "dd3220a9458cd1574a96a75922e5439689f494516af9f5e76c5b74ffb37ec488",
-      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.1-aarch64.dmg",
-      "build_number": "252.25557.126"
+      "version": "2025.2.2",
+      "sha256": "68fbdbb3abd2ef5ae69d8371f72fd61e39f4331e7b9aacb792a7b6b7b6d05e8f",
+      "url": "https://download.jetbrains.com/webstorm/WebStorm-2025.2.2-aarch64.dmg",
+      "build_number": "252.26199.162"
    },
    "writerside": {
      "update-channel": "Writerside EAP",
@@ -17,5 +17,6 @@ buildVscodeMarketplaceExtension {
      from your programming activity
    '';
    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ cizniarova ];
  };
 }
@@ -1969,8 +1969,8 @@ let
        mktplcRef = {
          publisher = "github";
          name = "vscode-pull-request-github";
-          version = "0.116.2";
-          hash = "sha256-PDX3Wpmy82MvBzr/fnPP5Y7HMKkfphJLe/Rc284Vxlc=";
+          version = "0.118.1";
+          hash = "sha256-k3fz2PPXS85Xb0emVPyiQ4yGf1hmBZSU8LQ7lgLQ4JU=";
        };
        meta = {
          license = lib.licenses.mit;
@@ -2368,8 +2368,8 @@ let
        mktplcRef = {
          name = "Ionide-fsharp";
          publisher = "Ionide";
-          version = "7.27.0";
-          hash = "sha256-NGl5uiR4taamA8lhH/qJT1nCfUhxCQ/XQ/oEZ9N9Q5Y=";
+          version = "7.27.1";
+          hash = "sha256-ur+/ZSewWBzLxkHVXHQJg4KzkC3Mi3E9fE3/wL6sD8g=";
        };
        meta = {
          changelog = "https://marketplace.visualstudio.com/items/Ionide.Ionide-fsharp/changelog";
@@ -2767,6 +2767,8 @@ let
          };
        };

+      kilocode.kilo-code = callPackage ./kilocode.kilo-code { };
+
      kravets.vscode-publint = buildVscodeMarketplaceExtension {
        mktplcRef = {
          name = "vscode-publint";
@@ -4526,8 +4528,8 @@ let
        mktplcRef = {
          name = "tabnine-vscode";
          publisher = "tabnine";
-          version = "3.314.1";
-          hash = "sha256-KWXQY4HyK7s4mNGh6x1eDK6okC5rxWe916RjlsACQxA=";
+          version = "3.315.0";
+          hash = "sha256-y6nTUDMQtJWZA30/jWTu0Kj9EMYkLGUAq7xvBvwGpeY=";
        };
        meta = {
          license = lib.licenses.mit;
@@ -11,8 +11,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "terraform";
    publisher = "hashicorp";
-    version = "2.34.5";
-    hash = "sha256-t5ULeB0jvkt9a1m3gA5Du0Kl1FI1ZncqyAQlXBwyyfE=";
+    version = "2.36.2";
+    hash = "sha256-jkWDrF3kF/YVxcc6XqOQUI2wldYrlDnDUv9bXFplyis=";
  };

  postInstall = ''
@@ -0,0 +1,86 @@
+{
+  lib,
+  stdenvNoCC,
+  fetchFromGitHub,
+  pnpm,
+  nodejs,
+  vscode-utils,
+  nix-update-script,
+}:
+
+let
+  vsix = stdenvNoCC.mkDerivation (finalAttrs: {
+    name = "kilo-code-${finalAttrs.version}.vsix";
+    pname = "kilo-code-vsix";
+    version = "4.91.0";
+
+    src = fetchFromGitHub {
+      owner = "Kilo-Org";
+      repo = "kilocode";
+      tag = "v${finalAttrs.version}";
+      hash = "sha256-dUVPCTxfLcsVfy2FqdZMN8grysALUOTiTl4TXM1BcDs=";
+    };
+
+    pnpmDeps = pnpm.fetchDeps {
+      inherit (finalAttrs) pname version src;
+      fetcherVersion = 2;
+      hash = "sha256-4LB2KY+Ksr8BQYoHrz3VNr81++zcrWN+USg3bBfr/FU=";
+    };
+
+    nativeBuildInputs = [
+      nodejs
+      pnpm.configHook
+      pnpm
+    ];
+
+    buildPhase = ''
+      runHook preBuild
+
+      node --run build
+
+      runHook postBuild
+    '';
+
+    installPhase = ''
+      runHook preInstall
+
+      cp ./bin/kilo-code-$version.vsix $out
+
+      runHook postInstall
+    '';
+  });
+in
+vscode-utils.buildVscodeExtension (finalAttrs: {
+  pname = "kilo-code";
+  inherit (finalAttrs.src) version;
+
+  vscodeExtPublisher = "kilocode";
+  vscodeExtName = "Kilo-Code";
+  vscodeExtUniqueId = "${finalAttrs.vscodeExtPublisher}.${finalAttrs.vscodeExtName}";
+
+  src = vsix;
+
+  unpackPhase = ''
+    runHook preUnpack
+
+    unzip $src
+
+    runHook postUnpack
+  '';
+
+  passthru = {
+    vsix = finalAttrs.src;
+    updateScript = nix-update-script {
+      attrPath = "vscode-extensions.kilocode.kilo-kode.vsix";
+    };
+  };
+
+  meta = {
+    description = "Open Source AI coding assistant for planning, building, and fixing code";
+    homepage = "https://kilocode.ai";
+    downloadPage = "https://marketplace.visualstudio.com/items?itemName=kilocode.Kilo-Code";
+    license = lib.licenses.asl20;
+    sourceProvenance = with lib.sourceTypes; [ fromSource ];
+    maintainers = with lib.maintainers; [ xiaoxiangmoe ];
+  };
+})
@@ -9,8 +9,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "shfmt";
    publisher = "mkhl";
-    version = "1.4.0";
-    hash = "sha256-5qi2BRwftuW9Isveb7vRwPPPu2w7LTfhNO0xHFNruGI=";
+    version = "1.5.1";
+    hash = "sha256-rk+ykkWHxgQyyOC8JyhyOinRPJHh9XxNRAVUzcF7TRI=";
  };

  postInstall = ''
@@ -9,8 +9,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "jupyter";
    publisher = "ms-toolsai";
-    version = "2025.7.0";
-    hash = "sha256-wedMPo+mL3yvb9WqJComlyZWvSSaJXv/4LWcl0wwqdQ=";
+    version = "2025.8.0";
+    hash = "sha256-MZHsgFxrAbDjRn0cH+cBolVvFQXlZPiVSZDUWDU6/jA=";
  };

  nativeBuildInputs = [
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "gpsp";
-  version = "0-unstable-2025-09-07";
+  version = "0-unstable-2025-09-17";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "gpsp";
-    rev = "f7a6a4314697ea5e4821a15aa7110795679f6ade";
-    hash = "sha256-g63KIeQUvCg9LbixeXF2JRgUEFlzBMctXV8IFqvR0sg=";
+    rev = "a545aafaf4e654a488f4588f4f302d8413a58066";
+    hash = "sha256-94J5WqlvBgfF/0aj0Pu61psG5pbhJVsZOiIbMdZ+ryQ=";
  };

  makefile = "Makefile";
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
  core = "mame2003-plus";
-  version = "0-unstable-2025-09-10";
+  version = "0-unstable-2025-09-20";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "mame2003-plus-libretro";
-    rev = "1e2be6664685efd7805ca19031f279fcaec25e15";
-    hash = "sha256-PhWlrp+ILgBh6GUI+hkWO513dTQqDJIx+n0YZEaNlyw=";
+    rev = "a4239124d4da03ae4658610832e425febb0db134";
+    hash = "sha256-TPYYFfAGJqlKpfLS1qDpzQXIfSXXFjRj1W/3+FTYMRQ=";
  };

  makefile = "Makefile";
@@ -164,7 +164,8 @@ let
    # //third_party/libavif:libavif_enc(//build/toolchain/linux/unbundle:default)
    #   needs //third_party/libwebp:libwebp_sharpyuv(//build/toolchain/linux/unbundle:default)
    # "libwebp"
-    "libxslt"
+    "libxml"
+    "libxslt" # depends on libxml, always remove or re-add as a pair
    # "opus"
  ];

@@ -811,15 +812,7 @@ let
      // (extraAttrs.gnFlags or { })
    );

-    # TODO: Migrate this to env.RUSTC_BOOTSTRAP next mass-rebuild.
-    # Chromium expects nightly/bleeding edge rustc features to be available.
-    # Our rustc in nixpkgs follows stable, but since bootstrapping rustc requires
-    # nightly features too, we can (ab-)use RUSTC_BOOTSTRAP here as well to
-    # enable those features in our stable builds.
-    preConfigure = ''
-      export RUSTC_BOOTSTRAP=1
-    ''
-    + lib.optionalString (!isElectron) ''
+    preConfigure = lib.optionalString (!isElectron) ''
      (
        cd third_party/node
        grep patch update_npm_deps | sh
@@ -840,6 +833,11 @@ let
      runHook postConfigure
    '';

+    # Chromium expects nightly/bleeding edge rustc features to be available.
+    # Our rustc in nixpkgs follows stable, but since bootstrapping rustc requires
+    # nightly features too, we can (ab-)use RUSTC_BOOTSTRAP here as well to
+    # enable those features in our stable builds.
+    env.RUSTC_BOOTSTRAP = 1;
    # Mute some warnings that are enabled by default. This is useful because
    # our Clang is always older than Chromium's and the build logs have a size
    # of approx. 25 MB without this option (and this saves e.g. 66 %).
@@ -1,10 +1,10 @@
 {
  "chromium": {
-    "version": "140.0.7339.185",
+    "version": "140.0.7339.207",
    "chromedriver": {
-      "version": "140.0.7339.133",
-      "hash_darwin": "sha256-Xf2f4AyowRkG7FTd8p3l3CMF3YCpjyprMD0pM+yPOhA=",
-      "hash_darwin_aarch64": "sha256-HgANL/mEXhIndbmzB1oevem0T9HkLko/HNOi5Y9EzKc="
+      "version": "140.0.7339.208",
+      "hash_darwin": "sha256-sdBwwXl63vOkkGHsXG5BFWmXj2pbgA5bk2J5mNwEnGA=",
+      "hash_darwin_aarch64": "sha256-pL/7kHVv0e4X7bSCcjqQdI/myzgKqU858WPVJ5XZmKw="
    },
    "deps": {
      "depot_tools": {
@@ -21,8 +21,8 @@
    "DEPS": {
      "src": {
        "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "eeea00e459e8b6cd69698eda5b236a0d4cb3234d",
-        "hash": "sha256-BjjFH7/HhPBw/b7XmRZVNUrJYAUkWgCR0upHBn+Q5Ec=",
+        "rev": "17230b545fd18b35aad49122e5af97a463bc7a9c",
+        "hash": "sha256-TPO2tCz3pkYAlZW0u5xfyBEUjqZvu7n+2Pr7KD8MfMQ=",
        "recompress": true
      },
      "src/third_party/clang-format/script": {
@@ -252,8 +252,8 @@
      },
      "src/third_party/devtools-frontend/src": {
        "url": "https://chromium.googlesource.com/devtools/devtools-frontend",
-        "rev": "5dbb6f71a9bd613c0403242c7c021652fbf155fd",
-        "hash": "sha256-tA+6iKBfJVrlT+1UH55vqa5JCONweZeD/zWfNHHD+Kw="
+        "rev": "725edaaf06b966e670194d0376d50be0c25deb13",
+        "hash": "sha256-7YwrN+MizCnfcwDHWsYkZaTbN2qmCHcixX6KHhCPrXs="
      },
      "src/third_party/dom_distiller_js/dist": {
        "url": "https://chromium.googlesource.com/chromium/dom-distiller/dist.git",
@@ -632,8 +632,8 @@
      },
      "src/third_party/skia": {
        "url": "https://skia.googlesource.com/skia.git",
-        "rev": "1fdbea293a53b270e3f5e74c92cc6670d68412ff",
-        "hash": "sha256-YiGzqaht1r8/dDz0C4fpKsPEIplm33dPce2UpLkYTZ0="
+        "rev": "f3ff281f2330f2948888a9cc0ba921bbdc107da8",
+        "hash": "sha256-88ezOArtEdPJZACmgyjJ2Jf5biSlyoDYMJBZ7wwPt7Q="
      },
      "src/third_party/smhasher/src": {
        "url": "https://chromium.googlesource.com/external/smhasher.git",
@@ -792,8 +792,8 @@
      },
      "src/v8": {
        "url": "https://chromium.googlesource.com/v8/v8.git",
-        "rev": "6d56a0bd0840ce46c80ada63f8c962bd1bb336aa",
-        "hash": "sha256-VtW/nwKo3jCYfLBHvpAVdLJIRNxw27RAP1K+WgaO5Uc="
+        "rev": "b7ed978e41b4bac7802b206404d0e2f3d09f31ac",
+        "hash": "sha256-/XuTD8ENQutrbBt5sJYHuG/87q00J2fACSBBkeEHTYs="
      }
    }
  },
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "helm-diff";
-  version = "3.12.5";
+  version = "3.13.0";

  src = fetchFromGitHub {
    owner = "databus23";
    repo = "helm-diff";
    rev = "v${version}";
-    hash = "sha256-vylkjmQHnT69HqkSPGSpgEkP6eeknGq4BGr1eBEvTlw=";
+    hash = "sha256-U1lNCOYix+7aPNq4U0A7KU4Cr+AqQsTUrYTg/0Zg5cs=";
  };

-  vendorHash = "sha256-PPWL98qEdV/J96N0JsglxUsuT+yFiOg1t4DdiY++/OY=";
+  vendorHash = "sha256-nwL6n0pthW12ij9iqmS404r0m9xv0qh8RYiQhqvJC2U=";

  ldflags = [
    "-s"
@@ -13,13 +13,13 @@

 stdenv.mkDerivation rec {
  pname = "helm-secrets";
-  version = "4.6.6";
+  version = "4.6.10";

  src = fetchFromGitHub {
    owner = "jkroepke";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-sAGENuyg2t/H7BYF+Y+Nk3SB2/PA/V+L374iXmppkqc=";
+    hash = "sha256-hno6+kik+U9XA7Mr9OnuuVidfc/xoqWRjMbBMI6M3QA=";
  };

  nativeBuildInputs = [ makeWrapper ];
@@ -153,11 +153,11 @@
    "vendorHash": null
  },
  "azurerm": {
-    "hash": "sha256-/7TF9ISbrM4ZYyJKBZ3OrZsNp4a7BKtda12hnuPVS6E=",
+    "hash": "sha256-HlsJ85NXDykycTOCA+LbjeV5Jx4VWRDVFyKtx51n22Y=",
    "homepage": "https://registry.terraform.io/providers/hashicorp/azurerm",
    "owner": "hashicorp",
    "repo": "terraform-provider-azurerm",
-    "rev": "v4.44.0",
+    "rev": "v4.45.1",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
@@ -270,13 +270,13 @@
    "vendorHash": "sha256-O/MSx6iZ0SkCsMLKMr1cetkPaePoVq62UTOhiPTzF6g="
  },
  "cloudflare": {
-    "hash": "sha256-EsbktS0pP+tJtIPHckMmgdeIBLyL9T+lVyoDzJAzi98=",
+    "hash": "sha256-nIceDw766f32yn8qfgY89OYcOtwUc3650x0NO4XUrmk=",
    "homepage": "https://registry.terraform.io/providers/cloudflare/cloudflare",
    "owner": "cloudflare",
    "repo": "terraform-provider-cloudflare",
-    "rev": "v5.9.0",
+    "rev": "v5.10.1",
    "spdx": "Apache-2.0",
-    "vendorHash": "sha256-aMEcmK2lhKg0OH0jsQXDE09eHbImieyNgT4xH+pBEEk="
+    "vendorHash": "sha256-U2lC4d3MSkD8W4qJtrYlnHFflG0xgyPtL6OnjHwxV2U="
  },
  "cloudfoundry": {
    "hash": "sha256-1nYncJLVU/f9WD6Quh9IieIXgixPzbPk4zbtI1zmf9g=",
@@ -480,13 +480,13 @@
    "vendorHash": "sha256-ZbU2z7qUHPR7vDSflesSjgK7x3LYXVe/gnVsy19q6Bs="
  },
  "fortios": {
-    "hash": "sha256-vQ5PYY2EJb7+O65YbyqmIPKiqsd9UysnZXYGzZvkTPQ=",
+    "hash": "sha256-1HkVSoGt9PPPv8OH9F+acedVD0sbQ42msd6OWyegZFI=",
    "homepage": "https://registry.terraform.io/providers/fortinetdev/fortios",
    "owner": "fortinetdev",
    "repo": "terraform-provider-fortios",
-    "rev": "1.22.1",
+    "rev": "1.22.2",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-9BBBmuj7rEX5h3LEZzw7C7AtwvJgo7yEGReQ38lfE6U="
+    "vendorHash": "sha256-1DXlugtN2G2HrKbIEJ3rJ9zRlbE8fEUdlt3gp0mRdso="
  },
  "gandi": {
    "hash": "sha256-fsCtmwyxkXfOtiZG27VEb010jglK35yr4EynnUWlFog=",
@@ -516,13 +516,13 @@
    "vendorHash": null
  },
  "gitlab": {
-    "hash": "sha256-BMXxg6yz0b33yZK/Q8tkqDqPbYlrJWMvMenucDs+qUo=",
+    "hash": "sha256-wggQtY+E4O/iWo0OrjPlxK8j2aLavRAG31RpOOC08AY=",
    "homepage": "https://registry.terraform.io/providers/gitlabhq/gitlab",
    "owner": "gitlabhq",
    "repo": "terraform-provider-gitlab",
-    "rev": "v18.3.0",
+    "rev": "v18.4.1",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-v0nYsQinopJ9DXtkGFe3bIYXMBMsPDafn71Xfmvi2mo="
+    "vendorHash": "sha256-29uvPCepGHRPohGY7viaPD9VQPPj9XB/plragACC4e4="
  },
  "google": {
    "hash": "sha256-BDMOYw/NPCBb5VuJZGNbACJ/dq2uh+wx/y0w6LGWgwE=",
@@ -940,22 +940,22 @@
    "vendorHash": "sha256-LRIfxQGwG988HE5fftGl6JmBG7tTknvmgpm4Fu1NbWI="
  },
  "oci": {
-    "hash": "sha256-3kxR/QhWhfL4IW+YLN0z+EuYgnOdnCHfbxuXxOYHLC0=",
+    "hash": "sha256-xj7B4LQZalLA/APIe70JHmqPljRVDbDXfAUb3K2AtFg=",
    "homepage": "https://registry.terraform.io/providers/oracle/oci",
    "owner": "oracle",
    "repo": "terraform-provider-oci",
-    "rev": "v7.18.0",
+    "rev": "v7.19.0",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
  "okta": {
-    "hash": "sha256-ANGoCEHLuxTLpP9k2H/zUQjSEu7qob9Dh6c2Uzgj35Q=",
+    "hash": "sha256-sWiOGXeQxrUUlSM7TI4isUCdpiwwvosD+XVedM2pTSk=",
    "homepage": "https://registry.terraform.io/providers/okta/okta",
    "owner": "okta",
    "repo": "terraform-provider-okta",
-    "rev": "v6.0.0",
+    "rev": "v6.1.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-C+EP9ROYOnxkr895ZLZPgdRYm7Da2chDslsQRSq7NkU="
+    "vendorHash": "sha256-zfmQXMgKXCU8g1tpgV8BAXc5F8wBbJhtjO1trdQ4Jm4="
  },
  "oktaasa": {
    "hash": "sha256-2LhxgowqKvDDDOwdznusL52p2DKP+UiXALHcs9ZQd0U=",
@@ -54,6 +54,7 @@
  pipewire,
  python3,
  runCommand,
+  libunity,
  speechd-minimal,
  wayland,
  branch,
@@ -152,6 +153,7 @@ stdenv.mkDerivation (finalAttrs: {
      libnotify
      libX11
      libXcomposite
+      libunity
      libuuid
      libXcursor
      libXdamage
@@ -30,17 +30,17 @@ let
 in
 rustPlatform.buildRustPackage rec {
  pname = "mullvad";
-  version = "2025.7";
+  version = "2025.9";

  src = fetchFromGitHub {
    owner = "mullvad";
    repo = "mullvadvpn-app";
    tag = version;
    fetchSubmodules = true;
-    hash = "sha256-q5RYgU7VlhTXAN0uQeHNTJ1eFCQZzymLo/eiKr805O8=";
+    hash = "sha256-BfWPFkNXGDV0ql2hBXh+3hjyn7+pUXL3XzH8w8aIfKw=";
  };

-  cargoHash = "sha256-UUYAmNdzTthoWOIU5wr7Q059MAezpuRvCadGTjwoKGM=";
+  cargoHash = "sha256-kgtjLdTkCnLk27gYEjovPv5k5eHOqQdL8iERKhVDKNQ=";

  cargoBuildFlags = [
    "-p mullvad-daemon --bin mullvad-daemon"
@@ -13,16 +13,16 @@

 buildGoModule rec {
  pname = "netmaker";
-  version = "1.0.0";
+  version = "1.1.0";

  src = fetchFromGitHub {
    owner = "gravitl";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-CaN6sTD34hHAMwW90Ofe76me/vaO5rz7IlqQzEhgXQc=";
+    hash = "sha256-acsIe3N6F76KktfPOHreFwDatyuv1q7ui6MMhVXfj7c=";
  };

-  vendorHash = "sha256-Eo+7L1LffJXzsBwTcOMry2ZWUHBepLOcLm4bmkNMmLY=";
+  vendorHash = "sha256-Ur8cuE0jToOme79BTaYbaLDl2cRMjsr1DTvZjm8zmtc=";

  inherit subPackages;

@@ -9,11 +9,11 @@
 }:
 stdenv.mkDerivation rec {
  pname = "soapui";
-  version = "5.9.0";
+  version = "5.9.1";

  src = fetchurl {
    url = "https://dl.eviware.com/soapuios/${version}/SoapUI-${version}-linux-bin.tar.gz";
-    sha256 = "sha256-1FTqsRmy91bNpiyzoVyDiyEF2Zxd1ouMumL3ONCsJ94=";
+    sha256 = "sha256-VlI6TcesavKOpKf/R8S6IubepkthArFf8Jmi7YUGHjs=";
  };

  nativeBuildInputs = [ makeWrapper ];
@@ -19,11 +19,11 @@

 stdenv.mkDerivation rec {
  pname = "fldigi";
-  version = "4.2.07";
+  version = "4.2.09";

  src = fetchurl {
    url = "mirror://sourceforge/${pname}/${pname}-${version}.tar.gz";
-    hash = "sha256-9KpTh0fBqiVC901R1PdH2SEya32Ijl+jkxSSpFuhs6o=";
+    hash = "sha256-L+gj4DQyEOhPYAgOQuMtKf9RLzHJ4ACUHvGJcXDiLDc=";
  };

  nativeBuildInputs = [ pkg-config ];
@@ -387,7 +387,7 @@ in
  # https://github.com/moby/moby/tree/${version}/hack/dockerfile/install/*
  docker_25 =
    let
-      version = "25.0.12";
+      version = "25.0.13";
    in
    callPackage dockerGen {
      inherit version;
@@ -396,7 +396,7 @@ in
      cliRev = "43987fca488a535d810c429f75743d8c7b63bf4f";
      cliHash = "sha256-OwufdfuUPbPtgqfPeiKrQVkOOacU2g4ommHb770gV40=";
      mobyRev = "v${version}";
-      mobyHash = "sha256-EBOdbFP6UBK1uhXi1IzcPxYihHikuzzwMvv2NHsksYk=";
+      mobyHash = "sha256-X+1QG/toJt+VNLktR5vun8sG3PRoTVBAcekFXxocJdU=";
      runcRev = "v1.2.5";
      runcHash = "sha256-J/QmOZxYnMPpzm87HhPTkYdt+fN+yeSUu2sv6aUeTY4=";
      containerdRev = "v1.7.27";
@@ -407,18 +407,18 @@ in

  docker_28 =
    let
-      version = "28.3.3";
+      version = "28.4.0";
    in
    callPackage dockerGen {
-      version = "28.3.3";
+      inherit version;
      cliRev = "v${version}";
-      cliHash = "sha256-+nYpd9VGzzMPcBUfGM7V9MkrslYHDSUlE0vhTqDGc1s=";
+      cliHash = "sha256-SgePAc+GvjZgymu7VA2whwIFEYAfMVUz9G0ppxeOi7M=";
      mobyRev = "v${version}";
-      mobyHash = "sha256-3SWjoF4sXVuYxnENq5n6ZzPJx6BQXnyP8VXTQaaUSFA=";
-      runcRev = "v1.2.6";
-      runcHash = "sha256-XMN+YKdQOQeOLLwvdrC6Si2iAIyyHD5RgZbrOHrQE/g=";
-      containerdRev = "v1.7.27";
-      containerdHash = "sha256-H94EHnfW2Z59KcHcbfJn+BipyZiNUvHe50G5EXbrIps=";
+      mobyHash = "sha256-hiuwdemnjhi/622xGcevG4rTC7C+DyUijE585a9APSM=";
+      runcRev = "v1.3.0";
+      runcHash = "sha256-oXoDio3l23Z6UyAhb9oDMo1O4TLBbFyLh9sRWXnfLVY=";
+      containerdRev = "v1.7.28";
+      containerdHash = "sha256-vz7RFJkFkMk2gp7bIMx1kbkDFUMS9s0iH0VoyD9A21s=";
      tiniRev = "v0.19.0";
      tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI=";
    };
@@ -9,12 +9,12 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "adminer";
-  version = "5.3.0";
+  version = "5.4.0";

  # not using fetchFromGitHub as the git repo relies on submodules that are included in the tar file
  src = fetchurl {
    url = "https://github.com/vrana/adminer/releases/download/v${finalAttrs.version}/adminer-${finalAttrs.version}.zip";
-    hash = "sha256-7EnZ0frx8i6DXHO5E/65k+h+WuflTo8eBYNRVAmh7Kg=";
+    hash = "sha256-n6bmvUIrIiOaNCPEA5L+frbesnircbm0mTqmWxYRpwM=";
  };

  nativeBuildInputs = [
@@ -7,13 +7,13 @@

 stdenvNoCC.mkDerivation (self: {
  pname = "alacritty-theme";
-  version = "0-unstable-2025-08-04";
+  version = "0-unstable-2025-08-18";

  src = fetchFromGitHub {
    owner = "alacritty";
    repo = "alacritty-theme";
-    rev = "a2f966e33fbb26d8d34b9c78d49c95158720d2e4";
-    hash = "sha256-KG3guGyEY4AgO/tcRgq6De2kv+/JmFI8/RfzRG+QAXs=";
+    rev = "40e0c6c8690d1c62f58718fcef8a48eb6077740b";
+    hash = "sha256-guNbnnSyENom6SkwN2Zjn3I1KnV5F3hbvYS1ns4q4uE=";
    sparseCheckout = [ "themes" ];
  };

@@ -1,8 +1,8 @@
 {
  lib,
-  python311,
+  python3,
+  python3Packages,
  fetchFromGitHub,
-  file,
  gnupg,
  gawk,
  procps,
@@ -10,8 +10,7 @@
  withManpage ? false,
 }:

-with python311.pkgs;
-buildPythonApplication rec {
+python3Packages.buildPythonApplication rec {
  pname = "alot";
  version = "0.11";
  pyproject = true;
@@ -35,32 +34,35 @@ buildPythonApplication rec {
      --replace-fail /usr/share "$out/share"
  '';

-  build-system = [
-    setuptools-scm
-  ]
-  ++ lib.optional withManpage sphinx;
+  build-system =
+    with python3Packages;
+    [
+      setuptools
+      setuptools-scm
+    ]
+    ++ lib.optional withManpage sphinx;

-  dependencies = [
+  dependencies = with python3Packages; [
    configobj
-    file
    gpgme
    notmuch2
    python-magic
-    service-identity
+    standard-mailcap
    twisted
    urwid
    urwidtrees
  ];

  nativeCheckInputs = [
-    future
    gawk
    gnupg
-    mock
-    procps
-    pytestCheckHook
    notmuch
-  ];
+    procps
+  ]
+  ++ (with python3Packages; [
+    pytestCheckHook
+    mock
+  ]);

  postBuild = lib.optionalString withManpage [
    "make -C docs man"
@@ -76,7 +78,7 @@ buildPythonApplication rec {

  postInstall =
    let
-      completionPython = python.withPackages (ps: [ ps.configobj ]);
+      completionPython = python3.withPackages (ps: [ ps.configobj ]);
    in
    lib.optionalString withManpage ''
      mkdir -p $out/man
@@ -9,11 +9,11 @@

 stdenv.mkDerivation rec {
  pname = "ansifilter";
-  version = "2.21";
+  version = "2.22";

  src = fetchurl {
    url = "http://www.andre-simon.de/zip/ansifilter-${version}.tar.bz2";
-    hash = "sha256-XqfP39B1LVoWklnaAFwYuQN2KANv2J2LgmJLrOycE5A=";
+    hash = "sha256-zP9BynQLgTv5EDhotQAPQkPTKnUwTqkpohTEm5Q+zJM=";
  };

  nativeBuildInputs = [ pkg-config ];
@@ -7,14 +7,14 @@

 python312Packages.buildPythonPackage rec {
  pname = "ark-pixel-font";
-  version = "2025.08.11";
+  version = "2025.08.24";
  pyproject = false;

  src = fetchFromGitHub {
    owner = "TakWolf";
    repo = "ark-pixel-font";
    tag = version;
-    hash = "sha256-Rcn2zlZyMoziYd1b3wjjh1tYpm6A0qYGiKEg+Wd+0m8=";
+    hash = "sha256-kxct994UmZhJBMlXZmayN24eiKqeG9T7GdyfsjBYpn0=";
  };

  dependencies = with python312Packages; [
@@ -12,7 +12,7 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "arti";
-  version = "1.4.6";
+  version = "1.5.0";

  src = fetchFromGitLab {
    domain = "gitlab.torproject.org";
@@ -20,10 +20,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "core";
    repo = "arti";
    tag = "arti-v${finalAttrs.version}";
-    hash = "sha256-4HEJiA7FLM3NGV0dcx5aEwky8UTzVLR092b/0HTGCvY=";
+    hash = "sha256-14wOkbsfNomSCLuozUbKbOGUvhlLkG9iglN6ddkpEPk=";
  };

-  cargoHash = "sha256-ke58MnRYL2ZRck5UKCsGCqiiAZtnOZFTOaoQneP6tV0=";
+  cargoHash = "sha256-I2xH61x6gZXKsHBejMu7C2H4E6oLRj+GUeJEfRz48os=";

  nativeBuildInputs = lib.optionals stdenv.hostPlatform.isLinux [ pkg-config ];

@@ -7,16 +7,16 @@

 buildGoModule (finalAttrs: {
  pname = "atmos";
-  version = "1.188.0";
+  version = "1.189.0";

  src = fetchFromGitHub {
    owner = "cloudposse";
    repo = "atmos";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-WQ4u/5V7zVS1d7J3XS3nix465AyZGudpdSEZiBD+HMc=";
+    hash = "sha256-udreQcDKZYnOLxeEUQfC+OsLg1VdwXP9R7hDKD6YEkw=";
  };

-  vendorHash = "sha256-HlFwFzP1K/qiuRu3/XvNZiCB7oXBk5rx6mSlCB+q4kc=";
+  vendorHash = "sha256-RnmYUEgVQyZXvPPIXxS8cCkpKkQTGxQzawfDN4zVLHw=";

  ldflags = [
    "-s"
@@ -13,12 +13,12 @@

 let
  pname = "autobrr";
-  version = "1.65.0";
+  version = "1.66.1";
  src = fetchFromGitHub {
    owner = "autobrr";
    repo = "autobrr";
    tag = "v${version}";
-    hash = "sha256-i6F0CMMT/Qn+IUjvJdTkNl+pjqdLwGp+LPbQkYpehuY=";
+    hash = "sha256-4vfcSkTEFPqQ0r6uLg3o2pa1xcPuWn54+zYpWS/JEKE=";
  };

  autobrr-web = stdenvNoCC.mkDerivation {
@@ -41,7 +41,7 @@ let
        sourceRoot
        ;
      fetcherVersion = 1;
-      hash = "sha256-HH2+FHlDhxNKhYoO/m2nXV87fUqnoC/6L2s6hvkqnyM=";
+      hash = "sha256-kbLdXF5pAVIha07MCgq1yUShQwxj8xLt2mKzU4NYhwU=";
    };

    postBuild = ''
@@ -61,7 +61,7 @@ buildGoModule rec {
    src
    ;

-  vendorHash = "sha256-dgBE80kZOvZdFJ4XP+E+d6IygtI6c1tL//IwhiBPmfY=";
+  vendorHash = "sha256-hQXXBx4pACKqwG0ctkymZpCv3VLzFx2JCHuKzqumWbg=";

  preBuild = ''
    cp -r ${autobrr-web}/* web/dist
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "aws-iam-authenticator";
-  version = "0.7.5";
+  version = "0.7.7";

  src = fetchFromGitHub {
    owner = "kubernetes-sigs";
    repo = "aws-iam-authenticator";
    tag = "v${version}";
-    hash = "sha256-FvXK4yrWPtM7uhXb0eJB2Hs1eE/+h3R79xVbHFSX2hQ=";
+    hash = "sha256-nnl5QPJWG0hGp15dwcMdhWCPn5Z4noydLA/Nn5koQCU=";
  };

-  vendorHash = "sha256-fLA+dPAqvCPo8p+NUdmziAhUbi7wQVp2gnzv4493zr8=";
+  vendorHash = "sha256-oa0wOI7fbMjuG20g+8u5V2tbX+1R3pcRR7kn1iWMp4Y=";

  ldflags =
    let
@@ -66,14 +66,14 @@ let
 in
 py.pkgs.buildPythonApplication rec {
  pname = "awscli2";
-  version = "2.28.1"; # N.B: if you change this, check if overrides are still up-to-date
+  version = "2.30.6"; # N.B: if you change this, check if overrides are still up-to-date
  pyproject = true;

  src = fetchFromGitHub {
    owner = "aws";
    repo = "aws-cli";
    tag = version;
-    hash = "sha256-TpyjYnLTBPU83g6/h+BrX4hd4dUbZUvDyJ6m/3v38+A=";
+    hash = "sha256-enCI/yGnxf4/VYID/Di0ZhSiGp0ldgIKYmTnklGpjbc=";
  };

  postPatch = ''
@@ -12,13 +12,13 @@
 }:
 let
  pname = "backrest";
-  version = "1.8.1";
+  version = "1.9.2";

  src = fetchFromGitHub {
    owner = "garethgeorge";
    repo = "backrest";
    tag = "v${version}";
-    hash = "sha256-lpYny+5bXIxj+ZFhbSn200sBrDShISESZw+L5sy+X+Q=";
+    hash = "sha256-3lAWViC9K34R8la/z57kjGJmMmletGd8pJ1dDt+BeKQ=";
  };

  frontend = stdenv.mkDerivation (finalAttrs: {
@@ -34,7 +34,7 @@ let
    pnpmDeps = pnpm_9.fetchDeps {
      inherit (finalAttrs) pname version src;
      fetcherVersion = 1;
-      hash = "sha256-q7VMQb/FRT953yT2cyGMxUPp8p8XkA9mvqGI7S7Eifg=";
+      hash = "sha256-vJgsU0OXyAKjUJsPOyIY8o3zfNW1BUZ5IL814wmJr3o=";
    };

    buildPhase = ''
@@ -62,7 +62,7 @@ buildGoModule {
      internal/resticinstaller/resticinstaller.go
  '';

-  vendorHash = "sha256-AINnBkP+e9C/f/C3t6NK+6PYSVB4NON0C71S6SwUXbE=";
+  vendorHash = "sha256-oycV8JAJQF/PNc7mmYGzkZbpG8pMwxThmuys9e0+hcc=";

  nativeBuildInputs = [
    gzip
@@ -98,6 +98,10 @@ buildGoModule {
    export HOME=$(pwd)
  '';

+  # skip tests on darwin due to /etc/protocols failure
+  # `__darwinAllowLocalNetworking = true;` wasn't sufficient
+  doCheck = !stdenv.isDarwin;
+
  postInstall = ''
    wrapProgram $out/bin/backrest \
      --set-default BACKREST_RESTIC_COMMAND "${lib.getExe restic}"
@@ -9,11 +9,11 @@

 stdenv.mkDerivation rec {
  pname = "biglybt";
-  version = "3.8.0.0";
+  version = "3.9.0.0";

  src = fetchurl {
    url = "https://github.com/BiglySoftware/BiglyBT/releases/download/v${version}/GitHub_BiglyBT_unix.tar.gz";
-    hash = "sha256-7wj+UoU9RWUMQ4ircSoROsaZWuPg9+uxgYGQdZ841y0=";
+    hash = "sha256-NBXEY5f2kVPoZit7Gy4rM61bwQSdXovg0gURukhxJJ4=";
  };

  nativeBuildInputs = [ wrapGAppsHook3 ];
@@ -12,14 +12,14 @@

 stdenv.mkDerivation rec {
  pname = "bird";
-  version = "2.17.1";
+  version = "2.17.2";

  src = fetchFromGitLab {
    domain = "gitlab.nic.cz";
    owner = "labs";
    repo = "bird";
    rev = "v${version}";
-    hash = "sha256-9Zg3UmNEW+Q26PMj3Z1XDbPFC5vatX8i7RQSUlKXlwg=";
+    hash = "sha256-4kEtSVuEwJIYIk4+OBjBLz72i60TOUKIbvdNKlrcUYM=";
  };

  nativeBuildInputs = [
@@ -7,13 +7,13 @@

 buildGoModule rec {
  pname = "buildkit";
-  version = "0.23.2";
+  version = "0.24.0";

  src = fetchFromGitHub {
    owner = "moby";
    repo = "buildkit";
    rev = "v${version}";
-    hash = "sha256-/1wOZWvHHpT8zTnaQi/v3XgMyU8r2QPOBDadbos8GV8=";
+    hash = "sha256-cii+A+CFJcuix++f4ZdW6z5GKpPGdp9C9iJS+KPb4LY=";
  };

  vendorHash = null;
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "buildkite-cli";
-  version = "3.10.0";
+  version = "3.12.0";

  src = fetchFromGitHub {
    owner = "buildkite";
    repo = "cli";
    rev = "v${version}";
-    sha256 = "sha256-j5h5tej0RtliO9CqZUq5KRGRS2Ns+Te5yqNQeOCU6ZQ=";
+    sha256 = "sha256-gyrFRRVfgXd6JTgoY4aBB2VvMUKUtVq1U0ET+3AUWRU=";
  };

-  vendorHash = "sha256-0+KQcV1RXu6sgjrOCStENzjZvQWmvpbcse2K9syfZEw=";
+  vendorHash = "sha256-l8z5xHpcOBZkiL/0OMkkLu5qVqcPQ6q2K3yYCWyWqAY=";

  doCheck = false;

@@ -8,14 +8,14 @@
 }:
 python3Packages.buildPythonApplication rec {
  pname = "calibre-web";
-  version = "0.6.24";
+  version = "0.6.25";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "janeczku";
    repo = "calibre-web";
    tag = version;
-    hash = "sha256-DYhlD3ly6U/e5cDlsubDyW1uKeCtB+HrpagJlNDJhyI=";
+    hash = "sha256-tmSp6ABQ4KnNdUHYZPnXGfhhyhM6aczEUPd57APZnLA=";
  };

  patches = [
@@ -10,11 +10,11 @@

 stdenvNoCC.mkDerivation rec {
  pname = "camunda-modeler";
-  version = "5.38.1";
+  version = "5.39.0";

  src = fetchurl {
    url = "https://github.com/camunda/camunda-modeler/releases/download/v${version}/camunda-modeler-${version}-linux-x64.tar.gz";
-    hash = "sha256-PsNOB2VTwxS9xZxZF79BE+ntF3EpQmdfTagXC2NFhtI=";
+    hash = "sha256-aDuJQWhgyQ0Aoh40Uyo4HPfNQDAhIg8Cd+veKEUynjs=";
  };
  sourceRoot = "camunda-modeler-${version}-linux-x64";

@@ -15,7 +15,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "capypdf";
-  version = "0.16.0";
+  version = "0.17.0";

  outputs = [
    "out"
@@ -26,7 +26,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "jpakkane";
    repo = "capypdf";
    rev = finalAttrs.version;
-    hash = "sha256-FqXb0e16sADJVdXCbWJcAs/5+xpGAXIwXR0bgGEuHRE=";
+    hash = "sha256-hdutgZhJwUi+wwtYt3+hSiyBImchUtbpVd0RCPWEr0Q=";
  };

  nativeBuildInputs = [
@@ -6,14 +6,14 @@

 rustPlatform.buildRustPackage rec {
  pname = "cargo-all-features";
-  version = "1.10.0";
+  version = "1.11.0";

  src = fetchCrate {
    inherit pname version;
-    hash = "sha256-/w3Xd7PXUNtqzRYmUqJtth+GDuXSnsk1NiYCTYsHuAQ=";
+    hash = "sha256-pHwQq6/KGCIYm3Q63YbUit6yUjwEFnpBJCE6lpGBcZc=";
  };

-  cargoHash = "sha256-OgVeAuC36mP8rv4+XHsrOe7KKnpQ/u0M3g91NE0u98A=";
+  cargoHash = "sha256-tAwU7vJLp4KLzYAEbtSpNKbZBz+hBdAiIkUD/A5CpwI=";

  meta = with lib; {
    description = "Cargo subcommand to build and test all feature flag combinations";
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "cargo-deny";
-  version = "0.18.4";
+  version = "0.18.5";

  src = fetchFromGitHub {
    owner = "EmbarkStudios";
    repo = "cargo-deny";
    rev = version;
-    hash = "sha256-5aa13eFfGEJZBRB4/PAKKLwxw2wt8sBI7ZVOpgnO+t8=";
+    hash = "sha256-FYVMeq/728uXayGbDKVK2kZNkf9tdXET+uEorJ6WNto=";
  };

-  cargoHash = "sha256-RW+drxVouQbiZsjEL+XZBE2VMzEiCkLTOC9jMxI76T8=";
+  cargoHash = "sha256-QfylAFybghBJzxgtrKIPGz/6EM1DlNJ/uJIEtMXpTbo=";

  nativeBuildInputs = [
    pkg-config
@@ -22,13 +22,13 @@

 stdenv.mkDerivation rec {
  pname = "cava";
-  version = "0.10.4";
+  version = "0.10.6";

  src = fetchFromGitHub {
    owner = "karlstav";
    repo = "cava";
    rev = version;
-    hash = "sha256-oKEUddzg7Gt3uu6x9D65JX0PvuC59r7Psb9VZz3+nCc=";
+    hash = "sha256-dWPW9vd9LdGALt7Po4nZnW5HkivtZcIUBlXEFurq2os=";
  };

  buildInputs = [
@@ -199,6 +199,7 @@ python3.pkgs.buildPythonApplication rec {
      Prevent cloud misconfigurations during build-time for Terraform, Cloudformation,
      Kubernetes, Serverless framework and other infrastructure-as-code-languages.
    '';
+    mainProgram = "checkov";
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [
      anhdle14
@@ -7,12 +7,12 @@
 }:

 stdenvNoCC.mkDerivation rec {
-  version = "11.0.0";
+  version = "11.0.1";
  pname = "checkstyle";

  src = fetchurl {
    url = "https://github.com/checkstyle/checkstyle/releases/download/checkstyle-${version}/checkstyle-${version}-all.jar";
-    sha256 = "sha256-WbmHE0A1OxqGsNqmyPh6QQwhhnUAw6QiQIuftcnsLHY=";
+    sha256 = "sha256-e8ByK4En2zMguzvBFQR4RE9n9gA1ZIMdpLz7wJGXMpo=";
  };

  nativeBuildInputs = [ makeBinaryWrapper ];
@@ -1,21 +0,0 @@
-{
-  lib,
-  rustPlatform,
-}:
-
-let
-  cargo = lib.importTOML ./src/Cargo.toml;
-in
-rustPlatform.buildRustPackage {
-  pname = cargo.package.name;
-  version = cargo.package.version;
-
-  src = ./src;
-
-  cargoLock.lockFile = ./src/Cargo.lock;
-
-  meta = {
-    description = "Output a path's realpath within a chroot";
-    maintainers = [ lib.maintainers.elvishjerricco ];
-  };
-}
@@ -1,16 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "anyhow"
-version = "1.0.98"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e16d2d3311acee920a9eb8d33b8cbc1787ce4a264e85f964c2404b969bdcd487"
-
-[[package]]
-name = "chroot-realpath"
-version = "0.1.0"
-dependencies = [
- "anyhow",
-]
@@ -1,10 +0,0 @@
-[package]
-name = "chroot-realpath"
-version = "0.1.0"
-edition = "2021"
-
-[dependencies]
-anyhow = "1.0.98"
-
-[profile.release]
-opt-level = "z"
@@ -1,26 +0,0 @@
-use std::env;
-use std::io::{stdout, Write};
-use std::os::unix::ffi::OsStrExt;
-use std::os::unix::fs;
-
-use anyhow::{bail, Context, Result};
-
-fn main() -> Result<()> {
-    let args: Vec<String> = env::args().collect();
-
-    if args.len() != 3 {
-        bail!("Usage: {} <chroot> <path>", args[0]);
-    }
-
-    fs::chroot(&args[1]).context("Failed to chroot")?;
-    std::env::set_current_dir("/").context("Failed to change directory")?;
-
-    let path = std::fs::canonicalize(&args[2])
-        .with_context(|| format!("Failed to canonicalize {}", args[2]))?;
-
-    stdout()
-        .write_all(path.into_os_string().as_bytes())
-        .context("Failed to write output")?;
-
-    Ok(())
-}
@@ -76,13 +76,13 @@ let
 in
 stdenv.mkDerivation rec {
  pname = "cinnamon";
-  version = "6.4.12";
+  version = "6.4.13";

  src = fetchFromGitHub {
    owner = "linuxmint";
    repo = "cinnamon";
    rev = version;
-    hash = "sha256-fEi/dUPnHC0OFqefclf0gQsZZNRVzBLaIR41prUfNP8=";
+    hash = "sha256-XGG5Qf6Kx1gvZITuuZWn1ggY4FNW/aEuBLbpWyxE2V8=";
  };

  patches = [
@@ -6,13 +6,13 @@
  "packages": {
    "": {
      "dependencies": {
-        "@anthropic-ai/claude-code": "^1.0.119"
+        "@anthropic-ai/claude-code": "^1.0.123"
      }
    },
    "node_modules/@anthropic-ai/claude-code": {
-      "version": "1.0.119",
-      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-1.0.119.tgz",
-      "integrity": "sha512-0SxTgt7Htr2okxL2Uk0Mv5eB8JxBrRCZCdtTNwuYC/OBl2F7UDM8YFtIwHz97ygCoJw49j7SL6s+/MIZGaEzrA==",
+      "version": "1.0.123",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-1.0.123.tgz",
+      "integrity": "sha512-egniOpnrjpm8pA2ygj9aDw+rZ0jKJdso94CvKlKzdVcLdw0r0FSMvgxWRGGxjHuqcl6BP6yhHGSKlZ6qzd14OA==",
      "license": "SEE LICENSE IN README.md",
      "bin": {
        "claude": "cli.js"
@@ -7,16 +7,16 @@

 buildNpmPackage rec {
  pname = "claude-code";
-  version = "1.0.119";
+  version = "1.0.123";

  nodejs = nodejs_20; # required for sandboxed Nix builds on Darwin

  src = fetchzip {
    url = "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-${version}.tgz";
-    hash = "sha256-l6H3IaCIo15OkCR+QBsZJ9lQIxEaAuUOUy/yEQtcvDI=";
+    hash = "sha256-bzI6wYnY3kBA8xKOeQqYpsi672FIrcSj3eAN0nFqz5o=";
  };

-  npmDepsHash = "sha256-J22dL6GuvMKRLZ7ZAkKn8iX/qBfgK/k3IXKPLGROwo4=";
+  npmDepsHash = "sha256-UUpss39MY/fBRVjzd1yU9zBQMVW3wMy6zJFcoasivOI=";

  postPatch = ''
    cp ${./package-lock.json} package-lock.json
@@ -9,13 +9,13 @@

 stdenvNoCC.mkDerivation rec {
  pname = "cloudlog";
-  version = "2.7.0";
+  version = "2.7.1";

  src = fetchFromGitHub {
    owner = "magicbug";
    repo = "Cloudlog";
    rev = version;
-    hash = "sha256-OP+CUBuc0Zl/cqZlF1Ryo4WlTDEmAflwxpYPJr3BPvg=";
+    hash = "sha256-My0z4MW/9O0+ErIh7SEWU3KGJ4UQDmhwJICtBgQ4+q8=";
  };

  postPatch = ''
@@ -5,7 +5,7 @@
  "packages": {
    "": {
      "dependencies": {
-        "codebuff": "^1.0.473"
+        "codebuff": "^1.0.485"
      }
    },
    "node_modules/chownr": {
@@ -18,9 +18,9 @@
      }
    },
    "node_modules/codebuff": {
-      "version": "1.0.473",
-      "resolved": "https://registry.npmjs.org/codebuff/-/codebuff-1.0.473.tgz",
-      "integrity": "sha512-maT1kgspsqqDBYZ5K2Fpze3cB3NwTzl5nQZ9EY7CFjkiypYRjlFosrkxY8eUXs6hCZy/WmuBEYRjdyobEaqrcA==",
+      "version": "1.0.485",
+      "resolved": "https://registry.npmjs.org/codebuff/-/codebuff-1.0.485.tgz",
+      "integrity": "sha512-RC+DPvi2radIVR5mQ+L53J6dg9RYR6mtmnAz6v3b3sUS6vlAX5r2huDFK5vjWh4pvphLyYzXxnc8nxjGLwqDVA==",
      "cpu": [
        "x64",
        "arm64"
@@ -6,14 +6,14 @@

 buildNpmPackage rec {
  pname = "codebuff";
-  version = "1.0.473";
+  version = "1.0.485";

  src = fetchzip {
    url = "https://registry.npmjs.org/codebuff/-/codebuff-${version}.tgz";
-    hash = "sha256-SlSS1++pEVtvY3sSDZzoD4K6PiFA8Z6tBX+hfIDrhrY=";
+    hash = "sha256-TeHIRz6FmpyAIVS58IgyJ0Y/Ob/crCFey4eTk3vDIHE=";
  };

-  npmDepsHash = "sha256-fEK3CzK66AwHlZyt9ax+r5QGqUCfOw11EMMzA2d337c=";
+  npmDepsHash = "sha256-ZQdg464SXIwAhFgotIXO6xjpAdquOlKKPuejl6qS3xo=";

  postPatch = ''
    cp ${./package-lock.json} package-lock.json
@@ -11,7 +11,7 @@

 stdenv.mkDerivation rec {
  pname = "codeql";
-  version = "2.22.4";
+  version = "2.23.0";

  dontConfigure = true;
  dontBuild = true;
@@ -19,7 +19,7 @@ stdenv.mkDerivation rec {

  src = fetchzip {
    url = "https://github.com/github/codeql-cli-binaries/releases/download/v${version}/codeql.zip";
-    hash = "sha256-g1544Y+TiJE814HaneTDOuRTAux9RWsLgMRruI/CVTg=";
+    hash = "sha256-8T1aOy2okhwj2rFz3jUpUm2JaJcrXdB6KpSD8btCEx4=";
  };

  nativeBuildInputs = [
@@ -12,18 +12,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "codex";
-  version = "0.39.0";
+  version = "0.40.0";

  src = fetchFromGitHub {
    owner = "openai";
    repo = "codex";
    tag = "rust-v${finalAttrs.version}";
-    hash = "sha256-VxfUhPyJRYu6xvrDJRa3BqS/G7gf+J9d+2FbW1Ps4kw=";
+    hash = "sha256-IBYx362R2ueYNg7/vcjGa2kKAfGlPm6JcZ/A4XKtMT4=";
  };

  sourceRoot = "${finalAttrs.src.name}/codex-rs";

-  cargoHash = "sha256-62JkVo2Dlrtgr66qn6a3vuIUsJpVZDQ8uqIJnXeeU90=";
+  cargoHash = "sha256-fWrZXXQfrm0L3epquDZUj0SuLRn3WiHX3nQA3d+xnUg=";

  nativeBuildInputs = [
    installShellFiles
@@ -8,7 +8,7 @@

 buildGoModule rec {
  pname = "consul";
-  version = "1.21.4";
+  version = "1.21.5";

  # Note: Currently only release tags are supported, because they have the Consul UI
  # vendored. See
@@ -22,7 +22,7 @@ buildGoModule rec {
    owner = "hashicorp";
    repo = "consul";
    tag = "v${version}";
-    hash = "sha256-z2hyEqC8SnIac01VjB2g2+RAaZEaLlVsqBzwedx5t4Q=";
+    hash = "sha256-x5e0DhJ3qMh51E+bEIzl0JmH7bvdicVgOa0l1Qix9vI=";
  };

  # This corresponds to paths with package main - normally unneeded but consul
@@ -32,7 +32,7 @@ buildGoModule rec {
    "connect/certgen"
  ];

-  vendorHash = "sha256-fWdzFyRtbTOgAapmVz1ScYEHCZUx7nfqw0y2v4aDuic=";
+  vendorHash = "sha256-PZtLz7jqtqYcBO/xrE/tE4vqNstLq9Iv20eWnW5xloQ=";

  doCheck = false;

@@ -57,7 +57,6 @@ buildGoModule rec {
    platforms = lib.platforms.linux ++ lib.platforms.darwin;
    license = lib.licenses.bsl11;
    maintainers = with lib.maintainers; [
-      adamcstephens
      vdemeester
      nh2
      techknowlogick
@@ -62,6 +62,6 @@ buildGoModule rec {
    description = "Tool for directly patching vulnerabilities in container images";
    license = lib.licenses.asl20;
    mainProgram = "copa";
-    maintainers = with lib.maintainers; [ bmanuel ];
+    maintainers = with lib.maintainers; [ ];
  };
 }
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "credhub-cli";
-  version = "2.9.49";
+  version = "2.9.50";

  src = fetchFromGitHub {
    owner = "cloudfoundry-incubator";
    repo = "credhub-cli";
    rev = version;
-    sha256 = "sha256-Ilb/iieB+TCCXUPzTh6TxJtox0sicWXCUBI1SuHNsUQ=";
+    sha256 = "sha256-+Y+PmnCQCCpGvThzbW6byquwFx3Pz96Je0+yWWMh3BQ=";
  };

  # these tests require network access that we're not going to give them
@@ -17,13 +17,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "crispy-doom";
-  version = "7.0";
+  version = "7.1";

  src = fetchFromGitHub {
    owner = "fabiangreffrath";
    repo = "crispy-doom";
    tag = "crispy-doom-${finalAttrs.version}";
-    hash = "sha256-+rNZsb4GAjzNcIU5xZGBpmP+nXNOP16oVg68nfecMrw=";
+    hash = "sha256-LJLqlPSOarmm5oqSLMilxNMJl4+uKukDl/b58NpZ8VI=";
  };

  postPatch = ''
@@ -9,16 +9,16 @@

 buildGo125Module (finalAttrs: {
  pname = "crush";
-  version = "0.7.10";
+  version = "0.9.2";

  src = fetchFromGitHub {
    owner = "charmbracelet";
    repo = "crush";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-z7x//aTJCcAa3RkB8QOtdeU9dBcOKkJD3ftFiCt/WQo=";
+    hash = "sha256-VFAGjNtXKNjkv8Ryi28oFN/uLomXXdw6NFtyjT3pMEY=";
  };

-  vendorHash = "sha256-AZOX2aRYkuLx0DRCS5dqsRCPwpHngqDc+97luRr0m0g=";
+  vendorHash = "sha256-ktF3kIr143uPwiEbgafladZRqIsmG6jI2BeumGSu82U=";

  # rename TestMain to prevent it from running, as it panics in the sandbox.
  postPatch = ''
@@ -0,0 +1,3 @@
+{ python3Packages }:
+
+python3Packages.toPythonApplication python3Packages.crypt4gh
@@ -10,13 +10,13 @@

 stdenv.mkDerivation rec {
  pname = "decker";
-  version = "1.58";
+  version = "1.59";

  src = fetchFromGitHub {
    owner = "JohnEarnest";
    repo = "Decker";
    rev = "v${version}";
-    hash = "sha256-oPB+TT7mHJ6GNBnGIVmbAxNoD2oexPI2Sm8kxxsV6d4=";
+    hash = "sha256-56yIbIKMppO1eyvnlHvqkQvIT3x5t3W1KQ4M2HWRU3U=";
  };

  buildInputs = [
@@ -0,0 +1,62 @@
+{
+  stdenv,
+  fetchFromGitHub,
+  fetchpatch,
+  swift,
+  swiftpm,
+  versionCheckHook,
+  lib,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "desktoppr";
+  version = "0.5";
+
+  src = fetchFromGitHub {
+    owner = "scriptingosx";
+    repo = "desktoppr";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-eEVcYSa1ntyX/Wdj4HUyXyXIrK+T11Thg23ntNoIgH0=";
+  };
+
+  patches = [
+    # Update version in the code from 0.5b (beta) to 0.5 (release)
+    (fetchpatch {
+      url = "https://github.com/scriptingosx/desktoppr/commit/419363c28c99eb0f391bf231813af5e507c35573.patch";
+      hash = "sha256-7A3hsXO0hZYlZMrX1U0zC2vy59M9H5OZebEbPY8E9fA=";
+      includes = [ "desktoppr/main.swift" ];
+    })
+    # Adds support for building with swiftpm
+    (fetchpatch {
+      url = "https://github.com/scriptingosx/desktoppr/commit/eaf08da7cdd5fe9aa656516b3a5a0a9ac9969e72.patch";
+      hash = "sha256-8sAUNnTGqQ2UHIFUPwTP0dd3QKgI0HfOrG0HzcIStMM=";
+    })
+  ];
+
+  nativeBuildInputs = [
+    swift
+    swiftpm
+  ];
+
+  installPhase = ''
+    runHook preInstall
+    install -Dm755 "$(swiftpmBinPath)/desktoppr" -t "$out/bin"
+    runHook postInstall
+  '';
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+
+  versionCheckProgramArg = "version";
+  doInstallCheck = true;
+
+  meta = {
+    description = "Simple command line tool to read and set the desktop picture/wallpaper";
+    homepage = "https://github.com/scriptingosx/desktoppr";
+    platforms = lib.platforms.darwin;
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ andre4ik3 ];
+    mainProgram = "desktoppr";
+  };
+})
@@ -6,11 +6,11 @@

 stdenv.mkDerivation rec {
  pname = "dpic";
-  version = "2024.01.01";
+  version = "2025.08.01";

  src = fetchurl {
    url = "https://ece.uwaterloo.ca/~aplevich/dpic/${pname}-${version}.tar.gz";
-    sha256 = "sha256-FhkBrJr4bXMFUSuhtWSUBPtMgDoPqwYmJ8w8WJWthy8=";
+    sha256 = "sha256-Dzj1wekVGIJsssbpViSzkNGAjvrcBAL4ORFRLwznJsM=";
  };

  # The prefix passed to configure is not used.
@@ -23,13 +23,13 @@ let
 in
 stdenv.mkDerivation {
  pname = "drawterm";
-  version = "0-unstable-2025-08-18";
+  version = "0-unstable-2025-09-11";

  src = fetchFrom9Front {
    owner = "plan9front";
    repo = "drawterm";
-    rev = "44a7bdfaeb268bbc9df69693fa52d551beb2516d";
-    hash = "sha256-ov0BkKWUpRBi4COETtEw3x9WOSMy6HXkxrU9bVSI+AM=";
+    rev = "7523180ec9e5210e28eb0191268066188cdf91ab";
+    hash = "sha256-IOZCpNXJcTpqCRsNp8aaP2vORvusLktLtyoQ7gykJB8=";
  };

  enableParallelBuilding = true;
@@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "ec2-instance-selector";
-  version = "3.1.1";
+  version = "3.1.2";

  src = fetchFromGitHub {
    owner = "aws";
    repo = "amazon-ec2-instance-selector";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-4J66/LiFFeUW20du2clqjz9ozLV+Sn2VVqF9VISXpb0=";
+    hash = "sha256-8tSZkh2ngOgfwup2nCiNXHFX2GhIVVW9PtLuGNP5yoo=";
  };

-  vendorHash = "sha256-ocysHrbkmFQ96dEVJvc5YuuBiaXToAcMUUPFiLpMCpU=";
+  vendorHash = "sha256-qrxYLnj8DEGNtIq6sC7xvNBLgguG/lj9YLqgLFumQtE=";

  ldflags = [
    "-s"
@@ -6,12 +6,12 @@

 python3Packages.buildPythonApplication rec {
  pname = "edir";
-  version = "2.31";
+  version = "2.32";
  format = "pyproject";

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-HcM++zmw+pW1ugmd/Dtz30V2Ew66t840cXPjAIRUlbo=";
+    hash = "sha256-E9zb7Y4KNQ/gw+TkpRVMUHMPlY1ImQAb0P8G/OFgMwM=";
  };

  nativeBuildInputs = with python3Packages; [
@@ -14,13 +14,13 @@ stdenv.mkDerivation (finalAttrs: {
  # the Equicord repository. Dates as tags (and automatic releases) were the compromise
  # we came to with upstream. Please do not change the version schema (e.g., to semver)
  # unless upstream changes the tag schema from dates.
-  version = "2025-09-01";
+  version = "2025-09-12";

  src = fetchFromGitHub {
    owner = "Equicord";
    repo = "Equicord";
    tag = "${finalAttrs.version}";
-    hash = "sha256-ZijsOAixBJ7sxLZYH2PndCh1BoWfO9tHCNDh1PmBZA4=";
+    hash = "sha256-915HW2cGGKtbRGghHP/Em0Wyeit6d1oSUmaZLQOH/Lc=";
  };

  pnpmDeps = pnpm_10.fetchDeps {
@@ -140,7 +140,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
    license = licenses.gpl3Plus;
    maintainers = with maintainers; [
      kimat
-      pyrox0
      n8henrie
    ];
    platforms = platforms.unix;
@@ -10,16 +10,16 @@

 buildNpmPackage rec {
  pname = "firebase-tools";
-  version = "14.16.0";
+  version = "14.17.0";

  src = fetchFromGitHub {
    owner = "firebase";
    repo = "firebase-tools";
    tag = "v${version}";
-    hash = "sha256-6gChudAEAlZOy++wys+xHS8VmmsLfiGKtHszMWFjLRE=";
+    hash = "sha256-qZMm3xW46XZG0l3ECKOSBb2vRwZrwLP2Cl3UXcH7OTY=";
  };

-  npmDepsHash = "sha256-r+yMoSgJRwkT1liaH0bAzSx3xLnGjF68OkTNf72pSHg=";
+  npmDepsHash = "sha256-3voUCvmBqi9Lfpol1lMDe4gTmF6TevLMmxBoDS03K0o=";

  postPatch = ''
    ln -s npm-shrinkwrap.json package-lock.json
@@ -29,19 +29,19 @@

 rustPlatform.buildRustPackage rec {
  pname = "firefoxpwa";
-  version = "2.15.0";
+  version = "2.16.0";

  src = fetchFromGitHub {
    owner = "filips123";
    repo = "PWAsForFirefox";
    rev = "v${version}";
-    hash = "sha256-UqgPAGDekM9bKx4kNH+IuB31ML/Jn4E6g86suVESRRU=";
+    hash = "sha256-kFhnlWiNCbs0arJfQRRWubnIrdXKrwyJNLAN1KlDHoc=";
  };

  sourceRoot = "${src.name}/native";
  buildFeatures = [ "immutable-runtime" ];

-  cargoHash = "sha256-7v+Ohll8k3YHKYoQZIWvV+YLHT62ygFb0kPEIXh0jP4=";
+  cargoHash = "sha256-3o/Ub452PbiicmgyW6z9BP2PaECfFYN+Tx24/Go2N2M=";

  preConfigure = ''
    sed -i 's;version = "0.0.0";version = "${version}";' Cargo.toml
@@ -9,13 +9,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "flashmq";
-  version = "1.23.0";
+  version = "1.23.1";

  src = fetchFromGitHub {
    owner = "halfgaar";
    repo = "FlashMQ";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-JIEJwtS9rtjX+8uqvjnhdAKwp8vk2rptpPYnEX385nk=";
+    hash = "sha256-to+BCn7/fa1YcjCudrOY0otzEkIx9ocSwkUnFGnjuxU=";
  };

  nativeBuildInputs = [
@@ -14,13 +14,13 @@

 stdenv.mkDerivation {
  pname = "flatter";
-  version = "0-unstable-2025-08-12";
+  version = "0-unstable-2025-08-25";

  src = fetchFromGitHub {
    owner = "keeganryan";
    repo = "flatter";
-    rev = "7757f6c1166ce5feda1cb829736976b8d20741fc";
-    hash = "sha256-n/JtSdX8kZIEXcxj344APRo7fuRIR8+ZeUnk7QX8f3Q=";
+    rev = "d2b8026f29b4a69e987b15d4b240f8a5053275d3";
+    hash = "sha256-NAefYPJ+syTmpDiOzkgKB1IZmgQ2DNmvLrtoBee/IX4=";
  };

  strictDeps = true;
@@ -8,13 +8,13 @@

 buildNpmPackage rec {
  pname = "fluidd";
-  version = "1.34.3";
+  version = "1.34.4";

  src = fetchFromGitHub {
    owner = "fluidd-core";
    repo = "fluidd";
    tag = "v${version}";
-    hash = "sha256-e3JM9QshQFHvDXvZznQBDFsOiwzxw2lz2hChw66lmMM=";
+    hash = "sha256-EixAax+Bd0IoGdk6Q9FoMQoWAa1U+O3SYeYEnuonHEI=";
  };

  patches = [
@@ -23,7 +23,7 @@ buildNpmPackage rec {
    })
  ];

-  npmDepsHash = "sha256-WDquc35cwyTyVM8Il5aVYWbJqSKhR8wsMNNFgexFKYg=";
+  npmDepsHash = "sha256-08tm+NuDLwilwo7SCmncIGAbEIW0tJLZi1HaoWGgAJA=";

  installPhase = ''
    mkdir -p $out/share/fluidd
@@ -29,13 +29,13 @@ in

 buildNpmPackage (finalAttrs: {
  pname = "pangolin";
-  version = "1.10.1";
+  version = "1.10.2";

  src = fetchFromGitHub {
    owner = "fosrl";
    repo = "pangolin";
    tag = finalAttrs.version;
-    hash = "sha256-q5HnXJCx8wvHT+D/Pa+752xh57m/odesRjoqSdCHfrI=";
+    hash = "sha256-fXswhcnspyayyvvl1HEuQylKHzdgwucm1ClokJMeqys=";
  };

  npmDepsHash = "sha256-ivG/7KTmWPjnXzO+ISc+2bsNqW/0VPhFbg1229A64cw=";
@@ -31,13 +31,13 @@ let
 in
 buildGoModule rec {
  pname = "frankenphp";
-  version = "1.9.0";
+  version = "1.9.1";

  src = fetchFromGitHub {
    owner = "dunglas";
    repo = "frankenphp";
    tag = "v${version}";
-    hash = "sha256-fa9IWIypPAXRDw5KsiJkNGaRP4lH50xb4PVWYa5guwE=";
+    hash = "sha256-zkB/kN6noCkUyUsXAbaWeRq1fpNErTcZPzDRoRp+LtM=";
  };

  sourceRoot = "${src.name}/caddy";
@@ -45,7 +45,7 @@ buildGoModule rec {
  # frankenphp requires C code that would be removed with `go mod tidy`
  # https://github.com/golang/go/issues/26366
  proxyVendor = true;
-  vendorHash = "sha256-vmOlqPhU5sKwRYgZQ0LVE1eMWEtSLTduAeRLEm7gLcI=";
+  vendorHash = "sha256-scL015vSSfhuK06UZFRxK0Sk9dG6W3AOuFSPTogTCfI=";

  buildInputs = [
    phpUnwrapped
@@ -63,13 +63,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "freerdp";
-  version = "3.17.0";
+  version = "3.17.1";

  src = fetchFromGitHub {
    owner = "FreeRDP";
    repo = "FreeRDP";
    rev = finalAttrs.version;
-    hash = "sha256-86RbzRgC93ZOt3MHRKJIRklEuyCQs6tHff5jk++yFok=";
+    hash = "sha256-KAlxpoGOqvHTqKkb/yMrquSckFfMXgbEfxr2IuLPZFQ=";
  };

  postPatch = ''
@@ -14,16 +14,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "g3proxy";
-  version = "1.12.1";
+  version = "1.12.2";

  src = fetchFromGitHub {
    owner = "bytedance";
    repo = "g3";
    tag = "g3proxy-v${finalAttrs.version}";
-    hash = "sha256-nEvkzWbjbnhFC4HqYgw89FIKx2HlvX+fYR05bgzKdMg=";
+    hash = "sha256-zh++wptu1hukQ+Bm5AWhjrLLyLuAb4owfJwDztfKnwY=";
  };

-  cargoHash = "sha256-Ey0STb6VeExYIYx/k5o5d2oMDwmxS7gvH31+3WPea/M=";
+  cargoHash = "sha256-JNRH2IFUwzHarZZLxmYgyWr5lO1UX8H38EbmGoXebKo=";

  cargoBuildFlags = [
    "-p"
@@ -8,7 +8,7 @@

 let
  pname = "gallery-dl";
-  version = "1.30.7";
+  version = "1.30.8";
 in
 python3Packages.buildPythonApplication {
  inherit pname version;
@@ -18,7 +18,7 @@ python3Packages.buildPythonApplication {
    owner = "mikf";
    repo = "gallery-dl";
    tag = "v${version}";
-    hash = "sha256-VFmTZpcTQQK5sfwgMJGDqHp7wu5dXd4gGfJTtnLBoxk=";
+    hash = "sha256-jetfEjKwAtJwOLKRZfnnnlb7G5YCDUzeHIASqJS3gcI=";
  };

  build-system = [ python3Packages.setuptools ];
@@ -6,7 +6,7 @@

 let
  pname = "gate";
-  version = "0.52.0";
+  version = "0.53.0";
 in
 buildGoModule {
  inherit pname version;
@@ -15,7 +15,7 @@ buildGoModule {
    owner = "minekube";
    repo = "gate";
    tag = "v${version}";
-    hash = "sha256-DKnJnhfO3Cs80tAYiodxf1alfO4DXNneiqDILgP+v8w=";
+    hash = "sha256-wrvq2opwT4bbplUljasWmT+JF3/lS8AyzBSfyUB3nUw=";
  };

  vendorHash = "sha256-0NcfuCZHR4QHbMNqc+ilPouie+9k7FqOG/JdNX8uO8c=";
@@ -12,11 +12,11 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "gemini-cli-bin";
-  version = "0.5.4";
+  version = "0.6.0";

  src = fetchurl {
    url = "https://github.com/${owner}/${repo}/releases/download/v${finalAttrs.version}/${asset}";
-    hash = "sha256-rwvL5cjxPOC1ZWopo54+I1NWGMewnm6lTTl6YhNlSBk=";
+    hash = "sha256-jmZvL4Rst3238H2BdZ/bQuddFkFcFLRABJ1wTHm8qPM=";
  };

  phases = [
@@ -10,16 +10,16 @@

 buildGoModule rec {
  pname = "gh";
-  version = "2.79.0";
+  version = "2.80.0";

  src = fetchFromGitHub {
    owner = "cli";
    repo = "cli";
    tag = "v${version}";
-    hash = "sha256-ACnRcuHbIsG43bXqqpxPMA1BcFb9TckfiLNJeyxAwkk=";
+    hash = "sha256-3XrP3NuXYWT09Yfo3XJ6Z2SE5jkE+tvS9QrXiRy3ov8=";
  };

-  vendorHash = "sha256-+O+cTsm9HzAJKDoNMMtcXr6iwRsqFtRLu0VTLe5/rSA=";
+  vendorHash = "sha256-rVNKTr3b4zShPfkiEBx7LqVQY2eMrXo/s8iC5tyQZNo=";

  nativeBuildInputs = [ installShellFiles ];

@@ -24,13 +24,13 @@
 }:
 stdenv.mkDerivation rec {
  pname = "gnome-pomodoro";
-  version = "0.27.0";
+  version = "0.28.0";

  src = fetchFromGitHub {
    owner = "gnome-pomodoro";
    repo = "gnome-pomodoro";
    rev = version;
-    hash = "sha256-ZdTMaCzjA7tsXmnlHGl8MFGGViVPwMZuiu91q5v/v9U=";
+    hash = "sha256-cVuBJ1Rwh/mjlFKKRJkKmdtDHdWNc6uiEE3ywCesirU=";
  };

  patches = [
@@ -9,11 +9,11 @@

 stdenv.mkDerivation rec {
  pname = "gnu-shepherd";
-  version = "1.0.6";
+  version = "1.0.7";

  src = fetchurl {
    url = "mirror://gnu/shepherd/shepherd-${version}.tar.gz";
-    hash = "sha256-/HTf2kmaaV5lD8WDnTmtU44uMjlJuJBK/Pr/o0FxvjM=";
+    hash = "sha256-MlqbdYHug6FRFd+/vMJHyetRD3UlSaI/OukSqOxydZc=";
  };

  configureFlags = [ "--localstatedir=/" ];
@@ -15,17 +15,17 @@ let
 in
 buildGoModule rec {
  pname = "go-ethereum";
-  version = "1.16.2";
+  version = "1.16.3";

  src = fetchFromGitHub {
    owner = "ethereum";
    repo = "go-ethereum";
    rev = "v${version}";
-    hash = "sha256-12bmK9OYYIDBeN52dQElnDaOcWOzwvjpAZmzHH8IHvw=";
+    hash = "sha256-9g+RlOnV3DMLkak+RbSm8RgFB14Yuap8CT1w6kuZRv0=";
  };

  proxyVendor = true;
-  vendorHash = "sha256-i1PhF1DFdt2X4faxe5+iYsPIyco0Xb6stOzaCy6JIto=";
+  vendorHash = "sha256-GEPSkuEdrYvPGXEGhAT3U765rjY6w6kwOVYOMCgOaCo=";

  doCheck = false;

--- a/Show More
+++ b/Show More