From 353a322c9d22fd60b5e263e2a9e32f20fe0fb51d Mon Sep 17 00:00:00 2001
From: blenderfreaky <blenderfreaky@mailbox.org>
Date: Sun, 9 Mar 2025 07:55:35 +0100
Subject: [PATCH 01/34] ivpn-ui: init at 3.14.29

---
 pkgs/by-name/iv/ivpn-ui/package.nix | 93 +++++++++++++++++++++++++++++
 1 file changed, 93 insertions(+)
 create mode 100644 pkgs/by-name/iv/ivpn-ui/package.nix

diff --git a/pkgs/by-name/iv/ivpn-ui/package.nix b/pkgs/by-name/iv/ivpn-ui/package.nix
new file mode 100644
index 000000000000..7e7565e56838
--- /dev/null
+++ b/pkgs/by-name/iv/ivpn-ui/package.nix
@@ -0,0 +1,93 @@
+{
+  lib,
+  buildNpmPackage,
+  fetchFromGitHub,
+  electron,
+  copyDesktopItems,
+  makeDesktopItem,
+  nix-update-script,
+  makeWrapper,
+  ivpn-service,
+}:
+let
+  version = "3.14.29";
+in
+buildNpmPackage {
+  pname = "ivpn-ui";
+  inherit version;
+
+  src = fetchFromGitHub {
+    owner = "ivpn";
+    repo = "desktop-app";
+    tag = "v${version}";
+    hash = "sha256-8JScty/sGyxzC2ojRpatHpCqEXZw9ksMortIhZnukoU=";
+  };
+
+  sourceRoot = "source/ui";
+
+  npmDepsHash = "sha256-2EsXYNo+rj2v+YkZT6ciEcDAirnEZ5MezFlf9zsb/os=";
+
+  nativeBuildInputs = [
+    copyDesktopItems
+    makeWrapper
+  ];
+
+  env = {
+    ELECTRON_SKIP_BINARY_DOWNLOAD = 1;
+  };
+
+  postBuild = ''
+    cp -r ${electron.dist} electron-dist
+    chmod -R u+w electron-dist
+
+    npm exec electron-builder -- \
+      --dir \
+      -c.electronDist=electron-dist \
+      -c.electronVersion=${electron.version} \
+      --config electron-builder.config.js
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/share/ivpn-ui
+    cp -r dist/*-unpacked/{locales,resources{,.pak}} $out/share/ivpn-ui
+
+    install -Dm644 $src/ui/References/Linux/ui/ivpnicon.svg $out/share/icons/hicolor/scalable/apps/ivpn-ui.svg
+
+    makeWrapper ${lib.getExe electron} $out/bin/ivpn-ui \
+      --prefix PATH : ${lib.makeBinPath [ ivpn-service ]} \
+      --add-flags $out/share/ivpn-ui/resources/app.asar \
+      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}" \
+      --inherit-argv0
+
+    runHook postInstall
+  '';
+
+  desktopItems = [
+    (makeDesktopItem {
+      name = "ivpn-ui";
+      type = "Application";
+      desktopName = "IVPN";
+      genericName = "VPN Client";
+      comment = "UI interface for IVPN";
+      icon = "ivpn-ui";
+      exec = "ivpn-ui";
+      categories = [ "Network" ];
+      startupNotify = true;
+    })
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "UI interface for IVPN";
+    mainProgram = "ivpn-ui";
+    homepage = "https://www.ivpn.net";
+    downloadPage = "https://github.com/ivpn/desktop-app";
+    changelog = "https://github.com/ivpn/desktop-app/releases/tag/v${version}";
+    license = lib.licenses.gpl3Only;
+    maintainers = with lib.maintainers; [ blenderfreaky ];
+    platforms = [ "x86_64-linux" ];
+  };
+}

From 85d5d8c63722520ac0f159587fcb4946a6369677 Mon Sep 17 00:00:00 2001
From: Silvio Ankermann <silvio@booq.org>
Date: Wed, 26 Mar 2025 02:50:09 +0100
Subject: [PATCH 02/34] keycloak-magic-link: init at 0.38

---
 pkgs/by-name/ke/keycloak/all-plugins.nix      |  1 +
 .../keycloak/keycloak-magic-link/default.nix  | 34 +++++++++++++++++++
 2 files changed, 35 insertions(+)
 create mode 100644 pkgs/by-name/ke/keycloak/keycloak-magic-link/default.nix

diff --git a/pkgs/by-name/ke/keycloak/all-plugins.nix b/pkgs/by-name/ke/keycloak/all-plugins.nix
index a62b65fe3f4c..3ba14493b231 100644
--- a/pkgs/by-name/ke/keycloak/all-plugins.nix
+++ b/pkgs/by-name/ke/keycloak/all-plugins.nix
@@ -4,6 +4,7 @@
   scim-for-keycloak = callPackage ./scim-for-keycloak { };
   scim-keycloak-user-storage-spi = callPackage ./scim-keycloak-user-storage-spi { };
   keycloak-discord = callPackage ./keycloak-discord { };
+  keycloak-magic-link = callPackage ./keycloak-magic-link { };
   keycloak-metrics-spi = callPackage ./keycloak-metrics-spi { };
   keycloak-restrict-client-auth = callPackage ./keycloak-restrict-client-auth { };
 
diff --git a/pkgs/by-name/ke/keycloak/keycloak-magic-link/default.nix b/pkgs/by-name/ke/keycloak/keycloak-magic-link/default.nix
new file mode 100644
index 000000000000..8d0c2999fdd0
--- /dev/null
+++ b/pkgs/by-name/ke/keycloak/keycloak-magic-link/default.nix
@@ -0,0 +1,34 @@
+{
+  lib,
+  fetchFromGitHub,
+  maven,
+  nix-update-script,
+}:
+maven.buildMavenPackage rec {
+  pname = "keycloak-magic-link";
+  version = "0.38";
+
+  src = fetchFromGitHub {
+    owner = "p2-inc";
+    repo = "keycloak-magic-link";
+    tag = "v${version}";
+    hash = "sha256-+fhWxAUlt9UVM81Ua2Mwek3D5Kzzk/Tsugbo0fLyxiA=";
+  };
+
+  mvnHash = "sha256-edBdooR+KqY0JKwxdwTd5AxJ0qn3MV9xLrqYukIq2oY=";
+
+  installPhase = ''
+    runHook preInstall
+    install -Dm644 target/keycloak-magic-link-${version}.jar $out/keycloak-magic-link-${version}.jar
+    runHook postInstall
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    homepage = "https://github.com/p2-inc/keycloak-magic-link";
+    description = "Magic Link Authentication for Keycloak";
+    license = lib.licenses.elastic20;
+    maintainers = with lib.maintainers; [ lykos153 ];
+  };
+}

From 63bf01db864c2d806b2ba566fca7185562912b9e Mon Sep 17 00:00:00 2001
From: Anton Mosich <anton@mosich.at>
Date: Sat, 22 Mar 2025 14:35:22 +0100
Subject: [PATCH 03/34] nltk-data: add averaged_perceptron_tagger_eng

---
 pkgs/tools/text/nltk-data/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/tools/text/nltk-data/default.nix b/pkgs/tools/text/nltk-data/default.nix
index 6a97585d4cfb..d9613b86637a 100644
--- a/pkgs/tools/text/nltk-data/default.nix
+++ b/pkgs/tools/text/nltk-data/default.nix
@@ -67,6 +67,11 @@ lib.makeScope newScope (self: {
     location = "taggers";
     hash = "sha256-tl3Cn2okhBkUtTXvAmFRx72Brez6iTGRdmFTwFmpk3M=";
   };
+  averaged_perceptron_tagger_eng = makeNltkDataPackage {
+    pname = "averaged_perceptron_tagger_eng";
+    location = "taggers";
+    hash = "sha256-tl3Cn2okhBkUtTXvAmFRx72Brez6iTGRdmFTwFmpk3M=";
+  };
   snowball_data = makeNltkDataPackage {
     pname = "snowball_data";
     location = "stemmers";

From 27e6fa183e6520361d14dc03febcbf462e7ceee0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 7 Apr 2025 08:49:34 +0000
Subject: [PATCH 04/34] jdt-language-server: 1.45.0 -> 1.46.1

---
 pkgs/by-name/jd/jdt-language-server/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/jd/jdt-language-server/package.nix b/pkgs/by-name/jd/jdt-language-server/package.nix
index 28046486c6e9..c7e7e253cdfa 100644
--- a/pkgs/by-name/jd/jdt-language-server/package.nix
+++ b/pkgs/by-name/jd/jdt-language-server/package.nix
@@ -7,15 +7,15 @@
 }:
 
 let
-  timestamp = "202502271238";
+  timestamp = "202504011455";
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "jdt-language-server";
-  version = "1.45.0";
+  version = "1.46.1";
 
   src = fetchurl {
     url = "https://download.eclipse.org/jdtls/milestones/${finalAttrs.version}/jdt-language-server-${finalAttrs.version}-${timestamp}.tar.gz";
-    hash = "sha256-wJ556Vi+tc5B+ztQl67ARVKYvIihTI5BRitX7bKBJ5c=";
+    hash = "sha256-9DX99ts6oNFZjvDxH4C7IOCeZwCQATgnGcMT7/B94Cw=";
   };
 
   sourceRoot = ".";

From 57d548785115bc2954557ea8462f98e649f41115 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 9 Apr 2025 14:10:38 +0000
Subject: [PATCH 05/34] tigerbeetle: 0.16.33 -> 0.16.35

---
 pkgs/by-name/ti/tigerbeetle/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ti/tigerbeetle/package.nix b/pkgs/by-name/ti/tigerbeetle/package.nix
index f39396bdf824..1ef79e5d1a51 100644
--- a/pkgs/by-name/ti/tigerbeetle/package.nix
+++ b/pkgs/by-name/ti/tigerbeetle/package.nix
@@ -10,14 +10,14 @@ let
   platform =
     if stdenvNoCC.hostPlatform.isDarwin then "universal-macos" else stdenvNoCC.hostPlatform.system;
   hash = builtins.getAttr platform {
-    "universal-macos" = "sha256-HTKfTNdGBUWX5QTHdSvflwPX0ytmsb5AEbb1XcJz1/k=";
-    "x86_64-linux" = "sha256-cIfia5bdwqGURd9JocZYssxQwhonFFNEJbS+gcaPdTk=";
-    "aarch64-linux" = "sha256-mTkaMP9Xo/U/oveuZBT4kXU7P/6zg7RUnKof/5VpxoQ=";
+    "universal-macos" = "sha256-ryYQyt+qjNKiT3XQuAwaG65I8KIMrkM2QeL9WvFkyik=";
+    "x86_64-linux" = "sha256-VgV+K6DDtoX5CjqGUlSAZYVakAs4GWX6+8Fi9v29HjY=";
+    "aarch64-linux" = "sha256-euyfFe9iXnAnePYd1u4ymtWqKGrf7vNuOeS0jFtChCA=";
   };
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "tigerbeetle";
-  version = "0.16.33";
+  version = "0.16.35";
 
   src = fetchzip {
     url = "https://github.com/tigerbeetle/tigerbeetle/releases/download/${finalAttrs.version}/tigerbeetle-${platform}.zip";

From 513dffc134b2293f68068e15fd0e9bc4c44f448b Mon Sep 17 00:00:00 2001
From: Sarah Clark <seclark@nextquestion.net>
Date: Thu, 10 Apr 2025 14:02:51 -0700
Subject: [PATCH 06/34] vivaldi-ffmpeg-codecs: move to /pkgs/by-name

---
 .../vi/vivaldi-ffmpeg-codecs/package.nix}                     | 0
 pkgs/top-level/all-packages.nix                               | 4 ----
 2 files changed, 4 deletions(-)
 rename pkgs/{applications/networking/browsers/vivaldi/ffmpeg-codecs.nix => by-name/vi/vivaldi-ffmpeg-codecs/package.nix} (100%)

diff --git a/pkgs/applications/networking/browsers/vivaldi/ffmpeg-codecs.nix b/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
similarity index 100%
rename from pkgs/applications/networking/browsers/vivaldi/ffmpeg-codecs.nix
rename to pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 3ed4554f61ac..5cd6ba016b09 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -15714,10 +15714,6 @@ with pkgs;
 
   vivaldi = callPackage ../applications/networking/browsers/vivaldi { };
 
-  vivaldi-ffmpeg-codecs =
-    callPackage ../applications/networking/browsers/vivaldi/ffmpeg-codecs.nix
-      { };
-
   openrazer-daemon = python3Packages.toPythonApplication python3Packages.openrazer-daemon;
 
   orpie = callPackage ../applications/misc/orpie {

From 4f5034f3129622029fa70eba43470f4554cf149c Mon Sep 17 00:00:00 2001
From: Sarah Clark <seclark@nextquestion.net>
Date: Thu, 10 Apr 2025 16:27:17 -0700
Subject: [PATCH 07/34] vivaldi-ffmpeg-codecs: add sarahec as maintainer

---
 pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix b/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
index 0872fd859b20..c5ee55008acc 100644
--- a/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
+++ b/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
@@ -35,6 +35,7 @@ stdenv.mkDerivation rec {
       betaboon
       cawilliamson
       fptje
+      sarahec
     ];
     platforms = [ "x86_64-linux" ];
   };

From 4297574bcbd27ddd08e52e90d7aea42695ab3550 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niklas=20Hamb=C3=BCchen?= <mail@nh2.me>
Date: Fri, 11 Apr 2025 01:23:49 +0000
Subject: [PATCH 08/34] ceph: 19.2.1 -> 19.2.2

---
 pkgs/tools/filesystems/ceph/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/tools/filesystems/ceph/default.nix b/pkgs/tools/filesystems/ceph/default.nix
index 0cb9d3158564..52e3054b6ce7 100644
--- a/pkgs/tools/filesystems/ceph/default.nix
+++ b/pkgs/tools/filesystems/ceph/default.nix
@@ -356,10 +356,10 @@ let
   );
   inherit (ceph-python-env.python) sitePackages;
 
-  version = "19.2.1";
+  version = "19.2.2";
   src = fetchurl {
     url = "https://download.ceph.com/tarballs/ceph-${version}.tar.gz";
-    hash = "sha256-QEX3LHxySVgLBg21iQga1DnyQsXFi6593e+WSjgT/h8=";
+    hash = "sha256-7FD9LJs25VzUCRIBm01Cm3ss1YLTN9YLwPZnHSMd8rs=";
   };
 in
 rec {

From 7fffdc0268adff4ac3d43c8088bb8a62fa57ad36 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Fri, 11 Apr 2025 13:51:59 +0200
Subject: [PATCH 09/34] nix-eval-jobs: 2.28.0 -> 2.28.1

Diff: https://github.com/nix-community/nix-eval-jobs/compare/v2.28.0...v2.28.1
---
 pkgs/tools/package-management/nix-eval-jobs/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/tools/package-management/nix-eval-jobs/default.nix b/pkgs/tools/package-management/nix-eval-jobs/default.nix
index d229bc50e301..03d6989c2a8c 100644
--- a/pkgs/tools/package-management/nix-eval-jobs/default.nix
+++ b/pkgs/tools/package-management/nix-eval-jobs/default.nix
@@ -13,13 +13,13 @@
 }:
 stdenv.mkDerivation rec {
   pname = "nix-eval-jobs";
-  version = "2.28.0";
+  version = "2.28.1";
 
   src = fetchFromGitHub {
     owner = "nix-community";
     repo = pname;
     rev = "v${version}";
-    hash = "sha256-v5n6t49X7MOpqS9j0FtI6TWOXvxuZMmGsp2OfUK5QfA=";
+    hash = "sha256-QuSt8PsB1huFQVXeSASfbXX0r5hmEFLNgYX4dpKewWs=";
   };
 
   buildInputs = [

From 051e4e6df5f1bf691562dac8470a7c1dde1a132d Mon Sep 17 00:00:00 2001
From: Sarah Clark <seclark@nextquestion.net>
Date: Thu, 10 Apr 2025 14:15:23 -0700
Subject: [PATCH 10/34] vivaldi-ffmpeg-codecs: 115541 -> 119239; add
 aarch64-linux

---
 .../vi/vivaldi-ffmpeg-codecs/package.nix      | 33 ++++++++++++++-----
 1 file changed, 24 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix b/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
index c5ee55008acc..771e15f847c3 100644
--- a/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
+++ b/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
@@ -1,20 +1,32 @@
 {
-  squashfsTools,
   fetchurl,
   lib,
+  squashfsTools,
   stdenv,
 }:
 
 # This derivation roughly follows the update-ffmpeg script that ships with the official Vivaldi
 # downloads at https://vivaldi.com/download/
-stdenv.mkDerivation rec {
-  pname = "chromium-codecs-ffmpeg-extra";
-  version = "115541";
 
-  src = fetchurl {
-    url = "https://api.snapcraft.io/api/v1/snaps/download/XXzVIXswXKHqlUATPqGCj2w2l7BxosS8_41.snap";
-    hash = "sha256-a1peHhku+OaGvPyChvLdh6/7zT+v8OHNwt60QUq7VvU=";
+let
+  sources = {
+    x86_64-linux = fetchurl {
+      url = "https://api.snapcraft.io/api/v1/snaps/download/XXzVIXswXKHqlUATPqGCj2w2l7BxosS8_73.snap";
+      hash = "sha256-YsAYQ/fKlrvu7IbIxLO0oVhWOtZZzUmA00lrU+z/0+s=";
+    };
+    aarch64-linux = fetchurl {
+      url = "https://api.snapcraft.io/api/v1/snaps/download/XXzVIXswXKHqlUATPqGCj2w2l7BxosS8_74.snap";
+      hash = "sha256-zwCbaFeVmeHQLEp7nmD8VlEjSY9PqSVt6CdW4wPtw9o=";
+    };
   };
+in
+stdenv.mkDerivation rec {
+  
+  pname = "chromium-codecs-ffmpeg-extra";
+
+  version = "119293";
+
+  src = sources."${stdenv.hostPlatform.system}";
 
   buildInputs = [ squashfsTools ];
 
@@ -27,7 +39,7 @@ stdenv.mkDerivation rec {
   '';
 
   meta = with lib; {
-    description = "Additional support for proprietary codecs for Vivaldi";
+    description = "Additional support for proprietary codecs for Vivaldi and other chromium based tools";
     homepage = "https://ffmpeg.org/";
     sourceProvenance = with sourceTypes; [ binaryNativeCode ];
     license = licenses.lgpl21;
@@ -37,6 +49,9 @@ stdenv.mkDerivation rec {
       fptje
       sarahec
     ];
-    platforms = [ "x86_64-linux" ];
+    platforms = [
+      "x86_64-linux"
+      "aarch64-linux"
+    ];
   };
 }

From 05dbf8a13097dc65d8e20ebf3767c4c49413cd6a Mon Sep 17 00:00:00 2001
From: Sarah Clark <seclark@nextquestion.net>
Date: Thu, 10 Apr 2025 14:58:48 -0700
Subject: [PATCH 11/34] vivaldi-ffmpeg-codecs: add update script

---
 .../vi/vivaldi-ffmpeg-codecs/package.nix      |  7 ++-
 .../vi/vivaldi-ffmpeg-codecs/update.sh        | 44 +++++++++++++++++++
 2 files changed, 50 insertions(+), 1 deletion(-)
 create mode 100755 pkgs/by-name/vi/vivaldi-ffmpeg-codecs/update.sh

diff --git a/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix b/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
index 771e15f847c3..896adad9f151 100644
--- a/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
+++ b/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/package.nix
@@ -21,7 +21,7 @@ let
   };
 in
 stdenv.mkDerivation rec {
-  
+
   pname = "chromium-codecs-ffmpeg-extra";
 
   version = "119293";
@@ -38,6 +38,11 @@ stdenv.mkDerivation rec {
     install -vD chromium-ffmpeg-${version}/chromium-ffmpeg/libffmpeg.so $out/lib/libffmpeg.so
   '';
 
+  passthru = {
+    inherit sources;
+    updateScript = ./update.sh;
+  };
+
   meta = with lib; {
     description = "Additional support for proprietary codecs for Vivaldi and other chromium based tools";
     homepage = "https://ffmpeg.org/";
diff --git a/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/update.sh b/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/update.sh
new file mode 100755
index 000000000000..fb6f3d47daf7
--- /dev/null
+++ b/pkgs/by-name/vi/vivaldi-ffmpeg-codecs/update.sh
@@ -0,0 +1,44 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p common-updater-scripts coreutils grep jq squashfsTools
+
+set -eu -o pipefail
+
+RELEASES=$(curl -H 'Snap-Device-Series: 16' http://api.snapcraft.io/v2/snaps/info/chromium-ffmpeg)
+STABLE_RELEASES=$(echo $RELEASES | jq '."channel-map" | .[] | select(.channel.risk=="stable")')
+
+function max_version() {
+  local versions=$(echo $1 | jq -r '.version')
+  echo "$(echo $versions |  grep -E -o '^[0-9]+')"
+}
+
+function update_source() {
+  local platform=$1
+  local selectedRelease=$2
+  local version=$3
+  local url=$(echo $selectedRelease | jq -r '.download.url')
+  source="$(nix-prefetch-url "$url")"
+  hash=$(nix-hash --to-sri --type sha256 "$source")
+  update-source-version vivaldi-ffmpeg-codecs "$version" "$hash" "$url" --ignore-same-version --system=$platform --source-key="sources.$platform"
+}
+
+x86Release="$(echo $STABLE_RELEASES | jq 'select(.channel.architecture=="amd64")')"
+x86CodecVersion=$(max_version "$x86Release")
+arm64Release="$(echo $STABLE_RELEASES | jq -r 'select(.channel.architecture=="arm64")')"
+arm64CodecVersion=$(max_version "$arm64Release")
+
+currentVersion=$(nix-instantiate --eval -E "with import ./. {}; vivaldi-ffmpeg-codecs.version or (lib.getVersion vivaldi-ffmpeg-codecs)" | tr -d '"')
+
+if [[ "$currentVersion" == "$x86CodecVersion" ]]; then
+  exit 0
+fi
+
+# If this fails too often, consider finding the max common version between the two architectures
+if [[ "$x86CodecVersion" != "$arm64CodecVersion" ]]; then
+    >&2 echo "Multiple chromium versions found: $x86CodecVersion (intel) and $arm64CodecVersion (arm); no update"
+    exit 1
+fi
+
+
+
+update_source "x86_64-linux" "$x86Release" "$x86CodecVersion"
+update_source "aarch64-linux" "$arm64Release" "$arm64CodecVersion"

From d565e38de4574b25c56a5cfa8d20917fd7209457 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 12 Apr 2025 13:43:58 +0000
Subject: [PATCH 12/34] gnomeExtensions.easyScreenCast: 1.11.0 -> 1.11.1

---
 pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix b/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix
index 2107936087ad..c0ce09fc875e 100644
--- a/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix
+++ b/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix
@@ -12,13 +12,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gnome-shell-extension-EasyScreenCast";
-  version = "1.11.0";
+  version = "1.11.1";
 
   src = fetchFromGitHub {
     owner = "EasyScreenCast";
     repo = "EasyScreenCast";
     rev = finalAttrs.version;
-    hash = "sha256-CK9ta+2Kf7IFKb+uQhI1AtdNkJZpBgIL7JDM3JqsV4c=";
+    hash = "sha256-G4JDxaUfipn9asOXGw+OPVULOdV+OmzeK5aE/FSPGes=";
   };
 
   patches = [

From 37ef2280af808179c98679b28352a75f49553b73 Mon Sep 17 00:00:00 2001
From: Jost Alemann <jost_alemann@me.com>
Date: Sat, 12 Apr 2025 21:04:34 +0200
Subject: [PATCH 13/34] readest: 0.9.32 -> 0.9.33

Changelog: https://github.com/readest/readest/releases/tag/v0.9.33
Diff: https://github.com/readest/readest/compare/v0.9.32...v0.9.33
---
 pkgs/by-name/re/readest/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/re/readest/package.nix b/pkgs/by-name/re/readest/package.nix
index aad56f12d15f..fdd7b9a06081 100644
--- a/pkgs/by-name/re/readest/package.nix
+++ b/pkgs/by-name/re/readest/package.nix
@@ -19,13 +19,13 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "readest";
-  version = "0.9.32";
+  version = "0.9.33";
 
   src = fetchFromGitHub {
     owner = "readest";
     repo = "readest";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-EdEjRKBrWGIwJbmNLDvJl/1Hq+Cs6w815ND6yH3/+TI=";
+    hash = "sha256-amGOtA2dOFjECCI5IAb9qL98XAvd+QAW4QQD41F8BG4=";
     fetchSubmodules = true;
   };
 
@@ -38,14 +38,14 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   pnpmDeps = pnpm_9.fetchDeps {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-6JFBw/jktEQBXum7Cb4TrntbrnVQM36jE6sby2bmIlw=";
+    hash = "sha256-+fJbQmoa89WSfA4dteUSRoEfgEN38tsHZiuWyOvuvhw=";
   };
 
   pnpmRoot = "../..";
 
   useFetchCargoVendor = true;
 
-  cargoHash = "sha256-2XYfcYjrg7RUXuI0B4i9DVNr0i0bYNYHj1peAi77QaE=";
+  cargoHash = "sha256-uMm/X4MKu71MxjofRN/HR5d1yzkJhmVt9W5kHDryEtc=";
 
   cargoRoot = "../..";
 

From 348d126d2cff77979f67a29919395087a2537e73 Mon Sep 17 00:00:00 2001
From: dish <pyrox@pyrox.dev>
Date: Sun, 10 Nov 2024 14:55:10 -0500
Subject: [PATCH 14/34] gotenberg: 8.9.1 -> 8.16.0

---
 pkgs/by-name/go/gotenberg/package.nix | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/go/gotenberg/package.nix b/pkgs/by-name/go/gotenberg/package.nix
index b4f105360c38..cfd1d797ad33 100644
--- a/pkgs/by-name/go/gotenberg/package.nix
+++ b/pkgs/by-name/go/gotenberg/package.nix
@@ -12,6 +12,7 @@
   makeFontsConf,
   liberation_ttf_v2,
   exiftool,
+  pdfcpu,
   nixosTests,
   nix-update-script,
 }:
@@ -23,19 +24,21 @@ let
 in
 buildGoModule rec {
   pname = "gotenberg";
-  version = "8.9.1";
+  version = "8.16.0";
 
   src = fetchFromGitHub {
     owner = "gotenberg";
     repo = "gotenberg";
     tag = "v${version}";
-    hash = "sha256-y54DtOYIzFAk05TvXFcLdStfAXim3sVHBkW+R8CrtMM=";
+    hash = "sha256-m8aDhfcUa3QFr+7hzlQFL2wPfcx5RE+3dl5RHzWwau0=";
   };
 
-  vendorHash = "sha256-BYcdqZ8TNEG6popRt+Dg5xW5Q7RmYvdlV+niUNenRG0=";
+  vendorHash = "sha256-EM+Rpo4Zf+aqA56aFeuQ0tbvpTgZhmfv+B7qYI6PXWc=";
 
   postPatch = ''
     find ./pkg -name '*_test.go' -exec sed -i -e 's#/tests#${src}#g' {} \;
+    substituteInPlace pkg/gotenberg/fs_test.go \
+      --replace-fail "/tmp" "/build"
   '';
 
   nativeBuildInputs = [ makeBinaryWrapper ];
@@ -52,6 +55,7 @@ buildGoModule rec {
     pdftk
     qpdf
     unoconv
+    pdfcpu
     mktemp
     jre'
   ];
@@ -62,6 +66,7 @@ buildGoModule rec {
     export QPDF_BIN_PATH=${getExe qpdf}
     export UNOCONVERTER_BIN_PATH=${getExe unoconv}
     export EXIFTOOL_BIN_PATH=${getExe exiftool}
+    export PDFCPU_BIN_PATH=${getExe pdfcpu}
     # LibreOffice needs all of these set to work properly
     export LIBREOFFICE_BIN_PATH=${libreoffice'}
     export FONTCONFIG_FILE=${fontsConf}
@@ -70,7 +75,14 @@ buildGoModule rec {
   '';
 
   # These tests fail with a panic, so disable them.
-  checkFlags = [ "-skip=^TestChromiumBrowser_(screenshot|pdf)$" ];
+  checkFlags =
+    let
+      skippedTests = [
+        "TestChromiumBrowser_(screenshot|pdf)"
+        "TestNewContext"
+      ];
+    in
+    [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];
 
   preFixup = ''
     wrapProgram $out/bin/gotenberg \
@@ -78,6 +90,7 @@ buildGoModule rec {
       --set QPDF_BIN_PATH "${getExe qpdf}" \
       --set UNOCONVERTER_BIN_PATH "${getExe unoconv}" \
       --set EXIFTOOL_BIN_PATH "${getExe exiftool}" \
+      --set PDFCPU_BIN_PATH "${getExe pdfcpu}" \
       --set JAVA_HOME "${jre'}"
   '';
 

From 9d7360786ddf61ffe2c3d56f9e58d929f8cc12d5 Mon Sep 17 00:00:00 2001
From: happysalada <raphael@megzari.com>
Date: Sat, 12 Apr 2025 15:24:13 -0400
Subject: [PATCH 15/34] prefect: 3.3.3 -> 3.3.4 update version and fix update
 script regex

---
 pkgs/by-name/pr/prefect/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/pr/prefect/package.nix b/pkgs/by-name/pr/prefect/package.nix
index 73c9fc402785..238f2f83d465 100644
--- a/pkgs/by-name/pr/prefect/package.nix
+++ b/pkgs/by-name/pr/prefect/package.nix
@@ -8,7 +8,7 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "prefect";
-  version = "3.3.3";
+  version = "3.3.4";
   pyproject = true;
 
   # Trying to install from source is challenging
@@ -17,7 +17,7 @@ python3Packages.buildPythonApplication rec {
   # Source will be missing sdist, uv.lock, ui artefacts ...
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-4cJoOD7wdmwL+56VMh01JqzyC6817FnLrbIf0Ydaz/g=";
+    hash = "sha256-ii5AqUeo2asSY3oA2PYqGhRev42KInSrn/plDp4Q90Q=";
   };
 
   pythonRelaxDeps = [
@@ -169,7 +169,7 @@ python3Packages.buildPythonApplication rec {
       extraArgs = [
         # avoid pre‐releases
         "--version-regex"
-        ''^\d+\.\d+\.\d+$''
+        "^(\\d+\\.\\d+\\.\\d+)$"
       ];
     };
   };

From 31aedcfbee577d8118709cbfd1ecc0d61ff49f82 Mon Sep 17 00:00:00 2001
From: dish <pyrox@pyrox.dev>
Date: Sun, 10 Nov 2024 17:50:44 -0500
Subject: [PATCH 16/34] nixos/gotenberg: Add new settings for 8.10.0+ versions

Also fixes some issues that were reported.
---
 .../manual/release-notes/rl-2505.section.md   |   3 +
 nixos/modules/services/misc/gotenberg.nix     | 142 +++++++++++++++---
 2 files changed, 123 insertions(+), 22 deletions(-)

diff --git a/nixos/doc/manual/release-notes/rl-2505.section.md b/nixos/doc/manual/release-notes/rl-2505.section.md
index a0d53e48679f..26d4a367c6a5 100644
--- a/nixos/doc/manual/release-notes/rl-2505.section.md
+++ b/nixos/doc/manual/release-notes/rl-2505.section.md
@@ -258,6 +258,9 @@
 - `services.paperless` now installs `paperless-manage` as a normal system package instead of creating a symlink in `/var/lib/paperless`.
   `paperless-manage` now also changes to the appropriate user when being executed.
 
+- The `gotenberg` package has been updated to 8.16.0, which brings breaking changes to the configuration from version 8.13.0. See the [upstream release notes](https://github.com/gotenberg/gotenberg/releases/tag/v8.13.0)
+  for that release to get all the details. The `services.gotenberg` module has been updated appropriately to ensure your configuration is valid with this new release.
+
 - `asusd` has been upgraded to version 6 which supports multiple aura devices. To account for this, the single `auraConfig` configuration option has been replaced with `auraConfigs` which is an attribute set of config options per each device. The config files may also be now specified as either source files or text strings; to account for this you will need to specify that `text` is used for your existing configs, e.g.:
   ```diff
   -services.asusd.asusdConfig = '''file contents'''
diff --git a/nixos/modules/services/misc/gotenberg.nix b/nixos/modules/services/misc/gotenberg.nix
index e92e11b50c71..6d59b905dbea 100644
--- a/nixos/modules/services/misc/gotenberg.nix
+++ b/nixos/modules/services/misc/gotenberg.nix
@@ -16,14 +16,26 @@ let
       "--chromium-max-queue-size=${toString cfg.chromium.maxQueueSize}"
       "--libreoffice-restart-after=${toString cfg.libreoffice.restartAfter}"
       "--libreoffice-max-queue-size=${toString cfg.libreoffice.maxQueueSize}"
-      "--pdfengines-engines=${lib.concatStringsSep "," cfg.pdfEngines}"
+      "--pdfengines-merge-engines=${lib.concatStringsSep "," cfg.pdfEngines.merge}"
+      "--pdfengines-convert-engines=${lib.concatStringsSep "," cfg.pdfEngines.convert}"
+      "--pdfengines-read-metadata-engines=${lib.concatStringsSep "," cfg.pdfEngines.readMetadata}"
+      "--pdfengines-write-metadata-engines=${lib.concatStringsSep "," cfg.pdfEngines.writeMetadata}"
+      "--api-download-from-allow-list=${cfg.downloadFrom.allowList}"
+      "--api-download-from-max-retry=${toString cfg.downloadFrom.maxRetries}"
     ]
     ++ optional cfg.enableBasicAuth "--api-enable-basic-auth"
     ++ optional cfg.chromium.autoStart "--chromium-auto-start"
     ++ optional cfg.chromium.disableJavascript "--chromium-disable-javascript"
     ++ optional cfg.chromium.disableRoutes "--chromium-disable-routes"
     ++ optional cfg.libreoffice.autoStart "--libreoffice-auto-start"
-    ++ optional cfg.libreoffice.disableRoutes "--libreoffice-disable-routes";
+    ++ optional cfg.libreoffice.disableRoutes "--libreoffice-disable-routes"
+    ++ optional cfg.pdfEngines.disableRoutes "--pdfengines-disable-routes"
+    ++ optional (
+      cfg.downloadFrom.denyList != null
+    ) "--api-download-from-deny-list=${cfg.downloadFrom.denyList}"
+    ++ optional cfg.downloadFrom.disable "--api-disable-download-from"
+    ++ optional (cfg.bodyLimit != null) "--api-body-limit=${cfg.bodyLimit}"
+    ++ lib.optionals (cfg.extraArgs != [ ]) cfg.extraArgs;
 
   inherit (lib)
     mkEnableOption
@@ -51,6 +63,12 @@ in
         description = "Port on which the API should listen.";
       };
 
+      bindIP = mkOption {
+        type = types.nullOr types.str;
+        default = "127.0.0.1";
+        description = "Port the API listener should bind to. Set to 0.0.0.0 to listen on all available IPs.";
+      };
+
       timeout = mkOption {
         type = types.nullOr types.str;
         default = "30s";
@@ -74,6 +92,12 @@ in
         '';
       };
 
+      bodyLimit = mkOption {
+        type = types.nullOr types.str;
+        default = null;
+        description = "Sets the max limit for `multipart/form-data` requests. Accepts values like '5M', '20G', etc.";
+      };
+
       extraFontPackages = mkOption {
         type = types.listOf types.package;
         default = [ ];
@@ -108,6 +132,29 @@ in
         };
       };
 
+      downloadFrom = {
+        allowList = mkOption {
+          type = types.nullOr types.str;
+          default = ".*";
+          description = "Allow these URLs to be used in the `downloadFrom` API field. Accepts a regular expression.";
+        };
+        denyList = mkOption {
+          type = types.nullOr types.str;
+          default = null;
+          description = "Deny accepting URLs from these domains in the `downloadFrom` API field. Accepts a regular expression.";
+        };
+        maxRetries = mkOption {
+          type = types.int;
+          default = 4;
+          description = "The maximum amount of times to retry downloading a file specified with `downloadFrom`.";
+        };
+        disable = mkOption {
+          type = types.bool;
+          default = false;
+          description = "Whether to disable the ability to download files for conversion from outside sources.";
+        };
+      };
+
       libreoffice = {
         package = mkPackageOption pkgs "libreoffice" { };
 
@@ -136,28 +183,61 @@ in
         };
       };
 
-      pdfEngines = mkOption {
-        type = types.listOf (
-          types.enum [
-            "pdftk"
+      pdfEngines = {
+        merge = mkOption {
+          type = types.listOf (
+            types.enum [
+              "qpdf"
+              "pdfcpu"
+              "pdftk"
+            ]
+          );
+          default = [
             "qpdf"
-            "libreoffice-pdfengine"
-            "exiftool"
             "pdfcpu"
-          ]
-        );
-        default = [
-          "pdftk"
-          "qpdf"
-          "libreoffice-pdfengine"
-          "exiftool"
-          "pdfcpu"
-        ];
-        description = ''
-          PDF engines to enable. Each one can be used to perform a specific task.
-          See [the documentation](https://gotenberg.dev/docs/configuration#pdf-engines) for more details.
-          Defaults to all possible PDF engines.
-        '';
+            "pdftk"
+          ];
+          description = "PDF Engines to use for merging files.";
+        };
+        convert = mkOption {
+          type = types.listOf (
+            types.enum [
+              "libreoffice-pdfengine"
+            ]
+          );
+          default = [
+            "libreoffice-pdfengine"
+          ];
+          description = "PDF Engines to use for converting files.";
+        };
+        readMetadata = mkOption {
+          type = types.listOf (
+            types.enum [
+              "exiftool"
+            ]
+          );
+          default = [
+            "exiftool"
+          ];
+          description = "PDF Engines to use for reading metadata from files.";
+        };
+        writeMetadata = mkOption {
+          type = types.listOf (
+            types.enum [
+              "exiftool"
+            ]
+          );
+          default = [
+            "exiftool"
+          ];
+          description = "PDF Engines to use for writing metadata to files.";
+        };
+
+        disableRoutes = mkOption {
+          type = types.bool;
+          default = false;
+          description = "Disable routes related to PDF engines.";
+        };
       };
 
       logLevel = mkOption {
@@ -196,6 +276,15 @@ in
           See `services.gotenberg.enableBasicAuth` for the names of those variables.
         '';
       }
+      {
+        assertion = !(lib.isList cfg.pdfEngines);
+        message = ''
+          Setting `services.gotenberg.pdfEngines` to a list is now deprecated.
+          Use the new `pdfEngines.mergeEngines`, `pdfEngines.convertEngines`, `pdfEngines.readMetadataEngines`, and `pdfEngines.writeMetadataEngines` settings instead.
+
+          The previous option was using a method that is now deprecated by upstream.
+        '';
+      }
     ];
 
     systemd.services.gotenberg = {
@@ -209,12 +298,20 @@ in
         FONTCONFIG_FILE = pkgs.makeFontsConf {
           fontDirectories = [ pkgs.liberation_ttf_v2 ] ++ cfg.extraFontPackages;
         };
+        # Needed for LibreOffice to work correctly.
+        # https://github.com/NixOS/nixpkgs/issues/349123#issuecomment-2418330936
+        HOME = "/run/gotenberg";
       };
       serviceConfig = {
         Type = "simple";
         DynamicUser = true;
         ExecStart = "${lib.getExe cfg.package} ${lib.escapeShellArgs args}";
 
+        # Needed for LibreOffice to work correctly.
+        # See above issue comment.
+        WorkingDirectory = "/run/gotenberg";
+        RuntimeDirectory = "gotenberg";
+
         # Hardening options
         PrivateDevices = true;
         PrivateIPC = true;
@@ -243,6 +340,7 @@ in
         SystemCallFilter = [
           "@sandbox"
           "@system-service"
+          "@chown"
         ];
         SystemCallArchitectures = "native";
 

From de77c4e6db067d35f60d2966dcf62f099548a2d9 Mon Sep 17 00:00:00 2001
From: nat <nat@nekopon.pl>
Date: Sun, 13 Apr 2025 02:39:01 +0200
Subject: [PATCH 17/34] safe-rm: use --replace-fail

---
 pkgs/by-name/sa/safe-rm/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/sa/safe-rm/package.nix b/pkgs/by-name/sa/safe-rm/package.nix
index 8a6546e3b7e1..c810fe8c572a 100644
--- a/pkgs/by-name/sa/safe-rm/package.nix
+++ b/pkgs/by-name/sa/safe-rm/package.nix
@@ -21,7 +21,7 @@ rustPlatform.buildRustPackage rec {
 
   postPatch = ''
     substituteInPlace src/main.rs \
-      --replace "/bin/rm" "${coreutils}/bin/rm"
+      --replace-fail "/bin/rm" "${coreutils}/bin/rm"
   '';
 
   nativeBuildInputs = [ installShellFiles ];

From d4912c1fa1d8504c7adaccabbe715f62034c7b28 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 13 Apr 2025 01:30:02 +0000
Subject: [PATCH 18/34] nagiosPlugins.check_ssl_cert: 2.89.0 -> 2.92.0

---
 .../monitoring/nagios-plugins/check_ssl_cert/default.nix      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/monitoring/nagios-plugins/check_ssl_cert/default.nix b/pkgs/servers/monitoring/nagios-plugins/check_ssl_cert/default.nix
index b05f52b7140c..7dc48ad6ae32 100644
--- a/pkgs/servers/monitoring/nagios-plugins/check_ssl_cert/default.nix
+++ b/pkgs/servers/monitoring/nagios-plugins/check_ssl_cert/default.nix
@@ -18,13 +18,13 @@
 
 stdenv.mkDerivation rec {
   pname = "check_ssl_cert";
-  version = "2.89.0";
+  version = "2.92.0";
 
   src = fetchFromGitHub {
     owner = "matteocorti";
     repo = "check_ssl_cert";
     tag = "v${version}";
-    hash = "sha256-kL89lNPuFd1ozWYNJEnZ0vcWUXIEnDS6LABTXxtjvmE=";
+    hash = "sha256-00zJt/MQ4uU/JvJfJ70mtCqtL63w2NRfUgDNmhTF8w8=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

From f8fb37de7830bf5236952f4c534f8bc73f5dd3ba Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 13 Apr 2025 01:34:54 +0000
Subject: [PATCH 19/34] nuclei-templates: 10.1.6 -> 10.1.7

---
 pkgs/by-name/nu/nuclei-templates/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/nu/nuclei-templates/package.nix b/pkgs/by-name/nu/nuclei-templates/package.nix
index 63cd50a39d0c..d4a6c82395ae 100644
--- a/pkgs/by-name/nu/nuclei-templates/package.nix
+++ b/pkgs/by-name/nu/nuclei-templates/package.nix
@@ -6,13 +6,13 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "nuclei-templates";
-  version = "10.1.6";
+  version = "10.1.7";
 
   src = fetchFromGitHub {
     owner = "projectdiscovery";
     repo = "nuclei-templates";
     tag = "v${version}";
-    hash = "sha256-4li7585M7Pp1/mzD91+tgZgsnoo/Hfy55O+7bEyxUtA=";
+    hash = "sha256-wpsnxaWU3U5dxqGtgF8QyJzbi+Ft9ZHiuEF8WStiCpo=";
   };
 
   installPhase = ''

From 5845d0de53e084c5a10a0ed870793b593ce9ae15 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 13 Apr 2025 02:06:03 +0000
Subject: [PATCH 20/34] python312Packages.particle: 0.25.2 -> 0.25.3

---
 pkgs/development/python-modules/particle/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/particle/default.nix b/pkgs/development/python-modules/particle/default.nix
index 96dbf62e4166..7719b2e01da2 100644
--- a/pkgs/development/python-modules/particle/default.nix
+++ b/pkgs/development/python-modules/particle/default.nix
@@ -15,14 +15,14 @@
 
 buildPythonPackage rec {
   pname = "particle";
-  version = "0.25.2";
+  version = "0.25.3";
   pyproject = true;
 
   disabled = pythonOlder "3.9";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-H6S77ji/6u8IpAsnebTDDFzk+ihloQwCrP6QZ5tOYek=";
+    hash = "sha256-eM9+VuniEYOF+/uJCNg5XnomerXwWWqq/rrbCMsERSs=";
   };
 
   postPatch = ''

From 3aa9f671e217e72468cb934b0d461efca161d0ca Mon Sep 17 00:00:00 2001
From: FliegendeWurst <arne.keller@posteo.de>
Date: Sat, 12 Apr 2025 11:30:06 +0200
Subject: [PATCH 21/34] jre_minimal: fix cross build

---
 pkgs/development/compilers/openjdk/jre.nix | 3 +++
 pkgs/top-level/all-packages.nix            | 6 +++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/compilers/openjdk/jre.nix b/pkgs/development/compilers/openjdk/jre.nix
index 00686803cb8f..2370774cef29 100644
--- a/pkgs/development/compilers/openjdk/jre.nix
+++ b/pkgs/development/compilers/openjdk/jre.nix
@@ -1,6 +1,7 @@
 {
   stdenv,
   jdk,
+  jdkOnBuild, # must provide jlink
   lib,
   callPackage,
   modules ? [ "java.base" ],
@@ -11,7 +12,9 @@ let
     pname = "${jdk.pname}-minimal-jre";
     version = jdk.version;
 
+    nativeBuildInputs = [ jdkOnBuild ];
     buildInputs = [ jdk ];
+    strictDeps = true;
 
     dontUnpack = true;
 
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 729df4dba04c..a7dfcba4b386 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -6613,11 +6613,15 @@ with pkgs;
 
   jre17_minimal = callPackage ../development/compilers/openjdk/jre.nix {
     jdk = jdk17;
+    jdkOnBuild = buildPackages.jdk17;
   };
   jre21_minimal = callPackage ../development/compilers/openjdk/jre.nix {
     jdk = jdk21;
+    jdkOnBuild = buildPackages.jdk21;
+  };
+  jre_minimal = callPackage ../development/compilers/openjdk/jre.nix {
+    jdkOnBuild = buildPackages.jdk;
   };
-  jre_minimal = callPackage ../development/compilers/openjdk/jre.nix { };
 
   openjdk = jdk;
   openjdk_headless = jdk_headless;

From 83cb45b06fa097f5ff76588a0c19b5dab5c1a600 Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Sun, 13 Apr 2025 18:07:58 +0200
Subject: [PATCH 22/34] mistral-rs: revert linking CUDA in CPU variant

---
 pkgs/by-name/mi/mistral-rs/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/mi/mistral-rs/package.nix b/pkgs/by-name/mi/mistral-rs/package.nix
index 9903ed90480a..7395fde72228 100644
--- a/pkgs/by-name/mi/mistral-rs/package.nix
+++ b/pkgs/by-name/mi/mistral-rs/package.nix
@@ -149,7 +149,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
       CUDA_TOOLKIT_ROOT_DIR = lib.getDev cudaPackages.cuda_cudart;
     });
 
-  appendRunpaths = [
+  appendRunpaths = lib.optionals cudaSupport [
     (lib.makeLibraryPath [
       cudaPackages.libcublas
       cudaPackages.libcurand

From 8ead8d0157948f90ed1eb6314ca55fbba9eb51ce Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Sun, 13 Apr 2025 18:25:14 +0200
Subject: [PATCH 23/34] mistral-rs: refactor use of stdenv.hostPlatform

---
 pkgs/by-name/mi/mistral-rs/package.nix | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/pkgs/by-name/mi/mistral-rs/package.nix b/pkgs/by-name/mi/mistral-rs/package.nix
index 7395fde72228..8def84e252c5 100644
--- a/pkgs/by-name/mi/mistral-rs/package.nix
+++ b/pkgs/by-name/mi/mistral-rs/package.nix
@@ -34,6 +34,8 @@
 }:
 
 let
+  inherit (stdenv) hostPlatform;
+
   accelIsValid = builtins.elem acceleration [
     null
     false
@@ -67,7 +69,7 @@ let
   metalSupport =
     assert accelIsValid;
     (acceleration == "metal")
-    || (stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64 && (acceleration == null));
+    || (hostPlatform.isDarwin && hostPlatform.isAarch64 && (acceleration == null));
 
 in
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -119,7 +121,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   buildFeatures =
     lib.optionals cudaSupport [ "cuda" ]
     ++ lib.optionals mklSupport [ "mkl" ]
-    ++ lib.optionals (stdenv.hostPlatform.isDarwin && metalSupport) [ "metal" ];
+    ++ lib.optionals (hostPlatform.isDarwin && metalSupport) [ "metal" ];
 
   env =
     {
@@ -159,7 +161,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
   # swagger-ui will once more be copied in the target directory during the check phase
   # Not deleting the existing unpacked archive leads to a `PermissionDenied` error
   preCheck = ''
-    rm -rf target/${stdenv.hostPlatform.config}/release/build/
+    rm -rf target/${hostPlatform.config}/release/build/
   '';
 
   # Prevent checkFeatures from inheriting buildFeatures because
@@ -185,13 +187,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
     tests = {
       version = testers.testVersion { package = mistral-rs; };
 
-      withMkl = lib.optionalAttrs (stdenv.hostPlatform == "x86_64-linux") (
+      withMkl = lib.optionalAttrs (hostPlatform.isLinux && hostPlatform.isx86_64) (
         mistral-rs.override { acceleration = "mkl"; }
       );
-      withCuda = lib.optionalAttrs stdenv.hostPlatform.isLinux (
-        mistral-rs.override { acceleration = "cuda"; }
-      );
-      withMetal = lib.optionalAttrs (stdenv.hostPlatform == "aarch64-darwin") (
+      withCuda = lib.optionalAttrs hostPlatform.isLinux (mistral-rs.override { acceleration = "cuda"; });
+      withMetal = lib.optionalAttrs (hostPlatform.isDarwin && hostPlatform.isAarch64) (
         mistral-rs.override { acceleration = "metal"; }
       );
     };

From f04c9b157c33af2faf83b6558f32693497a7f151 Mon Sep 17 00:00:00 2001
From: Emily <vcs@emily.moe>
Date: Sun, 13 Apr 2025 15:28:19 +0100
Subject: [PATCH 24/34] stdenv/darwin: disable `gnugrep` tests in early
 bootstrap

---
 pkgs/stdenv/darwin/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/stdenv/darwin/default.nix b/pkgs/stdenv/darwin/default.nix
index 759b64d0af34..00ce52edd947 100644
--- a/pkgs/stdenv/darwin/default.nix
+++ b/pkgs/stdenv/darwin/default.nix
@@ -598,6 +598,10 @@ assert bootstrapTools.passthru.isFromBootstrapFiles or false; # sanity check
         # Use libiconvReal with gettext to break an infinite recursion.
         gettext = super.gettext.override { libiconv = super.libiconvReal; };
 
+        # Disable grep’s tests for now due to impure locale updates in
+        # macOS 15.4 breaking them in the bootstrap.
+        gnugrep = super.gnugrep.overrideAttrs { doCheck = false; };
+
         # Disable tests because they use dejagnu, which fails to run.
         libffi = super.libffi.override { doCheck = false; };
 

From 21beade65f4ce88798961503f690633122485213 Mon Sep 17 00:00:00 2001
From: Muhammed Ali <muhamzyali@gmail.com>
Date: Sun, 13 Apr 2025 16:22:54 +0100
Subject: [PATCH 25/34] oranchelo-icon-theme: fix build

---
 pkgs/by-name/or/oranchelo-icon-theme/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/or/oranchelo-icon-theme/package.nix b/pkgs/by-name/or/oranchelo-icon-theme/package.nix
index fd23ec698945..b3972069b06d 100644
--- a/pkgs/by-name/or/oranchelo-icon-theme/package.nix
+++ b/pkgs/by-name/or/oranchelo-icon-theme/package.nix
@@ -42,6 +42,7 @@ stdenvNoCC.mkDerivation rec {
       gtk-update-icon-cache "$theme"
     done
   '';
+  dontCheckForBrokenSymlinks = true;
 
   meta = with lib; {
     description = "Oranchelo icon theme";

From cec00a0483e28bd2c2c2bdcbdea60ade0eb90926 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Sun, 13 Apr 2025 21:37:53 +0300
Subject: [PATCH 26/34] gnomeExtensions.easyScreenCast: no with lib; in meta

---
 pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix b/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix
index c0ce09fc875e..d3810a4470af 100644
--- a/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix
+++ b/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix
@@ -38,11 +38,11 @@ stdenv.mkDerivation (finalAttrs: {
 
   passthru.extensionUuid = "EasyScreenCast@iacopodeenosee.gmail.com";
 
-  meta = with lib; {
+  meta = {
     description = "Simplifies the use of the video recording function integrated in gnome shell";
     homepage = "https://github.com/EasyScreenCast/EasyScreenCast";
-    license = licenses.gpl3Plus;
-    maintainers = with maintainers; [ doronbehar ];
-    platforms = platforms.linux;
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [ doronbehar ];
+    platforms = lib.platforms.linux;
   };
 })

From acb77f4547ee10bdae780e6ac3622218073a9884 Mon Sep 17 00:00:00 2001
From: Doron Behar <doron.behar@gmail.com>
Date: Sun, 13 Apr 2025 21:38:16 +0300
Subject: [PATCH 27/34] gnomeExtensions.easyScreenCast: remove doronbehar from
 maintainers

I use https://git.dec05eba.com/gpu-screen-recorder-gtk/ instead
(packaged with the same name).
---
 pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix b/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix
index d3810a4470af..094b042a78a9 100644
--- a/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix
+++ b/pkgs/desktops/gnome/extensions/EasyScreenCast/default.nix
@@ -42,7 +42,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Simplifies the use of the video recording function integrated in gnome shell";
     homepage = "https://github.com/EasyScreenCast/EasyScreenCast";
     license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ doronbehar ];
+    maintainers = with lib.maintainers; [ ];
     platforms = lib.platforms.linux;
   };
 })

From 8974da030ab6eb9a58ea1d23454f1ed3ef93a079 Mon Sep 17 00:00:00 2001
From: Anton Mosich <anton@mosich.at>
Date: Sat, 22 Mar 2025 14:36:10 +0100
Subject: [PATCH 28/34] python3Packages.ingredient-parser-nlp: init at 2.0.0

---
 .../ingredient-parser-nlp/default.nix         | 58 +++++++++++++++++++
 pkgs/top-level/python-packages.nix            |  2 +
 2 files changed, 60 insertions(+)
 create mode 100644 pkgs/development/python-modules/ingredient-parser-nlp/default.nix

diff --git a/pkgs/development/python-modules/ingredient-parser-nlp/default.nix b/pkgs/development/python-modules/ingredient-parser-nlp/default.nix
new file mode 100644
index 000000000000..0250a17c0212
--- /dev/null
+++ b/pkgs/development/python-modules/ingredient-parser-nlp/default.nix
@@ -0,0 +1,58 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  nix-update-script,
+
+  setuptools,
+
+  nltk,
+  python-crfsuite,
+  pint,
+  floret,
+
+  pytestCheckHook,
+  nltk-data,
+}:
+buildPythonPackage rec {
+  pname = "ingredient-parser-nlp";
+  version = "2.0.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "strangetom";
+    repo = "ingredient-parser";
+    tag = version;
+    hash = "sha256-i14RKBcvU56pDNGxNVBvvpQ65FCbitMIfvN5eLLJCWU=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    nltk
+    python-crfsuite
+    pint
+    floret
+  ];
+
+  nativeCheckInputs = [
+    pytestCheckHook
+  ];
+
+  pythonImportsCheck = [
+    "ingredient_parser"
+  ];
+
+  # Needed for tests
+  preCheck = ''
+    export NLTK_DATA=${nltk-data.averaged_perceptron_tagger_eng}
+  '';
+
+  meta = {
+    description = "Parse structured information from recipe ingredient sentences";
+    license = lib.licenses.mit;
+    homepage = "https://github.com/strangetom/ingredient-parser/";
+    changelog = "https://github.com/strangetom/ingredient-parser/releases/tag/${version}";
+    maintainers = with lib.maintainers; [ antonmosich ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index f1d6ddb041a0..5de93c6c9283 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -6630,6 +6630,8 @@ self: super: with self; {
 
   inform = callPackage ../development/python-modules/inform { };
 
+  ingredient-parser-nlp = callPackage ../development/python-modules/ingredient-parser-nlp { };
+
   iniconfig = callPackage ../development/python-modules/iniconfig { };
 
   inifile = callPackage ../development/python-modules/inifile { };

From 278856535642017b2c084552b449974d7ab1f3a4 Mon Sep 17 00:00:00 2001
From: Anton Mosich <anton@mosich.at>
Date: Sat, 22 Mar 2025 14:36:51 +0100
Subject: [PATCH 29/34] mealie: 2.7.1 -> 2.8.0

crfpp has been replaced by ingredient-parser-nlp, so we no longer need
to have it around.
Changelog: https://github.com/mealie-recipes/mealie/releases/tag/v2.8.0
---
 pkgs/by-name/me/mealie/package.nix | 35 +++++++++---------------------
 1 file changed, 10 insertions(+), 25 deletions(-)

diff --git a/pkgs/by-name/me/mealie/package.nix b/pkgs/by-name/me/mealie/package.nix
index 29cdd1213523..0092eab6b5f3 100644
--- a/pkgs/by-name/me/mealie/package.nix
+++ b/pkgs/by-name/me/mealie/package.nix
@@ -1,46 +1,28 @@
 {
   lib,
-  stdenv,
   callPackage,
   fetchFromGitHub,
   makeWrapper,
   nixosTests,
   python3Packages,
+  nltk-data,
   writeShellScript,
   nix-update-script,
 }:
 
 let
-  version = "2.7.1";
+  version = "2.8.0";
   src = fetchFromGitHub {
     owner = "mealie-recipes";
     repo = "mealie";
     tag = "v${version}";
-    hash = "sha256-nN8AuSzxHjIDKc8rGN+O2/vlzkH/A5LAr4aoAlOTLlk=";
+    hash = "sha256-0LUT7OdYoOZTdR/UXJO2eL2Afo2Y7GjBPIrjWUt205E=";
   };
 
   frontend = callPackage (import ./mealie-frontend.nix src version) { };
 
   pythonpkgs = python3Packages;
   python = pythonpkgs.python;
-
-  crfpp = stdenv.mkDerivation {
-    pname = "mealie-crfpp";
-    version = "unstable-2024-02-12";
-    src = fetchFromGitHub {
-      owner = "mealie-recipes";
-      repo = "crfpp";
-      rev = "c56dd9f29469c8a9f34456b8c0d6ae0476110516";
-      hash = "sha256-XNps3ZApU8m07bfPEnvip1w+3hLajdn9+L5+IpEaP0c=";
-    };
-
-    # Can remove once the `register` keyword is removed from source files
-    # Configure overwrites CXXFLAGS so patch it in the Makefile
-    postConfigure = lib.optionalString stdenv.cc.isClang ''
-      substituteInPlace Makefile \
-        --replace-fail "CXXFLAGS = " "CXXFLAGS = -std=c++14 "
-    '';
-  };
 in
 
 pythonpkgs.buildPythonApplication rec {
@@ -69,6 +51,7 @@ pythonpkgs.buildPythonApplication rec {
     gunicorn
     html2text
     httpx
+    ingredient-parser-nlp
     itsdangerous
     jinja2
     lxml
@@ -106,7 +89,6 @@ pythonpkgs.buildPythonApplication rec {
         ${lib.getExe pythonpkgs.gunicorn} "$@" -k uvicorn.workers.UvicornWorker mealie.app:app;
       '';
       init_db = writeShellScript "init-mealie-db" ''
-        ${python.interpreter} $OUT/${python.sitePackages}/mealie/scripts/install_model.py
         ${python.interpreter} $OUT/${python.sitePackages}/mealie/db/init_db.py
       '';
     in
@@ -116,9 +98,7 @@ pythonpkgs.buildPythonApplication rec {
 
       makeWrapper ${start_script} $out/bin/mealie \
         --set PYTHONPATH "$out/${python.sitePackages}:${pythonpkgs.makePythonPath dependencies}" \
-        --set LD_LIBRARY_PATH "${crfpp}/lib" \
-        --set STATIC_FILES "${frontend}" \
-        --set PATH "${lib.makeBinPath [ crfpp ]}"
+        --set STATIC_FILES "${frontend}"
 
       makeWrapper ${init_db} $out/libexec/init_db \
         --set PYTHONPATH "$out/${python.sitePackages}:${pythonpkgs.makePythonPath dependencies}" \
@@ -127,6 +107,11 @@ pythonpkgs.buildPythonApplication rec {
 
   nativeCheckInputs = with pythonpkgs; [ pytestCheckHook ];
 
+  # Needed for tests
+  preCheck = ''
+    export NLTK_DATA=${nltk-data.averaged_perceptron_tagger_eng}
+  '';
+
   disabledTestPaths = [
     # KeyError: 'alembic_version'
     "tests/unit_tests/services_tests/backup_v2_tests/test_backup_v2.py"

From 3f128201646177f10d65144ab0ee9e8b65a27c76 Mon Sep 17 00:00:00 2001
From: Anton Mosich <anton@mosich.at>
Date: Tue, 1 Apr 2025 11:41:06 +0200
Subject: [PATCH 30/34] nixos/mealie: update for mealie v2.8.0

mealie v2.8.0 no longer uses crfpp, but instead uses
ingredient_parser_nlp, which relies on nltk-data. If this environment
variable isn't available, mealie will just download the data instead.
---
 nixos/modules/services/web-apps/mealie.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/web-apps/mealie.nix b/nixos/modules/services/web-apps/mealie.nix
index 48b0450eac2d..e1fce845caa6 100644
--- a/nixos/modules/services/web-apps/mealie.nix
+++ b/nixos/modules/services/web-apps/mealie.nix
@@ -65,7 +65,7 @@ in
         API_PORT = toString cfg.port;
         BASE_URL = "http://localhost:${toString cfg.port}";
         DATA_DIR = "/var/lib/mealie";
-        CRF_MODEL_PATH = "/var/lib/mealie/model.crfmodel";
+        NLTK_DATA = pkgs.nltk-data.averaged_perceptron_tagger_eng;
       } // (builtins.mapAttrs (_: val: toString val) cfg.settings);
 
       serviceConfig = {

From 9aa19ae4094eb848d02dc3c7db51f1f945e69f04 Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Sun, 13 Apr 2025 21:30:13 +0200
Subject: [PATCH 31/34] vimPlugins.sniprun: 1.3.17 -> 1.3.18

Diff: https://github.com/michaelb/sniprun/compare/refs/tags/v1.3.17...refs/tags/v1.3.18

Changelog: https://github.com/michaelb/sniprun/blob/v1.3.18/CHANGELOG.md
---
 .../editors/vim/plugins/non-generated/sniprun/default.nix   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/editors/vim/plugins/non-generated/sniprun/default.nix b/pkgs/applications/editors/vim/plugins/non-generated/sniprun/default.nix
index 566e22c88a93..1bb6464e8295 100644
--- a/pkgs/applications/editors/vim/plugins/non-generated/sniprun/default.nix
+++ b/pkgs/applications/editors/vim/plugins/non-generated/sniprun/default.nix
@@ -18,19 +18,19 @@
   nix-update-script,
 }:
 let
-  version = "1.3.17";
+  version = "1.3.18";
   src = fetchFromGitHub {
     owner = "michaelb";
     repo = "sniprun";
     tag = "v${version}";
-    hash = "sha256-o8U3GXg61dfEzQxrs9zCgRDWonhr628aSPd/l+HxS70=";
+    hash = "sha256-2Q7Jnt7pVCuNne442KPh2cSjA6V6WSZkgUj99UpmnOM=";
   };
   sniprun-bin = rustPlatform.buildRustPackage {
     pname = "sniprun-bin";
     inherit version src;
 
     useFetchCargoVendor = true;
-    cargoHash = "sha256-HLPTt0JCmCM4SRmP8o435ilM1yxoxpAnf8hg3+8C54I=";
+    cargoHash = "sha256-cu7wn75rQcwPLjFl4v05kVMsiCD0mAlIBt49mvIaPPU=";
 
     nativeBuildInputs = [ makeWrapper ];
 

From 31180a926e448a45fc371f1f37e5fbaefb4bbe12 Mon Sep 17 00:00:00 2001
From: Ryan Horiguchi <ryan.horiguchi@gmail.com>
Date: Sun, 13 Apr 2025 01:27:23 +0200
Subject: [PATCH 32/34] plexRaw: 1.41.5.9522-a96edc606 -> 1.41.6.9685-d301f511a

---
 pkgs/servers/plex/raw.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/servers/plex/raw.nix b/pkgs/servers/plex/raw.nix
index 24bf86c7bf07..ee61ac99817c 100644
--- a/pkgs/servers/plex/raw.nix
+++ b/pkgs/servers/plex/raw.nix
@@ -14,7 +14,7 @@
 # server, and the FHS userenv and corresponding NixOS module should
 # automatically pick up the changes.
 stdenv.mkDerivation rec {
-  version = "1.41.5.9522-a96edc606";
+  version = "1.41.6.9685-d301f511a";
   pname = "plexmediaserver";
 
   # Fetch the source
@@ -22,12 +22,12 @@ stdenv.mkDerivation rec {
     if stdenv.hostPlatform.system == "aarch64-linux" then
       fetchurl {
         url = "https://downloads.plex.tv/plex-media-server-new/${version}/debian/plexmediaserver_${version}_arm64.deb";
-        sha256 = "sha256-ugN1y3V1HE/IBhnvzlOYIL/5LyEa33IRPuj6903vPaA=";
+        sha256 = "sha256-w0xngKbrUVZXA9Hc6/Doq365Kt/sbZmmcHR/sWujVzw=";
       }
     else
       fetchurl {
         url = "https://downloads.plex.tv/plex-media-server-new/${version}/debian/plexmediaserver_${version}_amd64.deb";
-        sha256 = "sha256-3bGmsa2OLBt587YnZDNpSjWHdQ1ubwSNocLPW6A6kQU=";
+        sha256 = "sha256-4ZbSGQGdkXCCZZ00w0/BwRHju4DJUQQBGid0gBFK0Ck=";
       };
 
   outputs = [

From 011cd12d42452a063700e94585b7e7be43c8b855 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Sun, 13 Apr 2025 23:09:10 +0200
Subject: [PATCH 33/34] nixVersions.nixComponents_2_27: fix error message

---
 pkgs/tools/package-management/nix/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/tools/package-management/nix/default.nix b/pkgs/tools/package-management/nix/default.nix
index 152d86075b40..700cf33e4d4d 100644
--- a/pkgs/tools/package-management/nix/default.nix
+++ b/pkgs/tools/package-management/nix/default.nix
@@ -235,7 +235,7 @@ lib.makeExtensible (
         ) (lib.range 4 23)
       )
       // {
-        nixComponents_2_27 = throw "nixComponents_2_27 has been removed. use nixComponents_2_28.";
+        nixComponents_2_27 = throw "nixComponents_2_27 has been removed. use nixComponents_git.";
         nix_2_27 = throw "nix_2_27 has been removed. use nix_2_28.";
         nix_2_25 = throw "nix_2_25 has been removed. use nix_2_28.";
 

From 7008d00c516e7555b45150842af1ff414a377a5d Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Mon, 14 Apr 2025 00:44:12 +0200
Subject: [PATCH 34/34] evcc: 0.202.1 -> 0.203.0

https://github.com/evcc-io/evcc/releases/tag/0.203.0
---
 pkgs/by-name/ev/evcc/package.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/ev/evcc/package.nix b/pkgs/by-name/ev/evcc/package.nix
index 4d99185bf04b..53307b981a58 100644
--- a/pkgs/by-name/ev/evcc/package.nix
+++ b/pkgs/by-name/ev/evcc/package.nix
@@ -17,16 +17,16 @@
 }:
 
 let
-  version = "0.202.1";
+  version = "0.203.0";
 
   src = fetchFromGitHub {
     owner = "evcc-io";
     repo = "evcc";
     tag = version;
-    hash = "sha256-GMKhlNZLk6R0XZn5I3YP5Eav8wD6WbEr1DM+VVtQtjo=";
+    hash = "sha256-rrpYa73Rl+pLQ3FhnDF+t1uHT7SJJcrx6kjdxXsOfM8=";
   };
 
-  vendorHash = "sha256-K9X63dTWE+dC5yo8LX86pUezm8OHwEHNXwxXHn/4AwU=";
+  vendorHash = "sha256-TqtJlsT/uaqQe/mAh1hw92N3uw6GLkdwh9aIMmdNbkY=";
 
   commonMeta = with lib; {
     license = licenses.mit;
@@ -52,7 +52,7 @@ buildGo124Module rec {
 
   npmDeps = fetchNpmDeps {
     inherit src;
-    hash = "sha256-iTrmgNmUoHQWL5tsqhUnd0t1t9qengb6ba9pxYrL9Ks=";
+    hash = "sha256-LaP6Ee13OKwRoAZ7oF/nH8rE5zqFYzrhq6CwPaaF9SE=";
   };
 
   nativeBuildInputs = [