From f202d28478ffe433d099c89a1726c95ede659380 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 17 Oct 2025 14:52:40 +0000
Subject: [PATCH 01/28] art: 1.25.9 -> 1.25.10

---
 pkgs/by-name/ar/art/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ar/art/package.nix b/pkgs/by-name/ar/art/package.nix
index f2965d965d20..e3f226194dcc 100644
--- a/pkgs/by-name/ar/art/package.nix
+++ b/pkgs/by-name/ar/art/package.nix
@@ -40,13 +40,13 @@
 
 stdenv.mkDerivation rec {
   pname = "art";
-  version = "1.25.9";
+  version = "1.25.10";
 
   src = fetchFromGitHub {
     owner = "artpixls";
     repo = "ART";
     tag = version;
-    hash = "sha256-dg0msZ0aeyl4L7RqqGur9Lalu1QtE0igEc54WT5F+SQ=";
+    hash = "sha256-qGrkRsdQppfIolxAhxWnJrbYotELKga6X7CFY55xCKk=";
   };
 
   # Fix the build with CMake 4.

From 71e744cf162d10219e2105a4856bf96d0545614a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 17 Oct 2025 18:22:06 +0000
Subject: [PATCH 02/28] xlights: 2025.10.2 -> 2025.11

---
 pkgs/by-name/xl/xlights/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/xl/xlights/package.nix b/pkgs/by-name/xl/xlights/package.nix
index b70bb479b640..98d31d1a47c1 100644
--- a/pkgs/by-name/xl/xlights/package.nix
+++ b/pkgs/by-name/xl/xlights/package.nix
@@ -6,11 +6,11 @@
 
 appimageTools.wrapType2 rec {
   pname = "xlights";
-  version = "2025.10.2";
+  version = "2025.11";
 
   src = fetchurl {
     url = "https://github.com/smeighan/xLights/releases/download/${version}/xLights-${version}-x86_64.AppImage";
-    hash = "sha256-LfT1AQktBklN1IUiJdqxFY4bM/CQEBg/5sxEvWUQkGQ=";
+    hash = "sha256-k5HGk5t/ujPuOU/GlxhA+yKKXy0lq8YkxcQkTUVBYXM=";
   };
 
   meta = {

From 7f2565b48b570b224081b5cf3f70c6025b0e2bba Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 17 Oct 2025 18:52:43 +0000
Subject: [PATCH 03/28] spacectl: 1.16.1 -> 1.17.0

---
 pkgs/by-name/sp/spacectl/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/sp/spacectl/package.nix b/pkgs/by-name/sp/spacectl/package.nix
index e80d27277d94..19ad551ca32d 100644
--- a/pkgs/by-name/sp/spacectl/package.nix
+++ b/pkgs/by-name/sp/spacectl/package.nix
@@ -9,13 +9,13 @@
 
 buildGoModule rec {
   pname = "spacectl";
-  version = "1.16.1";
+  version = "1.17.0";
 
   src = fetchFromGitHub {
     owner = "spacelift-io";
     repo = "spacectl";
     rev = "v${version}";
-    hash = "sha256-elr7SG8naxz5w15Advr2tcQxPJ1tBL4G7Do7LNT4kqY=";
+    hash = "sha256-j9c8RZfm5RWcXAy8LUtIZrztfVhXiAWmCJ/Rwq5IiKo=";
   };
 
   vendorHash = "sha256-g5Y6NuG8z2Pnh3Ng690FcwOrEU2EOhftZbM8oUFj4B4=";

From 68f71ff8f5c49222b34d5f460ffa1bb5e242d5a8 Mon Sep 17 00:00:00 2001
From: Emily <vcs@emily.moe>
Date: Sat, 18 Oct 2025 02:28:14 +0100
Subject: [PATCH 04/28] darwin.mkAppleDerivation: drop support for `noCC` and
 `noBootstrap`
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This was only used by `darwin.AvailabilityVersions` setting `noCC`, and
is fundamentally incompatible with `finalAttrs.finalPackage`. Better
would be to specify `stdenv` outside the derivation attributes, or
ideally move this stuff into hooks and helper functions, I think,
but for just the one package it doesn’t seem worthwhile.
---
 .../AvailabilityVersions/package.nix                  |  2 --
 .../apple-source-releases/mkAppleDerivation.nix       | 11 +----------
 2 files changed, 1 insertion(+), 12 deletions(-)

diff --git a/pkgs/os-specific/darwin/apple-source-releases/AvailabilityVersions/package.nix b/pkgs/os-specific/darwin/apple-source-releases/AvailabilityVersions/package.nix
index 2625f276923e..dadafd43edcb 100644
--- a/pkgs/os-specific/darwin/apple-source-releases/AvailabilityVersions/package.nix
+++ b/pkgs/os-specific/darwin/apple-source-releases/AvailabilityVersions/package.nix
@@ -19,8 +19,6 @@ mkAppleDerivation (finalAttrs: {
     ./patches/0001-Support-setting-an-upper-bound-on-versions.patch
   ];
 
-  noCC = true;
-
   nativeBuildInputs = [ unifdef ];
 
   buildPhase = ''
diff --git a/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix b/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix
index d42357f6b245..538b92d32637 100644
--- a/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix
+++ b/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix
@@ -8,8 +8,6 @@ in
   fetchFromGitHub,
   meson,
   ninja,
-  stdenv,
-  stdenvNoCC,
   xcodeProjectCheckHook,
 }:
 
@@ -21,15 +19,8 @@ lib.makeOverridable (
   let
     attrs' = if lib.isFunction attrs then attrs else _: attrs;
     attrsFixed = lib.fix attrs';
-    stdenv' =
-      if attrsFixed.noCC or false then
-        stdenvNoCC
-      else if attrsFixed.noBootstrap or false then
-        stdenv
-      else
-        bootstrapStdenv;
   in
-  stdenv'.mkDerivation (
+  bootstrapStdenv.mkDerivation (
     lib.extends (
       self: super:
       assert super ? releaseName;

From 442ded4e97ced8442f1154e6151267864e5f7cfe Mon Sep 17 00:00:00 2001
From: Emily <vcs@emily.moe>
Date: Fri, 17 Oct 2025 21:48:40 +0100
Subject: [PATCH 05/28] darwin.mkAppleDerivation: use `lib.extendMkDerivation`

---
 .../mkAppleDerivation.nix                     | 109 ++++++++----------
 1 file changed, 51 insertions(+), 58 deletions(-)

diff --git a/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix b/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix
index 538b92d32637..35131914f120 100644
--- a/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix
+++ b/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix
@@ -14,68 +14,61 @@ in
 let
   hasBasenamePrefix = prefix: file: lib.hasPrefix prefix (baseNameOf file);
 in
-lib.makeOverridable (
-  attrs:
-  let
-    attrs' = if lib.isFunction attrs then attrs else _: attrs;
-    attrsFixed = lib.fix attrs';
-  in
-  bootstrapStdenv.mkDerivation (
-    lib.extends (
-      self: super:
-      assert super ? releaseName;
-      let
-        inherit (super) releaseName;
-        info = versions.${releaseName};
-        files = lib.filesystem.listFilesRecursive (lib.path.append ./. releaseName);
-        mesonFiles = lib.filter (hasBasenamePrefix "meson") files;
-      in
-      # You have to have at least `meson.build.in` when using xcodeHash to trigger the Meson
-      # build support in `mkAppleDerivation`.
-      assert super ? xcodeHash -> lib.length mesonFiles > 0;
-      {
-        pname = super.pname or releaseName;
-        inherit (info) version;
+lib.extendMkDerivation {
+  constructDrv = bootstrapStdenv.mkDerivation;
+  extendDrvArgs =
+    self: super:
+    assert super ? releaseName;
+    let
+      inherit (super) releaseName;
+      info = versions.${releaseName};
+      files = lib.filesystem.listFilesRecursive (lib.path.append ./. releaseName);
+      mesonFiles = lib.filter (hasBasenamePrefix "meson") files;
+    in
+    # You have to have at least `meson.build.in` when using xcodeHash to trigger the Meson
+    # build support in `mkAppleDerivation`.
+    assert super ? xcodeHash -> lib.length mesonFiles > 0;
+    {
+      pname = super.pname or releaseName;
+      inherit (info) version;
 
-        src = super.src or fetchFromGitHub {
-          owner = "apple-oss-distributions";
-          repo = releaseName;
-          rev = info.rev or "${releaseName}-${info.version}";
-          inherit (info) hash;
-        };
+      src = super.src or fetchFromGitHub {
+        owner = "apple-oss-distributions";
+        repo = releaseName;
+        rev = info.rev or "${releaseName}-${info.version}";
+        inherit (info) hash;
+      };
 
-        strictDeps = true;
-        __structuredAttrs = true;
+      strictDeps = true;
+      __structuredAttrs = true;
 
-        meta = {
-          homepage = "https://opensource.apple.com/releases/";
-          license = lib.licenses.apple-psl20;
-          teams = [ lib.teams.darwin ];
-          platforms = lib.platforms.darwin;
-        }
-        // super.meta or { };
+      meta = {
+        homepage = "https://opensource.apple.com/releases/";
+        license = lib.licenses.apple-psl20;
+        teams = [ lib.teams.darwin ];
+        platforms = lib.platforms.darwin;
       }
-      // lib.optionalAttrs (super ? xcodeHash) {
-        postUnpack =
-          super.postUnpack or ""
-          + lib.concatMapStrings (
-            file:
-            if baseNameOf file == "meson.build.in" then
-              "substitute ${lib.escapeShellArg "${file}"} \"$sourceRoot/meson.build\" --subst-var version\n"
-            else
-              "cp ${lib.escapeShellArg "${file}"} \"$sourceRoot/\"${lib.escapeShellArg (baseNameOf file)}\n"
-          ) mesonFiles;
+      // super.meta or { };
+    }
+    // lib.optionalAttrs (super ? xcodeHash) {
+      postUnpack =
+        super.postUnpack or ""
+        + lib.concatMapStrings (
+          file:
+          if baseNameOf file == "meson.build.in" then
+            "substitute ${lib.escapeShellArg "${file}"} \"$sourceRoot/meson.build\" --subst-var version\n"
+          else
+            "cp ${lib.escapeShellArg "${file}"} \"$sourceRoot/\"${lib.escapeShellArg (baseNameOf file)}\n"
+        ) mesonFiles;
 
-        xcodeProject = super.xcodeProject or "${releaseName}.xcodeproj";
+      xcodeProject = super.xcodeProject or "${releaseName}.xcodeproj";
 
-        nativeBuildInputs = super.nativeBuildInputs or [ ] ++ [
-          meson
-          ninja
-          xcodeProjectCheckHook
-        ];
+      nativeBuildInputs = super.nativeBuildInputs or [ ] ++ [
+        meson
+        ninja
+        xcodeProjectCheckHook
+      ];
 
-        mesonBuildType = "release";
-      }
-    ) attrs'
-  )
-)
+      mesonBuildType = "release";
+    };
+}

From a7f89aca060a6f96359be62f9fa7b44ae85e4e9f Mon Sep 17 00:00:00 2001
From: Emily <vcs@emily.moe>
Date: Sat, 18 Oct 2025 02:11:47 +0100
Subject: [PATCH 06/28] darwin.mkAppleDerivation: use conventional argument
 names

---
 .../mkAppleDerivation.nix                     | 22 +++++++++----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix b/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix
index 35131914f120..9feabef5265d 100644
--- a/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix
+++ b/pkgs/os-specific/darwin/apple-source-releases/mkAppleDerivation.nix
@@ -17,22 +17,22 @@ in
 lib.extendMkDerivation {
   constructDrv = bootstrapStdenv.mkDerivation;
   extendDrvArgs =
-    self: super:
-    assert super ? releaseName;
+    finalAttrs: args:
+    assert args ? releaseName;
     let
-      inherit (super) releaseName;
+      inherit (args) releaseName;
       info = versions.${releaseName};
       files = lib.filesystem.listFilesRecursive (lib.path.append ./. releaseName);
       mesonFiles = lib.filter (hasBasenamePrefix "meson") files;
     in
     # You have to have at least `meson.build.in` when using xcodeHash to trigger the Meson
     # build support in `mkAppleDerivation`.
-    assert super ? xcodeHash -> lib.length mesonFiles > 0;
+    assert args ? xcodeHash -> lib.length mesonFiles > 0;
     {
-      pname = super.pname or releaseName;
+      pname = args.pname or releaseName;
       inherit (info) version;
 
-      src = super.src or fetchFromGitHub {
+      src = args.src or fetchFromGitHub {
         owner = "apple-oss-distributions";
         repo = releaseName;
         rev = info.rev or "${releaseName}-${info.version}";
@@ -48,11 +48,11 @@ lib.extendMkDerivation {
         teams = [ lib.teams.darwin ];
         platforms = lib.platforms.darwin;
       }
-      // super.meta or { };
+      // args.meta or { };
     }
-    // lib.optionalAttrs (super ? xcodeHash) {
+    // lib.optionalAttrs (args ? xcodeHash) {
       postUnpack =
-        super.postUnpack or ""
+        args.postUnpack or ""
         + lib.concatMapStrings (
           file:
           if baseNameOf file == "meson.build.in" then
@@ -61,9 +61,9 @@ lib.extendMkDerivation {
             "cp ${lib.escapeShellArg "${file}"} \"$sourceRoot/\"${lib.escapeShellArg (baseNameOf file)}\n"
         ) mesonFiles;
 
-      xcodeProject = super.xcodeProject or "${releaseName}.xcodeproj";
+      xcodeProject = args.xcodeProject or "${releaseName}.xcodeproj";
 
-      nativeBuildInputs = super.nativeBuildInputs or [ ] ++ [
+      nativeBuildInputs = args.nativeBuildInputs or [ ] ++ [
         meson
         ninja
         xcodeProjectCheckHook

From 117bf34d44f73d005a48405ba404db2b36a6ad93 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 19 Oct 2025 09:24:14 +0000
Subject: [PATCH 07/28] terragrunt: 0.90.0 -> 0.91.1

---
 pkgs/by-name/te/terragrunt/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/te/terragrunt/package.nix b/pkgs/by-name/te/terragrunt/package.nix
index 43e53782e93c..569231fc8773 100644
--- a/pkgs/by-name/te/terragrunt/package.nix
+++ b/pkgs/by-name/te/terragrunt/package.nix
@@ -7,13 +7,13 @@
 }:
 buildGo125Module (finalAttrs: {
   pname = "terragrunt";
-  version = "0.90.0";
+  version = "0.91.1";
 
   src = fetchFromGitHub {
     owner = "gruntwork-io";
     repo = "terragrunt";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-tc+3+H/u/6IpkmvlwObzVjUnJzBzElme0tT+zktGfkw=";
+    hash = "sha256-GbPPBEl41p3sI31WuGquvnI+pVQ5zXpGey7zHjsKfw8=";
   };
 
   nativeBuildInputs = [
@@ -25,7 +25,7 @@ buildGo125Module (finalAttrs: {
     make generate-mocks
   '';
 
-  vendorHash = "sha256-+4mDmC1B4YmExOJqS/vlTxBiI5/rKcn3Vyw53BfvAxA=";
+  vendorHash = "sha256-iMzoee3MkOgU0Or0F+FVxNs1g5+306W4vC5wOh61mzw=";
 
   doCheck = false;
 

From 43f03d0f95370a6ed99946c1640d693578802d68 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Sun, 19 Oct 2025 17:16:38 -0700
Subject: [PATCH 08/28] python3Packages.python-bsblan: don't depend on
 async-timeout

---
 pkgs/development/python-modules/python-bsblan/default.nix | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/pkgs/development/python-modules/python-bsblan/default.nix b/pkgs/development/python-modules/python-bsblan/default.nix
index 4e654bbbc2c4..754df9394172 100644
--- a/pkgs/development/python-modules/python-bsblan/default.nix
+++ b/pkgs/development/python-modules/python-bsblan/default.nix
@@ -14,7 +14,6 @@
   pytest-cov-stub,
   pytest-mock,
   pytestCheckHook,
-  pythonOlder,
   yarl,
 }:
 
@@ -23,8 +22,6 @@ buildPythonPackage rec {
   version = "2.2.5";
   pyproject = true;
 
-  disabled = pythonOlder "3.12";
-
   src = fetchFromGitHub {
     owner = "liudger";
     repo = "python-bsblan";
@@ -32,10 +29,6 @@ buildPythonPackage rec {
     hash = "sha256-kPkKgjze3ohaIaDax3h66JWw5tY+3S0N+lPqXSFFcRY=";
   };
 
-  postPatch = ''
-    sed -i "/ruff/d" pyproject.toml
-  '';
-
   env.PACKAGE_VERSION = version;
 
   build-system = [ hatchling ];
@@ -44,7 +37,6 @@ buildPythonPackage rec {
 
   dependencies = [
     aiohttp
-    async-timeout
     backoff
     mashumaro
     orjson

From fc11c525369f5c4c23d00ad18613b3f7a6f32d1c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Sun, 19 Oct 2025 17:21:07 -0700
Subject: [PATCH 09/28] python3Packages.python-bsblan: fix version metadata

---
 pkgs/development/python-modules/python-bsblan/default.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/python-modules/python-bsblan/default.nix b/pkgs/development/python-modules/python-bsblan/default.nix
index 754df9394172..572447f69c36 100644
--- a/pkgs/development/python-modules/python-bsblan/default.nix
+++ b/pkgs/development/python-modules/python-bsblan/default.nix
@@ -29,7 +29,10 @@ buildPythonPackage rec {
     hash = "sha256-kPkKgjze3ohaIaDax3h66JWw5tY+3S0N+lPqXSFFcRY=";
   };
 
-  env.PACKAGE_VERSION = version;
+  postPatch = ''
+    substituteInPlace pyproject.toml \
+      --replace-fail 'version = "0.0.0"' 'version = "${version}"'
+  '';
 
   build-system = [ hatchling ];
 

From 921f8747bc33569976bca5d3858e0d1720270fa4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Sun, 19 Oct 2025 20:50:54 -0700
Subject: [PATCH 10/28] python3Packages.pysmhi: 1.0.2 -> 1.1.0

Diff: https://github.com/gjohansson-ST/pysmhi/compare/v1.0.2...v1.1.0

Changelog: https://github.com/gjohansson-ST/pysmhi/releases/tag/v1.1.0
---
 pkgs/development/python-modules/pysmhi/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/pysmhi/default.nix b/pkgs/development/python-modules/pysmhi/default.nix
index 067c290f0d3f..da449ca28eaa 100644
--- a/pkgs/development/python-modules/pysmhi/default.nix
+++ b/pkgs/development/python-modules/pysmhi/default.nix
@@ -13,14 +13,14 @@
 
 buildPythonPackage rec {
   pname = "pysmhi";
-  version = "1.0.2";
+  version = "1.1.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "gjohansson-ST";
     repo = "pysmhi";
     tag = "v${version}";
-    hash = "sha256-9jsSvitxcjH2oFCdSm1203UwG5xjOwQDTaU4Z9Cqs+A=";
+    hash = "sha256-n2eDQ9fbELGvO/SYqdrwT+lZNIZs5GgihmrimvI3a1w=";
   };
 
   build-system = [ poetry-core ];

From e916df2d972f270b27903245030653f59d617bde Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Sun, 19 Oct 2025 20:57:26 -0700
Subject: [PATCH 11/28] python3Packages.colorlog: 6.9.0 -> 6.10.1

Diff: https://github.com/borntyping/python-colorlog/compare/v6.9.0...v6.10.1

Changelog: https://github.com/borntyping/python-colorlog/releases/tag/v6.10.1
---
 .../python-modules/colorlog/default.nix       | 19 +++++++++++--------
 1 file changed, 11 insertions(+), 8 deletions(-)

diff --git a/pkgs/development/python-modules/colorlog/default.nix b/pkgs/development/python-modules/colorlog/default.nix
index ab09f5896b4a..83397f73215d 100644
--- a/pkgs/development/python-modules/colorlog/default.nix
+++ b/pkgs/development/python-modules/colorlog/default.nix
@@ -1,19 +1,21 @@
 {
   lib,
   buildPythonPackage,
-  fetchPypi,
+  fetchFromGitHub,
   setuptools,
   pytestCheckHook,
 }:
 
 buildPythonPackage rec {
   pname = "colorlog";
-  version = "6.9.0";
+  version = "6.10.1";
   pyproject = true;
 
-  src = fetchPypi {
-    inherit pname version;
-    hash = "sha256-v7pUobk7lPVOH0/kg5VyWj2S/SpK9wL2vXCUa9wMasI=";
+  src = fetchFromGitHub {
+    owner = "borntyping";
+    repo = "python-colorlog";
+    tag = "v${version}";
+    hash = "sha256-vb7OzIVcEIfnhJGpO0DgeEdhL6NCKlrynoNMxNp8Yg4=";
   };
 
   build-system = [ setuptools ];
@@ -22,10 +24,11 @@ buildPythonPackage rec {
 
   nativeCheckInputs = [ pytestCheckHook ];
 
-  meta = with lib; {
+  meta = {
+    changelog = "https://github.com/borntyping/python-colorlog/releases/tag/${src.tag}";
     description = "Log formatting with colors";
     homepage = "https://github.com/borntyping/python-colorlog";
-    license = licenses.mit;
-    maintainers = with maintainers; [ dotlambda ];
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ dotlambda ];
   };
 }

From 0909cb8a745678b68d6f2793aa5f40f10e267526 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 20 Oct 2025 23:41:47 +0000
Subject: [PATCH 12/28] mirrord: 3.165.0 -> 3.167.0

---
 pkgs/by-name/mi/mirrord/manifest.json | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/mi/mirrord/manifest.json b/pkgs/by-name/mi/mirrord/manifest.json
index c2ff36881b70..711c78a223cd 100644
--- a/pkgs/by-name/mi/mirrord/manifest.json
+++ b/pkgs/by-name/mi/mirrord/manifest.json
@@ -1,21 +1,21 @@
 {
-  "version": "3.165.0",
+  "version": "3.167.0",
   "assets": {
     "x86_64-linux": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.165.0/mirrord_linux_x86_64",
-      "hash": "sha256-XLmI42PHs15KFwsKzVRohdVcQiwRncuoI375OlnhrRM="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.167.0/mirrord_linux_x86_64",
+      "hash": "sha256-7LxoI0y82Hy2Vi7SveKgkKw1Bv5AzcMceBbV1FDhock="
     },
     "aarch64-linux": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.165.0/mirrord_linux_aarch64",
-      "hash": "sha256-IWEE2Vi/OIbL5hgOAkXhz/lJix7qjKD9yQrT2lNW4uY="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.167.0/mirrord_linux_aarch64",
+      "hash": "sha256-a4SuVF1e02IjAt//DgSdJ3dy4GfDaNhOHOwrZHio7OY="
     },
     "aarch64-darwin": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.165.0/mirrord_mac_universal",
-      "hash": "sha256-xRFLI/97yFpM4mt+SSbCHo4CLY0ClWLrG3jUvIRO9CQ="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.167.0/mirrord_mac_universal",
+      "hash": "sha256-pqIjHduZMwsR6zXEURkKfixkY+FLy4oIE+aPPUX904M="
     },
     "x86_64-darwin": {
-      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.165.0/mirrord_mac_universal",
-      "hash": "sha256-xRFLI/97yFpM4mt+SSbCHo4CLY0ClWLrG3jUvIRO9CQ="
+      "url": "https://github.com/metalbear-co/mirrord/releases/download/3.167.0/mirrord_mac_universal",
+      "hash": "sha256-pqIjHduZMwsR6zXEURkKfixkY+FLy4oIE+aPPUX904M="
     }
   }
 }

From b0bc8faca25e15f5d227035b34289a4b25d2f9c9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 21 Oct 2025 07:58:54 +0000
Subject: [PATCH 13/28] riffdiff: 3.4.1 -> 3.5.0

---
 pkgs/by-name/ri/riffdiff/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ri/riffdiff/package.nix b/pkgs/by-name/ri/riffdiff/package.nix
index 7d066f224410..98fc4ccfb2f6 100644
--- a/pkgs/by-name/ri/riffdiff/package.nix
+++ b/pkgs/by-name/ri/riffdiff/package.nix
@@ -9,16 +9,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "riffdiff";
-  version = "3.4.1";
+  version = "3.5.0";
 
   src = fetchFromGitHub {
     owner = "walles";
     repo = "riff";
     tag = version;
-    hash = "sha256-IpEgWbmWFW4X09EeAfWadncH4ptzSom2+7kvh8h3hcM=";
+    hash = "sha256-qA20sLiGqDtIPWBNww+WXM5AG162RPTdkUPoJ0PLiYY=";
   };
 
-  cargoHash = "sha256-I0hBh9FFoy+RhEUAHfgQa+UiSgOS0mYJy+2W/0/9kG4=";
+  cargoHash = "sha256-omwKOstRXIAUDgLUFqmtxu77JJzAOASzbjLEImad1cE=";
 
   passthru = {
     tests.version = testers.testVersion { package = riffdiff; };

From e36144c463077cd9a5f8a63a83112c6dc54f0dce Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 21 Oct 2025 14:02:12 +0000
Subject: [PATCH 14/28] harbor-cli: 0.0.12 -> 0.0.13

---
 pkgs/by-name/ha/harbor-cli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ha/harbor-cli/package.nix b/pkgs/by-name/ha/harbor-cli/package.nix
index a2b4efeaa48a..8b46de187513 100644
--- a/pkgs/by-name/ha/harbor-cli/package.nix
+++ b/pkgs/by-name/ha/harbor-cli/package.nix
@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "harbor-cli";
-  version = "0.0.12";
+  version = "0.0.13";
 
   src = fetchFromGitHub {
     owner = "goharbor";
     repo = "harbor-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wdUXLgmdxkWzvLCuIJSkos1z7nyETZv3mNzGtBBJVUM=";
+    hash = "sha256-TVuWSbBPRXq9icfMXEg0wONaqD5S2ge5DQiDHSlrADk=";
   };
 
-  vendorHash = "sha256-OJTyX+HXyC6avsgUCzEfU0ej493J8p77r59j+X/Vqwk=";
+  vendorHash = "sha256-Pj573V6S2LaytQMK0jGVyLMX/GBZ1GOmYV/LPO1ScS4=";
 
   excludedPackages = [
     "dagger"

From 6c910ccd4f954d59334727835445619e1d7d4333 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Tue, 21 Oct 2025 10:53:21 -0700
Subject: [PATCH 15/28] python3Packages.pysmhi: fix tests on Darwin

---
 pkgs/development/python-modules/pysmhi/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/development/python-modules/pysmhi/default.nix b/pkgs/development/python-modules/pysmhi/default.nix
index da449ca28eaa..9427b8ca00a8 100644
--- a/pkgs/development/python-modules/pysmhi/default.nix
+++ b/pkgs/development/python-modules/pysmhi/default.nix
@@ -39,6 +39,8 @@ buildPythonPackage rec {
     syrupy
   ];
 
+  __darwinAllowLocalNetworking = true;
+
   meta = {
     changelog = "https://github.com/gjohansson-ST/pysmhi/releases/tag/${src.tag}";
     description = "Retrieve open data from SMHI api";

From dda9be0de6f0847f9a27b96d2be8072d30b932df Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Tue, 21 Oct 2025 10:56:25 -0700
Subject: [PATCH 16/28] python3Packages.python-bsblan: fix tests on Darwin

---
 pkgs/development/python-modules/python-bsblan/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/development/python-modules/python-bsblan/default.nix b/pkgs/development/python-modules/python-bsblan/default.nix
index 572447f69c36..fc09767f6dae 100644
--- a/pkgs/development/python-modules/python-bsblan/default.nix
+++ b/pkgs/development/python-modules/python-bsblan/default.nix
@@ -55,6 +55,8 @@ buildPythonPackage rec {
     pytestCheckHook
   ];
 
+  __darwinAllowLocalNetworking = true;
+
   pythonImportsCheck = [ "bsblan" ];
 
   meta = with lib; {

From c06ad375ebc8b7bc5e7c87cdef14166e61195978 Mon Sep 17 00:00:00 2001
From: Tim Schumacher <timschumi@gmx.de>
Date: Tue, 21 Oct 2025 23:54:58 +0200
Subject: [PATCH 17/28] android-udev-rules: drop

As of systemd 258 adb and fastboot connections are handled by a built-in
uaccess rule, so a dedicated package with hardcoded ID-based udev rules
is no longer needed.

Drop the android-udev-rules package and related mentions of the adbusers
group, which is also no longer used.
---
 doc/release-notes/rl-2511.section.md          |  2 +
 nixos/modules/programs/adb.nix                |  4 --
 nixos/modules/programs/envision.nix           |  1 -
 nixos/modules/services/video/wivrn.nix        |  1 -
 .../by-name/an/android-udev-rules/package.nix | 44 -------------------
 pkgs/top-level/aliases.nix                    |  1 +
 6 files changed, 3 insertions(+), 50 deletions(-)
 delete mode 100644 pkgs/by-name/an/android-udev-rules/package.nix

diff --git a/doc/release-notes/rl-2511.section.md b/doc/release-notes/rl-2511.section.md
index ec1bec180d02..d9a0e065b598 100644
--- a/doc/release-notes/rl-2511.section.md
+++ b/doc/release-notes/rl-2511.section.md
@@ -180,6 +180,8 @@
 
 - `proton-caller` has been removed due to lack of upstream maintenance.
 
+- `android-udev-rules` has been removed, as it is effectively superseded by built-in uaccess rules in systemd.
+
 - `lima` package now only includes the guest agent for the host's architecture by default. If your guest VM's architecture differs from your Lima host's, you'll need to enable the `lima-additional-guestagents` package by setting `withAdditionalGuestAgents = true` when overriding lima with this input.
 
 - `mongodb-6_0` was removed as it is end of life as of 2025-07-31.
diff --git a/nixos/modules/programs/adb.nix b/nixos/modules/programs/adb.nix
index 28182df9cc23..4ae2569049ed 100644
--- a/nixos/modules/programs/adb.nix
+++ b/nixos/modules/programs/adb.nix
@@ -16,8 +16,6 @@
         type = lib.types.bool;
         description = ''
           Whether to configure system to use Android Debug Bridge (adb).
-          To grant access to a user, it must be part of adbusers group:
-          `users.users.alice.extraGroups = ["adbusers"];`
         '';
       };
     };
@@ -25,8 +23,6 @@
 
   ###### implementation
   config = lib.mkIf config.programs.adb.enable {
-    services.udev.packages = [ pkgs.android-udev-rules ];
     environment.systemPackages = [ pkgs.android-tools ];
-    users.groups.adbusers = { };
   };
 }
diff --git a/nixos/modules/programs/envision.nix b/nixos/modules/programs/envision.nix
index 02f7ba5fdbeb..b31980f03eb8 100644
--- a/nixos/modules/programs/envision.nix
+++ b/nixos/modules/programs/envision.nix
@@ -34,7 +34,6 @@ in
     services.udev = {
       enable = true;
       packages = with pkgs; [
-        android-udev-rules
         xr-hardware
       ];
     };
diff --git a/nixos/modules/services/video/wivrn.nix b/nixos/modules/services/video/wivrn.nix
index 6f4538964283..9c7250fb7d08 100644
--- a/nixos/modules/services/video/wivrn.nix
+++ b/nixos/modules/services/video/wivrn.nix
@@ -217,7 +217,6 @@ in
     };
 
     services = {
-      udev.packages = with pkgs; [ android-udev-rules ];
       avahi = {
         enable = true;
         publish = {
diff --git a/pkgs/by-name/an/android-udev-rules/package.nix b/pkgs/by-name/an/android-udev-rules/package.nix
deleted file mode 100644
index 4c118124e02b..000000000000
--- a/pkgs/by-name/an/android-udev-rules/package.nix
+++ /dev/null
@@ -1,44 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchFromGitHub,
-  udevCheckHook,
-}:
-stdenv.mkDerivation (finalAttrs: {
-  pname = "android-udev-rules";
-  version = "20250525";
-
-  src = fetchFromGitHub {
-    owner = "M0Rf30";
-    repo = "android-udev-rules";
-    rev = finalAttrs.version;
-    hash = "sha256-4ODU9EoVYV+iSu6+M9ePed45QkOZgWkDUlFTlWJ8ttQ=";
-  };
-
-  installPhase = ''
-    runHook preInstall
-    install -D 51-android.rules $out/lib/udev/rules.d/51-android.rules
-    runHook postInstall
-  '';
-
-  nativeBuildInputs = [
-    udevCheckHook
-  ];
-  doInstallCheck = true;
-
-  meta = {
-    homepage = "https://github.com/M0Rf30/android-udev-rules";
-    description = "Android udev rules list aimed to be the most comprehensive on the net";
-    longDescription = ''
-      Android udev rules list aimed to be the most comprehensive on the net.
-      To use on NixOS, simply add this package to services.udev.packages:
-      ```nix
-      services.udev.packages = [ pkgs.android-udev-rules ];
-      ```
-    '';
-    platforms = lib.platforms.linux;
-    license = lib.licenses.gpl3Plus;
-    maintainers = [ ];
-    teams = [ lib.teams.android ];
-  };
-})
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 4b7c42542c5f..f3c45aee3f03 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -434,6 +434,7 @@ mapAliases {
   alsaUtils = throw "'alsaUtils' has been renamed to/replaced by 'alsa-utils'"; # Converted to throw 2024-10-17
   amazon-qldb-shell = throw "'amazon-qldb-shell' has been removed due to being unmaintained upstream"; # Added 2025-07-30
   amdvlk = throw "'amdvlk' has been removed since it was deprecated by AMD. Its replacement, RADV, is enabled by default."; # Added 2025-09-20
+  android-udev-rules = throw "'android-udev-rules' has been removed due to being superseded by built-in systemd uaccess rules."; # Added 2025-10-21
   angelfish = throw "'angelfish' has been renamed to/replaced by 'libsForQt5.kdeGear.angelfish'"; # Converted to throw 2024-10-17
   animeko = throw "'animeko' has been removed since it is unmaintained"; # Added 2025-08-20
   ansible_2_14 = throw "Ansible 2.14 goes end of life in 2024/05 and can't be supported throughout the 24.05 release cycle"; # Added 2024-04-11

From 4d268775b4b9afcbe2461c31ccc3ccbf81f5eade Mon Sep 17 00:00:00 2001
From: Mirza Arnaut <mirza.arnaut45@gmail.com>
Date: Tue, 21 Oct 2025 17:02:49 +0200
Subject: [PATCH 18/28] beszel: add arunoruto to maintainers list

---
 pkgs/by-name/be/beszel/package.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/be/beszel/package.nix b/pkgs/by-name/be/beszel/package.nix
index 79f012fdaea4..b30719113978 100644
--- a/pkgs/by-name/be/beszel/package.nix
+++ b/pkgs/by-name/be/beszel/package.nix
@@ -73,7 +73,10 @@ buildGoModule rec {
     homepage = "https://github.com/henrygd/beszel";
     changelog = "https://github.com/henrygd/beszel/releases/tag/v${version}";
     description = "Lightweight server monitoring hub with historical data, docker stats, and alerts";
-    maintainers = with lib.maintainers; [ bot-wxt1221 ];
+    maintainers = with lib.maintainers; [
+      bot-wxt1221
+      arunoruto
+    ];
     license = lib.licenses.mit;
   };
 }

From 3d00669140f623de5e0a19e84cd70b8f3cdc454d Mon Sep 17 00:00:00 2001
From: dish <pyrox@pyrox.dev>
Date: Wed, 22 Oct 2025 11:05:06 -0400
Subject: [PATCH 19/28] rl-2511: Move entries from incorrect sections

---
 doc/release-notes/rl-2511.section.md          | 26 +++++++++----------
 .../manual/release-notes/rl-2511.section.md   |  3 +++
 2 files changed, 15 insertions(+), 14 deletions(-)

diff --git a/doc/release-notes/rl-2511.section.md b/doc/release-notes/rl-2511.section.md
index 5e22edd9f6dc..08887b914fd0 100644
--- a/doc/release-notes/rl-2511.section.md
+++ b/doc/release-notes/rl-2511.section.md
@@ -30,6 +30,11 @@
 
 - Everything related to `bower` was removed, as it is deprecated and not used by anything in nixpkgs.
 
+- `reaction` has been updated to version 2, which includes some breaking changes.
+  For more information, [check the release article](https://blog.ppom.me/en-reaction-v2).
+
+- `mealie` has been updated to 3.0.2: This update introduces breaking changes in some API endpoints (see the [release changelog](https://github.com/mealie-recipes/mealie/releases/tag/v3.0.0)).
+
 - The `offrss` package was removed due to lack of upstream maintenance since 2012. It's recommended for users to migrate to another RSS reader
 
 - `installShellFiles`: Allow installManPage to take a piped input, add the `--name` flag for renaming the file when installed. Can also append `--` to opt-out of all subsequent parsing.
@@ -263,6 +268,13 @@
 
 - The systemd initrd will now respect `x-systemd.wants` and `x-systemd.requires` for reliably unlocking multi-disk bcachefs volumes.
 
+- `neovim`: Added support for the `vim.o.exrc` option, the `VIMINIT` environment variable, and sourcing of `sysinit.vim`.
+
+  See the neovim help page [`:help startup`](https://neovim.io/doc/user/starting.html#startup) for more information, as well as [the nixpkgs neovim wrapper documentation](#neovim-custom-configuration).
+
+- `cloudflare-ddns`: Added package cloudflare-ddns.
+
+
 - [`homebox` 0.20.0](https://github.com/sysadminsmedia/homebox/releases/tag/v0.20.0) changed how assets are stored and hashed. It is recommended to back up your database before this update. In particular, `--storage-data` was replaced with `--storage-conn-string` and `--storage-prefix-path`. If your configuration set `HBOX_STORAGE_DATA` manually, you must migrate it to `HBOX_STORAGE_CONN_STRING` and `HBOX_STORAGE_PREFIX_PATH`.
 
 - GIMP now defaults to version 3. Use `gimp2` for the old version.
@@ -322,13 +334,8 @@
 
 <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->
 
-- `mealie` has been updated to 3.0.2: This update introduces breaking changes in some API endpoints (see the [release changelog](https://github.com/mealie-recipes/mealie/releases/tag/v3.0.0)).
-
 ### Breaking changes {#sec-nixpkgs-release-25.11-lib-breaking}
 
-- `reaction` has been updated to version 2, which includes some breaking changes.
-  For more information, [check the release article](https://blog.ppom.me/en-reaction-v2).
-
 - `lib.mapAttrsFlatten` has been removed, following its deprecation in NixOS 24.11. Use `lib.attrsets.mapAttrsToList` instead.
 
 - `lib.attrsets.cartesianProductOfSets` has been removed, following its deprecation in NixOS 24.11. Use `lib.attrsets.cartesianProduct` instead.
@@ -344,9 +351,6 @@
   and called `setup.py` from the source tree, which is deprecated.
   The modern alternative is to configure `pyproject = true` with `build-system = [ setuptools ]`.
 
-- `boot.enableContainers` is only turned on when a declarative NixOS container is defined in `containers`.
-  If you use the `nixos-container` tool for imperative container management, set `boot.enableContainers = true;` explicitly.
-
 ### Deprecations {#sec-nixpkgs-release-25.11-lib-deprecations}
 
 - `lib.options.mkAliasOptionModuleMD` is now obsolete; use the identical [`lib.options.mkAliasOptionModule`] instead.
@@ -363,10 +367,4 @@
 
 ### Additions and Improvements {#sec-nixpkgs-release-25.11-lib-additions-improvements}
 
-- `neovim`: Added support for the `vim.o.exrc` option, the `VIMINIT` environment variable, and sourcing of `sysinit.vim`.
-
-  See the neovim help page [`:help startup`](https://neovim.io/doc/user/starting.html#startup) for more information, as well as [the nixpkgs neovim wrapper documentation](#neovim-custom-configuration).
-
-- `cloudflare-ddns`: Added package cloudflare-ddns.
-
 - `lib.cli.toCommandLine`, `lib.cli.toCommandLineShell`, `lib.cli.toCommandLineGNU` and `lib.cli.toCommandLineShellGNU` have been added to address multiple issues in `lib.cli.toGNUCommandLine` and `lib.cli.toGNUCommandLineShell`.
diff --git a/nixos/doc/manual/release-notes/rl-2511.section.md b/nixos/doc/manual/release-notes/rl-2511.section.md
index 8b3a14483687..a4dd44596b39 100644
--- a/nixos/doc/manual/release-notes/rl-2511.section.md
+++ b/nixos/doc/manual/release-notes/rl-2511.section.md
@@ -180,6 +180,9 @@
 
 - The `services.polipo` module has been removed as `polipo` is unmaintained and archived upstream.
 
+- `boot.enableContainers` is only turned on when a declarative NixOS container is defined in `containers`.
+  If you use the `nixos-container` tool for imperative container management, set `boot.enableContainers = true;` explicitly.
+
 - `virtualisation.lxd` has been removed due to lack of Nixpkgs maintenance. Users can migrate to `virtualisation.incus`, a fork of LXD, as a replacement. See [Incus migration documentation](https://linuxcontainers.org/incus/docs/main/howto/server_migrate_lxd/) for migration information.
 
 - `virtualisation.libvirtd` now uses OVMF images shipped with QEMU for UEFI machines. `virtualisation.libvirtd.qemu.ovmf` has been removed.

From 9f68527a7355427f0265b9b160c7526213ba0343 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sun, 28 Sep 2025 12:39:51 +0000
Subject: [PATCH 20/28] openapi-generator-cli: 7.15.0 -> 7.16.0

---
 pkgs/by-name/op/openapi-generator-cli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/op/openapi-generator-cli/package.nix b/pkgs/by-name/op/openapi-generator-cli/package.nix
index d0d5200d0b37..10f37d24530e 100644
--- a/pkgs/by-name/op/openapi-generator-cli/package.nix
+++ b/pkgs/by-name/op/openapi-generator-cli/package.nix
@@ -9,7 +9,7 @@
 
 let
   jre = jre_headless;
-  version = "7.15.0";
+  version = "7.16.0";
   mainProgram = "openapi-generator-cli";
   this = maven.buildMavenPackage {
     inherit version;
@@ -20,10 +20,10 @@ let
       owner = "OpenAPITools";
       repo = "openapi-generator";
       tag = "v${version}";
-      hash = "sha256-IgjlMOHMASijIt5nMqOZcUpxecbWljHh9rA1YUwUmwM=";
+      hash = "sha256-CoztWf2H2rXcx4d8Av8cBXzMqIZsrSCgx21i3+o2ufo=";
     };
 
-    mvnHash = "sha256-woHPf7vPja70cNj6Glqr0OGAR8CV8qWiRu0hkmCcCrA=";
+    mvnHash = "sha256-5Kzv9h3X5s/1D0Gd1XQRvNGVAyf44QcriJFvS07wdZo=";
     mvnParameters = "-Duser.home=$TMPDIR";
     doCheck = false;
 

From 41c4edc26bc025a9764f33359f74a3526a1f3e58 Mon Sep 17 00:00:00 2001
From: transcaffeine <transcaffeine@finally.coffee>
Date: Wed, 22 Oct 2025 18:47:50 +0200
Subject: [PATCH 21/28] victoriametrics: 1.127.0 -> 1.128.0

Release notes: https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.128.0
Full changelog: https://github.com/VictoriaMetrics/VictoriaMetrics/compare/v1.127.0...v1.128.0
---
 pkgs/by-name/vi/victoriametrics/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/vi/victoriametrics/package.nix b/pkgs/by-name/vi/victoriametrics/package.nix
index 2ceb5c9ace3c..704465fd1b83 100644
--- a/pkgs/by-name/vi/victoriametrics/package.nix
+++ b/pkgs/by-name/vi/victoriametrics/package.nix
@@ -13,13 +13,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "VictoriaMetrics";
-  version = "1.127.0";
+  version = "1.128.0";
 
   src = fetchFromGitHub {
     owner = "VictoriaMetrics";
     repo = "VictoriaMetrics";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-j0PikCV0VWSfp2rvwssXwvkRGQzFNd6hidZv3bufUuI=";
+    hash = "sha256-X1TkE0lJNu68iETf8M8U5IZvRadtIPR6LqP61uzhD3Y=";
   };
 
   vendorHash = null;
@@ -53,7 +53,7 @@ buildGoModule (finalAttrs: {
 
     # Allow older go versions
     substituteInPlace go.mod \
-      --replace-fail "go 1.25.1" "go ${finalAttrs.passthru.go.version}"
+      --replace-fail "go 1.25.3" "go ${finalAttrs.passthru.go.version}"
 
     # Increase timeouts in tests to prevent failure on heavily loaded builders
     substituteInPlace lib/storage/storage_test.go \

From aabdb0af1e10da264d6a5dbe344e5f5c767cb2f0 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 22 Oct 2025 17:56:32 +0000
Subject: [PATCH 22/28] bluemap: 5.12 -> 5.13

---
 pkgs/by-name/bl/bluemap/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/bl/bluemap/package.nix b/pkgs/by-name/bl/bluemap/package.nix
index 13d5c1226156..da8193a8e798 100644
--- a/pkgs/by-name/bl/bluemap/package.nix
+++ b/pkgs/by-name/bl/bluemap/package.nix
@@ -8,11 +8,11 @@
 
 stdenvNoCC.mkDerivation rec {
   pname = "bluemap";
-  version = "5.12";
+  version = "5.13";
 
   src = fetchurl {
     url = "https://github.com/BlueMap-Minecraft/BlueMap/releases/download/v${version}/BlueMap-${version}-cli.jar";
-    hash = "sha256-k+tSIlgOj7o7aHPdJzXSW1zxx2pZ67TB3aJ4Fv7U0pM=";
+    hash = "sha256-NDnslNJ3B6Cjxr6qem9xRX71ddHP014cGynJZdiFDpE=";
   };
 
   dontUnpack = true;

From e0ba8aa4123f5bf062a7308c07be5c8cdc9f9795 Mon Sep 17 00:00:00 2001
From: Jost Alemann <alemann@posteo.com>
Date: Wed, 22 Oct 2025 22:10:29 +0200
Subject: [PATCH 23/28] yt-dlp: 2025.10.14 -> 2025.10.22

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.10.22
Diff: https://github.com/yt-dlp/yt-dlp/compare/2025.10.14...2025.10.22
---
 pkgs/by-name/yt/yt-dlp/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/yt/yt-dlp/package.nix b/pkgs/by-name/yt/yt-dlp/package.nix
index ae0b2733f6b9..a54f623a3b51 100644
--- a/pkgs/by-name/yt/yt-dlp/package.nix
+++ b/pkgs/by-name/yt/yt-dlp/package.nix
@@ -19,14 +19,14 @@ python3Packages.buildPythonApplication rec {
   # The websites yt-dlp deals with are a very moving target. That means that
   # downloads break constantly. Because of that, updates should always be backported
   # to the latest stable release.
-  version = "2025.10.14";
+  version = "2025.10.22";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "yt-dlp";
     repo = "yt-dlp";
     tag = version;
-    hash = "sha256-x7vpuXUihlC4jONwjmWnPECFZ7xiVAOFSDUgBNvl+aA=";
+    hash = "sha256-jQaENEflaF9HzY/EiMXIHgUehAJ3nnDT9IbaN6bDcac=";
   };
 
   postPatch = ''

From 0449e34b11f15ee2958e75d2b7301341f807e6ac Mon Sep 17 00:00:00 2001
From: Rafael Ieda <git@ieda.me>
Date: Wed, 22 Oct 2025 19:09:06 -0300
Subject: [PATCH 24/28] mozart2: fix build with cmake4

---
 pkgs/development/compilers/mozart/default.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/pkgs/development/compilers/mozart/default.nix b/pkgs/development/compilers/mozart/default.nix
index 88736dffdeec..d9f82898c8e7 100644
--- a/pkgs/development/compilers/mozart/default.nix
+++ b/pkgs/development/compilers/mozart/default.nix
@@ -76,6 +76,17 @@ stdenv.mkDerivation rec {
     tk
   ];
 
+  postPatch = ''
+    substituteInPlace {vm,.}/CMakeLists.txt \
+      --replace-fail "cmake_minimum_required(VERSION 2.8)" "cmake_minimum_required(VERSION 3.10)"
+    substituteInPlace vm/vm/test/gtest/{googletest,.}/CMakeLists.txt \
+      --replace-fail "cmake_minimum_required(VERSION 2.6.4)" "cmake_minimum_required(VERSION 3.10)"
+    substituteInPlace bootcompiler/CMakeLists.txt \
+      --replace-fail "cmake_minimum_required(VERSION 2.6)" "cmake_minimum_required(VERSION 3.10)"
+    substituteInPlace {boosthost,opi,wish,stdlib}/CMakeLists.txt \
+      --replace-fail "cmake_minimum_required(VERSION 2.8.6)" "cmake_minimum_required(VERSION 3.10)"
+  '';
+
   meta = with lib; {
     description = "Open source implementation of Oz 3";
     maintainers = with maintainers; [

From 40211ad1af58b87610e078216468b4e0f16b656d Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Wed, 22 Oct 2025 22:23:54 +0000
Subject: [PATCH 25/28] qownnotes: 25.10.3 -> 25.10.4

---
 pkgs/by-name/qo/qownnotes/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/qo/qownnotes/package.nix b/pkgs/by-name/qo/qownnotes/package.nix
index 6c9e932f5297..73db3a0cda24 100644
--- a/pkgs/by-name/qo/qownnotes/package.nix
+++ b/pkgs/by-name/qo/qownnotes/package.nix
@@ -19,11 +19,11 @@
 stdenv.mkDerivation (finalAttrs: {
   pname = "qownnotes";
   appname = "QOwnNotes";
-  version = "25.10.3";
+  version = "25.10.4";
 
   src = fetchurl {
     url = "https://github.com/pbek/QOwnNotes/releases/download/v${finalAttrs.version}/qownnotes-${finalAttrs.version}.tar.xz";
-    hash = "sha256-hXqfo+67m1yEr8q7UQ+Er+BuJrIB3Z8M+x39PpmUdxA=";
+    hash = "sha256-taYrPrirSIu1CGs8GeX2lhSS8R1l3mr8YPqpkH4Y/bk=";
   };
 
   nativeBuildInputs = [

From 9e682fcd5472e27677aaa9722c28f9d26d489946 Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Thu, 23 Oct 2025 09:05:14 +1000
Subject: [PATCH 26/28] zfs_unstable: 2.4.0-rc2 -> 2.4.0-rc3

Diff: https://github.com/openzfs/zfs/compare/zfs-2.4.0-rc2...zfs-2.4.0-rc3

Changelog: https://github.com/openzfs/zfs/releases/tag/zfs-2.4.0-rc3
---
 pkgs/os-specific/linux/zfs/unstable.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/zfs/unstable.nix b/pkgs/os-specific/linux/zfs/unstable.nix
index 8c9b35be6056..d54f41119b36 100644
--- a/pkgs/os-specific/linux/zfs/unstable.nix
+++ b/pkgs/os-specific/linux/zfs/unstable.nix
@@ -16,14 +16,14 @@ callPackage ./generic.nix args {
   # IMPORTANT: Always use a tagged release candidate or commits from the
   # zfs-<version>-staging branch, because this is tested by the OpenZFS
   # maintainers.
-  version = "2.4.0-rc2";
+  version = "2.4.0-rc3";
   # rev = "";
 
   tests = {
     inherit (nixosTests.zfs) unstable;
   };
 
-  hash = "sha256-NoY8lXQ/qxO0cQLmU0tIjqqWUThfWzVioigpS2crbeE=";
+  hash = "sha256-VfCeQqgahNNQA4jsiFHTdUjgXIH26k5r3q/Rpo2JrCc=";
 
   extraLongDescription = ''
     This is "unstable" ZFS, and will usually be a pre-release version of ZFS.

From 99d62884386e62f420a13577e0f0658adfcb7406 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 23 Oct 2025 02:54:52 +0000
Subject: [PATCH 27/28] server-box: 1.0.1262 -> 1.0.1270

---
 pkgs/by-name/se/server-box/gitHashes.json    |  6 +++---
 pkgs/by-name/se/server-box/package.nix       |  4 ++--
 pkgs/by-name/se/server-box/pubspec.lock.json | 12 ++++++------
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/pkgs/by-name/se/server-box/gitHashes.json b/pkgs/by-name/se/server-box/gitHashes.json
index d91645f03a29..a10caf0c8b05 100644
--- a/pkgs/by-name/se/server-box/gitHashes.json
+++ b/pkgs/by-name/se/server-box/gitHashes.json
@@ -1,11 +1,11 @@
 {
   "circle_chart": "sha256-BcnL/hRf+Yv2U8Nkl7pc8BtncBW+M2by86jO5IbFIRk=",
   "computer": "sha256-qaD6jn78zDyZBktwJ4WTQa8oCvCWQJOBDaozBVsXNb8=",
-  "dartssh2": "sha256-XlbruyraMmZGNRppQdBLS89Qyd7mm5Noiap2BhZjEPw=",
+  "dartssh2": "sha256-Bl5eLrYU2YnpRcleff3wVXiTS9wuo2A1neiLUClvbGU=",
   "fl_build": "sha256-e2BUk4WmwFzFrA2iHg4dG8fRqWhNt8KFuTEZgWL7H4g=",
-  "fl_lib": "sha256-gK9eJ3GiM9fRVUew1xrd/WYf9ITHi++yR0Bt6qlFm98=",
+  "fl_lib": "sha256-0Dg21LBVIyTH5MLt/v+kGzfOK8PFVYfNiK6P/jcy2jI=",
   "gtk": "sha256-nt7d2MvIfizxezWhQNm2/yHEzYuPKDvfHGM9Bnq3f04=",
   "plain_notification_token": "sha256-Cy1/S8bAtKCBnjfDEeW4Q2nP4jtwyCstAC1GH1efu8I=",
   "watch_connectivity": "sha256-9TyuElr0PNoiUvbSTOakdw1/QwWp6J2GAwzVHsgYWtM=",
-  "xterm": "sha256-VxAWV40R+rSvYyS9LZoD7GL1K1gwjMnpoKd7hfb48Wo="
+  "xterm": "sha256-ujR2aRB9TbaSoGB0vmx75X6683f/tu+Ptj+BFJ2WWVs="
 }
diff --git a/pkgs/by-name/se/server-box/package.nix b/pkgs/by-name/se/server-box/package.nix
index 578c4625c31b..d1dda3c87e75 100644
--- a/pkgs/by-name/se/server-box/package.nix
+++ b/pkgs/by-name/se/server-box/package.nix
@@ -12,13 +12,13 @@
 }:
 
 let
-  version = "1.0.1262";
+  version = "1.0.1270";
 
   src = fetchFromGitHub {
     owner = "lollipopkit";
     repo = "flutter_server_box";
     tag = "v${version}";
-    hash = "sha256-2UJgqNLwVttmc/D4DEhC7oe2yhFNdkvFnOCRVV3WVFk=";
+    hash = "sha256-3erwb2e9iINe4MVuOQKzBuBdUJyBgW2zIImZwVyll6Q=";
   };
 in
 flutter335.buildFlutterApplication {
diff --git a/pkgs/by-name/se/server-box/pubspec.lock.json b/pkgs/by-name/se/server-box/pubspec.lock.json
index a82576bebbd5..1cc8a74af475 100644
--- a/pkgs/by-name/se/server-box/pubspec.lock.json
+++ b/pkgs/by-name/se/server-box/pubspec.lock.json
@@ -466,8 +466,8 @@
       "dependency": "direct main",
       "description": {
         "path": ".",
-        "ref": "v1.0.285",
-        "resolved-ref": "18fb1ad15ee6d2c8c5ec67722bf8b90fe0f4746d",
+        "ref": "v1.0.293",
+        "resolved-ref": "3eedfd55916eede70aeb28605469a43623a9791b",
         "url": "https://github.com/lollipopkit/dartssh2"
       },
       "source": "git",
@@ -628,8 +628,8 @@
       "dependency": "direct main",
       "description": {
         "path": ".",
-        "ref": "v1.0.355",
-        "resolved-ref": "73d5f2603859a9f70459d798ed2d267b1d9a86e5",
+        "ref": "v1.0.358",
+        "resolved-ref": "c8e55d054875bb3ccdab9894a01fe82d173dc54e",
         "url": "https://github.com/lppcg/fl_lib"
       },
       "source": "git",
@@ -2322,8 +2322,8 @@
       "dependency": "direct main",
       "description": {
         "path": ".",
-        "ref": "v4.0.4",
-        "resolved-ref": "5747837cdb7b113ef733ce0104e4f2bfa1eb4a36",
+        "ref": "v4.0.13",
+        "resolved-ref": "6343b0e5f744d2c11090d34690ad5049ebbc599b",
         "url": "https://github.com/lollipopkit/xterm.dart"
       },
       "source": "git",

From df0b96d06b829be5310e4826d98931aee5d5176d Mon Sep 17 00:00:00 2001
From: thattemperature <2719023332@qq.com>
Date: Thu, 23 Oct 2025 11:47:22 +0800
Subject: [PATCH 28/28] emacsPackages.eaf-browser: add Python dependency.

---
 .../emacs/elisp-packages/manual-packages/eaf-browser/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/applications/editors/emacs/elisp-packages/manual-packages/eaf-browser/default.nix b/pkgs/applications/editors/emacs/elisp-packages/manual-packages/eaf-browser/default.nix
index f804b2a65d32..005323cf11f0 100644
--- a/pkgs/applications/editors/emacs/elisp-packages/manual-packages/eaf-browser/default.nix
+++ b/pkgs/applications/editors/emacs/elisp-packages/manual-packages/eaf-browser/default.nix
@@ -60,6 +60,7 @@ melpaBuild (finalAttrs: {
     eafPythonDeps =
       ps: with ps; [
         pysocks
+        pycookiecheat
       ];
   };