Merge staging-next into staging

2025-03-22 00:15:18 +00:00
parent 783a2900cf a053243735
commit c060400edc
126 changed files with 1445 additions and 531 deletions
@@ -21609,6 +21609,12 @@
    githubId = 529649;
    name = "Raffael Mancini";
  };
+  sepiabrown = {
+    email = "bboxone@gmail.com";
+    github = "sepiabrown";
+    githubId = 35622998;
+    name = "Suwon Park";
+  };
  seppeljordan = {
    email = "sebastian.jordan.mail@googlemail.com";
    github = "seppeljordan";
@@ -10,7 +10,14 @@ in
 {
  options.programs.streamcontroller = {
    enable = lib.mkEnableOption "StreamController";
-    package = lib.mkPackageOption pkgs "streamcontroller" { default = [ "streamcontroller" ]; };
+    package = lib.mkOption {
+      default = pkgs.streamcontroller.override { isKde = config.services.desktopManager.plasma6.enable; };
+      defaultText = lib.literalExpression "pkgs.streamcontroller";
+      type = lib.types.package;
+      description = ''
+        The StreamController package to use
+      '';
+    };
  };

  config = lib.mkIf cfg.enable {
@@ -255,12 +255,14 @@ in
          Restart = "on-failure";
        };

+        enableStrictShellChecks = true;
+
        preStart = ''
          # Related:
          # * https://github.com/NixOS/nixpkgs/issues/346016 ("homepage-dashboard: cache dir is not cleared upon version upgrade")
          # * https://github.com/gethomepage/homepage/discussions/4560 ("homepage NixOS package does not clear cache on upgrade leaving broken state")
          # * https://github.com/vercel/next.js/discussions/58864 ("Feature Request: Allow configuration of cache dir")
-          rm -rf "$NIXPKGS_HOMEPAGE_CACHE_DIR"/*
+          rm -rf "''${NIXPKGS_HOMEPAGE_CACHE_DIR:?}"/*
        '';
      };

@@ -34,7 +34,7 @@ in
      mode = "0600";
    };

-    environment.systemPackages = with pkgs; [ targetcli ];
+    environment.systemPackages = with pkgs; [ targetcli-fb ];

    boot.kernelModules = [
      "configfs"
@@ -52,8 +52,8 @@ in
      wantedBy = [ "multi-user.target" ];
      serviceConfig = {
        Type = "oneshot";
-        ExecStart = "${pkgs.python3.pkgs.rtslib}/bin/targetctl restore";
-        ExecStop = "${pkgs.python3.pkgs.rtslib}/bin/targetctl clear";
+        ExecStart = "${lib.getExe pkgs.python3Packages.rtslib-fb} restore";
+        ExecStop = "${lib.getExe pkgs.python3Packages.rtslib-fb} clear";
        RemainAfterExit = "yes";
      };
    };
@@ -460,13 +460,10 @@ mkDerivation (finalAttrs: {
      NATIVE_FULL_AOT = "1";
      LIBRARY_PATH = lib.concatStringsSep ":" libGccJitLibraryPaths;
    }
-    // {
-      NIX_CFLAGS_COMPILE = lib.concatStringsSep " " [
-        # Fixes intermittent segfaults when compiled with LLVM >= 7.0.
-        # See https://github.com/NixOS/nixpkgs/issues/127902
-        (lib.optionalString (variant == "macport") "-include ${./macport_noescape_noop.h}")
-        (lib.optionalString stdenv.hostPlatform.isDarwin "-DFD_SETSIZE=10000 -DDARWIN_UNLIMITED_SELECT")
-      ];
+    // lib.optionalAttrs (variant == "macport") {
+      # Fixes intermittent segfaults when compiled with LLVM >= 7.0.
+      # See https://github.com/NixOS/nixpkgs/issues/127902
+      NIX_CFLAGS_COMPILE = "-include ${./macport_noescape_noop.h}";
    };

  enableParallelBuilding = true;
@@ -11,17 +11,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "pueue";
-  version = "3.4.1";
+  version = "4.0.0";

  src = fetchFromGitHub {
    owner = "Nukesor";
    repo = "pueue";
    rev = "v${version}";
-    hash = "sha256-b4kZ//+rO70uZh1fvI4A2dbCZ7ymci9g/u5keMBWYf8=";
+    hash = "sha256-TDxTj7VGzJzd6RWyVbe2ubpVS57bqq7OVvi23ZHmYDM=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-MDUBP1NI50I8sSXHYFiAdyL8C2DloCjnq8pr7PsBBIE=";
+  cargoHash = "sha256-R94D9/J+Zl86Rb4+5O2Hp9GmcwnRt+0wJ56CHFoy/zg=";

  nativeBuildInputs =
    [
@@ -21,13 +21,13 @@

 buildGoModule rec {
  pname = "kubernetes";
-  version = "1.32.2";
+  version = "1.32.3";

  src = fetchFromGitHub {
    owner = "kubernetes";
    repo = "kubernetes";
    rev = "v${version}";
-    hash = "sha256-pie36Y3zKGKvnCDHtjNHYox1b2xhy6w7MShkAfkDVrs=";
+    hash = "sha256-kF3Oo+YETnsrFPWBO5b7nH2A2eONIOkE84+u6vOSrpE=";
  };

  vendorHash = null;
@@ -1273,11 +1273,11 @@
    "vendorHash": "sha256-YdWs2orKhbwAZSQYC73t4e/vvVxk8LrBPG9ZC38VcZE="
  },
  "sysdig": {
-    "hash": "sha256-TzwrfI4P3C7jIm7LHk00IOrKXSfZ1MOTw/gq9vVtcHw=",
+    "hash": "sha256-2glf4p19Ni3gCsOXtRlty7bxGRE4RsEr/B2EuEC9S40=",
    "homepage": "https://registry.terraform.io/providers/sysdiglabs/sysdig",
    "owner": "sysdiglabs",
    "repo": "terraform-provider-sysdig",
-    "rev": "v1.47.0",
+    "rev": "v1.50.0",
    "spdx": "MPL-2.0",
    "vendorHash": "sha256-L+XwC7c4ph4lM0+BhHB9oi1R/Av8jlDcqHewOmtPU1s="
  },
@@ -10,12 +10,12 @@
 }:

 let
-  version = "3.9.0";
+  version = "3.9.1";
  src = fetchFromGitHub {
    owner = "openrefine";
    repo = "openrefine";
    rev = version;
-    hash = "sha256-793qKSo9/FVzchlHqQKSBF4MT3rJUv9xvf7YJBiQnZo=";
+    hash = "sha256-ClRjU9xGZLtLhjnvWrEVEojniVMpVNGyBu9bmEGqSDI=";
  };

  npmPkg = buildNpmPackage {
@@ -17,11 +17,11 @@ let
    rec {
      x86_64-linux = {
        urlSuffix = "linux-x86_64.tar.gz";
-        hash = "sha256-ODhN2Nu53nxzMNLsxlw/hSf6nLS7www6SXAyNeSOHmA=";
+        hash = "sha256-e0G7J2BRRC+2MMqpvu5BNnimS7RRTjRBgo/j1T9iYWU=";
      };
      x86_64-darwin = {
        urlSuffix = "macos-universal.zip";
-        hash = "sha256-ZVJjUHkzEjDbFottwGKi9fTfcMdebDqP0r9Wecwro+o=";
+        hash = "sha256-A9BCdYxeWPjCOZ/L0wYTVuqybLHfc1vsWWxAY7IJohw=";
      };
      aarch64-darwin = x86_64-darwin;
    }
@@ -30,7 +30,7 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "appflowy";
-  version = "0.8.6";
+  version = "0.8.7";

  src = fetchzip {
    url = "https://github.com/AppFlowy-IO/appflowy/releases/download/${finalAttrs.version}/AppFlowy-${finalAttrs.version}-${dist.urlSuffix}";
@@ -11,13 +11,13 @@

 stdenv.mkDerivation rec {
  pname = "basex";
-  version = "11.7";
+  version = "11.8";

  src = fetchurl {
    url = "http://files.basex.org/releases/${version}/BaseX${
      builtins.replaceStrings [ "." ] [ "" ] version
    }.zip";
-    hash = "sha256-4xeMdmfk6JmfetfDGlqKQYTMtf15vRGRKYRdyrC90Cc=";
+    hash = "sha256-bzRsKKwOWbXfgbJ51VX3ND9tf+CO3lpB10hw032oJyM=";
  };

  nativeBuildInputs = [
@@ -14,13 +14,13 @@

 stdenv.mkDerivation rec {
  pname = "bpftune";
-  version = "0-unstable-2025-03-07";
+  version = "0-unstable-2025-03-20";

  src = fetchFromGitHub {
    owner = "oracle";
    repo = "bpftune";
-    rev = "744bd48eccb536d6e9c782f635130dbf322e8a32";
-    hash = "sha256-pjFqq5KeG1ptTEo8ENiqC/QkDPqQG4VPR2GDvcBPwH8=";
+    rev = "8c6a3ffc09265bd44ed89b75c400ef97959d1aff";
+    hash = "sha256-TQ8WaGvMcvyeZC4B9gSjJ2k5NOxpTaV4n7Qi36aA78Q=";
  };

  postPatch = ''
@@ -17,20 +17,20 @@

 buildNpmPackage rec {
  pname = "bruno";
-  version = "1.39.1";
+  version = "1.40.0";

  src = fetchFromGitHub {
    owner = "usebruno";
    repo = "bruno";
    tag = "v${version}";
-    hash = "sha256-WPbiQWfGE4rFxb/Xazxm+nu+RINLTQk7PnrLuY6giX0=";
+    hash = "sha256-8Uo3eGF555yoBQxpq1cF9JLK9jkYVMHG+6eFFX1NO3U=";

    postFetch = ''
      ${lib.getExe npm-lockfile-fix} $out/package-lock.json
    '';
  };

-  npmDepsHash = "sha256-SIx2qIWqR1K9K2eUHo5tADdz4vk5ySdSWDBAjBFIVVc=";
+  npmDepsHash = "sha256-6L/SFdHykhBQgB7bi4w+y4Lc+uLIdM4WSmGS0H6Dz4U=";
  npmFlags = [ "--legacy-peer-deps" ];

  nativeBuildInputs =
@@ -8,13 +8,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "clap";
-  version = "1.2.5";
+  version = "1.2.6";

  src = fetchFromGitHub {
    owner = "free-audio";
    repo = "clap";
    rev = finalAttrs.version;
-    hash = "sha256-st8K6hmU2qa01qvHCe6NNnjXwx5k0ABZKZBjp5II7B8=";
+    hash = "sha256-QyIuuiwFg5DP2Ao/LOKYiBXxKHQ0FbFhssIIUnEQz+c=";
  };

  postPatch = ''
@@ -16,7 +16,7 @@

 buildGoModule rec {
  pname = "containerd";
-  version = "2.0.3";
+  version = "2.0.4";

  outputs = [
    "out"
@@ -27,7 +27,7 @@ buildGoModule rec {
    owner = "containerd";
    repo = "containerd";
    tag = "v${version}";
-    hash = "sha256-MPzC7X4r3zrDM6Ej8lICDIB29X+s6jQ1sHQmnk9Zc10=";
+    hash = "sha256-KW2fKdsJ590UPGcu2O3IGyJ+/iY0c8GQLirL8zK3F14=";
  };

  postPatch = "patchShebangs .";
@@ -11,13 +11,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "dpp";
-  version = "10.1.1";
+  version = "10.1.2";

  src = fetchFromGitHub {
    owner = "brainboxdotcc";
    repo = "DPP";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-DHsHmAvL22aC4g5MzY2x793IKB9XHCDrNabQwIbfZn8=";
+    hash = "sha256-Xdd/ULMddwe0C9KHi0NxxRPotF66ljGH7WItJeexzkk=";
  };

  nativeBuildInputs = [
@@ -44,6 +44,6 @@ stdenv.mkDerivation (finalAttrs: {
    changelog = "https://github.com/brainboxdotcc/DPP/releases/tag/${finalAttrs.src.rev}";
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [ xbz ];
-    platforms = lib.platforms.linux;
+    platforms = lib.platforms.unix;
  };
 })
@@ -26,7 +26,7 @@ python3Packages.buildPythonApplication rec {
    owner = "mrvladus";
    repo = "Errands";
    tag = version;
-    hash = "sha256-zFI3+U40zzQL3lPPYwL/ekWA1ugOkORlJui4QT6pgQI=";
+    hash = "sha256-Gs3/DPMsoPTxH+fR7H3gPJr8ITrQDPlmw236vDnmBaA";
  };

  nativeBuildInputs = [
@@ -17,16 +17,16 @@
 }:

 let
-  version = "0.201.0";
+  version = "0.201.1";

  src = fetchFromGitHub {
    owner = "evcc-io";
    repo = "evcc";
    tag = version;
-    hash = "sha256-Hw2TIMcKkeSUEKtTwJezCRMUvicrZUjT9UmTvDgKy2s=";
+    hash = "sha256-nsA/tJXRuL1Ql0N1OR5DeFjXI0PUtSa65hXH6C0Uxds=";
  };

-  vendorHash = "sha256-zWHysXjBNAAZfrVGzn39pdDqQrLUc1uYVLO/U7q0g04=";
+  vendorHash = "sha256-NUDGqBmRL7L7/RDy68YG+nAz9Sj1Ink0tAbx9or/h1Q=";

  commonMeta = with lib; {
    license = licenses.mit;
@@ -52,7 +52,7 @@ buildGo124Module rec {

  npmDeps = fetchNpmDeps {
    inherit src;
-    hash = "sha256-IOpT7YH85iHCK9UqKoomdKQBsPFm4MJ0bbEFbIIxVTc=";
+    hash = "sha256-iaQNLbbNvklSAEGAveOqStruL+LOpHdmGQqtERkagWU=";
  };

  nativeBuildInputs = [
@@ -45,13 +45,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "fastfetch";
-  version = "2.39.0";
+  version = "2.39.1";

  src = fetchFromGitHub {
    owner = "fastfetch-cli";
    repo = "fastfetch";
    tag = finalAttrs.version;
-    hash = "sha256-2XuODYi3kC9d1rO1LFAdixS7SrrjTOgj+Tm3waMGa+M=";
+    hash = "sha256-7ukbYmfhfdjzooHA9J/AixfkZrzJZvnoHGg4z2jCZPI=";
  };

  outputs = [
@@ -119,12 +119,11 @@ buildGoModule rec {
  checkFlags =
    let
      skippedTests = [
-        "Test_SSHParsePublicKey/dsa-1024/SSHKeygen" # dsa-1024 is deprecated in openssh and requires opting-in at compile time
-        "Test_calcFingerprint/dsa-1024/SSHKeygen" # dsa-1024 is deprecated in openssh and requires opting-in at compile time
        "TestPassword" # requires network: api.pwnedpasswords.com
        "TestCaptcha" # requires network: hcaptcha.com
        "TestDNSUpdate" # requires network: release.forgejo.org
        "TestMigrateWhiteBlocklist" # requires network: gitlab.com (DNS)
+        "TestURLAllowedSSH/Pushmirror_URL" # requires network git.gay (DNS)
      ];
    in
    [ "-skip=^${builtins.concatStringsSep "$|^" skippedTests}$" ];
@@ -1,8 +1,8 @@
 import ./generic.nix {
-  version = "10.0.1";
-  hash = "sha256-JLy/edAkbsOqQTQqqoyxc0UX9fPnP8HD54IUzcsyGe4=";
+  version = "10.0.2";
+  hash = "sha256-UxjhJA6o1LS/7/s0BzcaTSkXSsnKfjIMIjL6ASSot6k=";
  npmDepsHash = "sha256-e3SE6cu1xCBdoMRqp2Gcjcay/EwjF+bTdPOlpL1STvw=";
-  vendorHash = "sha256-fqHwqpIetX2jTAWAonRWqF1tArL7Ik/XXURY51jGOn0=";
+  vendorHash = "sha256-ceV73QmxYEthjsA50ylojwC4dcTYAbE2UgxuxFqvi24=";
  lts = false;
  nixUpdateExtraArgs = [
    "--override-filename"
@@ -1,31 +1,33 @@
 {
  lib,
-  fetchurl,
-  pkgs,
  stdenv,
+  fetchurl,
+  gfortran,
+  versionCheckHook,
+  nix-update-script,
 }:

-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
  pname = "fortran-fpm";

  version = "0.11.0";

  src = fetchurl {
-    url = "https://github.com/fortran-lang/fpm/releases/download/v${version}/fpm-${version}.F90";
-    sha256 = "sha256-mIozF+4kSO5yB9CilBDwinnIa92sMxSyoXWAGpz1jSc=";
+    url = "https://github.com/fortran-lang/fpm/releases/download/v${finalAttrs.version}/fpm-${finalAttrs.version}.F90";
+    hash = "sha256-mIozF+4kSO5yB9CilBDwinnIa92sMxSyoXWAGpz1jSc=";
  };

  dontUnpack = true;

-  nativeBuildInputs = with pkgs; [ gfortran ];
+  nativeBuildInputs = [ gfortran ];

  buildPath = "build/bootstrap";

  buildPhase = ''
    runHook preBuild

-    mkdir -p ${buildPath}
-    gfortran -J ${buildPath} -o ${buildPath}/${pname} $src
+    mkdir -p ${finalAttrs.buildPath}
+    gfortran -J ${finalAttrs.buildPath} -o ${finalAttrs.buildPath}/fortran-fpm $src

    runHook postBuild
  '';
@@ -34,17 +36,27 @@ stdenv.mkDerivation rec {
    runHook preInstall

    mkdir -p $out/bin
-    cp ${buildPath}/${pname} $out/bin
+    cp ${finalAttrs.buildPath}/fortran-fpm $out/bin

    runHook postInstall
  '';

-  meta = with lib; {
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
    description = "Fortran Package Manager (fpm)";
    homepage = "https://fpm.fortran-lang.org";
-    maintainers = [ maintainers.proofconstruction ];
-    license = licenses.mit;
-    platforms = platforms.all;
+    maintainers = [ lib.maintainers.proofconstruction ];
+    license = lib.licenses.mit;
+    platforms = lib.platforms.all;
    mainProgram = "fortran-fpm";
  };
-}
+})
@@ -9,17 +9,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "fselect";
-  version = "0.8.9";
+  version = "0.8.10";

  src = fetchFromGitHub {
    owner = "jhspetersson";
    repo = "fselect";
    rev = version;
-    sha256 = "sha256-oZnA033/gKg5qppEvP+miNTTTwDpOlhUz8OOnKt5cx0=";
+    sha256 = "sha256-9JSyPNXiBMwPxhVWL5M6o/nnzDJv5MmWYqC1veinZuI=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-4NpyHcTJhLO0xeva/qcKE5WiS15hHvQ9HO8ENgplfvo=";
+  cargoHash = "sha256-cRF/drfdmUccb9Y/RKB3Bs748Y5dJUCgsFJxklAZB9Q=";

  nativeBuildInputs = [ installShellFiles ];
  buildInputs = lib.optional stdenv.hostPlatform.isDarwin libiconv;
@@ -17,10 +17,18 @@ python3Packages.buildPythonApplication rec {
    hash = "sha256-JAUDAYf9CH/BxwV88ziF5Zy+3ibcbieEfHrZpHSU8m0=";
  };

-  build-system = [
-    python3Packages.setuptools
+  pythonRelaxDeps = [
+    "sqlalchemy"
+    "cached-property"
+    "garth"
+    "tqdm"
+    "fitfile"
+    "tcxfile"
+    "idbutils"
  ];

+  build-system = with python3Packages; [ setuptools ];
+
  dependencies = with python3Packages; [
    sqlalchemy
    python-dateutil
@@ -33,15 +41,6 @@ python3Packages.buildPythonApplication rec {
    tornado
  ];

-  pythonRelaxDeps = [
-    "sqlalchemy"
-    "cached-property"
-    "tqdm"
-    "fitfile"
-    "tcxfile"
-    "idbutils"
-  ];
-
  # require data files
  disabledTestPaths = [
    "test/test_activities_db.py"
@@ -64,9 +63,12 @@ python3Packages.buildPythonApplication rec {
    writableTmpDirAsHomeHook
  ];

+  pythonImportsCheck = [ "garmindb" ];
+
  meta = {
    description = "Download and parse data from Garmin Connect or a Garmin watch";
    homepage = "https://github.com/tcgoetz/GarminDB";
+    changelog = "https://github.com/tcgoetz/GarminDB/releases/tag/${src.tag}";
    license = lib.licenses.gpl2Only;
    platforms = lib.platforms.unix;
    maintainers = with lib.maintainers; [ ethancedwards8 ];
@@ -5,13 +5,13 @@
 }:
 buildGoModule rec {
  pname = "gci";
-  version = "0.13.5";
+  version = "0.13.6";

  src = fetchFromGitHub {
    owner = "daixiang0";
    repo = pname;
    rev = "v${version}";
-    sha256 = "sha256-jtDqaUko0So/VwY3NF5NyPFu1jxt4nIbUkJxILc+iTs=";
+    sha256 = "sha256-BlR7lQnp9WMjSN5IJOK2HIKXIAkn5Pemf8qbMm83+/w=";
  };

  vendorHash = "sha256-/8fggERlHySyimrGOHkDERbCPZJWqojycaifNPF6MjE=";
@@ -5,14 +5,14 @@
  appimageTools,
 }:
 let
-  version = "5.5.225";
+  version = "5.5.226";
  pname = "gdevelop";

  src =
    if stdenv.hostPlatform.system == "x86_64-linux" then
      fetchurl {
        url = "https://github.com/4ian/GDevelop/releases/download/v${version}/GDevelop-5-${version}.AppImage";
-        sha256 = "sha256-ACNmO5hYfLEaJV6wntH4PZoHcB2T/+WFe2E5Ir/5c4U=";
+        sha256 = "sha256-58P/9QZOpk327gPM/gDLSchmuXpOR5kBf7U8xksFWUQ=";
      }
    else
      throw "${pname}-${version} is not supported on ${stdenv.hostPlatform.system}";
@@ -140,6 +140,10 @@ python3Packages.buildPythonApplication rec {
      # '...2-macosx_14_0_arm64.whl'
      "test_macos_archflags"
      "test_macos_max_compat"
+
+      # https://github.com/pypa/hatch/issues/1942
+      "test_features"
+      "test_sync_dynamic_dependencies"
    ]
    ++ lib.optionals stdenv.hostPlatform.isAarch64 [ "test_resolve" ];

@@ -6,10 +6,10 @@
 }:
 let
  pname = "hydralauncher";
-  version = "3.3.0";
+  version = "3.3.1";
  src = fetchurl {
    url = "https://github.com/hydralauncher/hydra/releases/download/v${version}/hydralauncher-${version}.AppImage";
-    hash = "sha256-5F/RcsRKMAMfXaPOmEkqTrJ4Zgp0+sQ36kPj0p5VUa0=";
+    hash = "sha256-CscQnbMCK+dAWQacKIRwHl1Dqpau5+EyuH1pZhLrJ/Q=";
  };

  appimageContents = appimageTools.extractType2 { inherit pname src version; };
@@ -15,14 +15,14 @@

 stdenv.mkDerivation rec {
  pname = "iio-sensor-proxy";
-  version = "3.6";
+  version = "3.7";

  src = fetchFromGitLab {
    domain = "gitlab.freedesktop.org";
    owner = "hadess";
    repo = "iio-sensor-proxy";
    rev = version;
-    hash = "sha256-X4vJ9zvMyYY9G7cslHMvXoexV/+39c9KctJBc+Ne114=";
+    hash = "sha256-MAfh6bgh39J5J3rlyPjyCkk5KcfWHMZLytZcBRPHaJE=";
  };

  postPatch = ''
@@ -12,13 +12,13 @@

 stdenv.mkDerivation rec {
  pname = "intel-compute-runtime";
-  version = "24.52.32224.5";
+  version = "25.09.32961.5";

  src = fetchFromGitHub {
    owner = "intel";
    repo = "compute-runtime";
-    rev = version;
-    hash = "sha256-Unoh33bZFsMCqJ2hWEYVEdMF2V/aSIDynThz1pUyM7Q=";
+    tag = version;
+    hash = "sha256-oOafnYq4p0MubgsjV2kdW/pd7s0N5xmUnWVLg2JAIS8=";
  };

  nativeBuildInputs = [
@@ -34,11 +34,11 @@ stdenv.mkDerivation rec {
  ];

  cmakeFlags = [
-    "-DSKIP_UNIT_TESTS=1"
-    "-DIGC_DIR=${intel-graphics-compiler}"
-    "-DOCL_ICD_VENDORDIR=${placeholder "out"}/etc/OpenCL/vendors"
+    (lib.cmakeBool "SKIP_UNIT_TESTS" true)
+    (lib.cmakeFeature "IGC_DIR" (builtins.toString intel-graphics-compiler))
+    (lib.cmakeFeature "OCL_ICD_VENDORDIR" "${placeholder "out"}/etc/OpenCL/vendors")
    # The install script assumes this path is relative to CMAKE_INSTALL_PREFIX
-    "-DCMAKE_INSTALL_LIBDIR=lib"
+    (lib.cmakeFeature "CMAKE_INSTALL_LIBDIR" "lib")
  ];

  outputs = [
@@ -70,7 +70,7 @@ stdenv.mkDerivation rec {
  '';

  meta = with lib; {
-    description = "Intel Graphics Compute Runtime oneAPI Level Zero and  OpenCL, supporting 12th Gen and newer";
+    description = "Intel Graphics Compute Runtime oneAPI Level Zero and OpenCL, supporting 12th Gen and newer";
    mainProgram = "ocloc";
    homepage = "https://github.com/intel/compute-runtime";
    changelog = "https://github.com/intel/compute-runtime/releases/tag/${version}";
@@ -43,14 +43,14 @@

 stdenv.mkDerivation rec {
  pname = "intel-gpu-tools";
-  version = "1.30";
+  version = "2.0";

  src = fetchFromGitLab {
    domain = "gitlab.freedesktop.org";
    owner = "drm";
    repo = "igt-gpu-tools";
    rev = "refs/tags/v${version}";
-    hash = "sha256-lZNDDWfySz7etxzN/28bo9qDE8SxK2vPAAOR3hxSoWY=";
+    hash = "sha256-568sgmP7HhrNv3nwhuokiPk/2qQtzPOC9aCsScKCI8A=";
  };

  nativeBuildInputs = [
@@ -22,24 +22,33 @@ let
  vc_intrinsics_src = fetchFromGitHub {
    owner = "intel";
    repo = "vc-intrinsics";
-    rev = "v0.19.0";
-    hash = "sha256-vOK7xfOR+aDpdGd8oOFLJc1Ct1S5BCJmLN6Ubn5wlkQ=";
+    rev = "v0.22.1";
+    hash = "sha256-dSK+kNEZoF4bBx24S0No9aZLZiHK0U9TR1jRyEBL+2U=";
  };

  inherit (llvmPackages_14) lld llvm;
  inherit (if buildWithPatches then opencl-clang else llvmPackages_14) clang libclang;
  spirv-llvm-translator' = spirv-llvm-translator.override { inherit llvm; };
-in

+  # Handholding the braindead build script
+  # cmake requires an absolute path
+  prebuilds = runCommandLocal "igc-cclang-prebuilds" { } ''
+    mkdir $out
+    ln -s ${clang}/bin/clang $out/
+    ln -s ${opencl-clang}/lib/* $out/
+    ln -s ${lib.getLib libclang}/lib/clang/${lib.getVersion clang}/include/opencl-c.h $out/
+    ln -s ${lib.getLib libclang}/lib/clang/${lib.getVersion clang}/include/opencl-c-base.h $out/
+  '';
+in
 stdenv.mkDerivation rec {
  pname = "intel-graphics-compiler";
-  version = "1.0.17384.11";
+  version = "2.8.3";

  src = fetchFromGitHub {
    owner = "intel";
    repo = "intel-graphics-compiler";
-    rev = "igc-${version}";
-    hash = "sha256-O4uMaPauRv2aMgM2B7XdzCcjI5JghsjX5XbkeloLyck=";
+    tag = "v${version}";
+    hash = "sha256-1YzvzVmMW5s4keQfa7r6xfyVg7RWSdKNgBtdTN6SADg=";
  };

  postPatch = ''
@@ -77,16 +86,6 @@ stdenv.mkDerivation rec {
  # testing is done via intel-compute-runtime
  doCheck = false;

-  # Handholding the braindead build script
-  # cmake requires an absolute path
-  prebuilds = runCommandLocal "igc-cclang-prebuilds" { } ''
-    mkdir $out
-    ln -s ${clang}/bin/clang $out/
-    ln -s ${opencl-clang}/lib/* $out/
-    ln -s ${lib.getLib libclang}/lib/clang/${lib.getVersion clang}/include/opencl-c.h $out/
-    ln -s ${lib.getLib libclang}/lib/clang/${lib.getVersion clang}/include/opencl-c-base.h $out/
-  '';
-
  cmakeFlags = [
    "-DVC_INTRINSICS_SRC=${vc_intrinsics_src}"
    "-DCCLANG_BUILD_PREBUILDS=ON"
@@ -6,11 +6,11 @@
 }:
 python3Packages.buildPythonApplication rec {
  pname = "isisdl";
-  version = "1.3.20";
+  version = "1.3.21";

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-s0vGCJVSa6hf6/sIhzmaxpziP4izoRwcZfxvm//5inY=";
+    hash = "sha256-YyR0A7NqmUcR+hQnQlIgBdU6CxfHtDOjR3q5I21ROCI=";
  };

  pyproject = true;
@@ -2,13 +2,13 @@

 buildGoModule rec {
  pname = "kapp";
-  version = "0.64.0";
+  version = "0.64.1";

  src = fetchFromGitHub {
    owner = "carvel-dev";
    repo = "kapp";
    rev = "v${version}";
-    hash = "sha256-+kSZERC14IimUa6rwG6u6gHWheCPnk840Sowlv3tm8Q=";
+    hash = "sha256-vgb4VtMKYncO4TPlMj2HrgZvjoOsOc2cYy+EBDKnGcM=";
  };

  vendorHash = null;
@@ -15,7 +15,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libwacom";
-  version = "2.14.0";
+  version = "2.15.0";

  outputs = [
    "out"
@@ -26,7 +26,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "linuxwacom";
    repo = "libwacom";
    rev = "libwacom-${finalAttrs.version}";
-    hash = "sha256-tJwLcHXXg4tFk7qKQyt+6dcDo8Qykqjn13MfXMoGvKc=";
+    hash = "sha256-fc7ymkyIJ5BvrPxJg7Vw1h1mBy+icr+5kVDecODxRLQ=";
  };

  postPatch = ''
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "lk-jwt-service";
-  version = "0.2.0";
+  version = "0.2.1";

  src = fetchFromGitHub {
    owner = "element-hq";
    repo = "lk-jwt-service";
    tag = "v${version}";
-    hash = "sha256-dnlcJaGJqhFLrVvyU9hVwrE/r+wxknbnINSIfUDKC7I=";
+    hash = "sha256-R4YqmHp0i+RpJJkENJPZJDNCVg+O+70JMoCR8ZlesyM=";
  };

-  vendorHash = "sha256-AGkwjzdTjfDA8K6ko24QSSxbTQeFGpu9sv5m8ZCmNJI=";
+  vendorHash = "sha256-evzltyQZCBQ4/k641sQrmUvw6yIBWFEic/WUa/WX5xE=";

  meta = with lib; {
    description = "Minimal service to issue LiveKit JWTs for MatrixRTC";
@@ -7,16 +7,16 @@

 buildGo124Module rec {
  pname = "matrix-alertmanager-receiver";
-  version = "2025.3.5";
+  version = "2025.3.19";

  src = fetchFromGitHub {
    owner = "metio";
    repo = "matrix-alertmanager-receiver";
    tag = version;
-    hash = "sha256-psA+tgykqnwB6Y1oQqqEQGNP4wLnEcelHF3dKFqKHtg=";
+    hash = "sha256-uNQU0E2QItXK5VCwFDC4tZZIIECXhas5SMSOTYj9zlo=";
  };

-  vendorHash = "sha256-KsrDnnsLJV5bLVKeC3ytKdBCsEBWEbs9AciUjItwDwo=";
+  vendorHash = "sha256-u1oTutEEYZ79Ne27Tu4S5eDuUIlVamsFR2WR6O+giM8=";

  ldflags = [
    "-s"
@@ -13,13 +13,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "mim-solvers";
-  version = "0.0.5";
+  version = "0.1.0";

  src = fetchFromGitHub {
    owner = "machines-in-motion";
    repo = "mim_solvers";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-XV8EJqCOTYqljZe2PQvnhIaPUOJ+bBjRIoshdeqZycA=";
+    hash = "sha256-jUL/kyXKODpcCURG7e7/qNarvwm4+EnzZRL2Wix5Jbs=";
  };

  # eigenpy is not used without python support
@@ -6,14 +6,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "mud";
-  version = "1.0.11";
+  version = "1.0.12";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "jasursadikov";
    repo = "mud";
    tag = "v${version}";
-    hash = "sha256-HnYBHfburJuA/yRV4Nb8HApi7kfkONh5N9t221GOxMw=";
+    hash = "sha256-fFSnkodYhV1dokCJq43PwXxjIeAkObYZA3VxhjGZlhM=";
  };

  build-system = with python3Packages; [
@@ -35,7 +35,7 @@ python3Packages.buildPythonApplication rec {
    description = "multi-directory git runner which allows you to run git commands in a multiple repositories";
    homepage = "https://github.com/jasursadikov/mud";
    license = lib.licenses.mit;
-    changelog = "https://github.com/jasursadikov/mud/releases/tag/v${version}";
+    changelog = "https://github.com/jasursadikov/mud/releases/tag/${src.tag}";
    maintainers = with lib.maintainers; [ genga898 ];
    mainProgram = "mud";
  };
@@ -7,16 +7,16 @@

 buildGoModule rec {
  pname = "nats-server";
-  version = "2.10.26";
+  version = "2.11.0";

  src = fetchFromGitHub {
    owner = "nats-io";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-jOfS1uHI8sTL7xTyIiK/M7bFFNLTZZ6+Xy5QErBe9VY=";
+    hash = "sha256-9t5DOLZU2VcEBggirf+aLzwzsDBB+uGGXlBkIKP3HkE=";
  };

-  vendorHash = "sha256-9BkcN4XLQPc9Df6m/CssKYxUk1nKJHB5SRPMrsXd+lQ=";
+  vendorHash = "sha256-CvxAP35/hinewnNhrW9urI0J3DI5QfZybbyRbz9Ol4s=";

  doCheck = false;

@@ -15,7 +15,7 @@ python3Packages.buildPythonApplication rec {

  buildInputs = with python3Packages; [ nose2 ];

-  propagatedBuildInputs = with python3Packages; [ configshell ];
+  propagatedBuildInputs = with python3Packages; [ configshell-fb ];

  # This package requires the `nvmet` kernel module to be loaded for tests.
  doCheck = false;
@@ -7,16 +7,16 @@

 buildGoModule rec {
  pname = "omnictl";
-  version = "0.46.3";
+  version = "0.47.1";

  src = fetchFromGitHub {
    owner = "siderolabs";
    repo = "omni";
    rev = "v${version}";
-    hash = "sha256-pVi27A8U3+nDMMmVAV/7HXXXydWFxB8M/PiEJCnqdwo=";
+    hash = "sha256-/hv6YNaBfECFlf1xJCiSeWg+/PqmIa+Rtip6kFuHPCM=";
  };

-  vendorHash = "sha256-5+15d7QcjajZ6yOSQgN4D0Lzy2Bljk0ih/KKG1SGtX8=";
+  vendorHash = "sha256-BQn+3TEaHnJrzDZt3j/sB9Gbh4mQXhqfX0ssu+G+mg0=";

  ldflags = [
    "-s"
@@ -8,16 +8,16 @@

 buildGoModule rec {
  pname = "operator-sdk";
-  version = "1.39.1";
+  version = "1.39.2";

  src = fetchFromGitHub {
    owner = "operator-framework";
    repo = pname;
    tag = "v${version}";
-    hash = "sha256-+lgpwpLkqpAZ0aScM62gk4l/h44auB7ixhW3ZoT7m64=";
+    hash = "sha256-2Kv6mDC1MndUgttRYODnI8DZ84RVz8jn3+RpXmOemq0=";
  };

-  vendorHash = "sha256-3CtVl3HWUcbXp/U/pTqoCol4kmJqtLsTlcAijGHENtI=";
+  vendorHash = "sha256-W+q9K2003dJfcjyoN4YMoY98cwBy+nfZCi3tHNLbm1w=";

  nativeBuildInputs = [
    makeWrapper
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "protoc-gen-twirp_php";
-  version = "0.12.0";
+  version = "0.13.0";

  # fetchFromGitHub currently not possible, because go.mod and go.sum are export-ignored
  src = fetchgit {
    url = "https://github.com/twirphp/twirp.git";
    rev = "v${version}";
-    hash = "sha256-GDDycFWGrNXWdWNjGhb+W6kImF1nqVVH+dJ8VjYQ2MQ=";
+    hash = "sha256-Yn1oR69cHu/Q2HDRGzDNZ7RrTkNcwu4eFIrJFbmdhG0=";
  };

-  vendorHash = "sha256-ErTXIbPKAFm8jBYRPuWSaCFbTS+5MPyto9edixbTR7E=";
+  vendorHash = "sha256-OjOHHXGWFX1K7berkc8vPXegdlr1QFFMPhRd0D5bK00=";

  subPackages = [ "protoc-gen-twirp_php" ];

@@ -30,18 +30,18 @@

 stdenv.mkDerivation (finalAttrs: rec {
  pname = "q2pro";
-  version = "0-unstable-2025-03-08";
+  version = "0-unstable-2025-03-20";

  src = fetchFromGitHub {
    owner = "skullernet";
    repo = "q2pro";
-    rev = "700559cd4669c1e2f899a4eae869395c33dd4933";
-    hash = "sha256-zJYEeVPyppVISjKC0L8zfjfoG0c8TjmSAML4gPryT0A=";
+    rev = "ef4001c596344aea179fc673a07de53fc0ab6a9d";
+    hash = "sha256-PTNxh7UGKT1GZk8Rbub2l6EBLBy+n46AiS4BAyDALX8=";
  };

  # build date and rev number is displayed in the game's console
-  revCount = "3697"; # git rev-list --count ${src.rev}
-  SOURCE_DATE_EPOCH = "1741434552"; # git show -s --format=%ct ${src.rev}
+  revCount = "3724"; # git rev-list --count ${src.rev}
+  SOURCE_DATE_EPOCH = "1742479264"; # git show -s --format=%ct ${src.rev}

  nativeBuildInputs =
    [
@@ -11,13 +11,13 @@

 rustPlatform.buildRustPackage rec {
  pname = "qir-runner";
-  version = "0.7.5";
+  version = "0.7.6";

  src = fetchFromGitHub {
    owner = "qir-alliance";
    repo = "qir-runner";
    tag = "v${version}";
-    hash = "sha256-65ioZ+7Xo4ocpFFVvwtY6Hn1FKuI48hcAfbAjPnSYEs=";
+    hash = "sha256-dvzvLm8omt4Uh/yTisaUcwuom0ZJnV6SwwFfbDNjHvM=";
  };

  nativeBuildInputs = [ llvmPackages_19.llvm ];
@@ -28,7 +28,7 @@ rustPlatform.buildRustPackage rec {
  ];

  useFetchCargoVendor = true;
-  cargoHash = "sha256-ciQ6TFl+LNBVrIwhCdpzbaQz72W7EC5wj85PW29UV0M=";
+  cargoHash = "sha256-11+TV+7JLLvoWQIwgc4owUV4jNZcjD6S1uUwD8xWAEI=";

  meta = {
    description = "QIR bytecode runner to assist with QIR development and validation";
@@ -10,13 +10,13 @@

 buildGoModule rec {
  pname = "remote-touchpad";
-  version = "1.4.8";
+  version = "1.5.0";

  src = fetchFromGitHub {
    owner = "unrud";
    repo = pname;
    rev = "v${version}";
-    sha256 = "sha256-C/qaLEYvIbl0XINsumAFLnsQgy+EDjoX446BJnuE6eQ=";
+    sha256 = "sha256-UZjbU9Ti5+IjcxIf+LDWlcqxb4kMIwa8zHmZDdZbnw8=";
  };

  buildInputs = [
@@ -27,7 +27,7 @@ buildGoModule rec {
  ];
  tags = [ "portal,x11" ];

-  vendorHash = "sha256-bt5KUgNDgWX7CVHvX5c0uYqoxGRDbGbae52+mpnBEZU=";
+  vendorHash = "sha256-4TJ9Nok1P3qze69KvrwFo5sMJ4nDYhDNuApsNlZLWCI=";

  meta = with lib; {
    description = "Control mouse and keyboard from the web browser of a smartphone";
@@ -8,16 +8,16 @@

 buildGoModule rec {
  pname = "rospo";
-  version = "0.13.0";
+  version = "0.14.0";

  src = fetchFromGitHub {
    owner = "ferama";
    repo = "rospo";
    rev = "v${version}";
-    hash = "sha256-+1xrke8dfMkuZZ/imY+1KkeJnZCDtKJpxwAg5ksErnM=";
+    hash = "sha256-H6hZbOnX+1P1Ob5fCROQtV+64NiFD9mO3kiaQY63OBM=";
  };

-  vendorHash = "sha256-MTPFBrLFMQ2hEwtSDb7t3ls/Wagw7s9/w6bwWjZ62vE=";
+  vendorHash = "sha256-KyTDyV27YQDqbEyKSYfbJuTKw2EsZAqWsHhmMncUHUs=";

  ldflags = [
    "-s"
@@ -5,7 +5,7 @@
 }:
 let
  pname = "saucectl";
-  version = "0.193.0";
+  version = "0.194.0";
 in
 buildGoModule {
  inherit pname version;
@@ -14,7 +14,7 @@ buildGoModule {
    owner = "saucelabs";
    repo = "saucectl";
    tag = "v${version}";
-    hash = "sha256-f4OtXjqtqcMIIssXq5UjPX450Ji2objhOcgm82m52V0=";
+    hash = "sha256-Fetm/Qh6v+4UNBvhexf+mQMBBWUvlpisHOoExuqRunk=";
  };

  ldflags = [
@@ -11,13 +11,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "sexpp";
-  version = "0.9.0";
+  version = "0.9.1";

  src = fetchFromGitHub {
    owner = "rnpgp";
    repo = "sexpp";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-mNt6J8nhzT5sF28ktl3jOkQMKn6x9iE04MMrwwVxyZs=";
+    hash = "sha256-T0DZPWGDg8lz9TrouD/T6i7W+Qj1UJzjnMchfTEQdEM=";
  };

  buildInputs = [
@@ -2,16 +2,16 @@

 buildGoModule rec {
  pname = "soft-serve";
-  version = "0.8.2";
+  version = "0.8.4";

  src = fetchFromGitHub {
    owner = "charmbracelet";
    repo = "soft-serve";
    rev = "v${version}";
-    hash = "sha256-eYe+F/1oiAshQeUQhpf8aUtmy1OWUL00F5SH6tV1NO0=";
+    hash = "sha256-pxwSgnT2AV/PFCxwnOPGKXmzBgX6CDOQA6GGdw8xv1Q=";
  };

-  vendorHash = "sha256-DGlenK4CsxhoxtD87KeJYuKG/cpP3MuCCS+7Zlc4WUM=";
+  vendorHash = "sha256-9SbgujUUFVf092F/Gp/F3+Mcpd/SxMQBehw/nxHNWIY=";

  doCheck = false;

@@ -64,7 +64,7 @@ stdenv.mkDerivation rec {
  ];

  propagatedBuildInputs = [
-    python3.pkgs.configshell
+    python3.pkgs.configshell-fb
  ];

  postPatch = ''
@@ -49,9 +49,9 @@ let
      }
    else if llvmMajor == "14" then
      {
-        version = "14.0.0+unstable-2024-07-15";
-        rev = "2823e7052b7999c10fff63bc8089e5aa205716f4";
-        hash = "sha256-8/4B74hYge6WiH7PzRGEgE3W7f9IkQ4VMmfkWKYA/l4=";
+        version = "14.0.0+unstable-2025-01-28";
+        rev = "9df26b6af308cb834a4013deb8094f386f29accd";
+        hash = "sha256-8VRQwXFbLcYgHtWKs73yuTsy2kkCgYgPqD+W/GPy1BM=";
      }
    else if llvmMajor == "11" then
      {
@@ -1,6 +1,7 @@
 {
  stdenv,
  lib,
+  isKde ? false,
  python3Packages,
  fetchFromGitHub,
  copyDesktopItems,
@@ -12,20 +13,23 @@
  libportal-gtk4,
  xdg-desktop-portal,
  xdg-desktop-portal-gtk,
+  kdotool,
 }:
-stdenv.mkDerivation rec {
+let
+  # We have to hardcode revision because upstream often create multiple releases for the same version number.
+  # This is the commit hash that maps to 1.5.0-beta.8 released on 2025-03-12
+  rev = "de11d84afac7873044568606a8468c78d57aceda";
+in
+stdenv.mkDerivation {
  pname = "streamcontroller";

-  version = "1.5.0-beta.7";
-  # We have to hardcode revision because upstream often create multiple releases for the same version number.
-  # This is the commit hash that maps to 1.5.0-beta.7 released on 2024-11-20
-  rev = "45b5bc72f617c5aea306450d6592da66ade53568";
+  version = "1.5.0-beta.8";

  src = fetchFromGitHub {
    repo = "StreamController";
    owner = "StreamController";
    inherit rev;
-    hash = "sha256-tgbqURtqp1KbzOfXo4b4Dp3N8Sg8xcUSTwdEFXq+f6w=";
+    hash = "sha256-pE92/oX9iZYCIhwDkPkjPq/cDUQLUGs+Ou5rjFEIBpo=";
  };

  # The installation method documented upstream
@@ -34,37 +38,48 @@ stdenv.mkDerivation rec {
  # Due to how the code is structured upstream, it's infeasible to use `buildPythonApplication`.

  dontBuild = true;
-  installPhase = ''
-    runHook preInstall
+  installPhase =
+    # Some plugins needs to load things dynamically and in that case we won't find python3 without this
+    let
+      binPath =
+        [
+          python3Packages.python.interpreter
+        ]
+        # Allows automatic detection of windows to switch pages on KDE
+        ++ lib.optional isKde kdotool;
+    in
+    ''
+      runHook preInstall

-    mkdir -p $out/usr/lib/streamcontroller
-    cp -r ./* $out/usr/lib/streamcontroller/
+      mkdir -p $out/usr/lib/streamcontroller
+      cp -r ./* $out/usr/lib/streamcontroller/

-    mkdir -p $out/bin/
+      mkdir -p $out/bin/

-    # Note that the implementation of main.py assumes
-    # working directory to be at the root of the project's source code
-    makeWrapper \
-      ${python3Packages.python.interpreter} \
-      $out/bin/streamcontroller \
-      --add-flags main.py \
-      --chdir $out/usr/lib/streamcontroller \
-      --prefix PYTHONPATH : "$PYTHONPATH"
+      # Note that the implementation of main.py assumes
+      # working directory to be at the root of the project's source code
+      makeWrapper \
+        ${python3Packages.python.interpreter} \
+        $out/bin/streamcontroller \
+        --add-flags main.py \
+        --chdir $out/usr/lib/streamcontroller \
+        --prefix PYTHONPATH : "$PYTHONPATH" \
+        --prefix PATH : "$PATH:${lib.makeBinPath binPath}"

-    mkdir -p "$out/etc/udev/rules.d"
-    cp ./udev.rules $out/etc/udev/rules.d/70-streamcontroller.rules
+      mkdir -p "$out/etc/udev/rules.d"
+      cp ./udev.rules $out/etc/udev/rules.d/70-streamcontroller.rules

-    install -D ./flatpak/icon_256.png $out/share/icons/hicolor/256x256/apps/streamcontroller.png
+      install -D ./flatpak/icon_256.png $out/share/icons/hicolor/256x256/apps/com.core447.StreamController.png

-    runHook postInstall
-  '';
+      runHook postInstall
+    '';

  desktopItems = [
    (makeDesktopItem {
      name = "StreamController";
      desktopName = "StreamController";
      exec = "streamcontroller";
-      icon = "streamcontroller";
+      icon = "com.core447.StreamController";
      comment = "Control your Elgato Stream Decks";
      categories = [ "Utility" ];
    })
@@ -1,6 +1,6 @@
 {
  lib,
-  python3,
+  python3Packages,
  fetchFromGitHub,
  nixosTests,
  wrapGAppsNoGuiHook,
@@ -8,26 +8,32 @@
  glib,
 }:

-python3.pkgs.buildPythonApplication rec {
-  pname = "targetcli";
-  version = "2.1.58";
+python3Packages.buildPythonApplication rec {
+  pname = "targetcli-fb";
+  version = "3.0.1";
+  pyproject = true;

  src = fetchFromGitHub {
    owner = "open-iscsi";
-    repo = "${pname}-fb";
-    rev = "v${version}";
-    hash = "sha256-9QYo7jGk9iWr26j0qPQCqYsJ+vLXAsO4Xs7+7VT9/yc=";
+    repo = "targetcli-fb";
+    tag = "v${version}";
+    hash = "sha256-jRujBgUdeJY8ekVBDscitajDhYohlx/BS4wn+jFkZSg=";
  };

+  build-system = with python3Packages; [
+    hatch-vcs
+    hatchling
+  ];
+
  nativeBuildInputs = [
    wrapGAppsNoGuiHook
    gobject-introspection
  ];
  buildInputs = [ glib ];

-  propagatedBuildInputs = with python3.pkgs; [
-    configshell
-    rtslib
+  dependencies = with python3Packages; [
+    configshell-fb
+    rtslib-fb
    pygobject3
  ];

@@ -40,11 +46,13 @@ python3.pkgs.buildPythonApplication rec {
    inherit (nixosTests) iscsi-root;
  };

-  meta = with lib; {
+  meta = {
    description = "Command shell for managing the Linux LIO kernel target";
    homepage = "https://github.com/open-iscsi/targetcli-fb";
-    license = licenses.asl20;
+    changelog = "https://github.com/open-iscsi/targetcli-fb/releases/tag/v${version}";
+    license = lib.licenses.asl20;
    maintainers = [ ];
-    platforms = platforms.linux;
+    platforms = lib.platforms.linux;
+    mainProgram = "targetcli";
  };
 }
@@ -8,17 +8,17 @@
 }:
 rustPlatform.buildRustPackage rec {
  pname = "television";
-  version = "0.10.9";
+  version = "0.11.2";

  src = fetchFromGitHub {
    owner = "alexpasmantier";
    repo = "television";
    tag = version;
-    hash = "sha256-R46r3S7zaogyVpdLGFIU1l6UDnRQ1lMZvd4RA6iq+qI=";
+    hash = "sha256-4iS11aBUxtEaWyfdIppdpGs5n8EzgOPEvpZsN+hXhfo=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-teUJyLTUiSIbsMVOTj8/wBIimZOMDPQ/h6OryRsTJQ0=";
+  cargoHash = "sha256-KOvTCMdj6xtKZjqKHxPjts4dE3/TAUbUqv6ew8CYKPY=";

  passthru = {
    tests.version = testers.testVersion {
@@ -1,6 +1,7 @@
 {
  lib,
  fetchFromGitHub,
+  nix-update-script,
  rustPlatform,
 }:
 rustPlatform.buildRustPackage rec {
@@ -10,19 +11,21 @@ rustPlatform.buildRustPackage rec {
  src = fetchFromGitHub {
    owner = "chevdor";
    repo = "tera-cli";
-    rev = "v${version}";
+    tag = "v${version}";
    hash = "sha256-TN3zkxZC0Y9lev2wmvzwyLU+t4rNwut/dQILIA7+qbw=";
  };

  useFetchCargoVendor = true;
  cargoHash = "sha256-+qf/MlifpVXzDpADJoTqxU40wDntcPu+bW7eq6/iubk=";

-  meta = with lib; {
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
    description = "Command line utility to render templates from json|toml|yaml and ENV, using the tera templating engine";
    homepage = "https://github.com/chevdor/tera-cli";
-    license = licenses.mit;
-    maintainers = with maintainers; [ _365tuwe ];
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers._365tuwe ];
    mainProgram = "tera";
-    platforms = platforms.linux;
+    platforms = lib.platforms.unix;
  };
 }
@@ -6,13 +6,13 @@

 buildGoModule rec {
  pname = "tgpt";
-  version = "2.9.1";
+  version = "2.9.2";

  src = fetchFromGitHub {
    owner = "aandrew-me";
    repo = "tgpt";
    tag = "v${version}";
-    hash = "sha256-6kJwJedFnALP4hpoaQ5DR/zN1KijgwFpYSBb1o+XCHw=";
+    hash = "sha256-LE6wwGEsqI/wfD21FiLpEo5fc7V0uGkN+hUPeAXCOZE=";
  };

  vendorHash = "sha256-hPbvzhYHOxytQs3NkSVaZhFH0TbOlr4U/QiH+vemTrc=";
@@ -6,16 +6,16 @@

 buildGoModule rec {
  pname = "traefik-certs-dumper";
-  version = "2.9.3";
+  version = "2.10.0";

  src = fetchFromGitHub {
    owner = "ldez";
    repo = pname;
    rev = "v${version}";
-    sha256 = "sha256-krJ2oPz72mqlmJxQTZaFbyDtUaprRLJGZMSS7ZuvPfA=";
+    sha256 = "sha256-zXbtabh5ZziELZHzvYisXETPUmhHAVo6sMuF4O3crBY=";
  };

-  vendorHash = "sha256-CmqeIQk7lAENMDNWAG7XylnXRXvgyRN5GMt0ilwJX0U=";
+  vendorHash = "sha256-WpYxI+7qBYibojPtYlWmDrmJYlRlVwTaqCMI5Vzh1RI=";
  excludedPackages = "integrationtest";

  meta = with lib; {
@@ -15,19 +15,19 @@
  zlib,
 }:

-rustPlatform.buildRustPackage rec {
+rustPlatform.buildRustPackage (finalAttrs: {
  pname = "turbo-unwrapped";
-  version = "2.4.2";
+  version = "2.4.5-canary.4";

  src = fetchFromGitHub {
    owner = "vercel";
-    repo = "turbo";
-    tag = "v${version}";
-    hash = "sha256-wXQY9W15J7+Plv3IvB8XaZd+Hn0TP2qDOB36bPJwfpY=";
+    repo = "turborepo";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-tQ/Xocpk48eRhCyfRZx2rkAVqNn115rO3MRYF5fC2nI=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-L56ubw2tQ3y2KBbbnUdnS9xZzQNMDKdCzKC0n12yl6o=";
+  cargoHash = "sha256-pngzlmkntTCv5/aw1UNbDGNQOVtMgFZHc2woj6R0vys=";

  nativeBuildInputs =
    [
@@ -63,7 +63,7 @@ rustPlatform.buildRustPackage rec {
    updateScript = nix-update-script {
      extraArgs = [
        "--version-regex"
-        "'v(\\d+\\.\\d+\\.\\d+)'"
+        "v(\\d+\\.\\d+\\.\\d+)$"
      ];
    };
  };
@@ -71,7 +71,7 @@ rustPlatform.buildRustPackage rec {
  meta = {
    description = "High-performance build system for JavaScript and TypeScript codebases";
    homepage = "https://turbo.build/";
-    changelog = "https://github.com/vercel/turbo/releases/tag/v${version}";
+    changelog = "https://github.com/vercel/turborepo/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [
      dlip
@@ -79,4 +79,4 @@ rustPlatform.buildRustPackage rec {
    ];
    mainProgram = "turbo";
  };
-}
+})
@@ -1,17 +1,17 @@
-{ lib, fetchFromGitHub, buildGo123Module }:
+{ lib, fetchFromGitHub, buildGoModule }:

-buildGo123Module rec {
+buildGoModule rec {
  pname = "webdav";
-  version = "5.7.3";
+  version = "5.7.4";

  src = fetchFromGitHub {
    owner = "hacdias";
    repo = "webdav";
    tag = "v${version}";
-    hash = "sha256-f/EYuaLuF9HuoC2S4JHjtgau2ZmOocRIAtxXqnUpUE8=";
+    hash = "sha256-f4Z5DiwrcF18ZSfDeSf1kwQIRmVNK4K5WrkQJYfquIs=";
  };

-  vendorHash = "sha256-x5CUy46c4SunzMw/v2DWpdahuXFZnJdGInQ0lSho/es=";
+  vendorHash = "sha256-8M25/Pfu175CYsO+bvLN5wxT7OciUUt7iQV0BkezTVw=";

  __darwinAllowLocalNetworking = true;

@@ -16,13 +16,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "xdg-desktop-portal-gtk";
-  version = "1.15.2";
+  version = "1.15.3";

  src = fetchFromGitHub {
    owner = "flatpak";
    repo = "xdg-desktop-portal-gtk";
    rev = finalAttrs.version;
-    sha256 = "sha256-L9kt3HAoEezYARH5JekyXhxf9Xkbzy1U2srXD7Yg/a8=";
+    sha256 = "sha256-aeSm6Wd0EMaZb7tYpnKT/QBt9l/fVyQLgvn5aBqQOAc=";
  };

  nativeBuildInputs = [
@@ -13,13 +13,13 @@

 rustPlatform.buildRustPackage rec {
  pname = "youki";
-  version = "0.5.2";
+  version = "0.5.3";

  src = fetchFromGitHub {
    owner = "containers";
    repo = "youki";
    rev = "v${version}";
-    hash = "sha256-w8NCAjOLkb2vJYgtB5gAqvtNGnD/1TRc3KmoEygJNbQ=";
+    hash = "sha256-SFU7v5pefQkh751Ato4xkPqiEc/3++9hpwyNJjXwqMA=";
  };

  nativeBuildInputs = [
@@ -54,7 +54,7 @@ rustPlatform.buildRustPackage rec {
  ];

  useFetchCargoVendor = true;
-  cargoHash = "sha256-eSAXx/OKwIb1v684TNhVym5CM8tlkJzAFxT+1NCY7Yw=";
+  cargoHash = "sha256-nRlvvr73glmpFsWb2Pi1icZl7d85/8iX2rHnNXv4ep8=";

  meta = with lib; {
    description = "Container runtime written in Rust";
@@ -5,17 +5,17 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "zeekstd";
-  version = "0.2.2";
+  version = "0.2.3";

  src = fetchFromGitHub {
    owner = "rorosen";
    repo = "zeekstd";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Blyp5GpnytB3S4k6lp2fAwXueaUtXqPW+WLEmFNPZc0=";
+    hash = "sha256-URQ8UiCy8qnm0VM55BqPgIthR4AIyRk+fgowAFxvXwM=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-bbl0zHxd2HYkctX029mtxDciC2tnPVTlHxYyetmtuw0=";
+  cargoHash = "sha256-lS4RQuwvY6bRpsev7RI3XWBPbrdek5im/rkzP+Cmgpc=";

  meta = {
    description = "CLI tool that works with the zstd seekable format";
@@ -6,18 +6,21 @@
 }:

 let
+
+  hashes = lib.importJSON ./hashes.json;
+
  maple-font =
    {
      pname,
-      sha256,
+      hash,
      desc,
    }:
    stdenv.mkDerivation rec {
      inherit pname;
-      version = "6.4";
+      version = "7.0";
      src = fetchurl {
        url = "https://github.com/subframe7536/Maple-font/releases/download/v${version}/${pname}.zip";
-        inherit sha256;
+        inherit hash;
      };

      # Work around the "unpacker appears to have produced no directories"
@@ -41,41 +44,105 @@ let
      };
    };

+  typeVariants = {
+    truetype = {
+      suffix = "TTF";
+      desc = "monospace TrueType";
+    };
+
+    truetype-autohint = {
+      suffix = "TTF-AutoHint";
+      desc = "monospace ttf autohint";
+    };
+
+    variable = {
+      suffix = "Variable";
+      desc = "monospace variable";
+    };
+
+    woff2 = {
+      suffix = "Woff2";
+      desc = "WOFF2.0";
+    };
+
+    opentype = {
+      suffix = "OTF";
+      desc = "OpenType";
+    };
+
+    NF = {
+      suffix = "NF";
+      desc = "Nerd Font";
+    };
+
+    NF-unhinted = {
+      suffix = "NF-unhinted";
+      desc = "Nerd Font unhinted";
+    };
+
+    CN = {
+      suffix = "CN";
+      desc = "monospace CN";
+    };
+
+    CN-unhinted = {
+      suffix = "CN-unhinted";
+      desc = "monospace CN unhinted";
+    };
+
+    NF-CN = {
+      suffix = "NF-CN";
+      desc = "Nerd Font CN";
+    };
+
+    NF-CN-unhinted = {
+      suffix = "NF-CN-unhinted";
+      desc = "Nerd Font CN unhinted";
+    };
+  };
+
+  ligatureVariants = {
+    No-Ligature = {
+      suffix = "NL";
+      desc = "No Ligature";
+    };
+    Normal-Ligature = {
+      suffix = "Normal";
+      desc = "Normal Ligature";
+    };
+    Normal-No-Ligature = {
+      suffix = "NormalNL";
+      desc = "Normal No Ligature";
+    };
+  };
+
+  combinedFonts =
+    lib.concatMapAttrs (
+      ligName: ligVariant:
+      lib.concatMapAttrs (
+        typeName: typeVariant:
+        let
+          pname = "MapleMono${ligVariant.suffix}-${typeVariant.suffix}";
+        in
+        {
+          "${ligVariant.suffix}-${typeVariant.suffix}" = maple-font {
+            inherit pname;
+            desc = "${ligVariant.desc} ${typeVariant.desc}";
+            hash = hashes.${pname};
+          };
+        }
+      ) typeVariants
+    ) ligatureVariants
+    // lib.mapAttrs (
+      _: value:
+      let
+        pname = "MapleMono-${value.suffix}";
+      in
+      maple-font {
+        inherit pname;
+        inherit (value) desc;
+        hash = hashes.${pname};
+      }
+    ) typeVariants;
 in
-{
-  Mono = maple-font {
-    pname = "MapleMono-ttf";
-    sha256 = "sha256-a06JLIP5aVb9SeEz6kw+LqKy0ydCgaUlPDFWA2Y0G8Q=";
-    desc = "monospace TrueType";
-  };
-
-  NF = maple-font {
-    pname = "MapleMono-NF";
-    sha256 = "sha256-fy+hdUYZDW5nkMVirhkmys3tIkWezPDrlpNxnRMl4WU=";
-    desc = "Nerd Font";
-  };
-
-  SC-NF = maple-font {
-    pname = "MapleMono-SC-NF";
-    sha256 = "sha256-SbXWkrpLJUrq+Jt1h3GBP9md5TbYpPchdiR0oEDMAgY=";
-    desc = "Nerd Font SC";
-  };
-
-  opentype = maple-font {
-    pname = "MapleMono-otf";
-    sha256 = "sha256-fwfFlNbaWXFCjcno7NK3dZqAzsHLh9rdGkSq26xc9qw=";
-    desc = "OpenType";
-  };
-
-  woff2 = maple-font {
-    pname = "MapleMono-woff2";
-    sha256 = "sha256-4akpZGGth4yZjI5wjO3ZXrXcWNxb7/6YChU7T5fNVKs=";
-    desc = "WOFF2.0";
-  };
-
-  autohint = maple-font {
-    pname = "MapleMono-ttf-autohint";
-    sha256 = "sha256-rSYIC42Bt+KFgxhwRhXS4sbh4etKYkCOo5nP2J2BHt4=";
-    desc = "ttf autohint";
-  };
-}
+combinedFonts
@@ -0,0 +1,46 @@
+{
+  "MapleMono-CN-unhinted": "sha256-L2EasFES9EYmNtOs/CKwqqQNzkxAZgoBT8qN1dWipBc=",
+  "MapleMono-CN": "sha256-vQkZD1wa/pzAZR8b9krfApGCUS+ARkZNvhqJ/ZGpnLs=",
+  "MapleMono-NF-CN-unhinted": "sha256-x7ZnObDkGMR4nPpMbBfRfE6M4o19rZgApQeG69P6TZg=",
+  "MapleMono-NF-CN": "sha256-IUBHSBIW//vWwlumefFW48eSULJmY9e8F9Ymhbt/KU0=",
+  "MapleMono-NF-unhinted": "sha256-5P42BHDnIv4ZN4rDtEWFCWEc+NfPd0qHT2VOW2Jhn+Q=",
+  "MapleMono-NF": "sha256-HgZkIrEV5zmRhBvAI4/uT+nfUhDaD0H81upTXfJNhaA=",
+  "MapleMono-OTF": "sha256-4zPKejWZS52bhw0FLJX69kMr8kbv6P5l5cQ8orYcT5o=",
+  "MapleMono-TTF-AutoHint": "sha256-Xa7cSDXKby0UILmxj96xbD6ZhDDwBee9lymOx7FPmoE=",
+  "MapleMono-TTF": "sha256-FglonkbnphiwmxGj7Z0ozfHMwpJj7+96g6WMtMe3rIo=",
+  "MapleMono-Variable": "sha256-EILfODQ8DJiyTwgmTogwcNlz+YBIdmlk/mnfFZ4Eme8=",
+  "MapleMono-Woff2": "sha256-S7lWI+Xr7LxdFvjnngktx5uaixEVlxdLUDKMmFlARCk=",
+  "MapleMonoNL-CN-unhinted": "sha256-0wKF/0hUj45aApnHbp0jQqPtw8YcIsvE88HFob0U8n0=",
+  "MapleMonoNL-CN": "sha256-JUCHV2TkDTFxpZXibLq8/ENyn7KER5AqT5Yx4tK6eW8=",
+  "MapleMonoNL-NF-CN-unhinted": "sha256-t7pOo8YsewYR31AB2J4BIZU+JW3Qp770Esbpy38Y2Ts=",
+  "MapleMonoNL-NF-CN": "sha256-S9a8qXpebYMmJmSr+JG945GYuucQC5bbURf3h0jwH40=",
+  "MapleMonoNL-NF-unhinted": "sha256-j2M6kLSALRzdOl8vyMsX+4wvGVcVDYvlYRLuX1XYhic=",
+  "MapleMonoNL-NF": "sha256-k+FsBxlZheaAzJFdpdKtr4NUTnSue6GNgNa/U5B6dPI=",
+  "MapleMonoNL-OTF": "sha256-TV+6rZ3MNabt+1n33UeElP2zcGktYIYOos3dF4XlQaM=",
+  "MapleMonoNL-TTF-AutoHint": "sha256-VD4d0BdUzRiAUao9sGJKIeLkD3AAuhfJoIdrvdJPP0s=",
+  "MapleMonoNL-TTF": "sha256-bbJxcIYarftrinBO9rLAqUz3jLoWzkcZ+qZCmLeko8U=",
+  "MapleMonoNL-Variable": "sha256-+6WgaUddD2LSYsaVajpYNw+ypuQI27stjc6hPnQtHrw=",
+  "MapleMonoNL-Woff2": "sha256-bbMqjLHRI0aMTa7pxMvRU2RsiE97e3pavkJuMfVXctA=",
+  "MapleMonoNormal-CN-unhinted": "sha256-Ew/7KwKPWluFtYRDD/0hg26tQCVKYCIUTNqClYndVfI=",
+  "MapleMonoNormal-CN": "sha256-ODTWB+9nTMmgEaqlv1/Fq4GABh45CLTA0HKWHM9G9Aw=",
+  "MapleMonoNormal-NF-CN-unhinted": "sha256-vOlFwb0a97ydJPR7YeEJqnmTjK9pKE2O6szGGQJHShQ=",
+  "MapleMonoNormal-NF-CN": "sha256-5Jk/Fqd7pMuDghhaFvIegPJqK21iMJuN/nJt9y5hebc=",
+  "MapleMonoNormal-NF-unhinted": "sha256-9FhbDhBnGEFwX2YE2GEeyteIWA5z3b4VJwURTWsWf3k=",
+  "MapleMonoNormal-NF": "sha256-SMntZ0XVRsdLocSd9BsN3/ORmkUi8XgTSicULqEG0po=",
+  "MapleMonoNormal-OTF": "sha256-flHGOMuURNehlLw0JzbIPNLXNb7B7g8YXl8PoN/Wqt0=",
+  "MapleMonoNormal-TTF-AutoHint": "sha256-/giwB5H0FQ8NTYViqz81Bed+uWuOL9ipH+CKS1p34vU=",
+  "MapleMonoNormal-TTF": "sha256-vL6fRwEP2GSORBrOGvEgSA+fxjrZyYmpbNeuIMpVvYM=",
+  "MapleMonoNormal-Variable": "sha256-S/76i2fj1e+KAxQlAjngGDmOMx8t6Y7Zn8487zJJJXw=",
+  "MapleMonoNormal-Woff2": "sha256-gsyUKyibV5q0llNi0Inwqk/ZOEEF+pH1ZCf9sMadkc8=",
+  "MapleMonoNormalNL-CN-unhinted": "sha256-ht/MwZcc2RvEzZ1mpqCMkfU6J6OD8F4V4lMlrsuo1/E=",
+  "MapleMonoNormalNL-CN": "sha256-pGxsKUFSO5hzOPWW0rgYG8fpgunmPkswnZ8a+C5A+TM=",
+  "MapleMonoNormalNL-NF-CN-unhinted": "sha256-N+JSUc8reu2Sile2ivHu325zzg7MFKJBzbggUg4orZA=",
+  "MapleMonoNormalNL-NF-CN": "sha256-li/xPAHJIFtWDEK1TttQuOjZ7OJqXk+dncHFpwsh3FY=",
+  "MapleMonoNormalNL-NF-unhinted": "sha256-xBRiZaXswGy+DcT3h2m8nCxZBjLgq/5eX6ST4496hw0=",
+  "MapleMonoNormalNL-NF": "sha256-j8Li+I/NgdNSwTAY31YbBJFTc2IXffyqQnv/KVfBeMU=",
+  "MapleMonoNormalNL-OTF": "sha256-+exfPalJXhHScVArcdwLVde5JhxPAyxyebQAE2yBkos=",
+  "MapleMonoNormalNL-TTF-AutoHint": "sha256-Cdo0FhIIp7c+OIlz7D66G8xsBk0JaNq9vn6GugUJiZM=",
+  "MapleMonoNormalNL-TTF": "sha256-xbp1ZhbYysHHOKkoUyu0Tv76/jDqCbo2U6fzHiFPt50=",
+  "MapleMonoNormalNL-Variable": "sha256-mQdYcLT/30kJjPGm4j2pZXrJ8EuiY7M/gsQuI+i1Y3A=",
+  "MapleMonoNormalNL-Woff2": "sha256-WQp+/sKQg/QHYeeFP5k9IPPcQJKGULlmCyrAOUOvfmk="
+}
@@ -0,0 +1,60 @@
+import re
+import json
+import base64
+import argparse
+import requests
+from urllib.parse import urlparse
+
+def process_github_release(url, token=None):
+    parsed = urlparse(url)
+    path_parts = parsed.path.strip('/').split('/')
+    if len(path_parts) < 5 or parsed.netloc != 'github.com':
+        raise ValueError("Invalid GitHub release URL format")
+    owner, repo, _, _, tag = path_parts[:5]
+    headers = {"Accept": "application/vnd.github.v3+json"}
+    if token:
+        headers["Authorization"] = f"Bearer {token}"
+    response = requests.get(
+        f"https://api.github.com/repos/{owner}/{repo}/releases/tags/{tag}",
+        headers=headers
+    )
+    if response.status_code != 200:
+        raise RuntimeError(f"Failed to fetch release info: {response.status_code} ({response.json().get('message')})")
+    release_data = response.json()
+    assets = release_data.get('assets', [])
+    result = {}
+    sha256_pattern = re.compile(r"^[a-fA-F0-9]{64}$")
+    for asset in assets:
+        if not asset['name'].endswith('.sha256'):
+            continue
+        download_url = asset['browser_download_url']
+        content_response = requests.get(download_url, headers=headers)
+        if content_response.status_code != 200:
+            raise RuntimeError(
+                f"Failed to download {asset['name']}: "
+                f"{content_response.status_code} {content_response.text}"
+            )
+        hex_hash = content_response.text.strip()
+        if not sha256_pattern.match(hex_hash):
+            raise ValueError(f"Invalid SHA256 format in {asset['name']}")
+        try:
+            byte_data = bytes.fromhex(hex_hash)
+            base64_hash = base64.b64encode(byte_data).decode('utf-8')
+        except Exception as e:
+            raise RuntimeError(f"Error processing {asset['name']}: {str(e)}")
+        filename = asset['name'][:-7]
+        result[filename] = f"sha256-{base64_hash}"
+    output_file = f"{repo}_{tag}_hashes.json"
+    with open(output_file, 'w', encoding='utf-8') as f:
+        json.dump(result, f, indent=2, ensure_ascii=False)
+    print(f"Successfully generated {output_file}")
+if __name__ == "__main__":
+    parser = argparse.ArgumentParser(description='Process GitHub release hashes')
+    parser.add_argument('url', help='GitHub release URL')
+    parser.add_argument('-t', '--token', help='GitHub API token (optional)')
+    args = parser.parse_args()
+    try:
+        process_github_release(args.url, args.token)
+    except Exception as e:
+        print(f"Error: {str(e)}")
+        sys.exit(1)
@@ -61,6 +61,7 @@ stdenv.mkDerivation rec {
    "-DLLVM_ENABLE_DUMP=ON"
    "-DLLVM_TABLEGEN_EXE=${buildLlvmTools.tblgen}/bin/llvm-tblgen"
    "-DMLIR_TABLEGEN_EXE=${buildLlvmTools.tblgen}/bin/mlir-tblgen"
+    (lib.cmakeBool "LLVM_BUILD_LLVM_DYLIB" (!stdenv.hostPlatform.isStatic))
  ] ++ lib.optionals stdenv.hostPlatform.isStatic [
    # Disables building of shared libs, -fPIC is still injected by cc-wrapper
    "-DLLVM_ENABLE_PIC=OFF"
@@ -4,17 +4,30 @@
  fetchFromGitHub,
  cmake,
  addDriverRunpath,
+  autoAddDriverRunpath,
  cudatoolkit,
  cutensor,
+  cusparselt,
+  cudaPackages,
+  setupCudaHook,
+  autoPatchelfHook,
 }:

 let
-  rev = "5aab680905d853bce0dbad4c488e4f7e9f7b2302";
+  inherit (cudaPackages)
+    cuda_cccl
+    cuda_cudart
+    cuda_nvcc
+    libcusparse
+    cudaAtLeast
+    cudaOlder
+    ;
+  rev = "e57b9c483c5384b7b97b7d129457e5a9bdcdb5e1";
  src = fetchFromGitHub {
    owner = "NVIDIA";
    repo = "CUDALibrarySamples";
    inherit rev;
-    sha256 = "0gwgbkq05ygrfgg5hk07lmap7n7ampxv0ha1axrv8qb748ph81xs";
+    sha256 = "0g17afsmb8am0darxchqgjz1lmkaihmnn7k1x4ahg5gllcmw8k3l";
  };
  commonAttrs = {
    version = lib.strings.substring 0 7 rev + "-" + lib.versions.majorMinor cudatoolkit.version;
@@ -83,4 +96,50 @@ in
      CUTENSOR_ROOT = cutensor;
    }
  );
+
+  cusparselt = backendStdenv.mkDerivation (
+    commonAttrs
+    // {
+      pname = "cuda-library-samples-cusparselt";
+
+      src = "${src}/cuSPARSELt";
+
+      sourceRoot = "cuSPARSELt/matmul";
+
+      buildInputs = lib.optionals (cudaOlder "11.4") [ cudatoolkit ];
+
+      nativeBuildInputs =
+        [
+          cmake
+          addDriverRunpath
+          (lib.getDev cusparselt)
+          (lib.getDev libcusparse)
+        ]
+        ++ lib.optionals (cudaOlder "11.4") [ cudatoolkit ]
+        ++ lib.optionals (cudaAtLeast "11.4") [
+          cuda_nvcc
+          (lib.getDev cuda_cudart) # <cuda_runtime_api.h>
+        ]
+        ++ lib.optionals (cudaAtLeast "12.0") [
+          cuda_cccl # <nv/target>
+        ];
+
+      postPatch = ''
+        substituteInPlace CMakeLists.txt \
+          --replace-fail "''${CUSPARSELT_ROOT}/lib64/libcusparseLt.so" "${lib.getLib cusparselt}/lib/libcusparseLt.so" \
+          --replace-fail "''${CUSPARSELT_ROOT}/lib64/libcusparseLt_static.a" "${lib.getStatic cusparselt}/lib/libcusparseLt_static.a"
+      '';
+
+      installPhase = ''
+        runHook preInstall
+        mkdir -p $out/bin
+        cp matmul_example $out/bin/
+        cp matmul_example_static $out/bin/
+        runHook postInstall
+      '';
+
+      CUDA_TOOLKIT_PATH = lib.getLib cudatoolkit;
+      CUSPARSELT_PATH = lib.getLib cusparselt;
+    }
+  );
 }
@@ -0,0 +1,144 @@
+# Support matrix can be found at
+# https://docs.nvidia.com/deeplearning/cudnn/archives/cudnn-880/support-matrix/index.html
+{
+  lib,
+  stdenv,
+  cudaVersion,
+  flags,
+  mkVersionedPackageName,
+}:
+let
+  inherit (lib)
+    attrsets
+    lists
+    modules
+    versions
+    strings
+    trivial
+    ;
+
+  inherit (stdenv) hostPlatform;
+
+  redistName = "cusparselt";
+  pname = "libcusparse_lt";
+
+  cusparseltVersions = [
+    "0.7.1"
+  ];
+
+  # Manifests :: { redistrib, feature }
+
+  # Each release of cusparselt gets mapped to an evaluated module for that release.
+  # From there, we can get the min/max CUDA versions supported by that release.
+  # listOfManifests :: List Manifests
+  listOfManifests =
+    let
+      configEvaluator =
+        fullCusparseltVersion:
+        modules.evalModules {
+          modules = [
+            ../modules
+            # We need to nest the manifests in a config.cusparselt.manifests attribute so the
+            # module system can evaluate them.
+            {
+              cusparselt.manifests = {
+                redistrib = trivial.importJSON (./manifests + "/redistrib_${fullCusparseltVersion}.json");
+                feature = trivial.importJSON (./manifests + "/feature_${fullCusparseltVersion}.json");
+              };
+            }
+          ];
+        };
+      # Un-nest the manifests attribute set.
+      releaseGrabber = evaluatedModules: evaluatedModules.config.cusparselt.manifests;
+    in
+    lists.map (trivial.flip trivial.pipe [
+      configEvaluator
+      releaseGrabber
+    ]) cusparseltVersions;
+
+  # Our cudaVersion tells us which version of CUDA we're building against.
+  # The subdirectories in lib/ tell us which versions of CUDA are supported.
+  # Typically the names will look like this:
+  #
+  # - 10.2
+  # - 11
+  # - 11.0
+  # - 12
+
+  # libPath :: String
+  libPath =
+    let
+      cudaMajorMinor = versions.majorMinor cudaVersion;
+      cudaMajor = versions.major cudaVersion;
+    in
+    if cudaMajorMinor == "10.2" then cudaMajorMinor else cudaMajor;
+
+  # A release is supported if it has a libPath that matches our CUDA version for our platform.
+  # LibPath are not constant across the same release -- one platform may support fewer
+  # CUDA versions than another.
+  # redistArch :: String
+  redistArch = flags.getRedistArch hostPlatform.system;
+  # platformIsSupported :: Manifests -> Boolean
+  platformIsSupported =
+    { feature, redistrib, ... }:
+    (attrsets.attrByPath [
+      pname
+      redistArch
+    ] null feature) != null;
+
+  # TODO(@connorbaker): With an auxiliary file keeping track of the CUDA versions each release supports,
+  # we could filter out releases that don't support our CUDA version.
+  # However, we don't have that currently, so we make a best-effort to try to build TensorRT with whatever
+  # libPath corresponds to our CUDA version.
+  # supportedManifests :: List Manifests
+  supportedManifests = builtins.filter platformIsSupported listOfManifests;
+
+  # Compute versioned attribute name to be used in this package set
+  # Patch version changes should not break the build, so we only use major and minor
+  # computeName :: RedistribRelease -> String
+  computeName = { version, ... }: mkVersionedPackageName redistName version;
+in
+final: _:
+let
+  # buildCusparseltPackage :: Manifests -> AttrSet Derivation
+  buildCusparseltPackage =
+    { redistrib, feature }:
+    let
+      drv = final.callPackage ../generic-builders/manifest.nix {
+        inherit pname redistName;
+        redistribRelease = redistrib.${pname};
+        featureRelease = feature.${pname};
+      };
+      fixedDrv = drv.overrideAttrs (prevAttrs: {
+        buildInputs =
+          prevAttrs.buildInputs
+          ++ lists.optionals (strings.versionOlder cudaVersion "11.4") [ final.cudatoolkit ]
+          ++ lists.optionals (strings.versionAtLeast cudaVersion "11.4") (
+            [ final.libcublas.lib ]
+            # For some reason, the 1.4.x release of cusparselt requires the cudart library.
+            ++ lists.optionals (strings.hasPrefix "1.4" redistrib.${pname}.version) [ final.cuda_cudart.lib ]
+          );
+        meta = prevAttrs.meta // {
+          description = "cuSPARSELt: A High-Performance CUDA Library for Sparse Matrix-Matrix Multiplication";
+          homepage = "https://developer.nvidia.com/cusparselt-downloads";
+
+          maintainers = prevAttrs.meta.maintainers ++ [ lib.maintainers.sepiabrown ];
+          license = lib.licenses.unfreeRedistributable // {
+            shortName = "cuSPARSELt EULA";
+            fullName = "cuSPARSELt SUPPLEMENT TO SOFTWARE LICENSE AGREEMENT FOR NVIDIA SOFTWARE DEVELOPMENT KITS";
+            url = "https://docs.nvidia.com/cuda/cusparselt/license.html";
+          };
+        };
+      });
+    in
+    attrsets.nameValuePair (computeName redistrib.${pname}) fixedDrv;
+
+  extension =
+    let
+      nameOfNewest = computeName (lists.last supportedManifests).redistrib.${pname};
+      drvs = builtins.listToAttrs (lists.map buildCusparseltPackage supportedManifests);
+      containsDefault = attrsets.optionalAttrs (drvs != { }) { cusparselt = drvs.${nameOfNewest}; };
+    in
+    drvs // containsDefault;
+in
+extension
@@ -0,0 +1,44 @@
+{
+  "libcusparse_lt": {
+    "linux-aarch64": {
+      "outputs": {
+        "bin": false,
+        "dev": true,
+        "doc": false,
+        "lib": true,
+        "sample": false,
+        "static": true
+      }
+    },
+    "linux-sbsa": {
+      "outputs": {
+        "bin": false,
+        "dev": true,
+        "doc": false,
+        "lib": true,
+        "sample": false,
+        "static": true
+      }
+    },
+    "linux-x86_64": {
+      "outputs": {
+        "bin": false,
+        "dev": true,
+        "doc": false,
+        "lib": true,
+        "sample": false,
+        "static": true
+      }
+    },
+    "windows-x86_64": {
+      "outputs": {
+        "bin": false,
+        "dev": true,
+        "doc": false,
+        "lib": false,
+        "sample": false,
+        "static": false
+      }
+    }
+  }
+}
@@ -0,0 +1,35 @@
+{
+    "release_date": "2025-02-25",
+    "release_label": "0.7.1",
+    "release_product": "cusparselt",
+    "libcusparse_lt": {
+        "name": "NVIDIA cuSPARSELt",
+        "license": "cuSPARSELt",
+        "license_path": "libcusparse_lt/LICENSE.txt",
+        "version": "0.7.1.0",
+        "linux-x86_64": {
+            "relative_path": "libcusparse_lt/linux-x86_64/libcusparse_lt-linux-x86_64-0.7.1.0-archive.tar.xz",
+            "sha256": "a0d885837887c73e466a31b4e86aaae2b7d0cc9c5de0d40921dbe2a15dbd6a88",
+            "md5": "b2e5f3c9b9d69e1e0b55b16de33fdc6e",
+            "size": "353151840"
+        },
+        "linux-sbsa": {
+            "relative_path": "libcusparse_lt/linux-sbsa/libcusparse_lt-linux-sbsa-0.7.1.0-archive.tar.xz",
+            "sha256": "4a131d0a54728e53ba536b50bb65380603456f1656e7df8ee52e285618a0b57c",
+            "md5": "612a712c7da6e801ee773687e99af87e",
+            "size": "352406784"
+        },
+        "windows-x86_64": {
+            "relative_path": "libcusparse_lt/windows-x86_64/libcusparse_lt-windows-x86_64-0.7.1.0-archive.zip",
+            "sha256": "004bcb1b700c24ca8d60a8ddd2124640f61138a6c29914d2afaa0bfa0d0e3cf2",
+            "md5": "a1d8df8dc8ff4b3bd0e859f992f8f392",
+            "size": "268594665"
+        },
+        "linux-aarch64": {
+            "relative_path": "libcusparse_lt/linux-aarch64/libcusparse_lt-linux-aarch64-0.7.1.0-archive.tar.xz",
+            "sha256": "d3b0a660fd552e0bd9a4491b15299d968674833483d5f164cfea35e70646136c",
+            "md5": "54e3f3b28c94118991ce54ec38f531fb",
+            "size": "5494380"
+        }
+    }
+}
@@ -0,0 +1,4 @@
+{ options, ... }:
+{
+  options.cusparselt.manifests = options.generic.manifests;
+}
@@ -4,6 +4,7 @@
    # Always after generic
    ./cuda
    ./cudnn
+    ./cusparselt
    ./cutensor
    ./tensorrt
  ];
@@ -7,8 +7,9 @@
  eigen,
  ensureNewerSourcesForZipFilesHook,
  fetchFromGitHub,
-  replaceVars,
+  fetchpatch,
  glpk,
+  highs,
  lib,
  pkg-config,
  protobuf,
@@ -20,45 +21,54 @@
  zlib,
 }:

-let
-  pybind11_protobuf = fetchFromGitHub {
-    owner = "pybind";
-    repo = "pybind11_protobuf";
-    rev = "b713501f1da56d9b76c42f89efd00b97c26c9eac";
-    hash = "sha256-f6pzRWextH+7lm1xzyhx98wCIWH3lbhn59gSCcjsBVw=";
-  };
-in
 stdenv.mkDerivation rec {
  pname = "or-tools";
-  version = "9.7";
+  version = "9.11";

  src = fetchFromGitHub {
    owner = "google";
    repo = "or-tools";
-    rev = "v${version}";
-    hash = "sha256-eHukf6TbY2dx7iEf8WfwfWsjDEubPtRO02ju0kHtASo=";
+    tag = "v${version}";
+    hash = "sha256-aRhUAs9Otvra7VPJvrf0fhDCGpYhOw1//BC4dFJ7/xI=";
  };

  patches = [
-    (replaceVars ./offline.patch {
-      pybind11_protobuf = "../../pybind11_protobuf";
+    (fetchpatch {
+      name = "0001-Do-not-try-to-copy-pybind11_abseil-status-extension-.patch";
+      url = "https://build.opensuse.org/public/source/science/google-or-tools/0001-Do-not-try-to-copy-pybind11_abseil-status-extension-.patch?rev=19";
+      hash = "sha256-QHQ9E3mhTznJVKB+nP/9jct3uz+SPcOZ7w5tjOQ8iuk=";
+    })
+    (fetchpatch {
+      name = "0001-Revert-python-Fix-python-install-on-windows-breaks-L.patch";
+      url = "https://build.opensuse.org/public/source/science/google-or-tools/0001-Revert-python-Fix-python-install-on-windows-breaks-L.patch?rev=19";
+      hash = "sha256-BNB3KlgjpWcZtb9e68Jkc/4xC4K0c+Iisw0eS6ltYXE=";
+    })
+    (fetchpatch {
+      name = "0001-Fix-up-broken-CMake-rules-for-bundled-pybind-stuff.patch";
+      url = "https://build.opensuse.org/public/source/science/google-or-tools/0001-Fix-up-broken-CMake-rules-for-bundled-pybind-stuff.patch?rev=19";
+      hash = "sha256-r38ZbRkEW1ZvJb0Uf56c0+HcnfouZZJeEYlIK7quSjQ=";
    })
  ];

  # or-tools normally attempts to build Protobuf for the build platform when
  # cross-compiling. Instead, just tell it where to find protoc.
-  postPatch = ''
-    echo "set(PROTOC_PRG $(type -p protoc))" > cmake/host.cmake
-
-    cp -R ${pybind11_protobuf} pybind11_protobuf
-    chmod -R u+w pybind11_protobuf
-  '';
+  postPatch =
+    ''
+      echo "set(PROTOC_PRG $(type -p protoc))" > cmake/host.cmake
+    ''
+    # Patches from OpenSUSE:
+    # https://build.opensuse.org/projects/science/packages/google-or-tools/files/google-or-tools.spec?expand=1
+    + ''
+      sed -i -e '/CMAKE_DEPENDENT_OPTION(INSTALL_DOC/ s/BUILD_CXX AND BUILD_DOC/BUILD_CXX/' CMakeLists.txt
+      find . -iname \*CMakeLists.txt -exec sed -i -e 's/pybind11_native_proto_caster/pybind11_protobuf::pybind11_native_proto_caster/' '{}' \;
+      sed -i -e 's/TARGET pybind11_native_proto_caster/TARGET pybind11_protobuf::pybind11_native_proto_caster/' cmake/check_deps.cmake
+      sed -i -e "/protobuf/ { s/.*,/'protobuf >= 5.26',/ }" ortools/python/setup.py.in
+    '';

  cmakeFlags = [
    "-DBUILD_DEPS=OFF"
    "-DBUILD_PYTHON=ON"
    "-DBUILD_pybind11=OFF"
-    "-DBUILD_pybind11_protobuf=ON"
    "-DCMAKE_INSTALL_BINDIR=bin"
    "-DCMAKE_INSTALL_INCLUDEDIR=include"
    "-DCMAKE_INSTALL_LIBDIR=lib"
@@ -95,6 +105,8 @@ stdenv.mkDerivation rec {
    glpk
    python.pkgs.absl-py
    python.pkgs.pybind11
+    python.pkgs.pybind11-abseil
+    python.pkgs.pybind11-protobuf
    python.pkgs.pytest
    python.pkgs.scipy
    python.pkgs.setuptools
@@ -104,23 +116,18 @@ stdenv.mkDerivation rec {
  ];
  propagatedBuildInputs = [
    abseil-cpp
+    highs
    protobuf
-    (python.pkgs.protobuf4.override { protobuf = protobuf; })
+    (python.pkgs.protobuf.override { protobuf = protobuf; })
    python.pkgs.numpy
+    python.pkgs.pandas
+    python.pkgs.immutabledict
  ];
  nativeCheckInputs = [
    python.pkgs.matplotlib
-    python.pkgs.pandas
    python.pkgs.virtualenv
  ];

-  env.NIX_CFLAGS_COMPILE = toString [
-    # fatal error: 'python/google/protobuf/proto_api.h' file not found
-    "-I${protobuf.src}"
-    # fatal error: 'pybind11_protobuf/native_proto_caster.h' file not found
-    "-I${pybind11_protobuf}"
-  ];
-
  # some tests fail on linux and hang on darwin
  doCheck = false;

@@ -149,7 +156,7 @@ stdenv.mkDerivation rec {
    description = ''
      Google's software suite for combinatorial optimization.
    '';
-    mainProgram = "fzn-ortools";
+    mainProgram = "fzn-cp-sat";
    maintainers = with maintainers; [ andersk ];
    platforms = with platforms; linux ++ darwin;
  };
@@ -1,16 +0,0 @@
-diff --git a/cmake/dependencies/CMakeLists.txt b/cmake/dependencies/CMakeLists.txt
-index af3a28c113..ba92c3c55e 100644
--- a/cmake/dependencies/CMakeLists.txt
-+++ b/cmake/dependencies/CMakeLists.txt
-@@ -177,9 +177,8 @@ if(BUILD_PYTHON AND BUILD_pybind11_protobuf)
-   list(APPEND CMAKE_MESSAGE_INDENT "  ")
-   FetchContent_Declare(
-     pybind11_protobuf
-    GIT_REPOSITORY "https://github.com/pybind/pybind11_protobuf.git"
-    GIT_TAG "main"
-    PATCH_COMMAND git apply --ignore-whitespace "${CMAKE_CURRENT_LIST_DIR}/../../patches/pybind11_protobuf.patch"
-+    SOURCE_DIR @pybind11_protobuf@
-+    PATCH_COMMAND patch -p1 < "${CMAKE_CURRENT_LIST_DIR}/../../patches/pybind11_protobuf.patch"
-   )
-   FetchContent_MakeAvailable(pybind11_protobuf)
-   list(POP_BACK CMAKE_MESSAGE_INDENT)
@@ -9,7 +9,7 @@

 buildPythonPackage rec {
  pname = "amaranth-boards";
-  version = "0-unstable-2025-02-07";
+  version = "0-unstable-2025-03-18";
  pyproject = true;
  # from `pdm show`
  realVersion =
@@ -22,10 +22,10 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "amaranth-lang";
    repo = "amaranth-boards";
-    rev = "6e01882eefd62cf19f5740406144632fe2d21947";
+    rev = "ba3b403a3391b5e306ba1ced61c3368839af61a6";
    # these files change depending on git branch status
    postFetch = "rm -f $out/.git_archival.txt $out/.gitattributes";
-    hash = "sha256-U/+5v4wN+HfpWHnT9E9hf4XYpzqQQ7Tgq6Z09nEIBeE=";
+    hash = "sha256-mS3RHTWxGJIVvIVIMVDHeMxVqJyzwhlkO153+/H3WvA=";
  };

  build-system = [ pdm-backend ];
@@ -5,7 +5,7 @@
  setuptools,
  azure-core,
  isodate,
-  pytestCheckHook,
+  typing-extensions,
 }:

 buildPythonPackage rec {
@@ -16,7 +16,7 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "Azure";
    repo = "azure-sdk-for-python";
-    rev = "refs/tags/azure-ai-vision-imageanalysis_${version}";
+    tag = "azure-ai-vision-imageanalysis_${version}";
    hash = "sha256-Hkj9mrjCc8Li8z6e1BjpzANRVx6+DjN0MhTLANMT78E=";
  };

@@ -27,6 +27,7 @@ buildPythonPackage rec {
  dependencies = [
    azure-core
    isodate
+    typing-extensions
  ];

  pythonImportsCheck = [ "azure.ai.vision.imageanalysis" ];
@@ -34,9 +35,9 @@ buildPythonPackage rec {
  doCheck = false; # cannot import 'devtools_testutils'

  meta = {
-    homepage = "https://github.com/Kalmat/PyMonCtl";
-    license = lib.licenses.bsd3;
-    description = "Cross-Platform toolkit to get info on and control monitors connected";
+    description = "Azure Image Analysis client library for Python";
+    homepage = "https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/vision/azure-ai-vision-imageanalysis";
+    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ sigmanificient ];
  };
 }
@@ -31,7 +31,7 @@

 buildPythonPackage rec {
  pname = "basedmypy";
-  version = "2.9.1";
+  version = "2.10.0";
  pyproject = true;

  disabled = pythonOlder "3.8";
@@ -40,7 +40,7 @@ buildPythonPackage rec {
    owner = "KotlinIsland";
    repo = "basedmypy";
    tag = "v${version}";
-    hash = "sha256-0y7+9Bq/n53n2/s0yGG7IJ0UgTI3qbgrPKUOKpKFFf0=";
+    hash = "sha256-/43wVQoW/BbRD8j8Oypq5yz79ZTyAkLD4T8/aUg/QT8=";
  };

  postPatch = ''
@@ -11,7 +11,7 @@

 buildPythonPackage rec {
  pname = "bidsschematools";
-  version = "1.0.3";
+  version = "1.0.4";
  pyproject = true;

  disabled = pythonOlder "3.9";
@@ -19,7 +19,7 @@ buildPythonPackage rec {
  src = fetchPypi {
    pname = "bidsschematools";
    inherit version;
-    hash = "sha256-uEThihkXkC0SmFfnRmD1idA02jqI3JVZAUhWZjhWvfc=";
+    hash = "sha256-dEPJircy7RDRa1Q7lgUhgfj2ewVo1rsUu1A1mnSi6vw=";
  };

  build-system = [
@@ -13,14 +13,14 @@

 buildPythonPackage rec {
  pname = "ckzg";
-  version = "2.0.1";
+  version = "2.1.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "ethereum";
    repo = "c-kzg-4844";
    tag = "v${version}";
-    hash = "sha256-kOoodri80p5tz8RlMz6mqsZRAuXBxZm4vr+VWJEtfA0=";
+    hash = "sha256-gmH3JR05LkZvjYXf25Ar3rfh9DqabqJr7Vpe1QuRqNA=";
  };

  build-system = [ setuptools ];
@@ -53,7 +53,7 @@ buildPythonPackage rec {
  meta = {
    description = "Minimal implementation of the Polynomial Commitments API for EIP-4844 and EIP-7594";
    homepage = "https://github.com/ethereum/c-kzg-4844";
-    changelog = "https://github.com/ethereum/c-kzg-4844/releases/tag/v${version}";
+    changelog = "https://github.com/ethereum/c-kzg-4844/releases/tag/${src.tag}";
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [ hellwolf ];
  };
@@ -9,15 +9,13 @@
 }:

 buildPythonPackage rec {
-  pname = "configshell";
+  pname = "configshell-fb";
  version = "2.0.0";
  pyproject = true;

-  disabled = pythonOlder "3.9";
-
  src = fetchFromGitHub {
    owner = "open-iscsi";
-    repo = "${pname}-fb";
+    repo = "configshell-fb";
    tag = "v${version}";
    hash = "sha256-lP3WT9ASEj6WiCrurSU/e9FhIaeoQW/n9hi1XZMnV4Q=";
  };
@@ -36,10 +34,11 @@ buildPythonPackage rec {

  pythonImportsCheck = [ "configshell" ];

-  meta = with lib; {
+  meta = {
    description = "Python library for building configuration shells";
    homepage = "https://github.com/open-iscsi/configshell-fb";
-    license = licenses.asl20;
+    changelog = "https://github.com/open-iscsi/configshell-fb/releases/tag/v${version}";
+    license = lib.licenses.asl20;
    maintainers = [ ];
  };
 }
@@ -25,14 +25,14 @@

 buildPythonPackage rec {
  pname = "cvxpy";
-  version = "1.6.3";
+  version = "1.6.4";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "cvxpy";
    repo = "cvxpy";
    tag = "v${version}";
-    hash = "sha256-fQz9tPxSNKRSJdtyeEAE1qwK//x1U3kKozclav1G+nc=";
+    hash = "sha256-PV6fROIt8NsCTm2MbKr+ejgE3QC3IIU607q9MYRGnxc=";
  };

  # we need to patch out numpy version caps from upstream
@@ -17,7 +17,6 @@
  pyarrow,

  # tests
-  dask-histogram,
  distributed,
  hist,
  pandas,
@@ -27,14 +26,14 @@

 buildPythonPackage rec {
  pname = "dask-awkward";
-  version = "2025.2.0";
+  version = "2025.3.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "dask-contrib";
    repo = "dask-awkward";
    tag = version;
-    hash = "sha256-hhAY2cPUOYnP86FGsLvxlMeoEwY+sTrjPMKyuZrO0/M=";
+    hash = "sha256-z4dRGNoqwIEOwaz5U0DqCh/chZtopiLNvvvfl0bJxxI=";
  };

  build-system = [
@@ -75,12 +74,6 @@ buildPythonPackage rec {
    "test_distance_behavior"
  ];

-  disabledTestPaths = [
-    # TypeError: Blockwise.__init__() got an unexpected keyword argument 'dsk'
-    # https://github.com/dask-contrib/dask-awkward/issues/557
-    "tests/test_str.py"
-  ];
-
  __darwinAllowLocalNetworking = true;

  meta = {
@@ -0,0 +1,42 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchPypi,
+  setuptools,
+  requests,
+  nix-update-script,
+}:
+
+buildPythonPackage rec {
+  pname = "ec2-metadata";
+  version = "2.14.0";
+  pyproject = true;
+
+  src = fetchPypi {
+    pname = "ec2_metadata";
+    inherit version;
+    hash = "sha256-svgzgXIgcu+ij2XcN+cmwKvToFMvIns/pqKtaEYMf+s=";
+  };
+
+  build-system = [
+    setuptools
+  ];
+
+  dependencies = [
+    requests
+  ];
+
+  pythonImportsCheck = [
+    "ec2_metadata"
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "An easy interface to query the EC2 metadata API, with caching";
+    homepage = "https://pypi.org/project/ec2-metadata/";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers._9999years ];
+    mainProgram = "ec2-metadata";
+  };
+}
@@ -23,7 +23,10 @@ buildPythonPackage rec {
    hash = "sha256-V+i+e1McE9YFVuq2fuQtD3RKTHw9u3u0bZ2zCi9yZCM=";
  };

-  pythonRelaxDeps = [ "withings-sync" ];
+  pythonRelaxDeps = [
+    "garth"
+    "withings-sync"
+  ];

  build-system = [ pdm-backend ];

@@ -13,14 +13,14 @@

 buildPythonPackage rec {
  pname = "garth";
-  version = "0.5.2";
+  version = "0.5.3";
  pyproject = true;

  disabled = pythonOlder "3.10";

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-WUrK/ieYnao/+8hGDK8GOAI1nGsfQMmP/Tsh9prcbgk=";
+    hash = "sha256-cyqXCkfkpd71VqguZFOA4bO/dOkKBZkEzJ6BVLCBWFA=";
  };

  pythonRelaxDeps = [ "requests-oauthlib" ];
@@ -28,16 +28,18 @@ buildPythonPackage rec {

  build-system = [ flit-core ];

-  nativeCheckInputs = [
-    dbus
-    pytest
-    pytest-trio
-    pytest-asyncio
-    testpath
-    trio
-  ] ++ lib.optionals (pythonOlder "3.11") [
-    async-timeout
-  ];
+  nativeCheckInputs =
+    [
+      dbus
+      pytest
+      pytest-trio
+      pytest-asyncio
+      testpath
+      trio
+    ]
+    ++ lib.optionals (pythonOlder "3.11") [
+      async-timeout
+    ];

  checkPhase = ''
    runHook preCheck
@@ -18,14 +18,14 @@

 buildPythonPackage rec {
  pname = "langchain-groq";
-  version = "0.2.5";
+  version = "0.3.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "langchain-ai";
    repo = "langchain";
    tag = "langchain-groq==${version}";
-    hash = "sha256-TXmAaEOK2qNglNAa02M027NXmocsxFaQi3tUFdmFQUQ=";
+    hash = "sha256-kdqgX2fnagVL+W6dRJwnpngcJK2q4E4nk8r4+zIwPt4=";
  };

  sourceRoot = "${src.name}/libs/partners/groq";
@@ -12,22 +12,20 @@

 buildPythonPackage rec {
  pname = "lox";
-  version = "0.12.0";
+  version = "0.13.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "BrianPugh";
    repo = "lox";
    tag = "v${version}";
-    hash = "sha256-Iv3ZdfsvFLU6lhlH1n+eQ+KIrXESsnC1S2lVFnKFV08=";
+    hash = "sha256-I/+/wl+H3OLAN26qJVqyqgW72GoTddm59j2Y6fsz8AM=";
  };

  build-system = [ setuptools ];

  dependencies = [ pathos ];

-  pythonRemoveDeps = [ "sphinx-rtd-theme" ];
-
  # setup.py requires pytest-runner for setuptools, which is wrong
  postPatch = ''
    substituteInPlace setup.py --replace-fail '"pytest-runner",' ""
@@ -53,7 +51,7 @@ buildPythonPackage rec {

  meta = {
    description = "Threading and Multiprocessing made easy";
-    changelog = "https://github.com/BrianPugh/lox/releases/tag/v${version}";
+    changelog = "https://github.com/BrianPugh/lox/releases/tag/${src.tag}";
    homepage = "https://github.com/BrianPugh/lox";
    license = lib.licenses.asl20;
    maintainers = [ lib.maintainers.greg ];
@@ -0,0 +1,58 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  hatchling,
+  jsonref,
+  langchain,
+  langgraph,
+  llama-index,
+  mcp,
+  pytest-asyncio,
+  pytestCheckHook,
+  python-dotenv,
+  smolagents,
+}:
+
+buildPythonPackage rec {
+  pname = "mcpadapt";
+  version = "0.0.15";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "grll";
+    repo = "mcpadapt";
+    tag = "v${version}";
+    hash = "sha256-Cpm6jfdAyhMNc3bnDcF42G24VdStM2OpDTsGHS4IEMM=";
+  };
+
+  build-system = [ hatchling ];
+
+  dependencies = [
+    jsonref
+    mcp
+    python-dotenv
+  ];
+
+  optional-dependencies = {
+    langchain = [
+      langchain
+      # langchain-anthropic
+      langgraph
+    ];
+    llamaindex = [ llama-index ];
+  };
+
+  pythonImportsCheck = [ "mcpadapt" ];
+
+  # Circular dependency smolagents
+  doCheck = false;
+
+  meta = {
+    description = "MCP servers tool";
+    homepage = "https://github.com/grll/mcpadapt";
+    changelog = "https://github.com/grll/mcpadapt/releases/tag/${src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+  };
+}
@@ -19,11 +19,17 @@
  tqdm,
  typing-extensions,

+  # optional-dependencies (datalib)
  numpy,
  pandas,
  pandas-stubs,
+
+  # optional-dependencies (realtime)
  websockets,

+  # optional-dependencies (voice-helpers)
+  sounddevice,
+
  # check deps
  pytestCheckHook,
  dirty-equals,
@@ -32,11 +38,15 @@
  pytest-asyncio,
  pytest-mock,
  respx,
+
+  # optional-dependencies toggle
+  withRealtime ? true,
+  withVoiceHelpers ? true,
 }:

 buildPythonPackage rec {
  pname = "openai";
-  version = "1.66.3";
+  version = "1.68.2";
  pyproject = true;

  disabled = pythonOlder "3.8";
@@ -45,24 +55,31 @@ buildPythonPackage rec {
    owner = "openai";
    repo = "openai-python";
    tag = "v${version}";
-    hash = "sha256-T9ZW/93ovzJgLEjLgzp/4bPezONxqlYNFpe6U8a7q/A=";
+    hash = "sha256-TA+gr6cFGFlbAUqfgSbLFsoKdSZktPwk6DUfeq99PsM=";
  };

+  postPatch = ''substituteInPlace pyproject.toml --replace-fail "hatchling==1.26.3" "hatchling"'';
+
  build-system = [
    hatchling
    hatch-fancy-pypi-readme
  ];

-  dependencies = [
-    anyio
-    distro
-    httpx
-    jiter
-    pydantic
-    sniffio
-    tqdm
-    typing-extensions
-  ] ++ optional-dependencies.realtime;
+  dependencies =
+    [
+      anyio
+      distro
+      httpx
+      jiter
+      numpy
+      pydantic
+      sniffio
+      sounddevice
+      tqdm
+      typing-extensions
+    ]
+    ++ lib.optionals withRealtime optional-dependencies.realtime
+    ++ lib.optionals withVoiceHelpers optional-dependencies.voice-helpers;

  optional-dependencies = {
    datalib = [
@@ -73,6 +90,10 @@ buildPythonPackage rec {
    realtime = [
      websockets
    ];
+    voice-helpers = [
+      numpy
+      sounddevice
+    ];
  };

  pythonImportsCheck = [ "openai" ];
@@ -10,7 +10,7 @@

 buildPythonPackage rec {
  pname = "pbs-installer";
-  version = "2025.03.11";
+  version = "2025.03.17";
  pyproject = true;

  disabled = pythonOlder "3.8";
@@ -19,7 +19,7 @@ buildPythonPackage rec {
    owner = "frostming";
    repo = "pbs-installer";
    tag = version;
-    hash = "sha256-uf74Ry/VX7PpGiOsLXU6CBj40NX4b2aYfPQ4vU6nS0I=";
+    hash = "sha256-4SwbxTwl0DQjtYTxFMBg4p9aTyELNIOSRQw9fiweDhg=";
  };

  build-system = [ pdm-backend ];
@@ -0,0 +1,60 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  fetchpatch,
+  cmake,
+  abseil-cpp,
+  pybind11,
+  python,
+}:
+
+buildPythonPackage rec {
+  pname = "pybind11-abseil";
+  version = "202402.0";
+  pyproject = false;
+
+  src = fetchFromGitHub {
+    owner = "pybind";
+    repo = "pybind11_abseil";
+    rev = "v${version}";
+    hash = "sha256-hFVuGzEFqAEm2p2RmfhFtLB6qOqNuVNcwcLh8dIWi0k=";
+  };
+
+  patches = [
+    (fetchpatch {
+      name = "pybind11_abseil.patch";
+      url = "https://build.opensuse.org/public/source/openSUSE:Factory/pybind11-abseil/pybind11_abseil.patch?rev=2";
+      hash = "sha256-zwxCIhYMvexdSUmKM22OMBMEo0NRDgMtSVMDySFCn6U=";
+    })
+    (fetchpatch {
+      name = "use-system-packages-if-possible.patch";
+      url = "https://build.opensuse.org/public/source/openSUSE:Factory/pybind11-abseil/use-system-packages-if-possible.patch?rev=2";
+      hash = "sha256-CLHOSni2ej6ICtvMtBoCIpR9CNPPibwIS+hYbOCAwBE=";
+    })
+    (fetchpatch {
+      name = "0001-Install-headers-and-CMake-development-files.patch";
+      url = "https://build.opensuse.org/public/source/openSUSE:Factory/pybind11-abseil/0001-Install-headers-and-CMake-development-files.patch?rev=2";
+      hash = "sha256-TU9AzvF83aROY4gwys2ITOcdtjEm4x2IbhX4cHNWp0M=";
+    })
+  ];
+
+  nativeBuildInputs = [ cmake ];
+
+  buildInputs = [
+    abseil-cpp
+    pybind11
+  ];
+
+  cmakeFlags = [
+    (lib.cmakeFeature "CMAKE_INSTALL_PYDIR" "${placeholder "out"}/${python.sitePackages}")
+    (lib.cmakeFeature "Python_EXECUTABLE" python.interpreter)
+  ];
+
+  meta = {
+    description = "Pybind11 bindings for the Abseil C++ Common Libraries";
+    homepage = "https://github.com/pybind/pybind11_abseil";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ wegank ];
+  };
+}
@@ -0,0 +1,51 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  fetchpatch,
+  cmake,
+  abseil-cpp_202301,
+  protobuf_23,
+  pybind11,
+}:
+
+buildPythonPackage {
+  pname = "pybind11-protobuf";
+  version = "0-unstable-2024-11-01";
+  pyproject = false;
+
+  src = fetchFromGitHub {
+    owner = "pybind";
+    repo = "pybind11_protobuf";
+    rev = "90b1a5b9de768340069c15b603d467c21cac5e0b";
+    hash = "sha256-3OuwRP9MhxmcfeDx+p74Fz6iLqi9FXbR3t3BtafesKk=";
+  };
+
+  patches = [
+    (fetchpatch {
+      name = "0006-Add-install-target-for-CMake-builds.patch";
+      url = "https://build.opensuse.org/public/source/openSUSE:Factory/pybind11_protobuf/0006-Add-install-target-for-CMake-builds.patch?rev=2";
+      hash = "sha256-tjaOr6f+JCRft0SWd0Zfte7FEOYOP7RrW0Vjz34rX6I=";
+    })
+    (fetchpatch {
+      name = "0007-CMake-Use-Python-Module.patch";
+      url = "https://build.opensuse.org/public/source/openSUSE:Factory/pybind11_protobuf/0007-CMake-Use-Python-Module.patch?rev=2";
+      hash = "sha256-A1dhfh31FMBHBdCfoYmQrInZvO/DeuVMUL57PpUHYfA=";
+    })
+  ];
+
+  nativeBuildInputs = [ cmake ];
+
+  buildInputs = [
+    abseil-cpp_202301
+    protobuf_23
+    pybind11
+  ];
+
+  meta = {
+    description = "Pybind11 bindings for Google's Protocol Buffers";
+    homepage = "https://github.com/pybind/pybind11_protobuf";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ wegank ];
+  };
+}
@@ -2,38 +2,28 @@
  lib,
  buildPythonPackage,
  casttube,
-  fetchPypi,
+  fetchFromGitHub,
  pythonOlder,
  protobuf,
  setuptools,
-  wheel,
  zeroconf,
 }:

 buildPythonPackage rec {
  pname = "pychromecast";
-  version = "14.0.5";
+  version = "14.0.6";
  pyproject = true;

  disabled = pythonOlder "3.11";

-  src = fetchPypi {
-    pname = "PyChromecast";
-    inherit version;
-    hash = "sha256-qGce5OpKcJXi4GcOIhUUXsHj4KoHN/901kiuTcJosrE=";
+  src = fetchFromGitHub {
+    owner = "home-assistant-libs";
+    repo = "pychromecast";
+    tag = version;
+    hash = "sha256-fyF/3F/K4bSOEepCArhK+v+W6tet82r1EW22g74mQlw=";
  };

-  postPatch = ''
-    substituteInPlace pyproject.toml \
-      --replace-fail "setuptools~=65.6" "setuptools" \
-      --replace-fail "wheel~=0.37.1" "wheel" \
-      --replace-fail "protobuf>=4.25.1" "protobuf"
-  '';
-
-  nativeBuildInputs = [
-    setuptools
-    wheel
-  ];
+  build-system = [ setuptools ];

  propagatedBuildInputs = [
    casttube
@@ -49,7 +39,7 @@ buildPythonPackage rec {
  meta = with lib; {
    description = "Library for Python to communicate with the Google Chromecast";
    homepage = "https://github.com/home-assistant-libs/pychromecast";
-    changelog = "https://github.com/home-assistant-libs/pychromecast/releases/tag/${version}";
+    changelog = "https://github.com/home-assistant-libs/pychromecast/releases/tag/${src.tag}";
    license = licenses.mit;
    maintainers = with maintainers; [ abbradar ];
    platforms = platforms.unix;
@@ -0,0 +1,41 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchPypi,
+  poetry-core,
+  pydantic,
+  nix-update-script,
+}:
+
+buildPythonPackage rec {
+  pname = "pydantic-argparse-extensible";
+  version = "1.3.6";
+  pyproject = true;
+
+  src = fetchPypi {
+    pname = "pydantic_argparse_extensible";
+    inherit version;
+    hash = "sha256-DLE2eFrofCDcEPrn5g/mZlxNidVXThUumWV+u+yyvOI=";
+  };
+
+  build-system = [
+    poetry-core
+  ];
+
+  dependencies = [
+    pydantic
+  ];
+
+  pythonImportsCheck = [
+    "pydantic_argparse_extensible"
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "A typed wrapper around argparse using pydantic models";
+    homepage = "https://pypi.org/project/pydantic-argparse-extensible";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers._9999years ];
+  };
+}
@@ -13,7 +13,7 @@

 buildPythonPackage rec {
  pname = "pymodes";
-  version = "2.19";
+  version = "2.20";
  pyproject = true;

  disabled = pythonOlder "3.7";
@@ -22,7 +22,7 @@ buildPythonPackage rec {
    owner = "junzis";
    repo = "pyModeS";
    tag = "v${version}";
-    hash = "sha256-rVxqtT/sBFQM2Y+GPR2Tc5J2skavvjxwPB7paDBqYRQ=";
+    hash = "sha256-BC1GLQW0/UBVwx3346mZsXSREGeVS+GhqH2Rl2faUoY=";
  };

  build-system = [
@@ -43,7 +43,7 @@ buildPythonPackage rec {
  meta = with lib; {
    description = "Python Mode-S and ADS-B Decoder";
    homepage = "https://github.com/junzis/pyModeS";
-    changelog = "https://github.com/junzis/pyModeS/releases/tag/v${version}";
+    changelog = "https://github.com/junzis/pyModeS/releases/tag/${src.tag}";
    license = licenses.gpl3Plus;
    maintainers = with maintainers; [ snicket2100 ];
  };
@@ -11,7 +11,7 @@

 buildPythonPackage rec {
  pname = "pystache";
-  version = "0.6.7";
+  version = "0.6.8";
  pyproject = true;

  disabled = pythonOlder "3.8";
@@ -20,7 +20,7 @@ buildPythonPackage rec {
    owner = "PennyDreadfulMTG";
    repo = "pystache";
    tag = "v${version}";
-    hash = "sha256-kfR3ZXbrCDrIVOh4bcOTXqg9D56YQrIyV0NthStga5U=";
+    hash = "sha256-UVmDpg7wCPnY+1BZqujIYdgt/AT4gZ+RTYdD+ORQhzE=";
  };

  build-system = [
@@ -38,7 +38,7 @@ buildPythonPackage rec {

  meta = {
    description = "Framework-agnostic, logic-free templating system inspired by ctemplate and et";
-    homepage = "https://github.com/defunkt/pystache";
+    homepage = "https://github.com/PennyDreadfulMTG/pystache";
    license = lib.licenses.mit;
    maintainers = [ lib.maintainers.nickcao ];
  };
@@ -13,7 +13,7 @@

 buildPythonPackage rec {
  pname = "reolink-aio";
-  version = "0.12.2";
+  version = "0.12.3";
  pyproject = true;

  disabled = pythonOlder "3.11";
@@ -22,7 +22,7 @@ buildPythonPackage rec {
    owner = "starkillerOG";
    repo = "reolink_aio";
    tag = version;
-    hash = "sha256-js7+x5Ft3gBsycaUKTz7qDaPOlgOZmnmxmfHSVGy1cw=";
+    hash = "sha256-9Jw5utU81u+HTr9bvnYsBRPYdV6OnvfXuc5s9EsNsDU=";
  };

  build-system = [ setuptools ];
--- a/Show More
+++ b/Show More