From eae2b013b2e8066f213e74e03ec5195e0f0ca0a2 Mon Sep 17 00:00:00 2001
From: hulr <>
Date: Fri, 14 Nov 2025 22:13:19 +0100
Subject: [PATCH 01/47] iwe: 0.0.33 -> 0.0.56

---
 pkgs/by-name/iw/iwe/package.nix | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/iw/iwe/package.nix b/pkgs/by-name/iw/iwe/package.nix
index 11d9a01bb761..fb9951fe0290 100644
--- a/pkgs/by-name/iw/iwe/package.nix
+++ b/pkgs/by-name/iw/iwe/package.nix
@@ -1,4 +1,5 @@
 {
+  stdenv,
   lib,
   fetchFromGitHub,
   rustPlatform,
@@ -7,22 +8,28 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "iwe";
-  version = "0.0.33";
+  version = "0.0.56";
 
   src = fetchFromGitHub {
     owner = "iwe-org";
     repo = "iwe";
     tag = "iwe-v${finalAttrs.version}";
-    hash = "sha256-PjonpAyq6FPJs5mo4W3z9yIVU8auGGtTrK/GBxMcPbk=";
+    hash = "sha256-nEn2iR2/ROboalMAXJV4y8qZiN36QkaWin+sMLZSKMQ=";
   };
 
-  cargoHash = "sha256-EfoDpa2hN9W2unci4rIi4gjlJV2NzdU77FbOW0OTu2c=";
+  cargoHash = "sha256-fi16wLc/ZQV2bJHiIo7HVP+IS8zuoJeQQ7kV0cJ9GZ8=";
 
   cargoBuildFlags = [
     "--package=iwe"
     "--package=iwes"
   ];
 
+  postPatch = ''
+    substituteInPlace crates/iwe/tests/common/mod.rs --replace-fail \
+      'binary_path.push("target");' \
+      'binary_path.push("target/${stdenv.hostPlatform.rust.rustcTarget}");'
+  '';
+
   nativeInstallCheckInputs = [ versionCheckHook ];
   versionCheckProgramArg = "--version";
   doInstallCheck = true;

From ff675b6e8cbfc06d2891e99ffa34193ed681c467 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Wed, 26 Nov 2025 23:39:55 +0100
Subject: [PATCH 02/47] qovery-cli: 1.54.2 -> 1.55.1

Diff: https://github.com/Qovery/qovery-cli/compare/v1.54.2...v1.55.1

Changelog: https://github.com/Qovery/qovery-cli/releases/tag/v1.55.1
---
 pkgs/by-name/qo/qovery-cli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/qo/qovery-cli/package.nix b/pkgs/by-name/qo/qovery-cli/package.nix
index 53697df61cf1..355fc6247757 100644
--- a/pkgs/by-name/qo/qovery-cli/package.nix
+++ b/pkgs/by-name/qo/qovery-cli/package.nix
@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "qovery-cli";
-  version = "1.54.2";
+  version = "1.55.1";
 
   src = fetchFromGitHub {
     owner = "Qovery";
     repo = "qovery-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-LVU5XLo14Uh6wE2DIhuD/wYn5ZtRjkbseE/4dxy5wk0=";
+    hash = "sha256-E/OjQkaO1ecB9o3boInBOamuY8CoXb1JAp7G9NuiQqE=";
   };
 
-  vendorHash = "sha256-1TprPzZb+Q9QcoGop6CAmnyqSU3dQ5CSAS0hsnQeWPw=";
+  vendorHash = "sha256-owsLDP2ufW0kXmWOFtAiXKx/YiKEGL0QXkRQy1uA2Uw=";
 
   env.CGO_ENABLED = 0;
 

From 7e9105c33e9387bf35d6d65adcb33fd5fc742303 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 27 Nov 2025 00:25:55 +0000
Subject: [PATCH 03/47] karmor: 1.4.5 -> 1.4.6

---
 pkgs/by-name/ka/karmor/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ka/karmor/package.nix b/pkgs/by-name/ka/karmor/package.nix
index 1de29e287079..3e63451baed5 100644
--- a/pkgs/by-name/ka/karmor/package.nix
+++ b/pkgs/by-name/ka/karmor/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule rec {
   pname = "karmor";
-  version = "1.4.5";
+  version = "1.4.6";
 
   src = fetchFromGitHub {
     owner = "kubearmor";
     repo = "kubearmor-client";
     rev = "v${version}";
-    hash = "sha256-coZYcLhY9KW1LsjRP7nJkjWW7lXZBO5Asgx0nSaVG9M=";
+    hash = "sha256-xOI6meI88GB5w19T9eSn+8dTnhrUxUCKHUBk/1EaDVI=";
   };
 
   vendorHash = "sha256-FL5WL44dsM0uPYXMNfYKRd37umId21rMGvj84rYTU3A=";

From d1e1a3f212d00000137c23cfae83b3f0dedf5024 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 28 Nov 2025 03:12:35 +0000
Subject: [PATCH 04/47] nexttrace: 1.4.2 -> 1.5.0

---
 pkgs/by-name/ne/nexttrace/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ne/nexttrace/package.nix b/pkgs/by-name/ne/nexttrace/package.nix
index 8faf459bfe80..c520450f38fc 100644
--- a/pkgs/by-name/ne/nexttrace/package.nix
+++ b/pkgs/by-name/ne/nexttrace/package.nix
@@ -6,15 +6,15 @@
 
 buildGoModule rec {
   pname = "nexttrace";
-  version = "1.4.2";
+  version = "1.5.0";
 
   src = fetchFromGitHub {
     owner = "nxtrace";
     repo = "NTrace-core";
     rev = "v${version}";
-    sha256 = "sha256-Etz/MXTFpcHbpha8WEmbhHtvyrrVhlLZDfc+J3j6o6M=";
+    sha256 = "sha256-Ui3Vm9Q6VJXW9hGDFCuOCUmoSO8SE5ufRYq0niY6ojo=";
   };
-  vendorHash = "sha256-jJJXQIv91IkUhIIyMlZUxnx6LzPEtgbjizhDGUu9ZZE=";
+  vendorHash = "sha256-8KxY3KYcaaZZjk+IIKdu8tzGhgGUlJ5nyMMSKhe41kg=";
 
   doCheck = false; # Tests require a network connection.
 

From 5e58fb0ba5bca5c17e92843e8ba39c85d3cd1c0f Mon Sep 17 00:00:00 2001
From: Gary Guo <gary@garyguo.net>
Date: Fri, 28 Nov 2025 16:21:15 +0000
Subject: [PATCH 05/47] nixos/roundcube: fix wrong error log location

'stderr' here means log to a file named 'stderr', and thus /stderr is
being created. This probably is intended to be /dev/stderr.
---
 nixos/modules/services/mail/roundcube.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/mail/roundcube.nix b/nixos/modules/services/mail/roundcube.nix
index 2bae14f47813..6e1b83f8d1d3 100644
--- a/nixos/modules/services/mail/roundcube.nix
+++ b/nixos/modules/services/mail/roundcube.nix
@@ -244,7 +244,7 @@ in
     services.phpfpm.pools.roundcube = {
       user = if localDB then user else "nginx";
       phpOptions = ''
-        error_log = 'stderr'
+        error_log = '/dev/stderr'
         log_errors = on
         post_max_size = ${cfg.maxAttachmentSize}
         upload_max_filesize = ${cfg.maxAttachmentSize}

From 6433d954da84df9fa1de1ae728b82d0a29801cea Mon Sep 17 00:00:00 2001
From: Lukas Wurzinger <lukas@wrz.one>
Date: Fri, 28 Nov 2025 18:31:58 +0100
Subject: [PATCH 06/47] nixos/undervolt: fix argument conversion

---
 nixos/modules/services/hardware/undervolt.nix | 50 +++++++++++--------
 1 file changed, 29 insertions(+), 21 deletions(-)

diff --git a/nixos/modules/services/hardware/undervolt.nix b/nixos/modules/services/hardware/undervolt.nix
index dd020181a6fe..a2c16f9bd8de 100644
--- a/nixos/modules/services/hardware/undervolt.nix
+++ b/nixos/modules/services/hardware/undervolt.nix
@@ -16,29 +16,37 @@ let
         limit != null && window != null
       ) "Both power limit and window must be set";
       "${toString limit} ${toString window}";
-  cliArgs = lib.cli.toCommandLineGNU { } {
-    inherit (cfg)
-      verbose
-      temp
-      turbo
-      ;
-    # `core` and `cache` are both intentionally set to `cfg.coreOffset` as according to the undervolt docs:
-    #
-    #     Core or Cache offsets have no effect. It is not possible to set different offsets for
-    #     CPU Core and Cache. The CPU will take the smaller of the two offsets, and apply that to
-    #     both CPU and Cache. A warning message will be displayed if you attempt to set different offsets.
-    core = cfg.coreOffset;
-    cache = cfg.coreOffset;
-    gpu = cfg.gpuOffset;
-    uncore = cfg.uncoreOffset;
-    analogio = cfg.analogioOffset;
+  cliArgs =
+    let
+      optionFormat = optionName: {
+        option = "--${optionName}";
+        sep = null;
+        explicitBool = false;
+      };
+    in
+    lib.cli.toCommandLine optionFormat {
+      inherit (cfg)
+        verbose
+        temp
+        turbo
+        ;
+      # `core` and `cache` are both intentionally set to `cfg.coreOffset` as according to the undervolt docs:
+      #
+      #     Core or Cache offsets have no effect. It is not possible to set different offsets for
+      #     CPU Core and Cache. The CPU will take the smaller of the two offsets, and apply that to
+      #     both CPU and Cache. A warning message will be displayed if you attempt to set different offsets.
+      core = cfg.coreOffset;
+      cache = cfg.coreOffset;
+      gpu = cfg.gpuOffset;
+      uncore = cfg.uncoreOffset;
+      analogio = cfg.analogioOffset;
 
-    temp-bat = cfg.tempBat;
-    temp-ac = cfg.tempAc;
+      temp-bat = cfg.tempBat;
+      temp-ac = cfg.tempAc;
 
-    power-limit-long = mkPLimit cfg.p1.limit cfg.p1.window;
-    power-limit-short = mkPLimit cfg.p2.limit cfg.p2.window;
-  };
+      power-limit-long = mkPLimit cfg.p1.limit cfg.p1.window;
+      power-limit-short = mkPLimit cfg.p2.limit cfg.p2.window;
+    };
 in
 {
   options.services.undervolt = {

From ee53e87c93b4ffabbadbfa00347bef019c817ee8 Mon Sep 17 00:00:00 2001
From: Moraxyc <i@qaq.li>
Date: Fri, 28 Nov 2025 18:42:38 +0000
Subject: [PATCH 07/47] hmcl: 3.7.6 -> 3.8.1

---
 pkgs/by-name/hm/hmcl/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/hm/hmcl/package.nix b/pkgs/by-name/hm/hmcl/package.nix
index 694f806474a0..8125460cb02f 100644
--- a/pkgs/by-name/hm/hmcl/package.nix
+++ b/pkgs/by-name/hm/hmcl/package.nix
@@ -39,13 +39,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "hmcl";
-  version = "3.7.6";
+  version = "3.8.1";
 
   src = fetchurl {
     # HMCL has built-in keys, such as the Microsoft OAuth secret and the CurseForge API key.
     # See https://github.com/HMCL-dev/HMCL/blob/refs/tags/release-3.6.12/.github/workflows/gradle.yml#L26-L28
     url = "https://github.com/HMCL-dev/HMCL/releases/download/v${finalAttrs.version}/HMCL-${finalAttrs.version}.jar";
-    hash = "sha256-bgZsQ/5CUeOkbahIV0hQSPHrYfK+EaAIV6uMZzpLOVM=";
+    hash = "sha256-mQ0iuIOVRETdueNbe5s9USbis6IB6n0eA2EzsMzyGng=";
   };
 
   # - HMCL prompts users to download prebuilt Terracotta binary for

From dfe6314acb6f60a05b6467abf7ba23cd65f8b07a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Fri, 28 Nov 2025 09:39:37 -0800
Subject: [PATCH 08/47] nfs-utils: 2.7.1 -> 2.8.4

---
 pkgs/by-name/nf/nfs-utils/package.nix | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/pkgs/by-name/nf/nfs-utils/package.nix b/pkgs/by-name/nf/nfs-utils/package.nix
index 9ed8f60f49ad..0ba6d560dc5b 100644
--- a/pkgs/by-name/nf/nfs-utils/package.nix
+++ b/pkgs/by-name/nf/nfs-utils/package.nix
@@ -8,6 +8,7 @@
   libcap,
   libtirpc,
   libevent,
+  libnl,
   sqlite,
   libkrb5,
   kmod,
@@ -23,6 +24,7 @@
   openldap,
   cyrus_sasl,
   libxml2,
+  readline,
   udevCheckHook,
   enablePython ? true,
   enableLdap ? true,
@@ -38,11 +40,11 @@ in
 
 stdenv.mkDerivation rec {
   pname = "nfs-utils";
-  version = "2.7.1";
+  version = "2.8.4";
 
   src = fetchurl {
-    url = "mirror://kernel/linux/utils/nfs-utils/${version}/${pname}-${version}.tar.xz";
-    hash = "sha256-iFyUioSli8pBSPRZWI+ac2nbtA3MRm8E5FXGsQ/Qqkg=";
+    url = "mirror://kernel/linux/utils/nfs-utils/${version}/nfs-utils-${version}.tar.xz";
+    hash = "sha256-EcTMWYpDTX00C60+Byo3O6HcwsSfhV1EsgIiK3js2/U=";
   };
 
   # libnfsidmap is built together with nfs-utils from the same source,
@@ -65,12 +67,14 @@ stdenv.mkDerivation rec {
     libtirpc
     libcap
     libevent
+    libnl
     sqlite
     lvm2
     libuuid
     keyutils
     libkrb5
     libxml2
+    readline
   ]
   ++ lib.optional enablePython python3
   ++ lib.optionals enableLdap [
@@ -107,16 +111,12 @@ stdenv.mkDerivation rec {
       sha256 = "1fqws9dz8n1d9a418c54r11y3w330qgy2652dpwcy96cm44sqyhf";
     })
     (fetchpatch {
-      url = "https://raw.githubusercontent.com/void-linux/void-packages/bb636cdb1b274f44d92b1cb2fdf0dff6079f97aa/srcpkgs/nfs-utils/patches/nfs-utils-2.7.1-define_macros_for_musl.patch";
-      hash = "sha256-wsyioRjzs1PObMHwYgf5h/Ngv+s5MPsroAuUNGs9lR0=";
+      url = "https://github.com/void-linux/void-packages/raw/31f0d5fef2f74999212bcfa6f982969973432750/srcpkgs/nfs-utils/patches/musl-includes.patch";
+      hash = "sha256-dZEafrXDZH/IPo1u7B65u01nwFMfcqSMnVyHAapexa8=";
     })
     (fetchpatch {
-      url = "https://raw.githubusercontent.com/void-linux/void-packages/bb636cdb1b274f44d92b1cb2fdf0dff6079f97aa/srcpkgs/nfs-utils/patches/musl-svcgssd-sysconf.patch";
-      hash = "sha256-3TXgqswxlhFqXRPcjwo4MdqlTYl+dWVaa0E5r9Mnw18=";
-    })
-    (fetchpatch {
-      url = "https://raw.githubusercontent.com/void-linux/void-packages/bb636cdb1b274f44d92b1cb2fdf0dff6079f97aa/srcpkgs/nfs-utils/patches/musl-fix_long_unsigned_int.patch";
-      hash = "sha256-rS6sqqoGLIaPVq04+QiqP4qa88i1z4ZZCssM5k/XQ68=";
+      url = "https://github.com/void-linux/void-packages/raw/31f0d5fef2f74999212bcfa6f982969973432750/srcpkgs/nfs-utils/patches/musl-fix_long_unsigned_int.patch";
+      hash = "sha256-wcQ2IRmlBP61qZVlXk6osi4UH8ETtjllVogPEaZNK9o=";
     })
   ];
 
@@ -132,7 +132,7 @@ stdenv.mkDerivation rec {
       --replace "/usr/lib/udev/rules.d/" "$out/lib/udev/rules.d/"
 
     substituteInPlace utils/mount/Makefile.in \
-      --replace "chmod 4511" "chmod 0511"
+      --replace-fail "chmod 4711" "chmod 0711"
 
     sed '1i#include <stdint.h>' -i support/nsm/rpc.c
   '';

From adbf9c12ff6b2a84f07c78e9c917e42fbfef3c21 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 28 Nov 2025 19:23:39 +0000
Subject: [PATCH 09/47] oauth2c: 1.17.2 -> 1.18.0

---
 pkgs/by-name/oa/oauth2c/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/oa/oauth2c/package.nix b/pkgs/by-name/oa/oauth2c/package.nix
index 41affa2ab8e3..0a4e33cd85f5 100644
--- a/pkgs/by-name/oa/oauth2c/package.nix
+++ b/pkgs/by-name/oa/oauth2c/package.nix
@@ -6,16 +6,16 @@
 
 buildGoModule rec {
   pname = "oauth2c";
-  version = "1.17.2";
+  version = "1.18.0";
 
   src = fetchFromGitHub {
     owner = "cloudentity";
     repo = "oauth2c";
     rev = "v${version}";
-    hash = "sha256-axCzPCYPn6T8AGqE92Yf/aVJ78Wl004Ts4YebSWYa6U=";
+    hash = "sha256-1l7NtRKOCUuVsGC7K/TmSbzwGGybJ3owMDn2b4b/BeU=";
   };
 
-  vendorHash = "sha256-ZQFIETfiNKyeZuskwNfoTXBy3MSWmG0tDztz0Mm7xJY=";
+  vendorHash = "sha256-I2pOyjKghvHHGEuVqODhysD++f2hD+BF7WJxWbrLcWA=";
 
   doCheck = false; # tests want to talk to oauth2c.us.authz.cloudentity.io
 

From 00ecddc021c432134608fcccb876bac8367eccfa Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 28 Nov 2025 19:47:57 +0000
Subject: [PATCH 10/47] cursor-cli: 0-unstable-2025-11-06 ->
 0-unstable-2025-11-25

---
 pkgs/by-name/cu/cursor-cli/package.nix | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/cu/cursor-cli/package.nix b/pkgs/by-name/cu/cursor-cli/package.nix
index 558e212344f1..ccc120089c63 100644
--- a/pkgs/by-name/cu/cursor-cli/package.nix
+++ b/pkgs/by-name/cu/cursor-cli/package.nix
@@ -9,26 +9,26 @@ let
   inherit (stdenv) hostPlatform;
   sources = {
     x86_64-linux = fetchurl {
-      url = "https://downloads.cursor.com/lab/2025.11.06-8fe8a63/linux/x64/agent-cli-package.tar.gz";
-      hash = "sha256-otTYUTmGqqXT4Jx+r1RlFjJD7FYU62QRl+y69eo/khs=";
+      url = "https://downloads.cursor.com/lab/2025.11.25-d5b3271/linux/x64/agent-cli-package.tar.gz";
+      hash = "sha256-oWYGMIlp7d0cpS7iQxbj62XdfhXnztTqlu1yFmhVKVU=";
     };
     aarch64-linux = fetchurl {
-      url = "https://downloads.cursor.com/lab/2025.11.06-8fe8a63/linux/arm64/agent-cli-package.tar.gz";
-      hash = "sha256-jPqgGdtjLg4qZWktz1/X1LI0+e6RYcCtuLw91k1Xofg=";
+      url = "https://downloads.cursor.com/lab/2025.11.25-d5b3271/linux/arm64/agent-cli-package.tar.gz";
+      hash = "sha256-Cqoc+42LbrKTQv1YEQeX8Vfoj7KosUOWsdVTf6whxw4=";
     };
     x86_64-darwin = fetchurl {
-      url = "https://downloads.cursor.com/lab/2025.11.06-8fe8a63/darwin/x64/agent-cli-package.tar.gz";
-      hash = "sha256-UVR+iomdZzmPfj4o4N4FfUSCa9ttJre7Ipso5weIn1k=";
+      url = "https://downloads.cursor.com/lab/2025.11.25-d5b3271/darwin/x64/agent-cli-package.tar.gz";
+      hash = "sha256-PRxUE0AhEe/5EpXahWx5WW68uUkncwHGxG5eTjFxwyk=";
     };
     aarch64-darwin = fetchurl {
-      url = "https://downloads.cursor.com/lab/2025.11.06-8fe8a63/darwin/arm64/agent-cli-package.tar.gz";
-      hash = "sha256-t5s9TfLLA/VLCYNF+fsf9wgfk2W96eQSIbW/cdUKMuY=";
+      url = "https://downloads.cursor.com/lab/2025.11.25-d5b3271/darwin/arm64/agent-cli-package.tar.gz";
+      hash = "sha256-IOb37qUv9R/ZfH5ooThZmFbWxl592Zv8F7bAifsWvjk=";
     };
   };
 in
 stdenv.mkDerivation {
   pname = "cursor-cli";
-  version = "0-unstable-2025-11-06";
+  version = "0-unstable-2025-11-25";
 
   src = sources.${hostPlatform.system};
 

From 038d3c30f6d66b18cf0cb1c8bfcdd59e97e28527 Mon Sep 17 00:00:00 2001
From: dish <pyrox@pyrox.dev>
Date: Fri, 28 Nov 2025 16:13:09 -0500
Subject: [PATCH 11/47] open-pdf-sign: build from source

---
 pkgs/by-name/op/open-pdf-sign/package.nix | 46 ++++++++++++++++-------
 1 file changed, 33 insertions(+), 13 deletions(-)

diff --git a/pkgs/by-name/op/open-pdf-sign/package.nix b/pkgs/by-name/op/open-pdf-sign/package.nix
index cc7470ea4f59..a18188ecbd93 100644
--- a/pkgs/by-name/op/open-pdf-sign/package.nix
+++ b/pkgs/by-name/op/open-pdf-sign/package.nix
@@ -1,31 +1,53 @@
 {
-  fetchurl,
   jre,
   lib,
   makeBinaryWrapper,
   nix-update-script,
-  stdenv,
+  fetchFromGitHub,
+  maven,
 }:
 
-stdenv.mkDerivation (finalAttrs: {
+maven.buildMavenPackage rec {
   version = "0.3.0";
   pname = "open-pdf-sign";
 
-  src = fetchurl {
-    url = "https://github.com/open-pdf-sign/open-pdf-sign/releases/download/v${finalAttrs.version}/open-pdf-sign.jar";
-    hash = "sha256-tGTWKw/xLhC1B+uogTUmWHUtHNNdE3BLuxToWvrduXs=";
+  src = fetchFromGitHub {
+    owner = "open-pdf-sign";
+    repo = "open-pdf-sign";
+    tag = "v${version}";
+    hash = "sha256-4PkTm9nsIsCrXaLJePDvGalO726BVKhbK2bpFzg9ec0=";
   };
 
+  postPatch = ''
+    # Get package version from CLI, not from git(which doesn't exist in the build environment)
+    substituteInPlace pom.xml \
+      --replace-fail 'hint="git"' 'hint="sysprop"' \
+
+    sed -i '/dirtyQualifier/d' ./pom.xml
+  '';
+
+  mvnHash = "sha256-5DgCjqKPc/y4vDX8pl4Qnm1KsCOpCdUVNiihpvcCzBU=";
+
+  # Disable test requires the network, we also set the version
+  mvnParameters = lib.escapeShellArgs [
+    "-Dtest=!SignerTest#testSignPdf"
+    "-Dexternal.version=${version}"
+  ];
+
   nativeBuildInputs = [
     makeBinaryWrapper
   ];
 
-  buildCommand = ''
-    install -Dm644 $src $out/lib/open-pdf-sign.jar
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/bin $out/share/open-pdf-sign
+    mv target/openpdfsign-${version}-jar-with-dependencies.jar $out/share/open-pdf-sign/open-pdf-sign.jar
 
-    mkdir -p $out/bin
     makeWrapper ${lib.getExe jre} $out/bin/open-pdf-sign \
-      --add-flags "-jar $out/lib/open-pdf-sign.jar"
+      --add-flags "-jar $out/share/open-pdf-sign/open-pdf-sign.jar"
+
+    runHook postInstall
   '';
 
   passthru = {
@@ -37,8 +59,6 @@ stdenv.mkDerivation (finalAttrs: {
     homepage = "https://github.com/open-pdf-sign/open-pdf-sign";
     license = lib.licenses.asl20;
     maintainers = [ ];
-    platforms = lib.platforms.unix;
-    sourceProvenance = with lib.sourceTypes; [ binaryBytecode ];
     mainProgram = "open-pdf-sign";
   };
-})
+}

From 925bca968403b756b661ac9f037c5ef5662ef665 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 28 Nov 2025 21:34:36 +0000
Subject: [PATCH 12/47] ffsubsync: 0.4.30 -> 0.4.31

---
 pkgs/by-name/ff/ffsubsync/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ff/ffsubsync/package.nix b/pkgs/by-name/ff/ffsubsync/package.nix
index 773bbd8634e6..3324202e5ef8 100644
--- a/pkgs/by-name/ff/ffsubsync/package.nix
+++ b/pkgs/by-name/ff/ffsubsync/package.nix
@@ -7,14 +7,14 @@
 
 python3.pkgs.buildPythonApplication rec {
   pname = "ffsubsync";
-  version = "0.4.30";
+  version = "0.4.31";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "smacke";
     repo = "ffsubsync";
     tag = version;
-    hash = "sha256-Px4WaeFn6SS6VUsm0bAKmdVtqQzXX12PRKO1n6UNxdM=";
+    hash = "sha256-j9E4h2de2EOtYpuxKFbPOxZ5FBRO0EkbZhJdx5RiPn8=";
   };
 
   build-system = with python3.pkgs; [ setuptools ];

From 84feacfb0730210c82e9c714748f06f3339142c7 Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Fri, 28 Nov 2025 22:08:10 +0000
Subject: [PATCH 13/47] python3Packages.syne-tune: skip failing test on darwin

---
 pkgs/development/python-modules/syne-tune/default.nix | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/pkgs/development/python-modules/syne-tune/default.nix b/pkgs/development/python-modules/syne-tune/default.nix
index 00058a4ae46d..c09d9d5563dd 100644
--- a/pkgs/development/python-modules/syne-tune/default.nix
+++ b/pkgs/development/python-modules/syne-tune/default.nix
@@ -1,5 +1,6 @@
 {
   lib,
+  stdenv,
   buildPythonPackage,
   fetchFromGitHub,
 
@@ -21,14 +22,11 @@
   h5py,
   huggingface-hub,
   matplotlib,
-  onnxruntime,
   pymoo,
-  pyyaml,
   scikit-learn,
   scipy,
   # smac,
   statsmodels,
-  swig,
   xgboost,
   # yahpo-gym,
 
@@ -125,6 +123,10 @@ buildPythonPackage rec {
     "test_hypervolume"
     "test_hypervolume_progress"
     "test_hypervolume_simple"
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    # assert np.float64(1.0114686865847489e-12) < 1e-12
+    "test_cholesky_factorization"
   ];
 
   disabledTestPaths = [

From 8bd00d81eac846c95d3b1cfe0734631ed53cda51 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Fri, 28 Nov 2025 22:10:43 +0000
Subject: [PATCH 14/47] python3Packages.odc-stac: 0.4.0 -> 0.4.1

---
 pkgs/development/python-modules/odc-stac/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/odc-stac/default.nix b/pkgs/development/python-modules/odc-stac/default.nix
index 99c06e80ed09..b4820058a223 100644
--- a/pkgs/development/python-modules/odc-stac/default.nix
+++ b/pkgs/development/python-modules/odc-stac/default.nix
@@ -31,14 +31,14 @@
 
 buildPythonPackage rec {
   pname = "odc-stac";
-  version = "0.4.0";
+  version = "0.4.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "opendatacube";
     repo = "odc-stac";
     tag = "v${version}";
-    hash = "sha256-Ekyavcin13B4DAxv0/XG5QTBuLE7PRospAXe40fHeX0=";
+    hash = "sha256-Zug52tjbdtRNpLMBUR+hksr/V2D3W4sXbtvdxSPyVlM=";
   };
 
   build-system = [ flit-core ];

From 3b4575c8c969a2c81783b6ba1bb6c0aa27926d9e Mon Sep 17 00:00:00 2001
From: Michael Daniels <mdaniels5757@gmail.com>
Date: Fri, 28 Nov 2025 18:04:01 -0500
Subject: [PATCH 15/47] ci/github-script/commits: clarify commit hash not found
 message

Per matrix.
---
 ci/github-script/commits.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/github-script/commits.js b/ci/github-script/commits.js
index 241bc95ee1b5..91cfe00fa58c 100644
--- a/ci/github-script/commits.js
+++ b/ci/github-script/commits.js
@@ -46,7 +46,7 @@ module.exports = async ({ github, context, core, dry, cherryPicks }) => {
           sha,
           commit,
           severity: 'warning',
-          message: `Couldn't locate original commit hash in message of ${sha}.`,
+          message: `Couldn't locate the cherry-picked commit's hash in the commit message of ${sha}.`,
           type: 'no-commit-hash',
         }
 

From 569ca5d7790697ca7c15387ee322f531893a7bb6 Mon Sep 17 00:00:00 2001
From: Hendrik Wolff <hendrik.wolff@agdsn.me>
Date: Sat, 29 Nov 2025 00:52:15 +0100
Subject: [PATCH 16/47] shikane: Install all man pages in ./build/man/

---
 pkgs/by-name/sh/shikane/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/sh/shikane/package.nix b/pkgs/by-name/sh/shikane/package.nix
index 62bdc9cc4cd9..6fdb953d80f1 100644
--- a/pkgs/by-name/sh/shikane/package.nix
+++ b/pkgs/by-name/sh/shikane/package.nix
@@ -29,7 +29,7 @@ rustPlatform.buildRustPackage rec {
   '';
 
   postInstall = ''
-    installManPage ./build/man/shikane.*
+    installManPage ./build/man/*
   '';
 
   # upstream has no tests

From f5ba9b128c45738822716970262f9fa77189f562 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 00:45:02 +0000
Subject: [PATCH 17/47] mitra: 4.13.1 -> 4.14.0

---
 pkgs/by-name/mi/mitra/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/mi/mitra/package.nix b/pkgs/by-name/mi/mitra/package.nix
index 921ad1f4bcee..c24f381eacd2 100644
--- a/pkgs/by-name/mi/mitra/package.nix
+++ b/pkgs/by-name/mi/mitra/package.nix
@@ -6,17 +6,17 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "mitra";
-  version = "4.13.1";
+  version = "4.14.0";
 
   src = fetchFromGitea {
     domain = "codeberg.org";
     owner = "silverpill";
     repo = "mitra";
     rev = "v${version}";
-    hash = "sha256-cfE+4rbM5B9+ojevkoxc1ZY3r0TY5aRV8/qhZ3h4/0A=";
+    hash = "sha256-LYtiavRgWEH9wFLfnS4xPuZmwSBatPbzDEc3qn2rrBM=";
   };
 
-  cargoHash = "sha256-45vFKMPc73XBHCJISdab59HIkY3a0va8BGQMWsrhaZg=";
+  cargoHash = "sha256-NXPhc1c8JYjAPcQfVobOQten1czD77KLpBqwyEC3AuQ=";
 
   # require running database
   doCheck = false;

From ccced078890b5c32a3dfe66e3a934893de2ac45d Mon Sep 17 00:00:00 2001
From: Tom Hunze <dev@thunze.de>
Date: Sat, 29 Nov 2025 01:51:41 +0100
Subject: [PATCH 18/47] python313Packages.pylit: drop

This package has been broken since August 2025 [1] and its last release
was in July 2022 [2].

[1] https://hydra.nixos.org/build/314261033
[2] https://codeberg.org/milde/pylit/tags
---
 .../python-modules/pylit/default.nix          | 52 -------------------
 pkgs/top-level/python-aliases.nix             |  1 +
 pkgs/top-level/python-packages.nix            |  2 -
 3 files changed, 1 insertion(+), 54 deletions(-)
 delete mode 100644 pkgs/development/python-modules/pylit/default.nix

diff --git a/pkgs/development/python-modules/pylit/default.nix b/pkgs/development/python-modules/pylit/default.nix
deleted file mode 100644
index 0e3a76b0d6c3..000000000000
--- a/pkgs/development/python-modules/pylit/default.nix
+++ /dev/null
@@ -1,52 +0,0 @@
-{
-  lib,
-  buildPythonPackage,
-  fetchFromGitea,
-  flit-core,
-  pytestCheckHook,
-}:
-
-buildPythonPackage rec {
-  version = "0.8.0";
-  pname = "pylit";
-  pyproject = true;
-
-  src = fetchFromGitea {
-    domain = "codeberg.org";
-    owner = "milde";
-    repo = "pylit";
-    tag = version;
-    hash = "sha256-wr2Gz5DCeCVULe9k/DHd+Jhbfc4q4wSoJrcWaJUvWWw=";
-    # fix hash mismatch on linux/darwin platforms
-    postFetch = ''
-      rm -f $out/doc/logo/py{L,l}it-bold-framed.svg
-    '';
-  };
-
-  # replace legacy nose module with pytest
-  postPatch = ''
-    substituteInPlace test/{pylit,pylit_ui}_test.py \
-      --replace-fail "import nose" "import pytest" \
-      --replace-fail "nose.runmodule()" "pytest.main()"
-  '';
-
-  build-system = [
-    flit-core
-  ];
-
-  pythonImportsCheck = [ "pylit" ];
-
-  nativeCheckInputs = [
-    pytestCheckHook
-  ];
-
-  enabledTestPaths = [ "test" ];
-
-  meta = {
-    homepage = "https://codeberg.org/milde/pylit";
-    description = "Bidirectional text/code converter";
-    mainProgram = "pylit";
-    license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ qbisi ];
-  };
-}
diff --git a/pkgs/top-level/python-aliases.nix b/pkgs/top-level/python-aliases.nix
index 6e3f5d95c030..4aaab8ea4c9b 100644
--- a/pkgs/top-level/python-aliases.nix
+++ b/pkgs/top-level/python-aliases.nix
@@ -335,6 +335,7 @@ mapAliases {
   PyICU = throw "'PyICU' has been renamed to/replaced by 'pyicu'"; # Converted to throw 2025-10-29
   PyLD = throw "'PyLD' has been renamed to/replaced by 'pyld'"; # Converted to throw 2025-10-29
   pyliblo = throw "pyliblo is unmaintained upstream and was removed from nixpkgs. Please use pyliblo3 instead"; # added 2025-06-23
+  pylit = throw "'pylit' has been removed as it was broken and unmaintained upstream"; # Added 2025-11-29
   pymc3 = throw "'pymc3' has been renamed to/replaced by 'pymc'"; # Converted to throw 2025-10-29
   pymelcloud = throw "'pymelcloud' has been renamed to/replaced by 'python-melcloud'"; # Converted to throw 2025-10-29
   PyMVGLive = throw "'PyMVGLive' has been renamed to/replaced by 'pymvglive'"; # Converted to throw 2025-10-29
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index c83b9dde6d46..50994fb9362c 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -13654,8 +13654,6 @@ self: super: with self; {
 
   pylion = callPackage ../development/python-modules/pylion { };
 
-  pylit = callPackage ../development/python-modules/pylit { };
-
   pylitejet = callPackage ../development/python-modules/pylitejet { };
 
   pylitterbot = callPackage ../development/python-modules/pylitterbot { };

From 1e285361c82b0501b76d1fbadbebf41573c8b711 Mon Sep 17 00:00:00 2001
From: Bobby Rong <rjl931189261@126.com>
Date: Sat, 29 Nov 2025 10:28:02 +0800
Subject: [PATCH 19/47] xapp-symbolic-icons: 1.0.4 -> 1.0.5

https://github.com/xapp-project/xapp-symbolic-icons/compare/1.0.4...1.0.5
---
 pkgs/by-name/xa/xapp-symbolic-icons/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/xa/xapp-symbolic-icons/package.nix b/pkgs/by-name/xa/xapp-symbolic-icons/package.nix
index 68a787448ba8..f6ce2c05d6f9 100644
--- a/pkgs/by-name/xa/xapp-symbolic-icons/package.nix
+++ b/pkgs/by-name/xa/xapp-symbolic-icons/package.nix
@@ -9,13 +9,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "xapp-symbolic-icons";
-  version = "1.0.4";
+  version = "1.0.5";
 
   src = fetchFromGitHub {
     owner = "xapp-project";
     repo = "xapp-symbolic-icons";
     tag = finalAttrs.version;
-    hash = "sha256-W5sgzy/2N7Nz1L0uUGCYtocbRIa3zxqMJy/aZ4JcxEs=";
+    hash = "sha256-lzxNtalNNKTamoToHWXkqWUoPqQZiWvgETVqLF1ov8Q=";
   };
 
   nativeBuildInputs = [

From b8e0fef39cffb482237b0a6ff8c3509f64808829 Mon Sep 17 00:00:00 2001
From: chillcicada <2210227279@qq.com>
Date: Sat, 29 Nov 2025 10:40:51 +0800
Subject: [PATCH 20/47] fut: init at 3.2.13

---
 pkgs/by-name/fu/fut/package.nix | 55 +++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 pkgs/by-name/fu/fut/package.nix

diff --git a/pkgs/by-name/fu/fut/package.nix b/pkgs/by-name/fu/fut/package.nix
new file mode 100644
index 000000000000..9ece645edce5
--- /dev/null
+++ b/pkgs/by-name/fu/fut/package.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "fut";
+  version = "3.2.13";
+
+  src = fetchFromGitHub {
+    owner = "fusionlanguage";
+    repo = "fut";
+    tag = "fut-${finalAttrs.version}";
+    hash = "sha256-raYlY3HDL5+lv68IRVUXrpypmXfDkgWzHv/qZVECFhs=";
+  };
+
+  buildPhase = ''
+    runHook preBuild
+
+    make
+
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/bin
+    cp fut $out/bin/
+
+    runHook postInstall
+  '';
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+  doInstallCheck = false;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Fusion programming language";
+    longDescription = ''
+      Fusion is a programming language designed for implementing reusable components (libraries) for C, C++, C#, D, Java, JavaScript, Python, Swift, TypeScript and OpenCL C, all from a single codebase.
+    '';
+    homepage = "https://fusion-lang.org";
+    changelog = "https://github.com/fusionlanguage/fut/releases/tag/fut-${finalAttrs.version}";
+    license = lib.licenses.gpl3Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ chillcicada ];
+    mainProgram = "fut";
+  };
+})

From b33a64073f1a7e1e8f6cd5096297644937e4e179 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 02:58:05 +0000
Subject: [PATCH 21/47] percona-server_8_0: 8.0.43-34 -> 8.0.44-35

---
 pkgs/servers/sql/percona-server/8_0.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/sql/percona-server/8_0.nix b/pkgs/servers/sql/percona-server/8_0.nix
index ff1f517af0e8..f206675de9b3 100644
--- a/pkgs/servers/sql/percona-server/8_0.nix
+++ b/pkgs/servers/sql/percona-server/8_0.nix
@@ -43,11 +43,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "percona-server";
-  version = "8.0.43-34";
+  version = "8.0.44-35";
 
   src = fetchurl {
     url = "https://downloads.percona.com/downloads/Percona-Server-8.0/Percona-Server-${finalAttrs.version}/source/tarball/percona-server-${finalAttrs.version}.tar.gz";
-    hash = "sha256-RGm144c1WfNm62MsfCMeAapwDBucE8zoaQhdvh7JID4=";
+    hash = "sha256-4eiNKzXzc5TAhsdIKQvyhQknsOiVSSkbZXDFY+qInYE=";
   };
 
   nativeBuildInputs = [

From c90bc2a94bd6f4418b57491f6e6002df4d548107 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Fri, 28 Nov 2025 10:57:24 -0800
Subject: [PATCH 22/47] nfs-utils: add passthru.updateScript

---
 pkgs/by-name/nf/nfs-utils/package.nix |  2 ++
 pkgs/by-name/nf/nfs-utils/update.sh   | 10 ++++++++++
 2 files changed, 12 insertions(+)
 create mode 100755 pkgs/by-name/nf/nfs-utils/update.sh

diff --git a/pkgs/by-name/nf/nfs-utils/package.nix b/pkgs/by-name/nf/nfs-utils/package.nix
index 0ba6d560dc5b..4b8e09fa1a16 100644
--- a/pkgs/by-name/nf/nfs-utils/package.nix
+++ b/pkgs/by-name/nf/nfs-utils/package.nix
@@ -181,6 +181,8 @@ stdenv.mkDerivation rec {
     nfs4-kerberos = nixosTests.nfs4.kerberos;
   };
 
+  passthru.updateScript = ./update.sh;
+
   meta = with lib; {
     description = "Linux user-space NFS utilities";
 
diff --git a/pkgs/by-name/nf/nfs-utils/update.sh b/pkgs/by-name/nf/nfs-utils/update.sh
new file mode 100755
index 000000000000..5174881c873b
--- /dev/null
+++ b/pkgs/by-name/nf/nfs-utils/update.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p coreutils gnugrep common-updater-scripts nix-update
+
+# tags look like nfs-utils-2-8-4
+version=$(list-git-tags --url=git://git.linux-nfs.org/projects/steved/nfs-utils.git | grep -oP '^nfs-utils-\d+-\d+-\d+$' | sort -rV | head -1)
+# remove nfs-utils- prefix
+version="${version#nfs-utils-}"
+# replace - with .
+version="${version//-/.}"
+nix-update --version="$version" nfs-utils

From 1748fe92284c6bec31b79da30ba4c56e7a926479 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Fri, 28 Nov 2025 12:29:08 -0800
Subject: [PATCH 23/47] nfs-utils: add dotlambda to maintainers

---
 pkgs/by-name/nf/nfs-utils/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/nf/nfs-utils/package.nix b/pkgs/by-name/nf/nfs-utils/package.nix
index 4b8e09fa1a16..59c7c8349508 100644
--- a/pkgs/by-name/nf/nfs-utils/package.nix
+++ b/pkgs/by-name/nf/nfs-utils/package.nix
@@ -195,6 +195,6 @@ stdenv.mkDerivation rec {
     homepage = "https://linux-nfs.org/";
     license = licenses.gpl2Plus;
     platforms = platforms.linux;
-    maintainers = [ ];
+    maintainers = [ lib.maintainers.dotlambda ];
   };
 }

From 282106beed71e397e0afac7953c92d80a7b23c84 Mon Sep 17 00:00:00 2001
From: Sizhe Zhao <prc.zhao@outlook.com>
Date: Sat, 29 Nov 2025 11:11:06 +0800
Subject: [PATCH 24/47] code-cursor: 2.0.64 -> 2.1.39

---
 pkgs/by-name/co/code-cursor/package.nix | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/pkgs/by-name/co/code-cursor/package.nix b/pkgs/by-name/co/code-cursor/package.nix
index 174f22f7b21d..6641067cea1b 100644
--- a/pkgs/by-name/co/code-cursor/package.nix
+++ b/pkgs/by-name/co/code-cursor/package.nix
@@ -16,20 +16,20 @@ let
 
   sources = {
     x86_64-linux = fetchurl {
-      url = "https://downloads.cursor.com/production/25412918da7e74b2686b25d62da1f01cfcd27683/linux/x64/Cursor-2.0.64-x86_64.AppImage";
-      hash = "sha256-zT9GhdwGDWZJQl+WpV2txbmp3/tJRtL6ds1UZQoKNzA=";
+      url = "https://downloads.cursor.com/production/60d42bed27e5775c43ec0428d8c653c49e58e26a/linux/x64/Cursor-2.1.39-x86_64.AppImage";
+      hash = "sha256-SsKhW8q/AzOn1HqykhwaVHyTVm+OqTUiFtda7XDiAho=";
     };
     aarch64-linux = fetchurl {
-      url = "https://downloads.cursor.com/production/25412918da7e74b2686b25d62da1f01cfcd27683/linux/arm64/Cursor-2.0.64-aarch64.AppImage";
-      hash = "sha256-1pN9LfnplKyVUxlICQ2KsxcAn++dZY9hGR4XubHxLUY=";
+      url = "https://downloads.cursor.com/production/60d42bed27e5775c43ec0428d8c653c49e58e26a/linux/arm64/Cursor-2.1.39-aarch64.AppImage";
+      hash = "sha256-m0QNf/ock6hRkOJXqMACBV6mM6/6ZAD6/yues9hGCfU=";
     };
     x86_64-darwin = fetchurl {
-      url = "https://downloads.cursor.com/production/25412918da7e74b2686b25d62da1f01cfcd27683/darwin/x64/Cursor-darwin-x64.dmg";
-      hash = "sha256-lY5BJeauw5VtWuaAu8C9C2inmKFvv/OnCxOicE2Zs48=";
+      url = "https://downloads.cursor.com/production/60d42bed27e5775c43ec0428d8c653c49e58e26a/darwin/x64/Cursor-darwin-x64.dmg";
+      hash = "sha256-kFjKAoRMxRJqBC75LCcbEiwqdunaphj/e2afrFD3NaM=";
     };
     aarch64-darwin = fetchurl {
-      url = "https://downloads.cursor.com/production/25412918da7e74b2686b25d62da1f01cfcd27683/darwin/arm64/Cursor-darwin-arm64.dmg";
-      hash = "sha256-IIJbuRdxTG7kSspspWk8GH9KZsKPyLJahz0iqSvP1B0=";
+      url = "https://downloads.cursor.com/production/60d42bed27e5775c43ec0428d8c653c49e58e26a/darwin/arm64/Cursor-darwin-arm64.dmg";
+      hash = "sha256-9kP0C7KLLSD0Oak75P/4Qt5sIncTwW6Sldz2/9yi4EE=";
     };
   };
 
@@ -39,12 +39,12 @@ in
   inherit useVSCodeRipgrep;
   commandLineArgs = finalCommandLineArgs;
 
-  version = "2.0.64";
+  version = "2.1.39";
   pname = "cursor";
 
   # You can find the current VSCode version in the About dialog:
   # workbench.action.showAboutDialog (Help: About)
-  vscodeVersion = "1.99.3";
+  vscodeVersion = "1.105.1";
 
   executableName = "cursor";
   longName = "Cursor";

From 22b7318c924f5569fe5712cc5e54b8146ae73b7c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 03:24:11 +0000
Subject: [PATCH 25/47] vivaldi: 7.7.3851.54 -> 7.7.3851.56

---
 pkgs/by-name/vi/vivaldi/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/vi/vivaldi/package.nix b/pkgs/by-name/vi/vivaldi/package.nix
index e64ae020a5b3..29fae7be6d39 100644
--- a/pkgs/by-name/vi/vivaldi/package.nix
+++ b/pkgs/by-name/vi/vivaldi/package.nix
@@ -66,7 +66,7 @@
 
 stdenv.mkDerivation rec {
   pname = "vivaldi";
-  version = "7.7.3851.54";
+  version = "7.7.3851.56";
 
   suffix =
     {
@@ -79,8 +79,8 @@ stdenv.mkDerivation rec {
     url = "https://downloads.vivaldi.com/stable/vivaldi-stable_${version}-1_${suffix}.deb";
     hash =
       {
-        aarch64-linux = "sha256-qt+ahh/B9xahVbIMeWgKqg9YXKqFsen1gELas/GBtyU=";
-        x86_64-linux = "sha256-MkIufX19GLXuPH9IlRQboEZrtvrnNlgpMMnVhSj1hUw=";
+        aarch64-linux = "sha256-bnjFgTXts0qaQY3pqzaKp14apDpcCn2/smZ0hT5SbH0=";
+        x86_64-linux = "sha256-kXx0CD3hCTl2JWYWQApO73+UXXeAqqE7cujLXCtVcmI=";
       }
       .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
   };

From 2f9a06030f2a2529db8c6a954185e85e3c543362 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 03:47:55 +0000
Subject: [PATCH 26/47] gemini-cli: 0.17.1 -> 0.18.4

---
 pkgs/by-name/ge/gemini-cli/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ge/gemini-cli/package.nix b/pkgs/by-name/ge/gemini-cli/package.nix
index 882412fc204c..74e6dda39b29 100644
--- a/pkgs/by-name/ge/gemini-cli/package.nix
+++ b/pkgs/by-name/ge/gemini-cli/package.nix
@@ -13,16 +13,16 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "gemini-cli";
-  version = "0.17.1";
+  version = "0.18.4";
 
   src = fetchFromGitHub {
     owner = "google-gemini";
     repo = "gemini-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-zfORrAMVozHiUawWiy3TMT+pjEaRJ/DrHeDFPJiCp38=";
+    hash = "sha256-TSHL3X+p74yFGTNFk9r4r+nnul2etgVdXxy8x9BjsRg=";
   };
 
-  npmDepsHash = "sha256-dKaKRuHzvNJgi8LP4kKsb68O5k2MTqblQ+7cjYqLqs0=";
+  npmDepsHash = "sha256-2Z6YrmUHlYKRU3pR0ZGwQbBgzNFqakBB6LYZqf66nSs=";
 
   nativeBuildInputs = [
     jq

From 2a75a465878bd06eeb895902abc6b4412a0270ef Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 04:09:33 +0000
Subject: [PATCH 27/47] terraform-providers.newrelic_newrelic: 3.75.4 -> 3.76.1

---
 .../networking/cluster/terraform-providers/providers.json   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index 503cd93e727f..065bb100e01a 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -949,13 +949,13 @@
     "vendorHash": "sha256-OAd8SeTqTrH0kMoM2LsK3vM2PI23b3gl57FaJYM9hM0="
   },
   "newrelic_newrelic": {
-    "hash": "sha256-iqqjOaop4h7ffAo3Q80ryIcwXZnKH1vmLGAZ/seRqrM=",
+    "hash": "sha256-mRGLUSHwPu5U2vH8ZCHiiv4a8lrQDts32G5C/shpsc8=",
     "homepage": "https://registry.terraform.io/providers/newrelic/newrelic",
     "owner": "newrelic",
     "repo": "terraform-provider-newrelic",
-    "rev": "v3.75.4",
+    "rev": "v3.76.1",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-AfkCBD1qYDhwUsezUZg27fbENMOQN21gH4dT54AMco4="
+    "vendorHash": "sha256-SUALSNpd/d0chLtrCpzMTJ63Iudpf45DittU30+jark="
   },
   "ns1-terraform_ns1": {
     "hash": "sha256-vSq6502jHjEQEgKmgMpUrid88jhsENOVF+3MA6Zm8lg=",

From f085fde0b46dbfd5896064e70895c2aa94dae4ba Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 04:13:55 +0000
Subject: [PATCH 28/47] dprint-plugins.dprint-plugin-biome: 0.11.6 -> 0.11.7

---
 pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix b/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix
index b68fc6eb9f4b..913250586e34 100644
--- a/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix
+++ b/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix
@@ -1,7 +1,7 @@
 { mkDprintPlugin }:
 mkDprintPlugin {
   description = "Biome (JS/TS) wrapper plugin";
-  hash = "sha256-V8lXwGRWGvl/g2kjqL8Ei1N7V0nuTP2WcLFWJvC7D+A=";
+  hash = "sha256-HYbQ0lyOe91AI2In9YZ6SXNzgEmgYHBvgtU/iVq+Gvc=";
   initConfig = {
     configExcludes = [ "**/node_modules" ];
     configKey = "biome";
@@ -16,6 +16,6 @@ mkDprintPlugin {
   };
   pname = "dprint-plugin-biome";
   updateUrl = "https://plugins.dprint.dev/dprint/biome/latest.json";
-  url = "https://plugins.dprint.dev/biome-0.11.6.wasm";
-  version = "0.11.6";
+  url = "https://plugins.dprint.dev/biome-0.11.7.wasm";
+  version = "0.11.7";
 }

From 0507912a7e3536acfa479830a9042521b57e78ee Mon Sep 17 00:00:00 2001
From: Austin Horstman <khaneliman12@gmail.com>
Date: Fri, 28 Nov 2025 22:17:01 -0600
Subject: [PATCH 29/47] dooit: 3.3.3 -> 3.3.4

Changelog: https://github.com/dooit-org/dooit/blob/v3.3.4/CHANGELOG.md
Signed-off-by: Austin Horstman <khaneliman12@gmail.com>
---
 pkgs/by-name/do/dooit/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/do/dooit/package.nix b/pkgs/by-name/do/dooit/package.nix
index aa155143eaa7..f94f9dc90c8f 100644
--- a/pkgs/by-name/do/dooit/package.nix
+++ b/pkgs/by-name/do/dooit/package.nix
@@ -9,17 +9,17 @@
 }:
 python3.pkgs.buildPythonApplication rec {
   pname = "dooit";
-  version = "3.3.3";
+  version = "3.3.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "dooit-org";
     repo = "dooit";
     tag = "v${version}";
-    hash = "sha256-MWdih+j7spUVEWXCBzF2J/FVXK0TQ8VhrJNDhNfxpQE=";
+    hash = "sha256-A3l+E9B2fWyNpDzMr8WRiiHD/fIcUzcIwtmur+2Mk0k=";
   };
 
-  build-system = with python3.pkgs; [ poetry-core ];
+  build-system = with python3.pkgs; [ hatchling ];
 
   pythonRelaxDeps = [
     "tzlocal"

From ac0d3a4521f76211cd4d2decbe67c0e787695f3c Mon Sep 17 00:00:00 2001
From: Austin Horstman <khaneliman12@gmail.com>
Date: Fri, 28 Nov 2025 22:26:51 -0600
Subject: [PATCH 30/47] yaziPlugins: update on 2025-11-28
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- chmod: 25.5.31-unstable-2025-06-26 → 25.5.31-unstable-2025-11-25
- ouch: 0-unstable-2025-07-13 → 0-unstable-2025-11-25

Signed-off-by: Austin Horstman <khaneliman12@gmail.com>
---
 pkgs/by-name/ya/yazi/plugins/chmod/default.nix | 6 +++---
 pkgs/by-name/ya/yazi/plugins/ouch/default.nix  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/pkgs/by-name/ya/yazi/plugins/chmod/default.nix b/pkgs/by-name/ya/yazi/plugins/chmod/default.nix
index 06f1e8e60e57..562d69b971fd 100644
--- a/pkgs/by-name/ya/yazi/plugins/chmod/default.nix
+++ b/pkgs/by-name/ya/yazi/plugins/chmod/default.nix
@@ -5,13 +5,13 @@
 }:
 mkYaziPlugin {
   pname = "chmod.yazi";
-  version = "25.5.31-unstable-2025-06-26";
+  version = "25.5.31-unstable-2025-11-25";
 
   src = fetchFromGitHub {
     owner = "yazi-rs";
     repo = "plugins";
-    rev = "7c174cc0ae1e07876218868e5e0917308201c081";
-    hash = "sha256-RE93ZNlG6CRGZz7YByXtO0mifduh6MMGls6J9IYwaFA=";
+    rev = "eaf6920b7439fa7164a1c162a249c3c76dc0acd9";
+    hash = "sha256-B6zhZfp3SEaiviIzosI2aD8fk+hQF0epOTKi1qm8V3E=";
   };
 
   meta = {
diff --git a/pkgs/by-name/ya/yazi/plugins/ouch/default.nix b/pkgs/by-name/ya/yazi/plugins/ouch/default.nix
index cdf75687b1bf..53e722f904ee 100644
--- a/pkgs/by-name/ya/yazi/plugins/ouch/default.nix
+++ b/pkgs/by-name/ya/yazi/plugins/ouch/default.nix
@@ -5,13 +5,13 @@
 }:
 mkYaziPlugin {
   pname = "ouch.yazi";
-  version = "0-unstable-2025-07-13";
+  version = "0-unstable-2025-11-25";
 
   src = fetchFromGitHub {
     owner = "ndtoan96";
     repo = "ouch.yazi";
-    rev = "0742fffea5229271164016bf96fb599d861972db";
-    hash = "sha256-C0wG8NQ+zjAMfd+J39Uvs3K4U6e3Qpo1yLPm2xcsAaI=";
+    rev = "cfb91404d3d83bcf7bbf90d689d226699b0e4147";
+    hash = "sha256-6TyKPsapXJMiSRFrKRfP/hamOiG6LfgbPp7flh5tKoo=";
   };
 
   meta = {

From b01d7c6f11faa55a23c2d939f58ebe80950793c8 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 04:40:20 +0000
Subject: [PATCH 31/47] python3Packages.meshcore: 2.2.1 -> 2.2.2

---
 pkgs/development/python-modules/meshcore/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/meshcore/default.nix b/pkgs/development/python-modules/meshcore/default.nix
index 533fc7eb9fc4..752d5d88d896 100644
--- a/pkgs/development/python-modules/meshcore/default.nix
+++ b/pkgs/development/python-modules/meshcore/default.nix
@@ -14,12 +14,12 @@
 
 buildPythonPackage rec {
   pname = "meshcore";
-  version = "2.2.1";
+  version = "2.2.2";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    sha256 = "sha256-HpCbGG+ZQdVWIeE3mJFFQ7w5W+JjcNb+Tb53i9uT5CA=";
+    sha256 = "sha256-vn/vF4avMDwDLL0EMVrrMWkZrZ1GTiUxGyTBOtKvG1I=";
   };
 
   build-system = [ hatchling ];

From 2de8435f283947ed9524541acb9201e076c439ed Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 05:08:38 +0000
Subject: [PATCH 32/47] openlist: 4.1.7 -> 4.1.8

---
 pkgs/by-name/op/openlist/frontend.nix | 8 ++++----
 pkgs/by-name/op/openlist/package.nix  | 6 +++---
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/op/openlist/frontend.nix b/pkgs/by-name/op/openlist/frontend.nix
index 91e9760f03ed..35f1c20c5d9f 100644
--- a/pkgs/by-name/op/openlist/frontend.nix
+++ b/pkgs/by-name/op/openlist/frontend.nix
@@ -10,18 +10,18 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "openlist-frontend";
-  version = "4.1.7";
+  version = "4.1.8";
 
   src = fetchFromGitHub {
     owner = "OpenListTeam";
     repo = "OpenList-Frontend";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-eJMBtskpTSptsXmQo70rfyEvRTt63L7VIWUFFgf/EQE=";
+    hash = "sha256-TzRqMyKDTuqFohMqoBAPkLrJ/eYveHYocsxo8WuNUWY=";
   };
 
   i18n = fetchzip {
     url = "https://github.com/OpenListTeam/OpenList-Frontend/releases/download/v${finalAttrs.version}/i18n.tar.gz";
-    hash = "sha256-pLBuK4Lt2TGuIb8Y7f77OdR6VkYgVZG6zCXS17e8+8k=";
+    hash = "sha256-8b3u0yezYCYLyKPTM/QRXArqhbRC1foT3bFoNhsdYiw=";
     stripRoot = false;
   };
 
@@ -33,7 +33,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   pnpmDeps = pnpm_9.fetchDeps {
     inherit (finalAttrs) pname version src;
     fetcherVersion = 2;
-    hash = "sha256-kd3mBYlJ8ui0kawujQQalZnLsFh5ck9e3xLj7r6TxkE=";
+    hash = "sha256-bPI8g7wN9k1fBzj+F9wRDw7XPGT6DKDllbyOmUKi7HY=";
   };
 
   buildPhase = ''
diff --git a/pkgs/by-name/op/openlist/package.nix b/pkgs/by-name/op/openlist/package.nix
index 3432035f28a3..bbe610845cb0 100644
--- a/pkgs/by-name/op/openlist/package.nix
+++ b/pkgs/by-name/op/openlist/package.nix
@@ -11,13 +11,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "openlist";
-  version = "4.1.7";
+  version = "4.1.8";
 
   src = fetchFromGitHub {
     owner = "OpenListTeam";
     repo = "OpenList";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-3Q1cskjphABufP9lzvzjaKX/8hXRabU1r8n/afEh5Zc=";
+    hash = "sha256-R3R5DfI+lctpFh68z9zsNhNc3siVIOj02lclYIYElzg=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;
@@ -33,7 +33,7 @@ buildGoModule (finalAttrs: {
   frontend = callPackage ./frontend.nix { };
 
   proxyVendor = true;
-  vendorHash = "sha256-s2hG49s/ui3v3qysBCak6A5z9QE8YQS0qQ4w2Pup3Fg=";
+  vendorHash = "sha256-Kx553w93A6nCBJTejY2TEUQhfYiByivMAfcVsWa1z6U=";
 
   buildInputs = [ fuse ];
 

From 92b163cbc9ccd7a18a985536e02fd261257a690c Mon Sep 17 00:00:00 2001
From: moni-dz <lythe1107@gmail.com>
Date: Thu, 27 Nov 2025 06:22:14 +0800
Subject: [PATCH 33/47] contour: fix build on darwin

---
 pkgs/by-name/co/contour/package.nix              | 11 +++++++----
 .../contour/remove-deep-flag-from-codesign.diff  | 16 ++++++++++++++++
 2 files changed, 23 insertions(+), 4 deletions(-)
 create mode 100644 pkgs/by-name/co/contour/remove-deep-flag-from-codesign.diff

diff --git a/pkgs/by-name/co/contour/package.nix b/pkgs/by-name/co/contour/package.nix
index 61307ebbdf4d..df7d41f4883b 100644
--- a/pkgs/by-name/co/contour/package.nix
+++ b/pkgs/by-name/co/contour/package.nix
@@ -37,7 +37,10 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-jgasZhdcJ+UF3VIl8HLcxBayvbA/dkaOG8UtANRgeP4=";
   };
 
-  patches = [ ./dont-fix-app-bundle.diff ];
+  patches = lib.optionals stdenv.hostPlatform.isDarwin [
+    ./dont-fix-app-bundle.diff
+    ./remove-deep-flag-from-codesign.diff
+  ];
 
   outputs = [
     "out"
@@ -82,17 +85,17 @@ stdenv.mkDerivation (finalAttrs: {
     mkdir -p $out/nix-support $terminfo/share
   ''
   + lib.optionalString stdenv.hostPlatform.isDarwin ''
-    mkdir $out/Applications
+    mkdir $out/Applications $out/bin
     cp -r $out/contour.app/Contents/Resources/terminfo $terminfo/share
     mv $out/contour.app $out/Applications
-    ln -s $out/bin $out/Applications/contour.app/Contents/MacOS
+    ln -s $out/Applications/contour.app/Contents/MacOS/contour $out/bin/contour
   ''
   + lib.optionalString stdenv.hostPlatform.isLinux ''
     mv $out/share/terminfo $terminfo/share/
+    rm -r $out/share/contour
   ''
   + ''
     echo "$terminfo" >> $out/nix-support/propagated-user-env-packages
-    rm -r $out/share/contour
   '';
 
   passthru.tests.test = nixosTests.terminal-emulators.contour;
diff --git a/pkgs/by-name/co/contour/remove-deep-flag-from-codesign.diff b/pkgs/by-name/co/contour/remove-deep-flag-from-codesign.diff
new file mode 100644
index 000000000000..c4166b41d963
--- /dev/null
+++ b/pkgs/by-name/co/contour/remove-deep-flag-from-codesign.diff
@@ -0,0 +1,16 @@
+diff --git a/remove-deep-flag-from-codesign.diff b/remove-deep-flag-from-codesign.diff
+new file mode 100644
+index 0000000000..e69de29bb2
+diff --git a/src/contour/CMakeLists.txt b/src/contour/CMakeLists.txt
+index 3c7ac83720..55e6830bfc 100644
+--- a/src/contour/CMakeLists.txt
++++ b/src/contour/CMakeLists.txt
+@@ -510,7 +510,7 @@
+         # Ensure code signature
+         execute_process(
+             WORKING_DIRECTORY \"${CMAKE_CURRENT_BINARY_DIR}\"
+-            COMMAND codesign --force --deep --sign \"${CODE_SIGN_CERTIFICATE_ID}\" \"${BUNDLE_APP}\"
++            COMMAND codesign --force --sign \"${CODE_SIGN_CERTIFICATE_ID}\" \"${BUNDLE_APP}/Contents/MacOS/contour\"
+         )
+     ")
+ else()

From e9810b5170c7eb2fa6f8e5a9bc628eb07bca4d95 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 05:34:51 +0000
Subject: [PATCH 34/47] bitrise: 2.34.7 -> 2.35.3

---
 pkgs/by-name/bi/bitrise/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/bi/bitrise/package.nix b/pkgs/by-name/bi/bitrise/package.nix
index 833e10b07572..26e3e7bb7012 100644
--- a/pkgs/by-name/bi/bitrise/package.nix
+++ b/pkgs/by-name/bi/bitrise/package.nix
@@ -6,13 +6,13 @@
 }:
 buildGoModule rec {
   pname = "bitrise";
-  version = "2.34.7";
+  version = "2.35.3";
 
   src = fetchFromGitHub {
     owner = "bitrise-io";
     repo = "bitrise";
     rev = "v${version}";
-    hash = "sha256-5L44yqHk2fvSQ7cPGB2gf2lJfQGfIg8g2sGrqDxiyMY=";
+    hash = "sha256-RjtOo8+vXKeZbTtnwmUq1t8WwZUJypSUoQSJtr9xd70=";
   };
 
   # many tests rely on writable $HOME/.bitrise and require network access

From e0d4a11f92312a6457111cdbdedfd75070f98265 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 05:36:20 +0000
Subject: [PATCH 35/47] fastly: 13.0.0 -> 13.1.0

---
 pkgs/by-name/fa/fastly/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/fa/fastly/package.nix b/pkgs/by-name/fa/fastly/package.nix
index 42fc1eb6d833..55ef09e4aa26 100644
--- a/pkgs/by-name/fa/fastly/package.nix
+++ b/pkgs/by-name/fa/fastly/package.nix
@@ -12,13 +12,13 @@
 
 buildGoModule rec {
   pname = "fastly";
-  version = "13.0.0";
+  version = "13.1.0";
 
   src = fetchFromGitHub {
     owner = "fastly";
     repo = "cli";
     tag = "v${version}";
-    hash = "sha256-7GrdwLEjs1KOm5AGXMy1MtfD4RfbhX4Y/5Sqs0ttYKU=";
+    hash = "sha256-42QWj9I5XxyaoE/F4JpKRMcBNLhtT1LiP6fJo7Fih2g=";
     # The git commit is part of the `fastly version` original output;
     # leave that output the same in nixpkgs. Use the `.git` directory
     # to retrieve the commit SHA, and remove the directory afterwards,
@@ -35,7 +35,7 @@ buildGoModule rec {
     "cmd/fastly"
   ];
 
-  vendorHash = "sha256-lHAZPfm3VcYl1M1CYe2j6r9pZCTzN8b0bTN5z7guoiA=";
+  vendorHash = "sha256-cf+9PXGzNWuRVGlpY2rtq9/QMsGs/+pg4H1Qb+Q6HNU=";
 
   nativeBuildInputs = [
     installShellFiles

From 56bdac672a551ba24befdd359f05142b6059f560 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 05:41:56 +0000
Subject: [PATCH 36/47] signal-desktop: 7.80.0 -> 7.80.1

---
 pkgs/by-name/si/signal-desktop/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/si/signal-desktop/package.nix b/pkgs/by-name/si/signal-desktop/package.nix
index 5df85ad04132..50417fb2f942 100644
--- a/pkgs/by-name/si/signal-desktop/package.nix
+++ b/pkgs/by-name/si/signal-desktop/package.nix
@@ -52,13 +52,13 @@ let
     '';
   });
 
-  version = "7.80.0";
+  version = "7.80.1";
 
   src = fetchFromGitHub {
     owner = "signalapp";
     repo = "Signal-Desktop";
     tag = "v${version}";
-    hash = "sha256-CU304F6Ib4j/0/BqGUidV9uYUrsvIahpsCYVgr8MWFg=";
+    hash = "sha256-q4eRrMXYu1jVi1/gcFrEcwhmwtiEv2JOepyxf0wTPws=";
   };
 
   sticker-creator = stdenv.mkDerivation (finalAttrs: {
@@ -142,7 +142,7 @@ stdenv.mkDerivation (finalAttrs: {
   env = {
     ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
     SIGNAL_ENV = "production";
-    SOURCE_DATE_EPOCH = 1763594452;
+    SOURCE_DATE_EPOCH = 1764091164;
   };
 
   preBuild = ''

From 5de532a4ab5d42cf3cf15b40309f211f137f94dd Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 07:03:26 +0000
Subject: [PATCH 37/47] postgresqlPackages.plpgsql_check: 2.8.3 -> 2.8.5

---
 pkgs/servers/sql/postgresql/ext/plpgsql_check.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/sql/postgresql/ext/plpgsql_check.nix b/pkgs/servers/sql/postgresql/ext/plpgsql_check.nix
index d43385cc5e8d..c997fa131ebb 100644
--- a/pkgs/servers/sql/postgresql/ext/plpgsql_check.nix
+++ b/pkgs/servers/sql/postgresql/ext/plpgsql_check.nix
@@ -8,13 +8,13 @@
 
 postgresqlBuildExtension (finalAttrs: {
   pname = "plpgsql-check";
-  version = "2.8.3";
+  version = "2.8.5";
 
   src = fetchFromGitHub {
     owner = "okbob";
     repo = "plpgsql_check";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-eGD6DwXx6hUd0hngjbaSZOb2gDYEk820R8YuZDs6UUw=";
+    hash = "sha256-1EMK6WTJ/LBB0oD4i+Lni8wMh80HZtop8uRqwm3XwKw=";
   };
 
   passthru.tests.extension = postgresqlTestExtension {

From ebd006c083cdff0f02125457ff2a56df0593305b Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 07:09:29 +0000
Subject: [PATCH 38/47] iplookup-gtk: 0.4.2 -> 0.5.0

---
 pkgs/by-name/ip/iplookup-gtk/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ip/iplookup-gtk/package.nix b/pkgs/by-name/ip/iplookup-gtk/package.nix
index e9f24c7b3e4d..b0b022ed7571 100644
--- a/pkgs/by-name/ip/iplookup-gtk/package.nix
+++ b/pkgs/by-name/ip/iplookup-gtk/package.nix
@@ -13,14 +13,14 @@
 
 python3Packages.buildPythonPackage rec {
   pname = "iplookup-gtk";
-  version = "0.4.2";
+  version = "0.5.0";
   pyproject = false; # Built with meson
 
   src = fetchFromGitHub {
     owner = "Bytezz";
     repo = "IPLookup-gtk";
     tag = "v${version}";
-    hash = "sha256-9v4v8LWTGHtQKtiJPZSDJyHMujnwRv7cyRtmdMDnyFo=";
+    hash = "sha256-pRTN91uwjYu3Li4NbDvJ6l9gikBnXj0j+ApMWpuLUTU=";
   };
 
   nativeBuildInputs = [

From b4188800c3fe6b7d7b955dc17e8cc33f06408234 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 08:01:48 +0000
Subject: [PATCH 39/47] ghostfolio: 2.218.0 -> 2.219.0

---
 pkgs/by-name/gh/ghostfolio/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/gh/ghostfolio/package.nix b/pkgs/by-name/gh/ghostfolio/package.nix
index 252ad1ce03f6..280c7161c57d 100644
--- a/pkgs/by-name/gh/ghostfolio/package.nix
+++ b/pkgs/by-name/gh/ghostfolio/package.nix
@@ -11,13 +11,13 @@
 
 buildNpmPackage rec {
   pname = "ghostfolio";
-  version = "2.218.0";
+  version = "2.219.0";
 
   src = fetchFromGitHub {
     owner = "ghostfolio";
     repo = "ghostfolio";
     tag = version;
-    hash = "sha256-r/C/P+tdfaTLe0yCa5XPUg8O4NO9cHEF7EXzyfpkpD8=";
+    hash = "sha256-WXBKUvwfllH6HQFgUBcUSaaHqhMrWU3V969ZtJ9y7KQ=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;
@@ -27,7 +27,7 @@ buildNpmPackage rec {
     '';
   };
 
-  npmDepsHash = "sha256-EMLQUZaL6u5jsOgBa67bivUHItJo8JeGZLbIq6tJdgE=";
+  npmDepsHash = "sha256-Xn+8+CHgCQ6Zh2/HUbl1xW8LkIypCfHAFzflc6vIeKQ=";
 
   nativeBuildInputs = [
     prisma

From 821cf9d7f24d8ceb10bc07327b32b9b73fc8f840 Mon Sep 17 00:00:00 2001
From: comonad <hjsdbb1@gmail.com>
Date: Sat, 29 Nov 2025 15:35:15 +0800
Subject: [PATCH 40/47] autocorrect: 2.14.1 -> 2.16.2

---
 pkgs/by-name/au/autocorrect/package.nix | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/au/autocorrect/package.nix b/pkgs/by-name/au/autocorrect/package.nix
index d407e6c99c29..53c0edf5ffb9 100644
--- a/pkgs/by-name/au/autocorrect/package.nix
+++ b/pkgs/by-name/au/autocorrect/package.nix
@@ -2,20 +2,21 @@
   lib,
   rustPlatform,
   fetchFromGitHub,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "autocorrect";
-  version = "2.14.1";
+  version = "2.16.2";
 
   src = fetchFromGitHub {
     owner = "huacnlee";
     repo = "autocorrect";
-    rev = "5af1bc295d48b0fd04f7dbc35ea99d479f682e78";
-    hash = "sha256-tbN+48a8NnwirJqUci0LgxsvJI0KzuG/aDvV/Yr8Xu8=";
+    rev = "v${finalAttrs.version}";
+    hash = "sha256-IpBEmgZ40CFHMISP4tRzt2c2bE2Di9tn8e+/YJPg9RA=";
   };
 
-  cargoHash = "sha256-cEiIs7wvfjP5/tkRtYb2XEZfssw09zkbOrqZsOX9ajQ=";
+  cargoHash = "sha256-sn+72+Qq7qppaiiiMS46RXVhFcm27lCPgXmAIYORKU8=";
 
   cargoBuildFlags = [
     "-p"
@@ -26,6 +27,8 @@ rustPlatform.buildRustPackage (finalAttrs: {
     "autocorrect-cli"
   ];
 
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Linter and formatter for help you improve copywriting, to correct spaces, punctuations between CJK (Chinese, Japanese, Korean)";
     mainProgram = "autocorrect";

From f69e5ee54844db7aff0fd9f399bf833e824cb793 Mon Sep 17 00:00:00 2001
From: Moraxyc <i@qaq.li>
Date: Sun, 16 Nov 2025 01:36:24 +0800
Subject: [PATCH 41/47] hath-rust: 1.14.0 -> 1.14.1

---
 pkgs/by-name/ha/hath-rust/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ha/hath-rust/package.nix b/pkgs/by-name/ha/hath-rust/package.nix
index caba2f932eb2..5fd02637da7a 100644
--- a/pkgs/by-name/ha/hath-rust/package.nix
+++ b/pkgs/by-name/ha/hath-rust/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "hath-rust";
-  version = "1.14.0";
+  version = "1.14.1";
 
   src = fetchFromGitHub {
     owner = "james58899";
     repo = "hath-rust";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-shixrhIl4bbZQrJea2Dx4bbeGXOaPvMKUHgHq+JfAWs=";
+    hash = "sha256-bo9MXMk/Dfa8cXjeWn14MF6rmVcWYes0WeVn1oC2y0k=";
   };
 
-  cargoHash = "sha256-eoki+QXqBC26PC7qNlOLlgkXxc6Fsx7T4o9GIbAaO8Y=";
+  cargoHash = "sha256-4xty4nUs81nq2Ax7koFplHlscpG1Pdbd5zwd/lQwbmg=";
 
   nativeInstallCheckInputs = [ versionCheckHook ];
   versionCheckProgramArg = "--version";

From ec1aa052b4f5d055d923c77aadcda20603fe2956 Mon Sep 17 00:00:00 2001
From: Stzx <silence.m@hotmail.com>
Date: Fri, 28 Nov 2025 11:23:07 +0800
Subject: [PATCH 42/47] winboat: 0.8.7 -> 0.9.0

---
 pkgs/by-name/wi/winboat/guest-server.nix |  2 +-
 pkgs/by-name/wi/winboat/package.nix      | 14 ++++++++------
 2 files changed, 9 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/wi/winboat/guest-server.nix b/pkgs/by-name/wi/winboat/guest-server.nix
index 15ae46e6ae44..8651c181da91 100644
--- a/pkgs/by-name/wi/winboat/guest-server.nix
+++ b/pkgs/by-name/wi/winboat/guest-server.nix
@@ -7,7 +7,7 @@ buildGoModule {
   inherit (winboat) version src;
   modRoot = "guest_server";
   pname = "winboat-guest-server";
-  vendorHash = "sha256-JglpTv1hkqxmcbD8xmG80Sukul5hzGyyANfe+GeKzQ4=";
+  vendorHash = "sha256-vpBvSaqbbJ8sHNMm299z/3Qb7FKMWbr62amtKT3acYk=";
 
   env = {
     GOOS = "windows";
diff --git a/pkgs/by-name/wi/winboat/package.nix b/pkgs/by-name/wi/winboat/package.nix
index 68c725210acc..9a5725e2d263 100644
--- a/pkgs/by-name/wi/winboat/package.nix
+++ b/pkgs/by-name/wi/winboat/package.nix
@@ -8,6 +8,7 @@
   usbutils,
   freerdp,
   docker-compose,
+  podman-compose,
   pkgsCross,
   buildNpmPackage,
   fetchFromGitHub,
@@ -15,15 +16,16 @@
   copyDesktopItems,
   nix-update-script,
 }:
+
 buildNpmPackage (final: {
   pname = "winboat";
-  version = "0.8.7";
+  version = "0.9.0";
 
   src = fetchFromGitHub {
     owner = "TibixDev";
     repo = "winboat";
     tag = "v${final.version}";
-    hash = "sha256-30WzvdY8Zn4CAj76bbC0bevuTeOSfDo40FPWof/39Es=";
+    hash = "sha256-DgH6CAZf+XIgBav2xd2FF2MGRgGIyOs/98vqWHA3XYw=";
   };
 
   postPatch = ''
@@ -40,7 +42,7 @@ buildNpmPackage (final: {
   buildInputs = [ udev ];
 
   env.ELECTRON_SKIP_BINARY_DOWNLOAD = 1;
-  npmDepsHash = "sha256-nW+cGX4Y0Ndn1ubo4U3n8ZrjM5NkxIt4epB0AghPrNQ=";
+  npmDepsHash = "sha256-DLkI9a030uM2X1et94e4nd/HEyw5ugtK8NEAn/J8p9U=";
   nodejs = nodejs_24;
   makeCacheWritable = true;
 
@@ -60,8 +62,7 @@ buildNpmPackage (final: {
     npm exec electron-builder --linux -- \
       --dir \
       -c.electronDist=${electron.dist} \
-      -c.electronVersion=${electron.version} \
-      -c.npmRebuild=false
+      -c.electronVersion=${electron.version}
   '';
 
   installPhase = ''
@@ -72,7 +73,7 @@ buildNpmPackage (final: {
     cp -r dist/linux-unpacked/resources $out/share/winboat/resources
 
     # install winboat icon
-    install -Dm444 icons/icon.png $out/share/icons/hicolor/256x256/apps/winboat.png
+    install -Dm444 icons/winboat_logo.svg $out/share/icons/hicolor/256x256/apps/winboat.svg
 
     # copy the the winboat-guest-server executable and generate the zip
     cp ${lib.getExe final.guest-server} $out/share/winboat/resources/guest_server/winboat_guest_server.exe
@@ -89,6 +90,7 @@ buildNpmPackage (final: {
         lib.makeBinPath [
           usbutils
           docker-compose
+          podman-compose
           freerdp
         ]
       }

From 5ee47c1586442cc340cc1d5965759f6bf88940b8 Mon Sep 17 00:00:00 2001
From: kashw2 <supra4keanu@hotmail.com>
Date: Sat, 29 Nov 2025 19:38:06 +1000
Subject: [PATCH 43/47] nextcloud-talk-desktop: fix missing libEGL.so.1

---
 pkgs/by-name/ne/nextcloud-talk-desktop/package.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkgs/by-name/ne/nextcloud-talk-desktop/package.nix b/pkgs/by-name/ne/nextcloud-talk-desktop/package.nix
index 327d698d5368..ae163564915b 100644
--- a/pkgs/by-name/ne/nextcloud-talk-desktop/package.nix
+++ b/pkgs/by-name/ne/nextcloud-talk-desktop/package.nix
@@ -20,6 +20,7 @@
   libGL,
   libglvnd,
   systemd,
+  patchelf,
   nix-update-script,
   undmg,
   makeWrapper,
@@ -125,6 +126,11 @@ let
       runHook postInstall
     '';
 
+    postFixup = ''
+      patchelf --add-needed libGL.so.1 --add-needed libEGL.so.1 \
+        "$out/opt/Nextcloud Talk-linux-x64/Nextcloud Talk"
+    '';
+
     passthru.updateScript = nix-update-script { };
 
     meta = meta // {

From bb11fb7003fb7ee2eccd04a19d809d2fff4716e9 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 10:02:12 +0000
Subject: [PATCH 44/47] cosmic-reader: 0-unstable-2025-10-12 ->
 0-unstable-2025-11-25

---
 pkgs/by-name/co/cosmic-reader/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/co/cosmic-reader/package.nix b/pkgs/by-name/co/cosmic-reader/package.nix
index f865177284e3..926ad3856095 100644
--- a/pkgs/by-name/co/cosmic-reader/package.nix
+++ b/pkgs/by-name/co/cosmic-reader/package.nix
@@ -19,13 +19,13 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cosmic-reader";
-  version = "0-unstable-2025-10-12";
+  version = "0-unstable-2025-11-25";
 
   src = fetchFromGitHub {
     owner = "pop-os";
     repo = "cosmic-reader";
-    rev = "35bf8c556bbff415e1149d7cbf267d2b6ff6f300";
-    hash = "sha256-721Y1VbBPWMXcH8rt5AyO2GFV1Q70kHnG4TAPmeX414=";
+    rev = "8459e02be5bd778d6e06e2f0c4f561f03dd14a85";
+    hash = "sha256-R0t+JkSUkDJkvnj3mjDFN3pcpqI0VkuRpgteXqcEH6Y=";
   };
 
   cargoHash = "sha256-4ofAtZN3FpYwNahinldALbdEJA5lDwa+CUsVIISnSTc=";

From 453e068ca0f27f4f4f046aa0084e6080beafd581 Mon Sep 17 00:00:00 2001
From: aleksana <me@aleksana.moe>
Date: Sat, 29 Nov 2025 18:04:56 +0800
Subject: [PATCH 45/47] treewide: fix wrong github releases/tag page url

---
 pkgs/by-name/ec/ec2-instance-selector/package.nix               | 2 +-
 pkgs/by-name/et/etterna/package.nix                             | 2 +-
 pkgs/by-name/gl/glas/package.nix                                | 2 +-
 pkgs/by-name/gr/grafanactl/package.nix                          | 2 +-
 pkgs/by-name/ni/nix-your-shell/package.nix                      | 2 +-
 pkgs/by-name/po/portal/package.nix                              | 2 +-
 pkgs/by-name/si/siglo/package.nix                               | 2 +-
 pkgs/by-name/xo/xonsh/xontribs/xontrib-jedi/default.nix         | 2 +-
 pkgs/by-name/yt/ytmdesktop/package.nix                          | 2 +-
 pkgs/by-name/zc/zcfan/package.nix                               | 2 +-
 pkgs/development/python-modules/odc-geo/default.nix             | 2 +-
 pkgs/development/python-modules/odc-loader/default.nix          | 2 +-
 pkgs/development/python-modules/odc-stac/default.nix            | 2 +-
 pkgs/development/python-modules/pylibrespot-java/default.nix    | 2 +-
 pkgs/development/python-modules/pyotb/default.nix               | 2 +-
 .../home-assistant/custom-components/daikin_onecta/package.nix  | 2 +-
 16 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/pkgs/by-name/ec/ec2-instance-selector/package.nix b/pkgs/by-name/ec/ec2-instance-selector/package.nix
index a4fa861e10d2..626d370f14e1 100644
--- a/pkgs/by-name/ec/ec2-instance-selector/package.nix
+++ b/pkgs/by-name/ec/ec2-instance-selector/package.nix
@@ -41,7 +41,7 @@ buildGoModule (finalAttrs: {
   meta = {
     description = "Recommends instance types based on resource criteria like vcpus and memory";
     homepage = "https://github.com/aws/amazon-ec2-instance-selector";
-    changelog = "https://github.com/aws/amazon-ec2-instance-selector/tags/v${finalAttrs.version}";
+    changelog = "https://github.com/aws/amazon-ec2-instance-selector/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ wcarlsen ];
     mainProgram = "ec2-instance-selector";
diff --git a/pkgs/by-name/et/etterna/package.nix b/pkgs/by-name/et/etterna/package.nix
index 593b66bd10a1..842495a98dab 100644
--- a/pkgs/by-name/et/etterna/package.nix
+++ b/pkgs/by-name/et/etterna/package.nix
@@ -106,7 +106,7 @@ stdenv.mkDerivation (finalAttrs: {
   meta = {
     description = "Advanced cross-platform rhythm game focused on keyboard play";
     homepage = "https://etternaonline.com";
-    changelog = "https://github.com/etternagame/etterna/release/tag/v${finalAttrs.version}";
+    changelog = "https://github.com/etternagame/etterna/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ alikindsys ];
     mainProgram = "etterna";
diff --git a/pkgs/by-name/gl/glas/package.nix b/pkgs/by-name/gl/glas/package.nix
index 5e81f0a2485a..5c7bc34d4dbd 100644
--- a/pkgs/by-name/gl/glas/package.nix
+++ b/pkgs/by-name/gl/glas/package.nix
@@ -25,7 +25,7 @@ rustPlatform.buildRustPackage rec {
   meta = {
     description = "Language server for the Gleam programming language";
     homepage = "https://github.com/maurobalbi/glas";
-    changelog = "https://github.com/maurobalbi/glas/tag/v${version}";
+    changelog = "https://github.com/maurobalbi/glas/releases/tag/v${version}";
     license = with lib.licenses; [
       asl20
       mit
diff --git a/pkgs/by-name/gr/grafanactl/package.nix b/pkgs/by-name/gr/grafanactl/package.nix
index 81f057479a2e..dad822082675 100644
--- a/pkgs/by-name/gr/grafanactl/package.nix
+++ b/pkgs/by-name/gr/grafanactl/package.nix
@@ -44,7 +44,7 @@ buildGoModule (finalAttrs: {
   meta = {
     description = "Tool designed to simplify interaction with Grafana instances";
     homepage = "https://github.com/grafana/grafanactl";
-    changelog = "https://github.com/grafana/grafanactl/tags/v${finalAttrs.version}";
+    changelog = "https://github.com/grafana/grafanactl/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ wcarlsen ];
     mainProgram = "grafanactl";
diff --git a/pkgs/by-name/ni/nix-your-shell/package.nix b/pkgs/by-name/ni/nix-your-shell/package.nix
index 78271adfcb1c..8d3bbcb32cfe 100644
--- a/pkgs/by-name/ni/nix-your-shell/package.nix
+++ b/pkgs/by-name/ni/nix-your-shell/package.nix
@@ -32,7 +32,7 @@ rustPlatform.buildRustPackage rec {
     mainProgram = "nix-your-shell";
     description = "`nix` and `nix-shell` wrapper for shells other than `bash`";
     homepage = "https://github.com/MercuryTechnologies/nix-your-shell";
-    changelog = "https://github.com/MercuryTechnologies/nix-your-shell/releases/tags/v${version}";
+    changelog = "https://github.com/MercuryTechnologies/nix-your-shell/releases/tag/v${version}";
     license = [ lib.licenses.mit ];
     maintainers = with lib.maintainers; [ _9999years ];
   };
diff --git a/pkgs/by-name/po/portal/package.nix b/pkgs/by-name/po/portal/package.nix
index 2d3eeef1dfbd..b30c527dccbd 100644
--- a/pkgs/by-name/po/portal/package.nix
+++ b/pkgs/by-name/po/portal/package.nix
@@ -23,7 +23,7 @@ buildGoModule rec {
   meta = {
     description = "Quick and easy command-line file transfer utility from any computer to another";
     homepage = "https://github.com/SpatiumPortae/portal";
-    changelog = "https://github.com/SpatiumPortae/portal/tag/v${version}";
+    changelog = "https://github.com/SpatiumPortae/portal/releases/tag/v${version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ tennox ];
     mainProgram = "portal";
diff --git a/pkgs/by-name/si/siglo/package.nix b/pkgs/by-name/si/siglo/package.nix
index fd84c2159614..e53f0f819ecc 100644
--- a/pkgs/by-name/si/siglo/package.nix
+++ b/pkgs/by-name/si/siglo/package.nix
@@ -64,7 +64,7 @@ stdenv.mkDerivation rec {
     description = "GTK app to sync InfiniTime watch with PinePhone";
     mainProgram = "siglo";
     homepage = "https://github.com/theironrobin/siglo";
-    changelog = "https://github.com/theironrobin/siglo/tags/v${version}";
+    changelog = "https://github.com/theironrobin/siglo/releases/tag/v${version}";
     license = lib.licenses.mpl20;
     maintainers = [ ];
     platforms = lib.platforms.linux;
diff --git a/pkgs/by-name/xo/xonsh/xontribs/xontrib-jedi/default.nix b/pkgs/by-name/xo/xonsh/xontribs/xontrib-jedi/default.nix
index a6ae8f5e23dd..aea763c730f5 100644
--- a/pkgs/by-name/xo/xonsh/xontribs/xontrib-jedi/default.nix
+++ b/pkgs/by-name/xo/xonsh/xontribs/xontrib-jedi/default.nix
@@ -52,7 +52,7 @@ buildPythonPackage rec {
   meta = {
     description = "Xonsh Python mode completions using jedi";
     homepage = "https://github.com/xonsh/xontrib-jedi";
-    changelog = "https://github.com/xonsh/xontrib-jedi.releases/tag/${version}";
+    changelog = "https://github.com/xonsh/xontrib-jedi/releases/tag/${version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ greg ];
   };
diff --git a/pkgs/by-name/yt/ytmdesktop/package.nix b/pkgs/by-name/yt/ytmdesktop/package.nix
index 37ffeed4eeab..10e5b31ca831 100644
--- a/pkgs/by-name/yt/ytmdesktop/package.nix
+++ b/pkgs/by-name/yt/ytmdesktop/package.nix
@@ -142,7 +142,7 @@ stdenv.mkDerivation (finalAttrs: {
   passthru.updateScript = nix-update-script { };
 
   meta = {
-    changelog = "https://github.com/ytmdesktop/ytmdesktop/tag/v${finalAttrs.version}";
+    changelog = "https://github.com/ytmdesktop/ytmdesktop/releases/tag/v${finalAttrs.version}";
     description = "Desktop App for YouTube Music";
     downloadPage = "https://github.com/ytmdesktop/ytmdesktop/releases";
     homepage = "https://ytmdesktop.app/";
diff --git a/pkgs/by-name/zc/zcfan/package.nix b/pkgs/by-name/zc/zcfan/package.nix
index 3468ac8b399c..84e80355a9e6 100644
--- a/pkgs/by-name/zc/zcfan/package.nix
+++ b/pkgs/by-name/zc/zcfan/package.nix
@@ -35,7 +35,7 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Zero-configuration fan daemon for ThinkPads";
     mainProgram = "zcfan";
     homepage = "https://github.com/cdown/zcfan";
-    changelog = "https://github.com/cdown/zcfan/tags/${finalAttrs.version}";
+    changelog = "https://github.com/cdown/zcfan/releases/tag/${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [
       luftmensch-luftmensch
diff --git a/pkgs/development/python-modules/odc-geo/default.nix b/pkgs/development/python-modules/odc-geo/default.nix
index b0bb434669f0..671d79881f05 100644
--- a/pkgs/development/python-modules/odc-geo/default.nix
+++ b/pkgs/development/python-modules/odc-geo/default.nix
@@ -111,7 +111,7 @@ buildPythonPackage rec {
       with geospatial metadata and geo-registered `xarray` rasters.
     '';
     homepage = "https://github.com/opendatacube/odc-geo/";
-    changelog = "https://github.com/opendatacube/odc-geo/tag/${src.tag}";
+    changelog = "https://github.com/opendatacube/odc-geo/releases/tag/${src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ daspk04 ];
   };
diff --git a/pkgs/development/python-modules/odc-loader/default.nix b/pkgs/development/python-modules/odc-loader/default.nix
index 6fb6f3422ca8..a009f6af2eb0 100644
--- a/pkgs/development/python-modules/odc-loader/default.nix
+++ b/pkgs/development/python-modules/odc-loader/default.nix
@@ -72,7 +72,7 @@ buildPythonPackage rec {
   meta = {
     description = "Tools for constructing xarray objects from parsed metadata";
     homepage = "https://github.com/opendatacube/odc-loader/";
-    changelog = "https://github.com/opendatacube/odc-loader/tag/${version}";
+    changelog = "https://github.com/opendatacube/odc-loader/releases/tag/${version}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ daspk04 ];
   };
diff --git a/pkgs/development/python-modules/odc-stac/default.nix b/pkgs/development/python-modules/odc-stac/default.nix
index 99c06e80ed09..f4399b7fa4e6 100644
--- a/pkgs/development/python-modules/odc-stac/default.nix
+++ b/pkgs/development/python-modules/odc-stac/default.nix
@@ -86,7 +86,7 @@ buildPythonPackage rec {
   meta = {
     description = "Load STAC items into xarray Datasets";
     homepage = "https://github.com/opendatacube/odc-stac/";
-    changelog = "https://github.com/opendatacube/odc-stac/tag/${src.tag}";
+    changelog = "https://github.com/opendatacube/odc-stac/releases/tag/${src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ daspk04 ];
   };
diff --git a/pkgs/development/python-modules/pylibrespot-java/default.nix b/pkgs/development/python-modules/pylibrespot-java/default.nix
index d35f5ec0ef1d..80c955d3f7da 100644
--- a/pkgs/development/python-modules/pylibrespot-java/default.nix
+++ b/pkgs/development/python-modules/pylibrespot-java/default.nix
@@ -29,7 +29,7 @@ buildPythonPackage rec {
   meta = {
     description = "Simple library to interface with a librespot-java server";
     homepage = "https://github.com/uvjustin/pylibrespot-java";
-    changelog = "https://github.com/uvjustin/pylibrespot-java/tag/v${version}";
+    changelog = "https://github.com/uvjustin/pylibrespot-java/releases/tag/v${version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [
       hensoko
diff --git a/pkgs/development/python-modules/pyotb/default.nix b/pkgs/development/python-modules/pyotb/default.nix
index f049a827a720..9276da826826 100644
--- a/pkgs/development/python-modules/pyotb/default.nix
+++ b/pkgs/development/python-modules/pyotb/default.nix
@@ -93,7 +93,7 @@ buildPythonPackage rec {
   meta = {
     description = "Python extension of Orfeo Toolbox";
     homepage = "https://github.com/orfeotoolbox/pyotb";
-    changelog = "https://github.com/orfeotoolbox/pyotb/tag/${version}";
+    changelog = "https://github.com/orfeotoolbox/pyotb/releases/tag/${version}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ daspk04 ];
   };
diff --git a/pkgs/servers/home-assistant/custom-components/daikin_onecta/package.nix b/pkgs/servers/home-assistant/custom-components/daikin_onecta/package.nix
index 7698754f5ac2..092692bd7aa2 100644
--- a/pkgs/servers/home-assistant/custom-components/daikin_onecta/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/daikin_onecta/package.nix
@@ -17,7 +17,7 @@ buildHomeAssistantComponent rec {
   };
 
   meta = {
-    changelog = "https://github.com/jwillemsen/daikin_onecta/tag/v${version}";
+    changelog = "https://github.com/jwillemsen/daikin_onecta/releases/tag/v${version}";
     description = "Home Assistant Integration for devices supported by the Daikin Onecta App";
     homepage = "https://github.com/jwillemsen/daikin_onecta";
     maintainers = with lib.maintainers; [ dandellion ];

From 59682c635f23c61bea209f8dca4ac762862b4794 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 10:42:52 +0000
Subject: [PATCH 46/47] vscode-extensions.sourcegraph.amp: 0.0.1763851087 ->
 0.0.1764403772

---
 .../editors/vscode/extensions/sourcegraph.amp/default.nix     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/editors/vscode/extensions/sourcegraph.amp/default.nix b/pkgs/applications/editors/vscode/extensions/sourcegraph.amp/default.nix
index ee9611417996..60bdad38a129 100644
--- a/pkgs/applications/editors/vscode/extensions/sourcegraph.amp/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/sourcegraph.amp/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     publisher = "sourcegraph";
     name = "amp";
-    version = "0.0.1763851087";
-    hash = "sha256-x579QIkkFBAa1w6e6mtmx2sHQ3ypDcDWWVge6kCq9wU=";
+    version = "0.0.1764403772";
+    hash = "sha256-3R9SMaIop+7gBPVh2cdovbt6FyfaxjMhPIgdDJIPNIE=";
   };
 
   meta = {

From 920b300379ccf29195f81211e982bc586ad910cf Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 29 Nov 2025 11:33:52 +0000
Subject: [PATCH 47/47] sysdig-cli-scanner: 1.24.0 -> 1.24.1

---
 .../sysdig-cli-scanner.versions.nix            | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/sy/sysdig-cli-scanner/sysdig-cli-scanner.versions.nix b/pkgs/by-name/sy/sysdig-cli-scanner/sysdig-cli-scanner.versions.nix
index 74015d8ed03c..a5abf227d0ad 100644
--- a/pkgs/by-name/sy/sysdig-cli-scanner/sysdig-cli-scanner.versions.nix
+++ b/pkgs/by-name/sy/sysdig-cli-scanner/sysdig-cli-scanner.versions.nix
@@ -1,23 +1,23 @@
 {
-  version = "1.24.0";
+  version = "1.24.1";
 
   x86_64-linux = {
-    url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.24.0/linux/amd64/sysdig-cli-scanner";
-    hash = "sha256-x80XNz4Muf+z7kS/l4HfR1rG0WimN7lPy96+uY50fHw=";
+    url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.24.1/linux/amd64/sysdig-cli-scanner";
+    hash = "sha256-qsorXQKc724GR9owT6JblpsnEdDiPohK4oSPFQRPa+0=";
   };
 
   aarch64-linux = {
-    url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.24.0/linux/arm64/sysdig-cli-scanner";
-    hash = "sha256-+9vqst3fjfjVgy8QZEhLAFGuAlhNkxRMyD36lY7xAgo=";
+    url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.24.1/linux/arm64/sysdig-cli-scanner";
+    hash = "sha256-jeW17GozGAl4T3afST9JXCbFBW9aINhwDHeya+d1dBc=";
   };
 
   x86_64-darwin = {
-    url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.24.0/darwin/amd64/sysdig-cli-scanner";
-    hash = "sha256-1Cfp5pKyBaXxqNxFW8tMvmJbTjYzrON8eY+mpwT1PRU=";
+    url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.24.1/darwin/amd64/sysdig-cli-scanner";
+    hash = "sha256-oSG0wlaI8rHELkM5yLrJ2Qi/eydJSg2sR1YvSmpaTzw=";
   };
 
   aarch64-darwin = {
-    url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.24.0/darwin/arm64/sysdig-cli-scanner";
-    hash = "sha256-ldGp5QUMmPxQpxYdPuIyahVIdTC/Wa8a7MkJKglq1RM=";
+    url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.24.1/darwin/arm64/sysdig-cli-scanner";
+    hash = "sha256-cm+4HXNd3DDhjMDKcCMmFBU31k+p+wPLUCkPTHTHA2E=";
   };
 }