Merge staging-next into staging

maintainers/maintainer-list.nix

@@ -11785,12 +11785,6 @@
     githubId = 4599384;
     name = "Jack Baldry";
   };
-  jdehaas = {
-    email = "qqlq@nullptr.club";
-    github = "jeroendehaas";
-    githubId = 117874;
-    name = "Jeroen de Haas";
-  };
   jdelStrother = {
     email = "me@delstrother.com";
     github = "jdelStrother";
@@ -14409,12 +14403,11 @@
     name = "Leiser Fernández Gallo";
   };
   leixb = {
-    email = "abone9999+nixpkgs@gmail.com";
+    email = "abone9999@gmail.com";
     matrix = "@leix_b:matrix.org";
     github = "Leixb";
     githubId = 17183803;
     name = "Aleix Boné";
-    keys = [ { fingerprint = "63D3 F436 EDE8 7E1F 1292  24AF FC03 5BB2 BB28 E15D"; } ];
   };
   lejonet = {
     email = "daniel@kuehn.se";

nixos/doc/manual/release-notes/rl-2511.section.md

@@ -140,6 +140,8 @@
 
 - Added `nixos-init`, a Rust-based bashless initialization system for systemd initrd. This allows to build NixOS systems without any interpreter. Enable via `system.nixos-init.enable = true;`.
 
+- [nvme-rs](https://github.com/liberodark/nvme-rs), NVMe monitoring [services.nvme-rs](#opt-services.nvme-rs.enable).
+
 ## Backward Incompatibilities {#sec-release-25.11-incompatibilities}
 
 <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

nixos/modules/module-list.nix

@@ -1502,6 +1502,7 @@
   ./services/system/localtimed.nix
   ./services/system/nix-daemon.nix
   ./services/system/nscd.nix
+  ./services/system/nvme-rs.nix
   ./services/system/saslauthd.nix
   ./services/system/self-deploy.nix
   ./services/system/swapspace.nix

nixos/modules/services/mail/postfix.nix

@@ -809,7 +809,7 @@ in
         default = "";
         type = lib.types.lines;
         description = ''
-          Entries for the transport map, cf. man-page {manpage}`transport(8)`.
+          Entries for the transport map, cf. man-page {manpage}`transport(5)`.
         '';
       };
 

nixos/modules/services/monitoring/loki.nix

@@ -25,7 +25,7 @@ let
 in
 {
   options.services.loki = {
-    enable = mkEnableOption "loki";
+    enable = mkEnableOption "Grafana Loki";
 
     user = mkOption {
       type = types.str;
@@ -49,7 +49,7 @@ in
       type = types.path;
       default = "/var/lib/loki";
       description = ''
-        Specify the directory for Loki.
+        Specify the data directory for Loki.
       '';
     };
 
@@ -58,6 +58,10 @@ in
       default = { };
       description = ''
         Specify the configuration for Loki in Nix.
+
+        See [documentation of Grafana Loki](https://grafana.com/docs/loki/latest/configure/) for all available options.
+
+        Cannot be specified together with {option}`services.loki.configFile`.
       '';
     };
 
@@ -66,6 +70,8 @@ in
       default = null;
       description = ''
         Specify a configuration file that Loki should use.
+
+        Cannot be specified together with {option}`services.loki.configuration`.
       '';
     };
 

nixos/modules/services/system/nvme-rs.nix

@@ -0,0 +1,204 @@
+{
+  config,
+  options,
+  lib,
+  pkgs,
+  ...
+}:
+
+let
+  inherit (lib) types;
+  cfg = config.services.nvme-rs;
+  opt = options.services.nvme-rs;
+  settingsFormat = pkgs.formats.toml { };
+in
+{
+  options.services.nvme-rs = {
+    enable = lib.mkEnableOption "nvme-rs, a monitoring service";
+
+    package = lib.mkPackageOption pkgs "nvme-rs" { };
+
+    settings = lib.mkOption {
+      type = types.submodule {
+        freeformType = settingsFormat.type;
+        options = {
+          check_interval_secs = lib.mkOption {
+            type = types.int;
+            default = 3600;
+            description = "Check interval in seconds";
+            example = 86400;
+          };
+
+          thresholds = lib.mkOption {
+            type = types.submodule {
+              freeformType = settingsFormat.type;
+              options = {
+                temp_warning = lib.mkOption {
+                  type = types.int;
+                  default = 55;
+                  description = "Temperature warning threshold (°C)";
+                };
+
+                temp_critical = lib.mkOption {
+                  type = types.int;
+                  default = 65;
+                  description = "Temperature critical threshold (°C)";
+                };
+
+                wear_warning = lib.mkOption {
+                  type = types.int;
+                  default = 20;
+                  description = "Wear warning threshold (%)";
+                };
+
+                wear_critical = lib.mkOption {
+                  type = types.int;
+                  default = 50;
+                  description = "Wear critical threshold (%)";
+                };
+
+                spare_warning = lib.mkOption {
+                  type = types.int;
+                  default = 50;
+                  description = "Available spare warning threshold (%)";
+                };
+
+                error_threshold = lib.mkOption {
+                  type = types.int;
+                  default = 100;
+                  description = "Error count warning threshold";
+                };
+              };
+            };
+            default = { };
+            description = "Threshold configuration for NVMe monitoring";
+          };
+
+          email = lib.mkOption {
+            type = types.nullOr (
+              types.submodule {
+                freeformType = settingsFormat.type;
+                options = {
+                  smtp_server = lib.mkOption {
+                    type = types.str;
+                    default = "smtp.gmail.com";
+                    description = "SMTP server address";
+                    example = "mail.example.com";
+                  };
+
+                  smtp_port = lib.mkOption {
+                    type = types.port;
+                    default = 587;
+                    description = "SMTP server port";
+                  };
+
+                  smtp_username = lib.mkOption {
+                    type = types.str;
+                    description = "SMTP username";
+                    example = "your-email@gmail.com";
+                  };
+
+                  smtp_password_file = lib.mkOption {
+                    type = types.path;
+                    description = "File containing SMTP password";
+                    example = "/run/secrets/smtp-password";
+                  };
+
+                  from = lib.mkOption {
+                    type = types.str;
+                    description = "Sender email address";
+                    example = "nvme-monitor@example.com";
+                  };
+
+                  to = lib.mkOption {
+                    type = types.str;
+                    description = "Recipient email address";
+                    example = "admin@example.com";
+                  };
+
+                  use_tls = lib.mkOption {
+                    type = types.bool;
+                    default = true;
+                    description = "Use TLS for SMTP connection";
+                  };
+                };
+              }
+            );
+            default = null;
+            description = "Email notification configuration";
+          };
+        };
+      };
+      default = { };
+      description = ''
+        Configuration for nvme-rs in TOML format.
+        See the config.toml example for all available options.
+      '';
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.nvme-rs.settings = opt.settings.default;
+
+    systemd.services.nvme-rs = {
+      description = "NVMe health monitoring service";
+      after = [ "network.target" ];
+      wantedBy = [ "multi-user.target" ];
+
+      serviceConfig =
+        let
+          settingsWithoutNull =
+            if cfg.settings.email == null then lib.removeAttrs cfg.settings [ "email" ] else cfg.settings;
+          configFile = settingsFormat.generate "nvme-rs.toml" settingsWithoutNull;
+        in
+        {
+          ExecStart = lib.escapeShellArgs [
+            "${lib.getExe cfg.package}"
+            "daemon"
+            "--config"
+            "${configFile}"
+          ];
+
+          DynamicUser = true;
+          SupplementaryGroups = [ "disk" ];
+          CapabilityBoundingSet = [ "CAP_SYS_ADMIN" ];
+          AmbientCapabilities = [ "CAP_SYS_ADMIN" ];
+          LimitCORE = 0;
+          LimitNOFILE = 65535;
+          LockPersonality = true;
+          MemorySwapMax = 0;
+          MemoryZSwapMax = 0;
+          PrivateTmp = true;
+          ProcSubset = "pid";
+          ProtectClock = true;
+          ProtectControlGroups = true;
+          ProtectHome = true;
+          ProtectHostname = true;
+          ProtectKernelLogs = true;
+          ProtectKernelModules = true;
+          ProtectKernelTunables = true;
+          ProtectProc = "invisible";
+          ProtectSystem = "strict";
+          Restart = "on-failure";
+          RestartSec = "10s";
+          RestrictAddressFamilies = [
+            "AF_INET"
+            "AF_INET6"
+            "AF_UNIX"
+          ];
+          RestrictNamespaces = true;
+          RestrictRealtime = true;
+          SystemCallArchitectures = "native";
+          SystemCallFilter = [
+            "@system-service"
+            "@resources"
+            "~@privileged"
+          ];
+          NoNewPrivileges = true;
+          UMask = "0077";
+        };
+    };
+
+    environment.systemPackages = [ cfg.package ];
+  };
+}

nixos/tests/all-tests.nix

@@ -1075,6 +1075,7 @@ in
   ntpd = runTest ./ntpd.nix;
   ntpd-rs = runTest ./ntpd-rs.nix;
   nvidia-container-toolkit = runTest ./nvidia-container-toolkit.nix;
+  nvme-rs = runTest ./nvme-rs.nix;
   nvmetcfg = runTest ./nvmetcfg.nix;
   nyxt = runTest ./nyxt.nix;
   nzbget = runTest ./nzbget.nix;

nixos/tests/evcc.nix

@@ -57,19 +57,19 @@ in
               type = "custom";
               status = {
                 source = "script";
-                cmd = "/bin/sh -c 'echo charger status A'";
+                cmd = "/bin/sh -c 'echo A'";
               };
               enabled = {
                 source = "script";
-                cmd = "/bin/sh -c 'echo charger enabled state false'";
+                cmd = "/bin/sh -c 'echo false'";
               };
               enable = {
                 source = "script";
-                cmd = "/bin/sh -c 'echo set charger enabled state true'";
+                cmd = "/bin/sh -c 'echo true'";
               };
               maxcurrent = {
                 source = "script";
-                cmd = "/bin/sh -c 'echo set charger max current 7200'";
+                cmd = "/bin/sh -c 'echo 7200'";
               };
             }
           ];

nixos/tests/nvme-rs.nix

@@ -0,0 +1,157 @@
+{ lib, pkgs, ... }:
+{
+  name = "nvme-rs";
+
+  meta = {
+    maintainers = with lib.maintainers; [ liberodark ];
+  };
+
+  nodes = {
+    monitor =
+      { config, pkgs, ... }:
+      {
+        virtualisation = {
+          emptyDiskImages = [
+            512
+            512
+          ];
+        };
+
+        environment.systemPackages = with pkgs; [
+          nvme-rs
+          jq
+        ];
+
+        services.nvme-rs = {
+          enable = true;
+          package = pkgs.nvme-rs;
+          settings = {
+            check_interval_secs = 60;
+
+            thresholds = {
+              temp_warning = 50;
+              temp_critical = 60;
+              wear_warning = 15;
+              wear_critical = 40;
+              spare_warning = 60;
+              error_threshold = 100;
+            };
+
+            email = {
+              smtp_server = "mail";
+              smtp_port = 25;
+              smtp_username = "nvme-monitor@example.com";
+              smtp_password_file = "/run/secrets/smtp-password";
+              from = "NVMe Monitor <nvme-monitor@example.com>";
+              to = "admin@example.com";
+              use_tls = false;
+            };
+          };
+        };
+
+        systemd.tmpfiles.rules = [
+          "f /run/secrets/smtp-password 0600 root root - testpassword"
+        ];
+
+        networking.firewall.enable = false;
+      };
+
+    mail =
+      { config, pkgs, ... }:
+      {
+        services.postfix = {
+          enable = true;
+          hostname = "mail";
+          domain = "example.com";
+
+          networks = [ "0.0.0.0/0" ];
+          relayDomains = [ "example.com" ];
+          localRecipients = [ "admin" ];
+
+          settings = {
+            main = {
+              inet_interfaces = "all";
+              inet_protocols = "ipv4";
+              smtpd_recipient_restrictions = "permit_mynetworks";
+              smtpd_relay_restrictions = "permit_mynetworks";
+            };
+          };
+        };
+
+        users.users.admin = {
+          isNormalUser = true;
+          home = "/home/admin";
+        };
+
+        networking.firewall = {
+          allowedTCPPorts = [ 25 ];
+        };
+      };
+
+    client =
+      { config, pkgs, ... }:
+      {
+        virtualisation = {
+          emptyDiskImages = [ 256 ];
+        };
+
+        environment.systemPackages = with pkgs; [
+          nvme-rs
+          jq
+        ];
+
+        environment.etc."nvme-rs/config.toml".text = ''
+          check_interval_secs = 3600
+
+          [thresholds]
+          temp_warning = 55
+          temp_critical = 65
+          wear_warning = 20
+          wear_critical = 50
+          spare_warning = 50
+          error_threshold = 5000
+        '';
+      };
+  };
+
+  testScript =
+    { nodes, ... }:
+    ''
+      import json
+
+      start_all()
+
+      for machine in [monitor, mail, client]:
+          machine.wait_for_unit("multi-user.target")
+
+      mail.wait_for_unit("postfix.service")
+      mail.wait_for_open_port(25)
+
+      client.succeed("nvme-rs check || true")
+      client.succeed("nvme-rs check --config /etc/nvme-rs/config.toml || true")
+
+      output = client.succeed("nvme-rs check --format json || echo '[]'")
+      data = json.loads(output)
+      assert isinstance(data, list), "JSON output should be a list"
+
+      monitor.wait_for_unit("nvme-rs.service")
+      monitor.succeed("systemctl is-active nvme-rs.service")
+
+      config_path = monitor.succeed(
+          "systemctl status nvme-rs | grep -oE '/nix/store[^ ]*nvme-rs.toml' | head -1"
+      ).strip()
+
+      if config_path:
+          monitor.succeed(f"grep 'check_interval_secs = 60' {config_path}")
+          monitor.succeed(f"grep 'temp_warning = 50' {config_path}")
+          monitor.succeed(f"grep 'smtp_server = \"mail\"' {config_path}")
+
+      logs = monitor.succeed("journalctl -u nvme-rs.service -n 20 --no-pager")
+      assert "Starting NVMe monitor daemon" in logs or "Check interval" in logs
+
+      monitor.succeed("test -f /run/secrets/smtp-password")
+
+      monitor.succeed("nc -zv mail 25")
+      monitor.fail("nvme-rs daemon --config /nonexistent.toml 2>&1 | grep -E 'Failed to read'")
+    '';
+}

pkgs/applications/editors/emacs/make-emacs.nix

@@ -357,6 +357,9 @@ stdenv.mkDerivation (finalAttrs: {
   ]
   ++ lib.optionals withNS [
     librsvg
+  ]
+  ++ lib.optionals (variant == "macport") [
+    librsvg
   ];
 
   # Emacs needs to find movemail at run time, see info (emacs) Movemail

pkgs/applications/emulators/libretro/cores/dosbox-pure.nix

@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "dosbox-pure";
-  version = "0-unstable-2025-09-14";
+  version = "0-unstable-2025-09-27";
 
   src = fetchFromGitHub {
     owner = "schellingb";
     repo = "dosbox-pure";
-    rev = "78a2d8b7d1354ca60e3f0e39dae18be7c902ece9";
-    hash = "sha256-iNcjB7C833X6jNx0AKv2fJvULke+OCzIc0/3g0SiQwU=";
+    rev = "92d9fbb8111bbb9e8be491315f0e50075036cf0b";
+    hash = "sha256-9MAche3fVHXiUQzhspHTConwkyJCAuRIRaWfEmo8Fko=";
   };
 
   hardeningDisable = [ "format" ];

pkgs/applications/emulators/libretro/cores/gambatte.nix

@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "gambatte";
-  version = "0-unstable-2025-07-25";
+  version = "0-unstable-2025-09-18";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "gambatte-libretro";
-    rev = "13b7af780e9893ae62cc24d567591b5eb6a6dd72";
-    hash = "sha256-bTNZrXp+kMIq/tnPs73tpYRxlrZfCGCmE0EUlJFtUnY=";
+    rev = "0092232a0aaef0ded0ead1c2003ccf7a85ccdfc0";
+    hash = "sha256-baiTlYArNSBz79Cm16Sg3VZEp909zMkF/ExqhrPYN80=";
   };
 
   meta = {

pkgs/applications/emulators/mame/default.nix

@@ -37,14 +37,14 @@
 
 stdenv.mkDerivation rec {
   pname = "mame";
-  version = "0.280";
+  version = "0.281";
   srcVersion = builtins.replaceStrings [ "." ] [ "" ] version;
 
   src = fetchFromGitHub {
     owner = "mamedev";
     repo = "mame";
     rev = "mame${srcVersion}";
-    hash = "sha256-+bXohqzecHvXt9DKPbBBQoq9RX/LPX0O6kJf64wIrW8=";
+    hash = "sha256-GWb6yu62WDoHz9mWhwjtDUN06r22pXit8pXYhFp/LBw=";
   };
 
   outputs = [

pkgs/by-name/ad/adoptopenjdk-icedtea-web/package.nix

@@ -5,7 +5,7 @@
   cargo,
   rustc,
   autoreconfHook,
-  jdk,
+  jdk8,
   glib,
   firefox-unwrapped,
   zip,
@@ -14,7 +14,9 @@
   bash,
   bc,
 }:
-
+let
+  jdk = jdk8;
+in
 stdenv.mkDerivation rec {
   pname = "adoptopenjdk-icedtea-web";
 

pkgs/by-name/ba/ballerina/package.nix

@@ -6,11 +6,12 @@
   makeWrapper,
   fetchzip,
   stdenv,
-  openjdk,
+  openjdk17_headless,
 }:
 let
   version = "2201.10.3";
   codeName = "swan-lake";
+  openjdk = openjdk17_headless;
 in
 stdenv.mkDerivation {
   pname = "ballerina";

pkgs/by-name/bu/burpsuite/package.nix

@@ -9,20 +9,20 @@
 }:
 
 let
-  version = "2025.9.1";
+  version = "2025.9.3";
 
   product =
     if proEdition then
       {
         productName = "pro";
         productDesktop = "Burp Suite Professional Edition";
-        hash = "sha256-24XijVTFmDshv7TYDW05igUOWfJeHT7z8F8fTCBONoM=";
+        hash = "sha256-gLcSx+AZdHW+LP4kPez1KVamTrp7IfGMF/caHDKAxK4=";
       }
     else
       {
         productName = "community";
         productDesktop = "Burp Suite Community Edition";
-        hash = "sha256-z65+1erFeO3ZOJRGZ+vdbDxfNpo36eIp6yQskItBl1A=";
+        hash = "sha256-LmlmQ6UaIFMGFIFI9r7i9LV81ZcisuNygJo3/oUaWSM=";
       };
 
   src = fetchurl {

pkgs/by-name/ca/cassette/package.nix

@@ -24,13 +24,13 @@
 
 stdenv.mkDerivation rec {
   pname = "cassette";
-  version = "0.2.1";
+  version = "0.2.1.g49";
 
   src = fetchFromGitHub {
     owner = "Rirusha";
     repo = "Cassette";
     rev = "v${version}";
-    hash = "sha256-DXCOrCntOgUPYMVRqC4jDNTFgUjShCBoYQgLtSnuz6U=";
+    hash = "sha256-1wIYEDaVlqNDS50MiYGqCtf5xGWou/g/YfZChTdQIns=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/cp/cpp-utilities/package.nix

@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cpp-utilities";
-  version = "5.30.0";
+  version = "5.31.0";
 
   src = fetchFromGitHub {
     owner = "Martchus";
     repo = "cpp-utilities";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-cBr9Vw0UnC2+x/VSvL8u5hsvgk5RdY/3/KCUFQy24rg=";
+    sha256 = "sha256-UjF1b1LCPwrUzqVZNbtX+5eFAzc6NgLyBzTcNHNlkvs=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/da/davmail/package.nix

@@ -7,18 +7,18 @@
   glib,
   gtk2,
   gtk3,
-  jre,
+  jdk11,
   libXtst,
   coreutils,
   gnugrep,
-  zulu,
+  zulu11,
   preferGtk3 ? true,
   preferZulu ? true,
 }:
 
 let
   rev = 3627;
-  jre' = if preferZulu then zulu else jre;
+  jre' = (if preferZulu then zulu11 else jdk11).override { enableJavaFX = true; };
   gtk' = if preferGtk3 then gtk3 else gtk2;
 in
 stdenv.mkDerivation rec {

pkgs/by-name/di/DisnixWebService/package.nix

@@ -4,12 +4,14 @@
   fetchFromGitHub,
   fetchpatch,
   ant,
-  jdk,
+  jdk8,
   xmlstarlet,
   axis2,
   dbus_java,
 }:
-
+let
+  jdk = jdk8;
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "DisnixWebService";
   version = "0.10.1";

pkgs/by-name/el/elasticmq-server-bin/package.nix

@@ -2,14 +2,17 @@
   lib,
   stdenv,
   fetchurl,
-  jdk,
-  jre,
+  jdk8,
+  jre8,
   makeBinaryWrapper,
   runCommand,
   python3Packages,
   writeText,
 }:
-
+let
+  jre = jre8; # TODO: remove override https://github.com/NixOS/nixpkgs/pull/89731
+  jdk = jdk8; # TODO: remove override https://github.com/NixOS/nixpkgs/pull/89731
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "elasticmq-server";
   version = "1.6.14";

pkgs/by-name/en/envoy/package.nix

@@ -13,7 +13,7 @@
   cmake,
   gn,
   go,
-  jdk,
+  openjdk11_headless,
   ninja,
   patchelf,
   python312,
@@ -56,6 +56,7 @@ let
       .${stdenv.system} or (throw "unsupported system ${stdenv.system}");
 
   python3 = python312;
+  jdk = openjdk11_headless;
 
 in
 buildBazelPackage rec {

pkgs/by-name/en/enzyme/package.nix

@@ -7,13 +7,13 @@
 }:
 llvmPackages.stdenv.mkDerivation rec {
   pname = "enzyme";
-  version = "0.0.196";
+  version = "0.0.201";
 
   src = fetchFromGitHub {
     owner = "EnzymeAD";
     repo = "Enzyme";
     rev = "v${version}";
-    hash = "sha256-Jrp1DjwMzi8+ZWJVwhZ4SH2phLvrYfY6+29n//z9bUg=";
+    hash = "sha256-TUGWQImDtXOOkEt20719OheKlPgWjEVdqTh/ET/c1cs=";
   };
 
   postPatch = ''

pkgs/by-name/ev/evcc/package.nix

@@ -17,16 +17,16 @@
 }:
 
 let
-  version = "0.207.6";
+  version = "0.208.1";
 
   src = fetchFromGitHub {
     owner = "evcc-io";
     repo = "evcc";
     tag = version;
-    hash = "sha256-BbX3SXvf6JtWdC5S6jDqBVawMEPtwHBA2IfR5G5ybqA=";
+    hash = "sha256-l7whf2NhvPHZOfXy4PdZq8ZyAKaiLuBlX9s7ffJQoWg=";
   };
 
-  vendorHash = "sha256-ieaDJZmYPxG79Pz/9NRTEhtAQZOqAwwDMa0FAs+PWEA=";
+  vendorHash = "sha256-qp7kSh6pOecXa2qAmKXdJAgAZ4O3pnX0/nMUhwR2cFA=";
 
   commonMeta = with lib; {
     license = licenses.mit;
@@ -52,7 +52,7 @@ buildGo125Module rec {
 
   npmDeps = fetchNpmDeps {
     inherit src;
-    hash = "sha256-GB57pXfWo1lduVDPPw7TBM8qgCmTxPDxKQyD4ZZJnjE=";
+    hash = "sha256-q+ft9dzs/M+ZYCQy/OnqTmpgKXxrD5cfaqrvsxh730w=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/fr/frigate/package.nix

@@ -10,7 +10,6 @@
   frigate,
   nixosTests,
   fetchpatch,
-  protobuf_21,
 }:
 
 let
@@ -41,7 +40,7 @@ let
       });
       onnxruntime = super.onnxruntime.override (old: {
         onnxruntime = old.onnxruntime.override (old: {
-          protobuf = protobuf_21;
+          withFullProtobuf = true;
         });
       });
     };

pkgs/by-name/ga/ganttproject-bin/package.nix

@@ -4,9 +4,13 @@
   fetchzip,
   makeDesktopItem,
   makeWrapper,
-  jre,
+  openjdk17,
 }:
-
+let
+  jre = openjdk17.override {
+    enableJavaFX = true;
+  };
+in
 stdenv.mkDerivation rec {
   pname = "ganttproject-bin";
   version = "3.3.3316";

pkgs/by-name/gh/ghostfolio/package.nix

@@ -11,13 +11,13 @@
 
 buildNpmPackage rec {
   pname = "ghostfolio";
-  version = "2.199.0";
+  version = "2.202.0";
 
   src = fetchFromGitHub {
     owner = "ghostfolio";
     repo = "ghostfolio";
     tag = version;
-    hash = "sha256-O21eeTKWwyD029ZuQBKpOE6Y+f9ufSfe70KjxjXQh9M=";
+    hash = "sha256-VBIdNxdAzrlxbNl1p/yv/LUcJhqfD90oZjOsMPKOTDU=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;
@@ -27,7 +27,7 @@ buildNpmPackage rec {
     '';
   };
 
-  npmDepsHash = "sha256-Bo8w+9TySugwAPfUqZHGKBe0hKwvOQIisfA3QENN//s=";
+  npmDepsHash = "sha256-JBes89JG9l+qsrT9g+Rwefe6X7fieQEor5sHpbCEK9Q=";
 
   nativeBuildInputs = [
     prisma

pkgs/by-name/gr/greenfoot/package.nix

@@ -2,12 +2,18 @@
   lib,
   stdenv,
   fetchurl,
-  openjdk,
+  openjdk21,
+  openjfx21,
   glib,
   dpkg,
   wrapGAppsHook3,
 }:
-
+let
+  openjdk = openjdk21.override {
+    enableJavaFX = true;
+    openjfx_jdk = openjfx21.override { withWebKit = true; };
+  };
+in
 stdenv.mkDerivation rec {
   pname = "greenfoot";
   version = "3.9.0";

pkgs/by-name/gr/gremlin-console/package.nix

@@ -3,9 +3,11 @@
   lib,
   stdenv,
   makeWrapper,
-  openjdk,
+  openjdk11,
 }:
-
+let
+  openjdk = openjdk11;
+in
 stdenv.mkDerivation rec {
   pname = "gremlin-console";
   version = "3.7.4";

pkgs/by-name/gr/gremlin-server/package.nix

@@ -3,8 +3,11 @@
   lib,
   stdenv,
   makeWrapper,
-  openjdk,
+  openjdk11,
 }:
+let
+  openjdk = openjdk11;
+in
 stdenv.mkDerivation rec {
   pname = "gremlin-server";
   version = "3.7.0";

pkgs/by-name/hi/hired/package.nix

@@ -0,0 +1,49 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  nix-update-script,
+  pkg-config,
+  oniguruma,
+}:
+
+rustPlatform.buildRustPackage rec {
+  pname = "hired";
+  version = "0.14.3";
+
+  src = fetchFromGitHub {
+    owner = "sidju";
+    repo = "hired";
+    tag = version;
+    hash = "sha256-A1iz34CSc6GWo6FvkGwIgUwMmYaIzwdCzZFACFSZ9qI=";
+    fetchSubmodules = true;
+  };
+
+  cargoHash = "sha256-nWc3vcqYbJnjYLjKyZQBFR7tSaPaSu0+TvOIBAKKtnQ=";
+
+  nativeBuildInputs = [
+    pkg-config
+  ];
+
+  buildInputs = [
+    oniguruma
+  ];
+
+  env = {
+    RUSTONIG_SYSTEM_LIBONIG = true;
+  };
+
+  enableParallelBuilding = true;
+
+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
+    description = "Modern take on ed, the standard Unix editor";
+    homepage = "https://github.com/sidju/hired";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ShamrockLee ];
+    mainProgram = "hired";
+  };
+}

pkgs/by-name/ja/jabref/package.nix

@@ -8,11 +8,16 @@
   unzip,
   xdg-utils,
   gtk3,
-  jdk,
+  jdk21,
+  openjfx23,
   gradle_8,
   python3,
 }:
 let
+  jdk = jdk21.override {
+    enableJavaFX = true;
+    openjfx_jdk = openjfx23;
+  };
   # "Deprecated Gradle features were used in this build, making it incompatible with Gradle 9.0."
   gradle = gradle_8;
 in

pkgs/by-name/ja/javaCup/package.nix

@@ -3,11 +3,13 @@
   stdenv,
   fetchurl,
   ant,
-  jdk,
+  jdk8,
   makeWrapper,
   stripJavaArchivesHook,
 }:
-
+let
+  jdk = jdk8; # TODO: remove override https://github.com/NixOS/nixpkgs/pull/89731
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "java-cup";
   version = "11b-20160615";

pkgs/by-name/ja/javacc/package.nix

@@ -3,12 +3,17 @@
   stdenv,
   fetchFromGitHub,
   ant,
-  jdk,
-  jre,
+  jdk8,
+  jre8,
   makeWrapper,
   stripJavaArchivesHook,
 }:
-
+let
+  # Upstream doesn't support anything newer than Java 8.
+  # https://github.com/javacc/javacc/blob/c708628423b71ce8bc3b70143fa5b6a2b7362b3a/README.md#building-javacc-from-source
+  jdk = jdk8;
+  jre = jre8;
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "javacc";
   version = "7.0.13";

pkgs/by-name/je/jetuml/package.nix

@@ -53,8 +53,8 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     ${jdkWithFX}/lib/openjdk/bin/jar xf $src jet.png
     magick jet.png -resize 128x128 jet128.png
     magick jet.png -resize 48x48 jet48.png
-    install -Dm444 jet48.png $out/share/icons/hicolor/48x48/jet.png
-    install -Dm444 jet128.png $out/share/icons/hicolor/128x128/jet.png
+    install -Dm444 jet48.png $out/share/icons/hicolor/48x48/apps/jet.png
+    install -Dm444 jet128.png $out/share/icons/hicolor/128x128/apps/jet.png
 
     install -Dm444 $src $out/share/java/JetUML-${finalAttrs.version}.jar
 

pkgs/by-name/ji/jing-trang/package.nix

@@ -3,11 +3,13 @@
   stdenv,
   fetchFromGitHub,
   jre_headless,
-  jdk_headless,
+  jdk8_headless,
   ant,
   saxon,
 }:
-
+let
+  jdk_headless = jdk8_headless; # TODO: remove override https://github.com/NixOS/nixpkgs/pull/89731
+in
 stdenv.mkDerivation rec {
   pname = "jing-trang";
   version = "20181222";

pkgs/by-name/jp/jprofiler/package.nix

@@ -6,10 +6,11 @@
   makeDesktopItem,
   copyDesktopItems,
   _7zz,
-  jdk,
+  jdk11,
 }:
 
 let
+  jdk = jdk11;
   pname = "jprofiler";
   version = "14.0.5";
   nameApp = "JProfiler";

pkgs/by-name/ke/keystore-explorer/package.nix

@@ -2,12 +2,14 @@
   fetchzip,
   lib,
   stdenv,
-  jdk,
+  jdk11,
   runtimeShell,
   glib,
   wrapGAppsHook3,
 }:
-
+let
+  jdk = jdk11;
+in
 stdenv.mkDerivation rec {
   version = "5.6.0";
   pname = "keystore-explorer";

pkgs/by-name/li/libmatthew_java/package.nix

@@ -2,9 +2,11 @@
   lib,
   stdenv,
   fetchurl,
-  jdk,
+  jdk8,
 }:
-
+let
+  jdk = jdk8; # TODO: remove override https://github.com/NixOS/nixpkgs/pull/89731
+in
 stdenv.mkDerivation rec {
   pname = "libmatthew-java";
   version = "0.8";

pkgs/by-name/lu/luau/package.nix

@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "luau";
-  version = "0.692";
+  version = "0.693";
 
   src = fetchFromGitHub {
     owner = "luau-lang";
     repo = "luau";
     tag = finalAttrs.version;
-    hash = "sha256-GMpSXCiM9QznRAfAsGF+UuzyqS84vGkEy6EZPObRUMk=";
+    hash = "sha256-9D6nIuRP/MyzTYDp7Uo5RcK4QrF+YMV6tTVMX/mAKY8=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/mc/mcaselector/package.nix

@@ -6,7 +6,11 @@
   wrapGAppsHook3,
   jre,
 }:
-
+let
+  jre' = jre.override {
+    enableJavaFX = true;
+  };
+in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "mcaselector";
   version = "2.5.3";
@@ -20,7 +24,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   dontBuild = true;
 
   nativeBuildInputs = [
-    jre
+    jre'
     makeWrapper
     wrapGAppsHook3
   ];
@@ -37,7 +41,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   '';
 
   preFixup = ''
-    makeWrapper ${jre}/bin/java $out/bin/mcaselector \
+    makeWrapper ${jre'}/bin/java $out/bin/mcaselector \
       --add-flags "-jar $out/lib/mcaselector/mcaselector.jar" \
       ''${gappsWrapperArgs[@]}
   '';

pkgs/by-name/mo/monkeysAudio/package.nix

@@ -6,12 +6,12 @@
 }:
 
 stdenv.mkDerivation (finalAttrs: {
-  version = "11.38";
+  version = "11.53";
   pname = "monkeys-audio";
 
   src = fetchzip {
     url = "https://monkeysaudio.com/files/MAC_${builtins.concatStringsSep "" (lib.strings.splitString "." finalAttrs.version)}_SDK.zip";
-    hash = "sha256-/pZeZFyv04Feocm9KfLfItd/z0i3rK7pPf8Jm9jd2c8=";
+    hash = "sha256-g1I63K67upEL0in1NceayLDTQgmx4LAHd0eA0MYEp44=";
     stripRoot = false;
   };
 

pkgs/by-name/mu/muffet/package.nix

@@ -2,27 +2,32 @@
   lib,
   buildGoModule,
   fetchFromGitHub,
+  versionCheckHook,
 }:
 
-buildGoModule rec {
+buildGoModule (finalAttrs: {
   pname = "muffet";
   version = "2.11.0";
 
   src = fetchFromGitHub {
     owner = "raviqqe";
     repo = "muffet";
-    rev = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-GfRR+9PdfY63Pzv2XZenKs8XXAKRr9qMzcHOVhl+hv4=";
   };
 
   vendorHash = "sha256-oidOSV8y0VwTabipe7XwurUAra9F65nkTXslwXJ94Jw=";
 
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
   meta = {
     description = "Website link checker which scrapes and inspects all pages in a website recursively";
     homepage = "https://github.com/raviqqe/muffet";
-    changelog = "https://github.com/raviqqe/muffet/releases/tag/v${version}";
+    changelog = "https://github.com/raviqqe/muffet/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ figsoda ];
     mainProgram = "muffet";
   };
-}
+})

pkgs/by-name/nn/nncp/package.nix

@@ -12,7 +12,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nncp";
-  version = "8.11.0";
+  version = "8.12.1";
   outputs = [
     "out"
     "doc"
@@ -21,7 +21,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "http://www.nncpgo.org/download/nncp-${finalAttrs.version}.tar.xz";
-    hash = "sha256-7EEUvNkYSqh4HzjbqjqgQlXfu6nDU2v3WWnma8M0r/I=";
+    hash = "sha256-yTwndQ43aBCned7iKPZm70zCC3zMapf2GXtornjiZos=";
   };
 
   nativeBuildInputs = [
@@ -36,7 +36,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   buildPhase = ''
     runHook preBuild
-    ./bin/build
+    ./build
     runHook postBuild
   '';
 

pkgs/by-name/on/onnxruntime/package.nix

@@ -23,6 +23,7 @@
   pythonSupport ? true,
   cudaSupport ? config.cudaSupport,
   ncclSupport ? config.cudaSupport,
+  withFullProtobuf ? false,
   cudaPackages ? { },
 }@inputs:
 
@@ -195,7 +196,7 @@ effectiveStdenv.mkDerivation rec {
     (lib.cmakeFeature "ONNX_CUSTOM_PROTOC_EXECUTABLE" (lib.getExe protobuf))
     (lib.cmakeBool "onnxruntime_BUILD_SHARED_LIB" true)
     (lib.cmakeBool "onnxruntime_BUILD_UNIT_TESTS" doCheck)
-    (lib.cmakeBool "onnxruntime_USE_FULL_PROTOBUF" false)
+    (lib.cmakeBool "onnxruntime_USE_FULL_PROTOBUF" withFullProtobuf)
     (lib.cmakeBool "onnxruntime_USE_CUDA" cudaSupport)
     (lib.cmakeBool "onnxruntime_USE_NCCL" (cudaSupport && ncclSupport))
     (lib.cmakeBool "onnxruntime_ENABLE_LTO" (!cudaSupport || cudaPackages.cudaOlder "12.8"))

pkgs/by-name/op/openapi-generator-cli/package.nix

@@ -3,11 +3,12 @@
   lib,
   stdenv,
   fetchurl,
-  jre,
+  jre_headless,
   makeWrapper,
 }:
 
 let
+  jre = jre_headless;
   this = stdenv.mkDerivation (finalAttrs: {
     version = "7.15.0";
     pname = "openapi-generator-cli";

pkgs/by-name/op/opencollada-blender/cmake4-compat.patch

@@ -0,0 +1,26 @@
+From f036950f1ccc3ebdfe2fdc0a52d35a4620252901 Mon Sep 17 00:00:00 2001
+From: Grimmauld <Grimmauld@grimmauld.de>
+Date: Sat, 27 Sep 2025 11:43:21 +0200
+Subject: [PATCH] Build: update cmake minimum version to 3.10
+
+cmake ABI compatibility with cmake <3.5 has been removed in cmake 4.
+Compatibility with cmake <3.10 is deprecated and soon to be removed.
+Thus set 3.10 minimum version. This is available in the vast majority
+of current linux distributions, as well as other platforms.
+---
+ CMakeLists.txt | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/CMakeLists.txt b/CMakeLists.txt
+index 95abbe213..2d14b2552 100644
+--- a/CMakeLists.txt
++++ b/CMakeLists.txt
+@@ -18,7 +18,7 @@ if(${CMAKE_SOURCE_DIR} STREQUAL ${CMAKE_BINARY_DIR})
+ 	endif()
+ endif()
+ 
+-cmake_minimum_required(VERSION 2.6)
++cmake_minimum_required(VERSION 3.10)
+ 
+ 
+ #-----------------------------------------------------------------------------

pkgs/by-name/op/opencollada-blender/package.nix

@@ -1,5 +1,6 @@
 {
   cmake,
+  dos2unix,
   fetchFromGitHub,
   lib,
   libxml2,
@@ -19,9 +20,20 @@ stdenv.mkDerivation {
     sha256 = "sha256-ctr+GjDzxOJxBfaMwjwayPkAOcF+FMsP1X72QCOwvTY=";
   };
 
+  # Fix freaky dos-style CLRF things
+  prePatch = ''
+    dos2unix CMakeLists.txt
+  '';
+
+  patches = [
+    # https://github.com/aras-p/OpenCOLLADA/pull/1
+    ./cmake4-compat.patch
+  ];
+
   nativeBuildInputs = [
     cmake
     pkg-config
+    dos2unix
   ];
 
   propagatedBuildInputs = [
@@ -31,7 +43,7 @@ stdenv.mkDerivation {
 
   meta = {
     description = "Library for handling the COLLADA file format";
-    homepage = "https://github.com/KhronosGroup/OpenCOLLADA/";
+    homepage = "https://github.com/aras-p/OpenCOLLADA";
     maintainers = [ lib.maintainers.amarshall ];
     platforms = lib.platforms.unix;
     license = lib.licenses.mit;

pkgs/by-name/op/openrefine/package.nix

@@ -4,13 +4,14 @@
   fetchFromGitHub,
   buildNpmPackage,
   curl,
-  jdk,
+  jdk17,
   jq,
   makeWrapper,
   maven,
 }:
 
 let
+  jdk = jdk17;
   version = "3.9.5";
   src = fetchFromGitHub {
     owner = "openrefine";

pkgs/by-name/pa/pattypan/package.nix

@@ -10,7 +10,9 @@
   copyDesktopItems,
   stripJavaArchivesHook,
 }:
-
+let
+  jdk' = jdk.override { enableJavaFX = true; };
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "pattypan";
   version = "22.03";
@@ -50,7 +52,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   # gappsWrapperArgs is set in preFixup
   postFixup = ''
-    makeWrapper ${jdk}/bin/java $out/bin/pattypan \
+    makeWrapper ${jdk'}/bin/java $out/bin/pattypan \
         ''${gappsWrapperArgs[@]} \
         --add-flags "-jar $out/share/pattypan/pattypan.jar"
   '';

pkgs/by-name/pr/processing/package.nix

@@ -6,7 +6,7 @@
   ant,
   unzip,
   makeWrapper,
-  jdk,
+  jdk17,
   jogl,
   rsync,
   ffmpeg,
@@ -16,6 +16,7 @@
   libGL,
 }:
 let
+  jdk = jdk17;
   buildNumber = "1295";
   vaqua = fetchurl {
     name = "VAqua9.jar";

pkgs/by-name/py/pyradio/package.nix

@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "pyradio";
-  version = "0.9.3.11.18";
+  version = "0.9.3.11.19";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "coderholic";
     repo = "pyradio";
     tag = version;
-    hash = "sha256-/JUNA3gbnmJBFMVxffSmbngiHRlzjzMHCPTfJq0TqLA=";
+    hash = "sha256-fjTaURYY2pSb3mod4Vffbczmyxsn0/4SAXkb68mRhQA=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/sc/scalafix/package.nix

@@ -1,13 +1,16 @@
 {
   lib,
   stdenv,
-  jre,
+  jre8,
   coursier,
   makeWrapper,
   installShellFiles,
   setJavaClassPath,
   testers,
 }:
+let
+  jre = jre8; # TODO: remove override https://github.com/NixOS/nixpkgs/pull/89731
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "scalafix";
   version = "0.12.0";

pkgs/by-name/sc/scalapack/package.nix

@@ -80,7 +80,7 @@ stdenv.mkDerivation (finalAttrs: {
   # this line is left so those who force installation on x86_64-darwin can still build
   doCheck = !(stdenv.hostPlatform.isx86_64 && stdenv.hostPlatform.isDarwin);
 
-  cmakeFlagsArray = [
+  cmakeFlags = [
     (lib.cmakeBool "BUILD_SHARED_LIBS" (!stdenv.hostPlatform.isStatic))
     (lib.cmakeFeature "LAPACK_LIBRARIES" "-llapack")
     (lib.cmakeFeature "BLAS_LIBRARIES" "-lblas")
@@ -102,7 +102,7 @@ stdenv.mkDerivation (finalAttrs: {
     # cmake file will thus look for the library in the dev output instead of out.
     # Use the absolute path to $out instead to fix the issue.
     substituteInPlace  $dev/lib/cmake/scalapack-${finalAttrs.version}/scalapack-targets-release.cmake \
-      --replace "\''${_IMPORT_PREFIX}" "$out"
+      --replace-fail "\''${_IMPORT_PREFIX}" "$out"
   '';
 
   meta = {

pkgs/by-name/sl/slipstream/package.nix

@@ -3,9 +3,11 @@
   fetchFromGitHub,
   makeWrapper,
   maven,
-  jdk,
+  jdk8,
 }:
-
+let
+  jdk = jdk8;
+in
 maven.buildMavenPackage rec {
   pname = "slipstream";
   version = "1.9.1";

pkgs/by-name/sn/snx-rs/package.nix

@@ -14,13 +14,13 @@
 }:
 rustPlatform.buildRustPackage rec {
   pname = "snx-rs";
-  version = "4.8.0";
+  version = "4.8.1";
 
   src = fetchFromGitHub {
     owner = "ancwrd1";
     repo = "snx-rs";
     tag = "v${version}";
-    hash = "sha256-D2WVmu+vECabVdnJtc7ihlj83Z/2m6kD8KZ9ot9dCRE=";
+    hash = "sha256-/ntw1AuOqTy9s1jY+6UIDqZWtmjr1DVRQur/h0LkkXI=";
   };
 
   passthru.updateScript = nix-update-script { };
@@ -47,7 +47,7 @@ rustPlatform.buildRustPackage rec {
     versionCheckHook
   ];
 
-  cargoHash = "sha256-+rTpuAe+6YdgCQr/+zJMaSYo4T+3Fkma0PSVjnsxAfg=";
+  cargoHash = "sha256-lLYQ+N5P8p4jiJCo6UyXvXeDT9JRlzIk8VH6UKlqvX0=";
 
   doInstallCheck = true;
   versionCheckProgram = "${placeholder "out"}/bin/snx-rs";

pkgs/by-name/ti/timg/package.nix

@@ -20,13 +20,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "timg";
-  version = "1.6.2";
+  version = "1.6.3";
 
   src = fetchFromGitHub {
     owner = "hzeller";
     repo = "timg";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-UiQ8CW0mxjjQM6XLN0FL2v7ccYq2EmIy/3pm+yKQh8w=";
+    hash = "sha256-FdaO+UAKjmLKgVZ3AYGQ9VJQj9s48Ihr8TlZ4at5I3c=";
   };
 
   buildInputs = [

pkgs/by-name/tr/trimmomatic/package.nix

@@ -3,12 +3,22 @@
   stdenv,
   fetchFromGitHub,
   ant,
-  jdk,
-  jre,
+  jdk21_headless,
+  jre_minimal,
   makeWrapper,
   stripJavaArchivesHook,
 }:
-
+let
+  jdk = jdk21_headless;
+  # Reduce closure size
+  jre = jre_minimal.override {
+    modules = [
+      "java.base"
+      "java.logging"
+    ];
+    jdk = jdk21_headless;
+  };
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "trimmomatic";
   version = "0.39";

pkgs/by-name/vo/volanta/package.nix

@@ -9,11 +9,11 @@
 }:
 let
   pname = "volanta";
-  version = "1.13.2";
-  build = "946a5f81";
+  version = "1.13.3";
+  build = "cdb350c9";
   src = fetchurl {
     url = "https://cdn.volanta.app/software/volanta-app/${version}-${build}/volanta-${version}.AppImage";
-    hash = "sha256-kY+z/6G0XbnO5YctCSQobBG0mQee/ODKvh6sUg6H+ZU=";
+    hash = "sha256-0q0ShXqN1xA4+bKOX5jebUV+pDh+BNok5WZLLPrq0ks=";
   };
   appImageContents = appimageTools.extract { inherit pname version src; };
 in

pkgs/by-name/vu/vue-language-server/package.nix

@@ -37,7 +37,6 @@ stdenv.mkDerivation (finalAttrs: {
   '';
 
   preInstall = ''
-    CI=true pnpm prune --prod
     find -type f \( -name "*.ts" -o -name "*.map" \) -exec rm -rf {} +
 
     # https://github.com/pnpm/pnpm/issues/3645

pkgs/by-name/xe/xemu/package.nix

@@ -32,13 +32,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "xemu";
-  version = "0.8.98";
+  version = "0.8.105";
 
   src = fetchFromGitHub {
     owner = "xemu-project";
     repo = "xemu";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kqNZFRkLZ7MiniV2kg+FJ6E4Ms/8+pQLHe8MvhZYC0I=";
+    hash = "sha256-1Gp/XGPCIT8qeW1YPI+mh6P0avHHFXtOGcXEEkGT12w=";
 
     nativeBuildInputs = [
       git

pkgs/by-name/xm/xmloscopy/package.nix

@@ -9,7 +9,7 @@
   coreutils,
   libxml2,
   libxslt,
-  jing,
+  jing-trang,
   findutils,
   gnugrep,
   gnused,
@@ -29,7 +29,7 @@ stdenv.mkDerivation rec {
     coreutils
     libxml2
     libxslt
-    jing
+    jing-trang
     findutils
     gnugrep
     gnused

pkgs/by-name/yo/yourkit-java/package.nix

@@ -5,9 +5,11 @@
   copyDesktopItems,
   imagemagick,
   makeDesktopItem,
-  jre,
+  jdk21,
 }:
 let
+  jre = jdk21;
+
   vPath = v: lib.elemAt (lib.splitString "-" v) 0;
 
   version = "2025.3-b154";

pkgs/development/compilers/abcl/default.nix

@@ -4,12 +4,16 @@
   writeShellScriptBin,
   fetchurl,
   ant,
-  jdk,
+  openjdk17,
   makeWrapper,
   stripJavaArchivesHook,
 }:
 
 let
+  # https://armedbear.common-lisp.dev/ lists OpenJDK 17 as the highest
+  # supported JDK.
+  jdk = openjdk17;
+
   fakeHostname = writeShellScriptBin "hostname" ''
     echo nix-builder.localdomain
   '';

pkgs/development/interpreters/clojure/default.nix

@@ -4,12 +4,15 @@
   bashNonInteractive,
   fetchurl,
   installShellFiles,
-  jdk,
+  jdk21,
   rlwrap,
   makeWrapper,
   writeScript,
 }:
-
+let
+  # set this to an LTS version of java
+  jdk = jdk21;
+in
 stdenv.mkDerivation (finalAttrs: {
   pname = "clojure";
   version = "1.12.2.1565";

pkgs/development/libraries/fmt/default.nix

@@ -62,7 +62,7 @@ let
         homepage = "https://fmt.dev/";
         changelog = "https://github.com/fmtlib/fmt/blob/${version}/ChangeLog.rst";
         downloadPage = "https://github.com/fmtlib/fmt/";
-        maintainers = [ maintainers.jdehaas ];
+        maintainers = [ ];
         license = licenses.mit;
         platforms = platforms.all;
       };

pkgs/development/libraries/qtutilities/default.nix

@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "qtutilities";
-  version = "6.18.1";
+  version = "6.18.2";
 
   src = fetchFromGitHub {
     owner = "Martchus";
     repo = "qtutilities";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-GFLNZgY6Q3+4lsFYznbiVhDqU8ALzVRLO02qmyZrnKw=";
+    hash = "sha256-SwKXON16a9qmI+FrTA1OH0zIqf5rfAWbGOhCpCIHgr4=";
   };
 
   nativeBuildInputs = [

pkgs/development/python-modules/amazon-ion/default.nix

@@ -6,7 +6,7 @@
   fetchFromGitHub,
   jsonconversion,
   pytestCheckHook,
-  pythonOlder,
+  pytest_7,
   setuptools,
   six,
   tabulate,
@@ -17,8 +17,6 @@ buildPythonPackage rec {
   version = "0.13.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "amazon-ion";
     repo = "ion-python";
@@ -33,9 +31,9 @@ buildPythonPackage rec {
       --replace "'pytest-runner'," ""
   '';
 
-  nativeBuildInputs = [ setuptools ];
+  build-system = [ setuptools ];
 
-  propagatedBuildInputs = [
+  dependencies = [
     jsonconversion
     six
   ];
@@ -43,7 +41,7 @@ buildPythonPackage rec {
   nativeCheckInputs = [
     cbor2
     docopt
-    pytestCheckHook
+    (pytestCheckHook.override { pytest = pytest_7; })
     tabulate
   ];
 

pkgs/development/python-modules/asyncpraw/default.nix

@@ -9,7 +9,7 @@
   flit-core,
   mock,
   pytestCheckHook,
-  pytest-asyncio,
+  pytest-asyncio_0,
   pytest-vcr,
   pythonOlder,
   requests-toolbelt,
@@ -49,7 +49,7 @@ buildPythonPackage rec {
 
   nativeCheckInputs = [
     pytestCheckHook
-    pytest-asyncio
+    pytest-asyncio_0
     pytest-vcr
     vcrpy
     requests-toolbelt

pkgs/development/python-modules/asyncprawcore/default.nix

@@ -6,9 +6,8 @@
   flit-core,
   mock,
   pytestCheckHook,
-  pytest-asyncio,
+  pytest-asyncio_0,
   pytest-vcr,
-  pythonOlder,
   requests,
   requests-toolbelt,
   testfixtures,
@@ -21,8 +20,6 @@ buildPythonPackage rec {
   version = "2.4.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.8";
-
   src = fetchFromGitHub {
     owner = "praw-dev";
     repo = "asyncprawcore";
@@ -30,9 +27,9 @@ buildPythonPackage rec {
     hash = "sha256-FDQdtnNjsbiEp9BUYdQFMC/hkyJDhCh2WHhQWSQwrFY=";
   };
 
-  nativeBuildInputs = [ flit-core ];
+  build-system = [ flit-core ];
 
-  propagatedBuildInputs = [
+  dependencies = [
     requests
     aiohttp
     yarl
@@ -43,7 +40,7 @@ buildPythonPackage rec {
     mock
     requests-toolbelt
     pytestCheckHook
-    pytest-asyncio
+    pytest-asyncio_0
     pytest-vcr
     vcrpy
   ];

pkgs/development/python-modules/asyncua/default.nix

@@ -6,6 +6,7 @@
   buildPythonPackage,
   cryptography,
   fetchFromGitHub,
+  hatchling,
   pyopenssl,
   pytest-asyncio_0_21,
   pytest-mock,
@@ -14,7 +15,6 @@
   pythonAtLeast,
   pythonOlder,
   pytz,
-  setuptools,
   sortedcontainers,
   typing-extensions,
 }:
@@ -41,7 +41,7 @@ buildPythonPackage rec {
       --replace-fail "tools/" "$out/bin/"
   '';
 
-  build-system = [ setuptools ];
+  build-system = [ hatchling ];
 
   dependencies = [
     aiofiles

pkgs/development/python-modules/awswrangler/default.nix

@@ -1,41 +1,38 @@
 {
-  sparqlwrapper,
+  lib,
   boto3,
   buildPythonPackage,
   fetchFromGitHub,
   gremlinpython,
+  hatchling,
   jsonpath-ng,
-  lib,
   moto,
   openpyxl,
   opensearch-py,
   pandas,
   pg8000,
-  poetry-core,
   progressbar2,
   pyarrow,
   pymysql,
   pyodbc,
   pyparsing,
   pytestCheckHook,
-  pythonOlder,
   redshift-connector,
   requests-aws4auth,
   setuptools,
+  sparqlwrapper,
 }:
 
 buildPythonPackage rec {
   pname = "awswrangler";
-  version = "3.12.1";
+  version = "3.13.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.8";
-
   src = fetchFromGitHub {
     owner = "aws";
     repo = "aws-sdk-pandas";
     tag = version;
-    hash = "sha256-N4IqeAfW4PqgQcBFaFK/Ugbcsz8pLiFzkBr9SRm7AOs=";
+    hash = "sha256-MkoJpztVjwZbGcJTdnLRF7ZtIFd0qGoz/cksEoqLe4w=";
   };
 
   pythonRelaxDeps = [
@@ -43,7 +40,7 @@ buildPythonPackage rec {
     "pyarrow"
   ];
 
-  build-system = [ poetry-core ];
+  build-system = [ hatchling ];
 
   dependencies = [
     boto3

pkgs/development/python-modules/binsync/default.nix

@@ -14,6 +14,7 @@
   sortedcontainers,
   toml,
   tqdm,
+  wordfreq,
 }:
 
 buildPythonPackage rec {
@@ -39,6 +40,7 @@ buildPythonPackage rec {
     sortedcontainers
     toml
     tqdm
+    wordfreq
   ];
 
   optional-dependencies = {
@@ -52,7 +54,7 @@ buildPythonPackage rec {
   ];
 
   disabledTestPaths = [
-    # Test tries to import angrmanagement
+    # Test tries to import angr-management
     "tests/test_angr_gui.py"
   ];
 

pkgs/development/python-modules/celery-redbeat/default.nix

@@ -1,48 +1,64 @@
 {
   lib,
   buildPythonPackage,
-  fetchFromGitHub,
-  python-dateutil,
   celery,
-  redis,
-  tenacity,
-  pytestCheckHook,
-  pytz,
+  cron-descriptor,
+  django-timezone-field,
+  django,
   fakeredis,
+  fetchFromGitHub,
   mock,
+  pytestCheckHook,
+  python-crontab,
+  python-dateutil,
+  pytz,
+  setuptools,
 }:
 
 buildPythonPackage rec {
   pname = "celery-redbeat";
-  version = "2.3.3";
-  format = "setuptools";
+  version = "2.8.1";
+  pyproject = true;
 
   src = fetchFromGitHub {
-    owner = "sibson";
-    repo = "redbeat";
+    owner = "celery";
+    repo = "django-celery-beat";
     tag = "v${version}";
-    hash = "sha256-bptEAOVxuwj9Y7LyBhtMU22Z1uCiJ4O4BZT2ytqQI80=";
+    hash = "sha256-pakOpch5r2ug0UDSqEU34qr4Tz1/mkuFiHW+IOUuGcc=";
   };
 
-  propagatedBuildInputs = [
+  postPatch = ''
+    # Hack the custom dependency resolution in setup.py to avoid pulling in pip
+    substituteInPlace setup.py \
+      --replace-fail "install_requires=reqs('default.txt') + reqs('runtime.txt')," "install_requires=[],"
+  '';
+
+  build-system = [ setuptools ];
+
+  dependencies = [
     celery
+    cron-descriptor
+    django
+    django-timezone-field
+    python-crontab
     python-dateutil
-    redis
-    tenacity
   ];
 
   nativeCheckInputs = [
-    fakeredis
     mock
     pytestCheckHook
     pytz
   ];
 
-  pythonImportsCheck = [ "redbeat" ];
+  pythonImportsCheck = [ "django_celery_beat" ];
+
+  # Tests require additional work
+  doCheck = false;
 
   meta = with lib; {
     description = "Database-backed Periodic Tasks";
     homepage = "https://github.com/celery/django-celery-beat";
+    changelog = "https://github.com/celery/django-celery-beat/releases/tag/${src.tag}";
     license = licenses.bsd3;
     maintainers = with maintainers; [ onny ];
   };

pkgs/development/python-modules/control/default.nix

@@ -1,15 +1,16 @@
 {
   lib,
-  fetchFromGitHub,
   buildPythonPackage,
-  numpy,
-  scipy,
-  matplotlib,
-  setuptools,
-  setuptools-scm,
   cvxopt,
+  fetchFromGitHub,
+  matplotlib,
+  numpy,
+  numpydoc,
   pytest-timeout,
   pytestCheckHook,
+  scipy,
+  setuptools-scm,
+  setuptools,
 }:
 
 buildPythonPackage rec {
@@ -41,17 +42,23 @@ buildPythonPackage rec {
     cvxopt = [ cvxopt ];
   };
 
-  pythonImportsCheck = [ "control" ];
-
   nativeCheckInputs = [
-    cvxopt
+    numpydoc
     pytest-timeout
     pytestCheckHook
+  ]
+  ++ lib.flatten (builtins.attrValues optional-dependencies);
+
+  pythonImportsCheck = [ "control" ];
+
+  disabledTestPaths = [
+    # Don't test the docs
+    "doc/test_sphinxdocs.py"
   ];
 
   meta = {
-    changelog = "https://github.com/python-control/python-control/releases/tag/${src.tag}";
     description = "Python Control Systems Library";
+    changelog = "https://github.com/python-control/python-control/releases/tag/${src.tag}";
     homepage = "https://github.com/python-control/python-control";
     license = lib.licenses.bsd3;
     maintainers = with lib.maintainers; [ Peter3579 ];

pkgs/development/python-modules/flickrapi/default.nix

@@ -63,6 +63,7 @@ buildPythonPackage rec {
     "test_walk"
     "test_xmlnode_format"
     "test_xmlnode_format_error"
+    "test_upload"
   ];
 
   pythonImportsCheck = [ "flickrapi" ];

pkgs/development/python-modules/gdsfactory/default.nix

@@ -46,14 +46,14 @@
 }:
 buildPythonPackage rec {
   pname = "gdsfactory";
-  version = "9.12.0";
+  version = "9.17.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "gdsfactory";
     repo = "gdsfactory";
     tag = "v${version}";
-    hash = "sha256-en976F8BjMK8Ku1QXz4MIxTs+mswVBascmGguPXeEbI=";
+    hash = "sha256-1C7Cva5FZsYLpfF3EZt0RFaWRcYdUdid6Oz9iQHeTqo=";
   };
 
   build-system = [ flit-core ];

pkgs/development/python-modules/keras/default.nix

@@ -214,5 +214,7 @@ buildPythonPackage rec {
     changelog = "https://github.com/keras-team/keras/releases/tag/v${version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ GaetanLepage ];
+    # Not yet released for tensorflow >= 2.20.0
+    broken = lib.versionAtLeast tensorflow.version "2.20";
   };
 }

pkgs/development/python-modules/kfactory/default.nix

@@ -10,18 +10,20 @@
   # dependencies
   aenum,
   cachetools,
-  gitpython,
   klayout,
   loguru,
   numpy,
-  pydantic,
+  pydantic-extra-types,
   pydantic-settings,
+  pydantic,
+  pygit2,
+  rapidfuzz,
   rectangle-packer,
   requests,
-  ruamel-yaml,
   ruamel-yaml-string,
+  ruamel-yaml,
   scipy,
-  tomli,
+  semver,
   toolz,
   typer,
 
@@ -31,14 +33,14 @@
 
 buildPythonPackage rec {
   pname = "kfactory";
-  version = "1.12.1";
+  version = "1.14.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "gdsfactory";
     repo = "kfactory";
     tag = "v${version}";
-    hash = "sha256-C7ner1jkMCHI8/sRiw82l+THhAIWhwJuZ/ctJ9V76Us=";
+    hash = "sha256-dwJqKl6o2w8fxcNMQAvt5dI1k89yoy/PiIH9eo3JQbA=";
   };
 
   build-system = [
@@ -49,18 +51,20 @@ buildPythonPackage rec {
   dependencies = [
     aenum
     cachetools
-    gitpython
     klayout
     loguru
     numpy
     pydantic
+    pydantic-extra-types
     pydantic-settings
+    pygit2
+    rapidfuzz
     rectangle-packer
     requests
     ruamel-yaml
     ruamel-yaml-string
     scipy
-    tomli
+    semver
     toolz
     typer
   ];
@@ -72,6 +76,8 @@ buildPythonPackage rec {
   disabledTestPaths = [
     # https://github.com/gdsfactory/kfactory/issues/511
     "tests/test_pdk.py"
+    # NameError
+    "tests/test_session.py"
   ];
 
   meta = {

pkgs/development/python-modules/libbs/default.nix

@@ -7,6 +7,7 @@
   jfx-bridge,
   networkx,
   platformdirs,
+  ply,
   prompt-toolkit,
   psutil,
   pycparser,
@@ -18,6 +19,15 @@
   writableTmpDirAsHomeHook,
 }:
 
+let
+  # Binary files from https://github.com/binsync/bs-artifacts (only used for testing and only here)
+  binaries = fetchFromGitHub {
+    owner = "binsync";
+    repo = "bs-artifacts";
+    rev = "514c2d6ef1875435c9d137bb5d99b6fc74063817";
+    hash = "sha256-P7+BTJgdC9W8cC/7xQduFYllF+0ds1dSlm59/BFvZ2g=";
+  };
+in
 buildPythonPackage rec {
   pname = "libbs";
   version = "2.15.4";
@@ -38,6 +48,7 @@ buildPythonPackage rec {
     jfx-bridge
     networkx
     platformdirs
+    ply
     prompt-toolkit
     psutil
     pycparser
@@ -51,6 +62,14 @@ buildPythonPackage rec {
     writableTmpDirAsHomeHook
   ];
 
+  # Place test binaries in place
+  preCheck = ''
+    export HOME=$TMPDIR
+    mkdir -p $HOME/bs-artifacts/binaries
+    cp -r ${binaries} $HOME/bs-artifacts/binaries
+    export TEST_BINARIES_DIR=$HOME/bs-artifacts/binaries
+  '';
+
   pythonImportsCheck = [ "libbs" ];
 
   disabledTests = [

pkgs/development/python-modules/mkdocstrings/default.nix

@@ -17,14 +17,14 @@
 
 buildPythonPackage rec {
   pname = "mkdocstrings";
-  version = "0.30.0";
+  version = "0.30.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mkdocstrings";
     repo = "mkdocstrings";
     tag = version;
-    hash = "sha256-tJErux/90zXaV0ViGJOQKMf1yYCxMhH1nMrQlXlHw/Y=";
+    hash = "sha256-BfqxL35prq+pvD21w0BOJx/ls8og+LjtGdOAZlHYGVE=";
   };
 
   postPatch = ''

pkgs/development/python-modules/outlines/default.nix

@@ -95,6 +95,11 @@ buildPythonPackage rec {
     tensorflow
   ];
 
+  pytestFlagsArray = [
+    # FutureWarning: functools.partial will be a method descriptor in future Python versions; wrap it in enum.member() if you want to preserve the old behavior
+    "-Wignore::FutureWarning"
+  ];
+
   disabledTests = [
     # Try to dowload models from Hugging Face Hub
     "test_application_callable_call"

pkgs/development/python-modules/parquet/default.nix

@@ -48,12 +48,17 @@ buildPythonPackage rec {
     "testFromExample"
   ];
 
-  pythonImportsCheck = [ "thriftpy2" ];
+  disabledTestPaths = [
+    # Test is outdated
+    "test/test_read_support.py"
+  ];
+
+  pythonImportsCheck = [ "parquet" ];
 
   meta = with lib; {
     description = "Python implementation of the parquet columnar file format";
     homepage = "https://github.com/jcrobak/parquet-python";
-    changelog = "https://github.com/jcrobak/parquet-python/releases/tag/v${version}";
+    changelog = "https://github.com/jcrobak/parquet-python/releases/tag/${src.tag}";
     license = licenses.bsd2;
     maintainers = with maintainers; [ fab ];
     mainProgram = "parquet";

pkgs/development/python-modules/switchbot-api/default.nix

@@ -9,7 +9,7 @@
 
 buildPythonPackage rec {
   pname = "switchbot-api";
-  version = "2.7.0";
+  version = "2.8.0";
   pyproject = true;
 
   disabled = pythonOlder "3.10";
@@ -18,7 +18,7 @@ buildPythonPackage rec {
     owner = "SeraphicCorp";
     repo = "py-switchbot-api";
     tag = "v${version}";
-    hash = "sha256-uGaM/pzO9HuLJjXdhdrCfbTxMvYxF4OgFo/m5R2jm5s=";
+    hash = "sha256-xalIVkmzflUVkw/DFOLas6T/jUXSs3gZhEa3IJWtEaw=";
   };
 
   build-system = [ poetry-core ];

pkgs/development/python-modules/tensorflow/binary-hashes.nix

@@ -1,72 +1,88 @@
 {
-  version = "2.19.0";
+  version = "2.20.0";
   version_jetson = "2.16.1+nv24.08";
   x86_64-linux_39 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow_cpu-2.19.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
-    sha256 = "13xvghhqjlq5l6gnnlkslqyk7iwy2lbhblz70pa0wrsvdiwp9k86";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow_cpu-2.20.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
+    sha256 = "1nxmm37miz0kzq8g2zc5f9w5vaiz0m75g2q97v19f0pnpl4q1kwh";
   };
   x86_64-linux_310 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow_cpu-2.19.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
-    sha256 = "0lgjy7frlh5ax97pc5x2cdq560ybizjrdxms57rcx8r9x8wskrff";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow_cpu-2.20.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
+    sha256 = "10y5s4bd1s4yk9qx71ap743l8l17axvj5lk49f4fwhq584wg4ghs";
   };
   x86_64-linux_311 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow_cpu-2.19.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
-    sha256 = "0l8wgqjhp0srqs4rkij881nxifdzaxkin237wfjqh8h1wdd312ck";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow_cpu-2.20.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
+    sha256 = "1077zld9n53w72sbvzll2ic1f05liy2jrbfhnlm98vi55nz6nxfg";
   };
   x86_64-linux_312 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow_cpu-2.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
-    sha256 = "1wxpgzs3d0wblvvg02267j0bw9b8j4dlfspfmp6r8hd6dk9bx78b";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow_cpu-2.20.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
+    sha256 = "19yn5ligcazva59bgw7v6pdl2wp7xz9i9qf4jpnr9041hm0j5af7";
+  };
+  x86_64-linux_313 = {
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow_cpu-2.20.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
+    sha256 = "1db4gipi9x05r4fbdj98p3bk6pz0zq25xi15c97ch3p1wn8pfvns";
   };
   x86_64-linux_39_gpu = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
-    sha256 = "14vgkx1wjf0jiali4lm3x8n6z29m8vdhjva4yvabzc9b1s1757w4";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
+    sha256 = "1hwfakj3b5w0lc641bqqcnxhdd47037998aqs57valzw7mc5rsqd";
   };
   x86_64-linux_310_gpu = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
-    sha256 = "1s1myi67iqhjxvfvjv8pl26hxjcgya9k1r1hblh8hm0h933xdql3";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
+    sha256 = "07jr5bpvmxd3yjw3v2jd9i3jswlsfxr26604r16ka38f04x7zgbs";
   };
   x86_64-linux_311_gpu = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
-    sha256 = "1r4ghr51h2bb7dj8q6wydgnvzw0f48b6kkygl6gq0yf9d9w4f1rr";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
+    sha256 = "17i2z37jrji8rk11pspmlkd8r297x3an3gj5i7g86ic21zyrj528";
   };
   x86_64-linux_312_gpu = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
-    sha256 = "1xm66mwrdxrqs9i68dlahqrd5imgibcz5f3i4ksyg4yp9icjd2z2";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
+    sha256 = "1v2jkhglfrh4by86nri7zq4shi2gl920rilw3r5xbq17ql5mn9i5";
+  };
+  x86_64-linux_313_gpu = {
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl";
+    sha256 = "0wkklfh0ny4y4lzac540v8g745b5adyzp29bi2cmmxr606dp58sz";
   };
   aarch64-linux_39 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl";
-    sha256 = "121amcj78mkkvs2fclc7z669q45x4sa7x6vlzggrm09b0nr7zf4w";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl";
+    sha256 = "1pzbi2calx0crx8f0ff1kbibn1j5wwjbvpp9rsmqxja9j9sk7g18";
   };
   aarch64-linux_310 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl";
-    sha256 = "0p4fjsal8kfizcz456lbbqg2i35ljxhdqij7vhsfbvismqy2jf9b";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl";
+    sha256 = "1sms3c4mxy892gaa066nx4xa6m28rhigdav6bc9bgj7mjhyjk802";
   };
   aarch64-linux_311 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl";
-    sha256 = "1670dv3kbmxiz4v0ivmkbiiiaa1sbc2x841z6kmy03mcb3wkybf9";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl";
+    sha256 = "1mfflmpmywqihd1mdwcq6jnzgsv2khkf68z2dckc01fbxz46i59y";
   };
   aarch64-linux_312 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl";
-    sha256 = "020kppmgmv4hnz3dqmam01gq95s69xjn6zn6k25l08zf6fyvzx0h";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl";
+    sha256 = "13q71s5gjb405s48maqz4sckwx971lwj5sg1bz2gyaz2s0yzpyrb";
+  };
+  aarch64-linux_313 = {
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl";
+    sha256 = "09nrnffmqdfr9zy5l1li0727b02drlz4p2dlfx4ss7kzl02qxj27";
   };
   aarch64-linux_310_jetson = {
     url = "https://developer.download.nvidia.com/compute/redist/jp/v61/tensorflow/tensorflow-2.16.1+nv24.08-cp310-cp310-linux_aarch64.whl";
     sha256 = "0z18zdcjc2dingl94kivhd5cpzbvkjp9j12q57acjppp4hyd6g7f";
   };
   aarch64-darwin_39 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp39-cp39-macosx_12_0_arm64.whl";
-    sha256 = "02fb702d2wmdgrjq8jj46bp51sh1l9j4q9z231x151z2i3sdn5dd";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp39-cp39-macosx_12_0_arm64.whl";
+    sha256 = "0g3qg53l8pfna5r964s08das8jsijbg81snb8ny3z79034dvsv56";
   };
   aarch64-darwin_310 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp310-cp310-macosx_12_0_arm64.whl";
-    sha256 = "0d6anjqkm5vq22awxhcwivjdshnlzmby80by3icyjcihbkr08mn9";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp310-cp310-macosx_12_0_arm64.whl";
+    sha256 = "0msk3aw06q46n4ng8i5cs79r6bhmmvqcam78pdav42hkypw6kwg5";
   };
   aarch64-darwin_311 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp311-cp311-macosx_12_0_arm64.whl";
-    sha256 = "05f12garj6ad4vcxxpi0vihps4gh9y30bffp2qy1k36qi8kn5m38";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp311-cp311-macosx_12_0_arm64.whl";
+    sha256 = "1visqvq280k4cgmg6hwphfkq54p8kdrnnsi4baw0jp83qlb415jz";
   };
   aarch64-darwin_312 = {
-    url = "https://storage.googleapis.com/tensorflow/versions/2.19.0/tensorflow-2.19.0-cp312-cp312-macosx_12_0_arm64.whl";
-    sha256 = "1bibid6mrgmjra291pmb7b5sf49f8jpi3n8x8mdwjhfmxfz1c6c2";
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp312-cp312-macosx_12_0_arm64.whl";
+    sha256 = "13vcl3wcgaid8f2rdzvzmkfbdl3hhkh7qlwdy88apmrg4gq25caj";
+  };
+  aarch64-darwin_313 = {
+    url = "https://storage.googleapis.com/tensorflow/versions/2.20.0/tensorflow-2.20.0-cp313-cp313-macosx_12_0_arm64.whl";
+    sha256 = "19g8kk7f7ylx1y7awpc3afw7hp50sid2ka0jd9fdmh1q7dhhnzqr";
   };
 }

pkgs/development/python-modules/tensorflow/default.nix

@@ -605,7 +605,7 @@ in
 buildPythonPackage {
   __structuredAttrs = true;
   inherit version pname format;
-  disabled = pythonAtLeast "3.12";
+  disabled = pythonAtLeast "3.13";
 
   src = bazel-build.python;
 
@@ -613,7 +613,7 @@ buildPythonPackage {
   # - Drop tensorflow-io dependency until we get it to build
   # - Relax flatbuffers and gast version requirements
   # - The purpose of python3Packages.libclang is not clear at the moment and we don't have it packaged yet
-  # - keras and tensorlow-io-gcs-filesystem will be considered as optional for now.
+  # - keras will be considered as optional for now.
   postPatch = ''
     sed -i setup.py \
       -e '/tensorflow-io-gcs-filesystem/,+1d' \
@@ -621,7 +621,6 @@ buildPythonPackage {
       -e "s/'gast[^']*',/'gast',/" \
       -e "/'libclang[^']*',/d" \
       -e "/'keras[^']*')\?,/d" \
-      -e "/'tensorflow-io-gcs-filesystem[^']*',/d" \
       -e "s/'protobuf[^']*',/'protobuf',/" \
   '';
 

pkgs/development/python-modules/tensorflow/prefetcher.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-version="2.19.0"
+version="2.20.0"
 version_jetson="2.16.1+nv24.08"
 
 bucket="https://storage.googleapis.com/tensorflow/versions/${version}"
@@ -8,25 +8,29 @@ bucket_jetson="https://developer.download.nvidia.com/compute/redist/jp/v61/tenso
 
 # List of binary wheels for Tensorflow.  The most recent versions can be found
 # on the following page:
-# https://www.tensorflow.org/install/pip?lang=python3#package-location
+# https://www.tensorflow.org/install/pip?lang=python3#package_location
 url_and_key_list=(
 "x86_64-linux_39 $bucket/tensorflow_cpu-${version}-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
 "x86_64-linux_310 $bucket/tensorflow_cpu-${version}-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
 "x86_64-linux_311 $bucket/tensorflow_cpu-${version}-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
 "x86_64-linux_312 $bucket/tensorflow_cpu-${version}-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+"x86_64-linux_313 $bucket/tensorflow_cpu-${version}-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
 "x86_64-linux_39_gpu $bucket/tensorflow-${version}-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
 "x86_64-linux_310_gpu $bucket/tensorflow-${version}-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
 "x86_64-linux_311_gpu $bucket/tensorflow-${version}-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
 "x86_64-linux_312_gpu $bucket/tensorflow-${version}-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+"x86_64-linux_313_gpu $bucket/tensorflow-${version}-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
 "aarch64-linux_39 $bucket/tensorflow-${version}-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
 "aarch64-linux_310 $bucket/tensorflow-${version}-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
 "aarch64-linux_311 $bucket/tensorflow-${version}-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
 "aarch64-linux_312 $bucket/tensorflow-${version}-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+"aarch64-linux_313 $bucket/tensorflow-${version}-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
 "aarch64-linux_310_jetson $bucket_jetson/tensorflow-${version_jetson}-cp310-cp310-linux_aarch64.whl"
 "aarch64-darwin_39 $bucket/tensorflow-${version}-cp39-cp39-macosx_12_0_arm64.whl"
 "aarch64-darwin_310 $bucket/tensorflow-${version}-cp310-cp310-macosx_12_0_arm64.whl"
 "aarch64-darwin_311 $bucket/tensorflow-${version}-cp311-cp311-macosx_12_0_arm64.whl"
 "aarch64-darwin_312 $bucket/tensorflow-${version}-cp312-cp312-macosx_12_0_arm64.whl"
+"aarch64-darwin_313 $bucket/tensorflow-${version}-cp313-cp313-macosx_12_0_arm64.whl"
 )
 
 hashfile=binary-hashes.nix

pkgs/development/python-modules/tf-keras/default.nix

@@ -18,13 +18,13 @@
 
 buildPythonPackage rec {
   pname = "tf-keras";
-  version = "2.19.0";
+  version = "2.20.1";
   pyproject = true;
 
   src = fetchPypi {
     pname = "tf_keras";
     inherit version;
-    hash = "sha256-sJpAfYekVxzh6MqYXPxoSD49Y7JRil15qXrZLLZNvpw=";
+    hash = "sha256-iEvlk4+wsrU7FYPBritmDvhyFTd8KbW2p3/SIbRyrq8=";
   };
 
   build-system = [