Merge master into staging-next

2026-01-12 00:19:46 +00:00
parent d8c64c350e 769af1cc90
commit dd86763902
129 changed files with 1252 additions and 735 deletions
@@ -83,8 +83,9 @@
 # @raitobezarius is not "code owner", but is listed here to be notified of changes
 # pertaining to the Nix package manager.
 # i.e. no authority over those files.
-pkgs/tools/package-management/nix/                    @NixOS/nix-team @raitobezarius
-nixos/modules/installer/tools/nix-fallback-paths.nix  @NixOS/nix-team @raitobezarius
+# Otherwise keep in-sync with lib.teams.nix.
+pkgs/tools/package-management/nix/                    @Artturin @Ericson2314 @lovesegfault @Mic92 @philiptaron @roberth @tomberek @xokdvium @raitobezarius
+nixos/modules/installer/tools/nix-fallback-paths.nix  @Artturin @Ericson2314 @lovesegfault @Mic92 @philiptaron @roberth @tomberek @xokdvium @raitobezarius

 # Nixpkgs documentation
 /maintainers/scripts/db-to-md.sh @jtojnar @ryantm
@@ -7544,12 +7544,6 @@
    githubId = 8173116;
    name = "Dean Eckert";
  };
-  eelco = {
-    email = "edolstra+nixpkgs@gmail.com";
-    github = "edolstra";
-    githubId = 1148549;
-    name = "Eelco Dolstra";
-  };
  ehegnes = {
    email = "eric.hegnes@gmail.com";
    github = "ehegnes";
@@ -18245,7 +18239,7 @@
  nadiaholmquist = {
    name = "Nadia Holmquist Pedersen";
    email = "nadia@nhp.sh";
-    matrix = "@nhp:matrix.org";
+    matrix = "@nadia:nhp.sh";
    github = "nadiaholmquist";
    githubId = 893884;
  };
@@ -29,7 +29,6 @@ stdenv.mkDerivation {
  '';

  meta = {
-    maintainers = with lib.maintainers; [ eelco ];
    description = "Utility to generate a Nix expression for a Perl package from CPAN";
    mainProgram = "nix-generate-from-cpan";
    platforms = lib.platforms.unix;
@@ -29,7 +29,6 @@ stdenv.mkDerivation {
  '';

  meta = {
-    maintainers = [ lib.maintainers.eelco ];
    description = "A utility for Nixpkgs contributors to check Nixpkgs for common errors";
    mainProgram = "nixpkgs-lint";
    platforms = lib.platforms.unix;
@@ -154,16 +154,6 @@ with lib.maintainers;
    shortName = "c3d2";
  };

-  cachix = {
-    # Verify additions to this team with at least one existing member of the team.
-    members = [
-      domenkozar
-      sandydoo
-    ];
-    scope = "Group registration for packages maintained by Cachix.";
-    shortName = "Cachix employees";
-  };
-
  categorization = {
    github = "categorization";
  };
@@ -742,17 +732,20 @@ with lib.maintainers;
    enableFeatureFreezePing = true;
  };

-  # same as https://github.com/orgs/NixOS/teams/nix-team
+  # keep in-sync with ci/OWNERS
  nix = {
    members = [
-      eelco
-      mic92
-      tomberek
-      roberth
+      artturin
      ericson2314
+      lovesegfault
+      mic92
+      philiptaron
+      roberth
+      tomberek
+      xokdvium
    ];
-    scope = "Maintain the Nix package manager.";
-    shortName = "Nix/nix-cli ecosystem";
+    scope = "Maintain the packaging for the Nix package manager itself.";
+    shortName = "Nix packaging";
    enableFeatureFreezePing = true;
  };

@@ -892,15 +885,6 @@ with lib.maintainers;
    enableFeatureFreezePing = true;
  };

-  secshell = {
-    members = [
-      felbinger
-      juli0604
-    ];
-    scope = "Maintain packages and modules created by members of Secure Shell Networks.";
-    shortName = "secshell";
-  };
-
  stdenv = {
    enableFeatureFreezePing = true;
    github = "stdenv";
@@ -6,6 +6,13 @@
 #
 # Debugging:
 #   drop .test from the end of this file, then use nix repl on it
+let
+  ghost = {
+    github = "ghost";
+    githubId = 0;
+    name = "ghost";
+  };
+in
 rec {
  lib = import ../../../lib;

@@ -13,8 +20,8 @@ rec {
    modules = [
      ../meta-maintainers.nix
      {
-        _file = "eelco.nix";
-        meta.maintainers = [ lib.maintainers.eelco ];
+        _file = "ghost.nix";
+        meta.maintainers = [ ghost ];
      }
    ];
  };
@@ -26,7 +33,7 @@ rec {
          lib.maintainers.pierron
          lib.maintainers.roberth
        ];
-        "eelco.nix" = [ lib.maintainers.eelco ];
+        "ghost.nix" = [ ghost ];
      };
    { };

@@ -1,7 +1,25 @@
-{ config, lib, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
  cfg = config.hardware.tuxedo-drivers;
  tuxedo-drivers = config.boot.kernelPackages.tuxedo-drivers;
+  udevRule =
+    attr: val:
+    let
+      # Workaround to evaluate true to "1" and false to "0".
+      # Otherwise, true evaluates to "1" and false to "".
+      newVal = if lib.isBool val then (if val then "1" else "0") else val;
+    in
+    lib.concatStringsSep ", " [
+      ''SUBSYSTEM=="platform"''
+      ''DRIVER=="tuxedo_keyboard"''
+      ''ATTR{${attr}}="${newVal}"''
+    ];
+  optUdevRule = attr: val: lib.optional (val != null) (udevRule attr val);
 in
 {
  imports = [
@@ -26,11 +44,66 @@ in

      For more inforation it is best to check at the source code description: <https://gitlab.com/tuxedocomputers/development/packages/tuxedo-drivers>
    '';
+    settings = {
+      charging-profile = lib.mkOption {
+        type = lib.types.nullOr (
+          lib.types.enum [
+            "high_capacity"
+            "balanced"
+            "stationary"
+          ]
+        );
+        default = null;
+        description = ''
+          The maximum charge level to help reduce battery wear:
+          - `high_capacity` charges to 100% (driver default)
+          - `balanced` charges to 90%
+          - `stationary` charges to 80% (maximum lifespan)
+
+          **Note:** Regardless of the configured charging profile, the operating system will always report the battery as being charged to 100%.
+        '';
+      };
+      charging-priority = lib.mkOption {
+        type = lib.types.nullOr (
+          lib.types.enum [
+            "charge_battery"
+            "performance"
+          ]
+        );
+        default = null;
+        description = ''
+          These options manage the trade-off between battery charging and CPU performance when the USB-C power supply cannot provide sufficient power for both simultaneously:
+          - `charge_battery` prioritizes battery charging (driver default)
+          - `performance` prioritizes maximum CPU performance
+        '';
+      };
+      fn-lock = lib.mkOption {
+        type = lib.types.nullOr lib.types.bool;
+        default = null;
+        description = ''
+          Enables or disables the laptop keyboard's Function (Fn) lock at boot.
+
+          When set to `true`, the Fn lock is enabled, allowing the function keys (F1–F12) to control brightness, volume etc.
+        '';
+      };
+    };
  };

  config = lib.mkIf cfg.enable {
    boot.kernelModules = [ "tuxedo_keyboard" ];
    boot.extraModulePackages = [ tuxedo-drivers ];
-    services.udev.packages = [ tuxedo-drivers ];
+    services.udev.packages = [
+      tuxedo-drivers
+      lib.mkIf
+      (lib.any (v: v != null) cfg.settings)
+      (pkgs.writeTextDir "etc/udev/rules.d/90-tuxedo.rules" (
+        lib.concatLines (
+          [ "# Custom rules for TUXEDO laptops" ]
+          ++ (optUdevRule "charging_profile/charging_profile" cfg.settings.charging-profile)
+          ++ (optUdevRule "charging_priority/charging_prio" cfg.settings.charging-priority)
+          ++ (optUdevRule "fn_lock" cfg.settings.fn-lock)
+        )
+      ))
+    ];
  };
 }
@@ -583,6 +583,13 @@ let
          '';
        };

+        enableUMask = lib.mkOption {
+          default = config.security.pam.enableUMask;
+          defaultText = lib.literalExpression "config.security.pam.enableUMask";
+          type = lib.types.bool;
+          description = "If enabled, the pam_umask module will be loaded.";
+        };
+
        failDelay = {
          enable = lib.mkOption {
            type = lib.types.bool;
@@ -1292,6 +1299,12 @@ let
                  disable = cfg.ttyAudit.disablePattern;
                };
              }
+              {
+                name = "umask";
+                enable = cfg.enableUMask;
+                control = "optional";
+                modulePath = "${package}/lib/security/pam_umask.so";
+              }
              {
                name = "systemd_home";
                enable = config.services.homed.enable;
@@ -2208,6 +2221,8 @@ in
      };
    };

+    security.pam.enableUMask = lib.mkEnableOption "umask PAM module";
+
    security.pam.enableEcryptfs = lib.mkEnableOption "eCryptfs PAM module (mounting ecryptfs home directory on login)";
    security.pam.enableFscrypt = lib.mkEnableOption ''
      fscrypt, to automatically unlock directories with the user's login password.
@@ -22,7 +22,7 @@ let
    ;
 in
 {
-  meta.maintainers = lib.teams.secshell.members;
+  meta.maintainers = with lib.maintainers; [ felbinger ];

  options.services.suricata = {
    enable = mkEnableOption "Suricata";
@@ -8,7 +8,10 @@ let
  cfg = config.services.cachix-agent;
 in
 {
-  meta.maintainers = lib.teams.cachix.members;
+  meta.maintainers = with lib.maintainers; [
+    domenkozar
+    sandydoo
+  ];

  options.services.cachix-agent = {
    enable = lib.mkEnableOption "Cachix Deploy Agent: <https://docs.cachix.org/deploy/>";
@@ -9,7 +9,11 @@ let
 in
 {
  meta = {
-    maintainers = lib.teams.cachix.members ++ [ lib.maintainers.jfroche ];
+    maintainers = with lib.maintainers; [
+      domenkozar
+      jfroche
+      sandydoo
+    ];
  };

  options.services.cachix-watch-store = {
@@ -17,7 +17,7 @@ let
    ;
 in
 {
-  meta.maintainers = lib.teams.secshell.members;
+  meta.maintainers = with lib.maintainers; [ felbinger ];

  options.services.part-db = {
    enable = mkEnableOption "PartDB";
@@ -6,7 +6,6 @@ let
 in
 {
  name = "misc";
-  meta.maintainers = with lib.maintainers; [ eelco ];

  nodes.machine =
    { lib, ... }:
@@ -1,7 +1,7 @@
 { lib, pkgs, ... }:
 {
  name = "suricata";
-  meta.maintainers = lib.teams.secshell.members;
+  meta.maintainers = with lib.maintainers; [ felbinger ];

  nodes = {
    ids = {
@@ -14,14 +14,14 @@

 stdenv.mkDerivation {
  pname = "mmlgui";
-  version = "210420-preview-unstable-2024-04-15";
+  version = "210420-preview-unstable-2026-01-09";

  src = fetchFromGitHub {
    owner = "superctr";
    repo = "mmlgui";
-    rev = "e49f225ac2b2d46056b2c45a5d31c544227c4968";
+    rev = "9803a154c5fdbe6e88956e391ea0d5c4eae18cdc";
    fetchSubmodules = true;
-    hash = "sha256-hj2k1BrE8AA2HTBEO03RammlZV2U4KW0gLJmFNiaSvI=";
+    hash = "sha256-3HMSVSgqusIhFf7jheyC2ytoJqSsJA8yYUnhxvdteq0=";
  };

  postPatch = ''
@@ -0,0 +1,59 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  stdenv,
+  vimUtils,
+  nix-update-script,
+  gitMinimal,
+}:
+let
+  version = "0-unstable-2026-01-10";
+  src = fetchFromGitHub {
+    owner = "bitbloxhub";
+    repo = "jupyter-api.nvim";
+    rev = "5dd157fd8cd9ef6d20075c0809f54c9f7af23e43";
+    hash = "sha256-N9Z7SaWeT8b2N3EtwwRLW7DCiQk0+tCd9e573DSq7SQ=";
+  };
+  jupyter-api-nvim-lib = rustPlatform.buildRustPackage {
+    inherit version src;
+    pname = "jupyter-api-nvim-lib";
+
+    cargoHash = "sha256-Oe6NnnNBY2nzYkNYucPpR6iV/8a6/9ZUytKpdHWY+So=";
+
+    env = {
+      # Allow undefined symbols on Darwin - they will be provided by Neovim's LuaJIT runtime
+      RUSTFLAGS = lib.optionalString stdenv.hostPlatform.isDarwin "-C link-arg=-undefined -C link-arg=dynamic_lookup";
+    };
+  };
+in
+vimUtils.buildVimPlugin {
+  pname = "jupyter-api.nvim";
+  inherit version src;
+  preInstall =
+    let
+      ext = stdenv.hostPlatform.extensions.sharedLibrary;
+    in
+    ''
+      mkdir -p target/release
+      ln -s ${jupyter-api-nvim-lib}/lib/libjupyter_api_nvim${ext} target/release/libjupyter_api_nvim${ext}
+    '';
+
+  passthru = {
+    updateScript = nix-update-script {
+      attrPath = "vimPlugins.jupyter-api-nvim.jupyter-api-nvim-lib";
+    };
+
+    # needed for the update script
+    inherit jupyter-api-nvim-lib;
+  };
+
+  meta = {
+    description = "Library for interacting with Jupyter kernels from Neovim Lua";
+    homepage = "https://github.com/bitbloxhub/jupyter-api.nvim/";
+    license = lib.licenses.isc;
+    maintainers = with lib.maintainers; [
+      bitbloxhub
+    ];
+  };
+}
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "latex-workshop";
    publisher = "James-Yu";
-    version = "10.12.0";
-    hash = "sha256-UrQ7Sp4hklKP+rF8Yke7qay/vSIb+B5mza2fmfcN6l8=";
+    version = "10.12.2";
+    hash = "sha256-6VXlsMtAPFROYlmYJdHj54fo1J0LC4UJbzI00cuuwhk=";
  };
  meta = {
    changelog = "https://marketplace.visualstudio.com/items/James-Yu.latex-workshop/changelog";
@@ -110,13 +110,13 @@
    "vendorHash": null
  },
  "bpg_proxmox": {
-    "hash": "sha256-RVhClLMaoCtMhh+4NL8aOj/sK2WtFA/LNjkscKmxIiU=",
+    "hash": "sha256-d0v0a4t0sPkGQ9LGK7p5XZmuZBuBeLcWHBoslFu9Qs8=",
    "homepage": "https://registry.terraform.io/providers/bpg/proxmox",
    "owner": "bpg",
    "repo": "terraform-provider-proxmox",
-    "rev": "v0.91.0",
+    "rev": "v0.92.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-/kRacnH+zVEm0u091euV0UIyadAcYnykn2tJiYY19I8="
+    "vendorHash": "sha256-+UWPbNHoV3TdeMZdY0ZOLBe1/Dej37hHORatC9Kol58="
  },
  "brightbox_brightbox": {
    "hash": "sha256-pwFbCP+qDL/4IUfbPRCkddkbsEEeAu7Wp12/mDL0ABA=",
@@ -1175,13 +1175,13 @@
    "vendorHash": "sha256-f3b4NULINH8XworCn46fiz4GmBM31ROdAJy1j4GKkx4="
  },
  "scaleway_scaleway": {
-    "hash": "sha256-LR1e8gAF8htYpxfj/m/Ge266sFRFc8tijaE/9uKYYBw=",
+    "hash": "sha256-TekcGTYzpqFUVv0NYRGi71rgMD0okQpMPiPI8869cog=",
    "homepage": "https://registry.terraform.io/providers/scaleway/scaleway",
    "owner": "scaleway",
    "repo": "terraform-provider-scaleway",
-    "rev": "v2.65.1",
+    "rev": "v2.66.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-HWAaBgKD/viiFaxvyHE4BuWdsY0tCSQFaf8YJq4PS/0="
+    "vendorHash": "sha256-2uqoiUdU8hVHm8Mc0dkS/qAuqZkhVVTKwf++CobRGtw="
  },
  "scottwinkler_shell": {
    "hash": "sha256-LTWEdXxi13sC09jh+EFZ6pOi1mzuvgBz5vceIkNE/JY=",
@@ -119,6 +119,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://ares-emu.net";
    description = "Open-source multi-system emulator with a focus on accuracy and preservation";
    license = lib.licenses.isc;
+    maintainers = with lib.maintainers; [ nadiaholmquist ];
    mainProgram = "ares";
    platforms = lib.platforms.unix;
  };
@@ -0,0 +1,14 @@
+diff --git a/Directory.Build.props b/Directory.Build.props
+index f124456..117c096 100644
+--- a/Directory.Build.props
+++ b/Directory.Build.props
+@@ -9,9 +9,5 @@
+       <AddSyntheticProjectReferencesForSolutionDependencies>false</AddSyntheticProjectReferencesForSolutionDependencies>
+       <RunApiCompat>False</RunApiCompat>
+       <LangVersion>12</LangVersion>
+-      <CreateHardLinksForCopyAdditionalFilesIfPossible>true</CreateHardLinksForCopyAdditionalFilesIfPossible>
+-      <CreateHardLinksForCopyFilesToOutputDirectoryIfPossible>true</CreateHardLinksForCopyFilesToOutputDirectoryIfPossible>
+-      <CreateHardLinksForCopyLocalIfPossible>true</CreateHardLinksForCopyLocalIfPossible>
+-      <CreateHardLinksForPublishFilesIfPossible>true</CreateHardLinksForPublishFilesIfPossible>
+   </PropertyGroup>
+ </Project>
@@ -62,6 +62,9 @@ stdenvNoCC.mkDerivation (
        # [ERR] Compile: [...]/Microsoft.NET.Sdk.targets(148,5): error MSB4018: The "GenerateDepsFile" task failed unexpectedly. [/build/source/src/tools/DevAnalyzers/DevAnalyzers.csproj]
        # [ERR] Compile: [...]/Microsoft.NET.Sdk.targets(148,5): error MSB4018: System.IO.IOException: The process cannot access the file '/build/source/src/tools/DevAnalyzers/bin/Release/netstandard2.0/DevAnalyzers.deps.json' because it is being used by another process. [/build/source/src/tools/DevAnalyzers/DevAnalyzers.csproj]
        ./0002-disable-parallel-compile.patch
+        # Microsoft.Common.CurrentVersion.targets(5034,5): error MSB3021: Unable to copy file "[...]/JetBrains.Annotations.dll" to "bin/Debug/JetBrains.Annotations.dll". Access to the path '/build/source/nukebuild/bin/Debug/JetBrains.Annotations.dll' is denied. [/build/source/nukebuild/_build.csproj]
+        # This happens because the source packages have symlinks due to linkNuGetPackagesAndSources.
+        ./0003-disable-hard-links.patch
      ];

      # this needs to be match the version being patched above
@@ -7,16 +7,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "basalt";
-  version = "0.9.0";
+  version = "0.11.0";

  src = fetchFromGitHub {
    owner = "erikjuhani";
    repo = "basalt";
    tag = "basalt/v${finalAttrs.version}";
-    hash = "sha256-r34MlNSLZAHqNWlFMGNxT6zTSX+IKKQmJ4klEB4kjek=";
+    hash = "sha256-+bkONCG4PSa266r0am2sjtz2WJXdhwijfJ8Uz3iEk68=";
  };

-  cargoHash = "sha256-TpbJ1HCBocgLAXGb5dBbZNMlOYXR9IGBRtfShgwlMIo=";
+  cargoHash = "sha256-7jkeDZhGoufY1lHnhc2yKz2ulBf/nlV4ngY2XRSHF+4=";

  nativeInstallCheckInputs = [ versionCheckHook ];
  doInstallCheck = true;
@@ -8,23 +8,26 @@

 buildGoModule (finalAttrs: {
  pname = "carapace-bridge";
-  version = "1.2.10";
+  version = "1.4.10";

  src = fetchFromGitHub {
    owner = "carapace-sh";
    repo = "carapace-bridge";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-XQtbOQw2a2B5zhTgFiAuECtY/uM7AQnbwyRpzoKcF8I=";
+    hash = "sha256-6CCLSwbAYkMelaM5ac1I1kwOlWKPSOU9M9/2Dybt55I=";
  };

-  # buildGoModule try to run `go mod vendor` instead of `go work vendor` on the
-  # workspace if proxyVendor is off
+  # buildGoModule tries to run `go mod vendor` instead of `go work vendor` on
+  # the workspace if proxyVendor is off
  proxyVendor = true;
-  vendorHash = "sha256-01WRJJiAqxmb1grvz9gWdYJ4i9pVUYmxFg9BGEuUhdA=";
+  vendorHash = "sha256-DyFOCx+pCChbQRGRDou0QU2YTQzrcAgwO5Mc918Xm8k=";

  postPatch = ''
    substituteInPlace cmd/carapace-bridge/main.go \
      --replace-fail "var version = \"develop\"" "var version = \"$version\""
+
+    # Remove docker examples
+    rm -r .docker
  '';

  nativeInstallCheckInputs = [ versionCheckHook ];
@@ -14,13 +14,13 @@

 stdenv.mkDerivation rec {
  pname = "coturn";
-  version = "4.7.0";
+  version = "4.8.0";

  src = fetchFromGitHub {
    owner = "coturn";
    repo = "coturn";
    tag = version;
-    hash = "sha256-nvImelAvcbHpv6JTxX+sKpldVXG6u9Biu+VDt95r9I4=";
+    hash = "sha256-YeEyEGtlzzltEssPez7BIS3Wcfd+HgDgmrKyxOVu9PA=";
  };

  nativeBuildInputs = [
@@ -30,14 +30,14 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "debian-devscripts";
-  version = "2.26.1";
+  version = "2.26.3";

  src = fetchFromGitLab {
    domain = "salsa.debian.org";
    owner = "debian";
    repo = "devscripts";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-aYzFBotRiw2di8T+4LSht+/ECIdkwpHadcfV2depWoU=";
+    hash = "sha256-LJZ1pt36KccnA/fimZsOzEjXvqVE2eSww1Wkq5+siJk=";
  };

  patches = [
@@ -128,6 +128,9 @@ rustPlatform.buildRustPackage {
    homepage = "https://github.com/cachix/devenv";
    license = lib.licenses.asl20;
    mainProgram = "devenv";
-    teams = [ lib.teams.cachix ];
+    maintainers = with lib.maintainers; [
+      domenkozar
+      sandydoo
+    ];
  };
 }
@@ -12,13 +12,13 @@
  inherit hamlibSupport gpsdSupport extraScripts;
 }).overrideAttrs
  (oldAttrs: {
-    version = "1.8.1-unstable-2026-01-03";
+    version = "1.8.1-unstable-2026-01-08";

    src = fetchFromGitHub {
      owner = "wb2osz";
      repo = "direwolf";
-      rev = "9aba4b386f841e5c9c9068a2259f7f5058a5dee5";
-      hash = "sha256-MHzPwx4N+LLETEZMQz4hmM+1qbwNJjHSISvTWROg+3o=";
+      rev = "041f396de0ab2111b9ccc07960f8f083a81f9ad0";
+      hash = "sha256-W0MTS4UgbtIybhEHXm2ie50TnkvRLc23WB0FR0FGT2s=";
    };

    # drop upstreamed cmake-4 patch
@@ -23,13 +23,13 @@
 stdenv.mkDerivation (finalAttrs: {
  pname = "eid-mw";
  # NOTE: Don't just blindly update to the latest version/tag. Releases are always for a specific OS.
-  version = "5.1.26";
+  version = "5.1.28";

  src = fetchFromGitHub {
    owner = "Fedict";
    repo = "eid-mw";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-1dswXwXNTN3006KHnqlVntg6uHMxNe7NQ4BdKAB2FXM=";
+    hash = "sha256-xXzrJWQEZ5mxnv6lG+rkG1P6TSzUDELccSwUizzhEek=";
  };

  postPatch = ''
@@ -17,16 +17,16 @@
 }:

 let
-  version = "0.211.1";
+  version = "0.300.3";

  src = fetchFromGitHub {
    owner = "evcc-io";
    repo = "evcc";
    tag = version;
-    hash = "sha256-taDgpuM3GbqD+v9sNXvJYiJLE1wvXzS/ILZgAGFUuw4=";
+    hash = "sha256-SGTsM4zZAuh/OGpMXvphHdlcCl1hOOYTn0R1k0/2qQo=";
  };

-  vendorHash = "sha256-VG1/6KadRC4jLBIOL39M6l8ZED1KLb+wKGHNQowAV1g=";
+  vendorHash = "sha256-S23rTyg+QClky0vWfRl5nnd+2cYnHMGXmxZwLoTxUu0=";

  commonMeta = {
    license = lib.licenses.mit;
@@ -52,7 +52,7 @@ buildGo125Module rec {

  npmDeps = fetchNpmDeps {
    inherit src;
-    hash = "sha256-vDMDyMEf6kWn1UFHvzmIxnY/ofh6YwwVFlCeKExfEy4=";
+    hash = "sha256-AXsF0rkaf6giDhJT2f/MMyCd6Ozgepx8do7fpl/CyNs=";
  };

  nativeBuildInputs = [
@@ -72,7 +72,7 @@ buildGo125Module rec {
    ];

    preBuild = ''
-      make assets
+      GOFLAGS="-mod=mod" make assets
    '';
  };

@@ -0,0 +1,38 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitLab,
+  nix-update-script,
+  versionCheckHook,
+}:
+let
+  version = "0.13.0";
+in
+buildGoModule {
+  pname = "fmd-server";
+  inherit version;
+  src = fetchFromGitLab {
+    owner = "fmd-foss";
+    repo = "fmd-server";
+    tag = "v${version}";
+    hash = "sha256-pIVsdoen45YWG/V8qW/DE/yet4o+8MqpVHgHh70Fty8=";
+  };
+
+  vendorHash = "sha256-d8QP6k7vEX0jBcpIMZymgOFYyKqGhND4Xa+mANg172s=";
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "version";
+
+  doInstallCheck = true;
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Server to communicate with the FindMyDevice app and save the latest (encrypted) location";
+    homepage = "https://fmd-foss.org/";
+    downloadPage = "https://gitlab.com/fmd-foss/fmd-server";
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [ j0hax ];
+    teams = [ lib.teams.ngi ];
+    mainProgram = "fmd-server";
+  };
+}
@@ -22,6 +22,7 @@ let
    # Requires running Docker daemon
    "TestDocker"
    "TestJobExecutor"
+    "TestRunExec"
    "TestRunner"
    "Test_validateCmd"

@@ -48,14 +49,14 @@ let
 in
 buildGoModule rec {
  pname = "forgejo-runner";
-  version = "12.4.0";
+  version = "12.5.0";

  src = fetchFromGitea {
    domain = "code.forgejo.org";
    owner = "forgejo";
    repo = "runner";
    rev = "v${version}";
-    hash = "sha256-e7IDkeeEz8uAZ8WbRnBjSGq3SXVt5NY5li/3s/kf6dY=";
+    hash = "sha256-WagacsKhYN+KodDZqXg39RGeJtEGrtqppf1JJpTSBsQ=";
  };

  vendorHash = "sha256-oCSAehLC5NiL0Ttp+FeHQyTQYNh/59I1i0UfbwWPeRE=";
@@ -8,18 +8,18 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "gdscript-formatter";
-  version = "0.18.1";
+  version = "0.18.2";

  src = fetchFromGitHub {
    owner = "GDQuest";
    repo = "GDScript-formatter";
    tag = finalAttrs.version;
-    hash = "sha256-16ASwYNnAtOVB0xxomjyuopya5rtmZriOE4H4W1v6nE=";
+    hash = "sha256-nnLVmd7wVHdDcAnyCHCVYckmbzMdSGIVL2iSgDC+9cs=";
    # Needed due to .gitattributes being used for the Godot addon and export-ignoring all files
    deepClone = true;
  };

-  cargoHash = "sha256-HWPSZFe78+NjIV79Un2e06S4AKpw1xJbJuX0fh1YJdo=";
+  cargoHash = "sha256-xqGmv/e1Ch/EqutIb2claiJ8fQGDDdOriOZdt8SR8mw=";

  cargoBuildFlags = [
    "--bin=gdscript-formatter"
@@ -11,16 +11,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "intelli-shell";
-  version = "3.3.1";
+  version = "3.4.0";

  src = fetchFromGitHub {
    owner = "lasantosr";
    repo = "intelli-shell";
    rev = "v${version}";
-    hash = "sha256-gahf7Ijaj2mf9cdE3C4IIyW5UJrs0IbOP3vado/0fXw=";
+    hash = "sha256-TrT2gMc23m4xZ/fxxHqEkGpq3VBeLfkPXC9H1sSSOaQ=";
  };

-  cargoHash = "sha256-skxgDsDicqkA92IaePwCndGuKHov4GNtwXkSbrDlG2A=";
+  cargoHash = "sha256-usALz3Wj3GyYjHjmEwFvjyDizXKQ66fkZ8Tb7GgT9BA=";

  nativeBuildInputs = [
    pkg-config
@@ -48,7 +48,7 @@ in

 stdenv.mkDerivation (finalAttrs: {
  pname = "ipxe";
-  version = "1.21.1-unstable-2025-12-29";
+  version = "1.21.1-unstable-2026-01-10";

  nativeBuildInputs = [
    mtools
@@ -66,8 +66,8 @@ stdenv.mkDerivation (finalAttrs: {
  src = fetchFromGitHub {
    owner = "ipxe";
    repo = "ipxe";
-    rev = "7c39c04a537ce29dccc6f2bae9749d1d371429c1";
-    hash = "sha256-tqOTv9f9teCQUgt52/cdAM9kE5678Bk9956cWDTDZAg=";
+    rev = "9c01c5a5dacb54167132d9a27259b23acdf091d6";
+    hash = "sha256-7Gsczc6jcUT0jDHNrgYWycqTs2/x3eqzbFwEwz8Z8kU=";
  };

  # Calling syslinux on a FAT image isn't going to work on Aarch64.
@@ -21,14 +21,14 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "kaidan";
-  version = "0.13.0-unstable-2025-12-25";
+  version = "0.14.0";

  src = fetchFromGitLab {
    domain = "invent.kde.org";
    owner = "network";
    repo = "kaidan";
-    rev = "834d89c2115a48188e827089db05a88db5dc1f8f";
-    hash = "sha256-o7x6Ib9zL4akzjvz+mSACQHyj2xH6RzoCniumNjK1lw=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-lKJU8GIkubHLYsP7r+TA+1rg+TMGONwjEcys19f62/w=";
  };

  patches = [
@@ -74,7 +74,7 @@ stdenv.mkDerivation (finalAttrs: {
    qtWrapperArgs+=(--prefix GST_PLUGIN_SYSTEM_PATH_1_0 : "$GST_PLUGIN_SYSTEM_PATH_1_0")
  '';

-  passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };
+  passthru.updateScript = nix-update-script { };
  passthru.tests.kaidan = nixosTests.kaidan;

  meta = {
@@ -7,17 +7,18 @@
  muparser,
  pkg-config,
  qt5,
+  xcbuild,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "librecad";
-  version = "2.2.1.2";
+  version = "2.2.1.3";

  src = fetchFromGitHub {
    owner = "LibreCAD";
    repo = "LibreCAD";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-a/0prti7aFIzoHXyd6NsiKx4ugW/vRXURAHBrAqyp84=";
+    hash = "sha256-s9QA0YC91aziFxgnSeH4+XtQu18cSiRc0B15tyyF8b0=";
  };

  buildInputs = [
@@ -33,6 +34,9 @@ stdenv.mkDerivation (finalAttrs: {
    qt5.qmake
    qt5.qttools
    qt5.wrapQtAppsHook
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    xcbuild
  ];

  qmakeFlags = [
@@ -45,7 +49,8 @@ stdenv.mkDerivation (finalAttrs: {
      --replace-warn __DATE__ 0

    substituteInPlace librecad/src/src.pro \
-      --replace-warn '$$[QT_INSTALL_BINS]' '${lib.getDev qt5.qttools}/bin'
+      --replace-warn '$$[QT_INSTALL_BINS]' '${lib.getDev qt5.qttools}/bin' \
+      --replace-warn '/usr/libexec/PlistBuddy' 'PlistBuddy'
    substituteInPlace librecad/src/muparser.pri \
      --replace-warn "macx|" ""
  '';
@@ -74,13 +74,13 @@ let
 in
 effectiveStdenv.mkDerivation (finalAttrs: {
  pname = "llama-cpp";
-  version = "7628";
+  version = "7704";

  src = fetchFromGitHub {
    owner = "ggml-org";
    repo = "llama.cpp";
    tag = "b${finalAttrs.version}";
-    hash = "sha256-SRz8uLjXtjpHhekqrksUc7oUuz6cYdWfvcdHxWNEgbs=";
+    hash = "sha256-yFHrboXmJ2WK6QPvUqTz6qM2o2PVQF0co5opxFdARUs=";
    leaveDotGit = true;
    postFetch = ''
      git -C "$out" rev-parse --short HEAD > $out/COMMIT
@@ -1,7 +1,6 @@
 src: version:
 {
  lib,
-  fetchFromGitHub,
  fetchYarnDeps,
  dart-sass,
  nodejs,
@@ -17,7 +16,7 @@ stdenv.mkDerivation {

  yarnOfflineCache = fetchYarnDeps {
    yarnLock = "${src}/frontend/yarn.lock";
-    hash = "sha256-qwxsnl9xKzNJEomMB4p8eaiybmlpeUgSUpJtIRhF1Cw=";
+    hash = "sha256-sZk7OEkJdBZRU9ysRDCetzv09XrK5GhPaxxEBD8k5rw=";
  };

  nativeBuildInputs = [
@@ -11,12 +11,12 @@
 }:

 let
-  version = "3.5.0";
+  version = "3.9.2";
  src = fetchFromGitHub {
    owner = "mealie-recipes";
    repo = "mealie";
    tag = "v${version}";
-    hash = "sha256-rZOmu2xplIyMgX0uk5XCKf79qWfftHVELYNXdlzYkrY=";
+    hash = "sha256-jR9NGguxobUenjnvh6vhZztntxNM2rkwkWcq/DeB4JY=";
  };

  frontend = callPackage (import ./mealie-frontend.nix src version) { };
@@ -87,6 +87,9 @@ pythonpkgs.buildPythonApplication rec {
  postPatch = ''
    rm -rf dev # Do not need dev scripts & code

+    substituteInPlace pyproject.toml \
+     --replace-fail '"setuptools==80.9.0"' '"setuptools"'
+
    substituteInPlace mealie/__init__.py \
      --replace-fail '__version__ = ' '__version__ = "v${version}" #'
  '';
@@ -61,7 +61,6 @@ stdenv.mkDerivation {
  meta = {
    homepage = "https://github.com/edolstra/nix-serve";
    description = "Utility for sharing a Nix store as a binary cache";
-    maintainers = [ lib.maintainers.eelco ];
    license = lib.licenses.lgpl21;
    # See https://github.com/edolstra/nix-serve/issues/57
    broken = stdenv.hostPlatform.isDarwin;
@@ -66,13 +66,13 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "noctalia-shell";
-  version = "3.8.2";
+  version = "4.0.0";

  src = fetchFromGitHub {
    owner = "noctalia-dev";
    repo = "noctalia-shell";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-ZjtdQbVPHJeWP8VHWZmSwPwD6fC7Dqmknx1KErzfDks=";
+    hash = "sha256-1ByxRYrivSkD4lIQQxv88r+I/mFo+JF3ebok6375+3Q=";
  };

  nativeBuildInputs = [
@@ -3,23 +3,25 @@
  stdenv,
  fetchgit,
  cmake,
+  libubox,
  unstableGitUpdater,
 }:

 stdenv.mkDerivation {
  pname = "odhcp6c";
-  version = "0-unstable-2025-10-21";
+  version = "0-unstable-2025-12-29";

  src = fetchgit {
    url = "https://git.openwrt.org/project/odhcp6c.git";
-    rev = "77e1ae21e67f81840024ffe5bb7cf69a8fb0d2f0";
-    hash = "sha256-aOW0rOGd4YwnfXjsUj6HHy8zf0FJYFjsKMWJ5yhUl5g=";
+    rev = "8abb45065f5ef9d176efa6bd151a1209b05852c4";
+    hash = "sha256-xly6FAp8yddBnJeCSupVIq0Wec+sSFuuKH91MNKvHwM=";
  };

  nativeBuildInputs = [ cmake ];
+  buildInputs = [ libubox ];

  cmakeFlags = [
-    "-DCMAKE_INSTALL_PREFIX=$out"
+    "-DCMAKE_INSTALL_PREFIX=${placeholder "out"}"
  ];

  passthru.updateScript = unstableGitUpdater { };
@@ -28,7 +30,7 @@ stdenv.mkDerivation {
    description = "Embedded DHCPv6-client for OpenWrt";
    homepage = "https://openwrt.org/packages/pkgdata/odhcp6c";
    license = lib.licenses.gpl2Only;
-    teams = with lib.teams; [ secshell ];
+    maintainers = with lib.maintainers; [ felbinger ];
    platforms = lib.platforms.linux;
  };
 }
@@ -8,8 +8,8 @@
 }:

 let
-  odoo_version = "18.0";
-  odoo_release = "20250506";
+  odoo_version = "19.0";
+  odoo_release = "20260104";
  python = python312.override {
    self = python;
  };
@@ -17,34 +17,36 @@ in
 python.pkgs.buildPythonApplication rec {
  pname = "odoo";
  version = "${odoo_version}.${odoo_release}";
-
-  format = "setuptools";
+  pyproject = true;

  src = fetchzip {
    # find latest version on https://nightly.odoo.com/${odoo_version}/nightly/src
    url = "https://nightly.odoo.com/${odoo_version}/nightly/src/odoo_${version}.zip";
    name = "odoo-${version}";
-    hash = "sha256-rNG0He+51DnRT5g1SovGZ9uiE1HWXtcmAybcadBMjY4="; # odoo
+    hash = "sha256-JsbJ39zPZm4eyRTXkvdCMHwYaA08yUxZXcLglRn3kWs="; # odoo
  };

  makeWrapperArgs = [
-    "--prefix"
-    "PATH"
-    ":"
-    "${lib.makeBinPath [
-      wkhtmltopdf
-      rtlcss
-    ]}"
+    "--prefix PATH : ${
+      lib.makeBinPath [
+        wkhtmltopdf
+        rtlcss
+      ]
+    }"
  ];

-  propagatedBuildInputs = with python.pkgs; [
+  build-system = with python.pkgs; [
+    setuptools
+    distutils
+  ];
+
+  dependencies = with python.pkgs; [
+    asn1crypto
    babel
+    cbor2
    chardet
    cryptography
-    decorator
    docutils
-    distutils
-    ebaysdk
    freezegun
    geoip2
    gevent
@@ -57,12 +59,12 @@ python.pkgs.buildPythonApplication rec {
    markupsafe
    num2words
    ofxparse
+    openpyxl
    passlib
    pillow
    polib
    psutil
    psycopg2
-    pydot
    pyopenssl
    pypdf2
    pyserial
@@ -82,9 +84,6 @@ python.pkgs.buildPythonApplication rec {
    xlsxwriter
    xlwt
    zeep
-
-    setuptools
-    mock
  ];

  # takes 5+ minutes and there are not files to strip
@@ -31,8 +31,7 @@ in
 python.pkgs.buildPythonApplication rec {
  pname = "odoo";
  version = "${odoo_version}.${odoo_release}";
-
-  format = "setuptools";
+  pyproject = true;

  # latest release is at https://github.com/odoo/docker/blob/master/17.0/Dockerfile
  src = fetchzip {
@@ -48,23 +47,24 @@ python.pkgs.buildPythonApplication rec {
  ];

  makeWrapperArgs = [
-    "--prefix"
-    "PATH"
-    ":"
-    "${lib.makeBinPath [
-      wkhtmltopdf
-      rtlcss
-    ]}"
+    "--prefix PATH : ${
+      lib.makeBinPath [
+        wkhtmltopdf
+        rtlcss
+      ]
+    }"
  ];

-  propagatedBuildInputs = with python.pkgs; [
+  build-system = with python.pkgs; [
+    setuptools
+  ];
+
+  dependencies = with python.pkgs; [
    babel
    chardet
    cryptography
    decorator
    docutils-0_17 # sphinx has a docutils requirement >= 18
-    ebaysdk
-    freezegun
    geoip2
    gevent
    greenlet
@@ -102,8 +102,7 @@ python.pkgs.buildPythonApplication rec {
    xlwt
    zeep

-    setuptools
-    mock
+    setuptools # pkg_resources is imported during runtime
  ];

  # takes 5+ minutes and there are not files to strip
@@ -0,0 +1,110 @@
+{
+  lib,
+  fetchzip,
+  python312,
+  rtlcss,
+  wkhtmltopdf,
+  nixosTests,
+}:
+
+let
+  odoo_version = "18.0";
+  odoo_release = "20250506";
+  python = python312.override {
+    self = python;
+  };
+in
+python.pkgs.buildPythonApplication rec {
+  pname = "odoo";
+  version = "${odoo_version}.${odoo_release}";
+  pyproject = true;
+
+  src = fetchzip {
+    # find latest version on https://nightly.odoo.com/${odoo_version}/nightly/src
+    url = "https://nightly.odoo.com/${odoo_version}/nightly/src/odoo_${version}.zip";
+    name = "odoo-${version}";
+    hash = "sha256-rNG0He+51DnRT5g1SovGZ9uiE1HWXtcmAybcadBMjY4="; # odoo
+  };
+
+  makeWrapperArgs = [
+    "--prefix PATH : ${
+      lib.makeBinPath [
+        wkhtmltopdf
+        rtlcss
+      ]
+    }"
+  ];
+
+  build-system = with python.pkgs; [
+    setuptools
+    distutils
+  ];
+
+  dependencies = with python.pkgs; [
+    asn1crypto
+    babel
+    cbor2
+    chardet
+    cryptography
+    decorator
+    docutils
+    ebaysdk
+    freezegun
+    geoip2
+    gevent
+    greenlet
+    idna
+    jinja2
+    libsass
+    lxml
+    markupsafe
+    num2words
+    ofxparse
+    openpyxl
+    passlib
+    pillow
+    polib
+    psutil
+    psycopg2
+    pydot
+    pyopenssl
+    pypdf2
+    pyserial
+    python-dateutil
+    python-ldap
+    python-stdnum
+    pytz
+    pyusb
+    qrcode
+    reportlab
+    requests
+    rjsmin
+    urllib3
+    vobject
+    werkzeug
+    xlrd
+    xlsxwriter
+    xlwt
+    zeep
+  ];
+
+  # takes 5+ minutes and there are not files to strip
+  dontStrip = true;
+
+  passthru = {
+    updateScript = ./update.sh;
+    tests = {
+      inherit (nixosTests) odoo;
+    };
+  };
+
+  meta = {
+    description = "Open Source ERP and CRM";
+    homepage = "https://www.odoo.com/";
+    license = lib.licenses.lgpl3Only;
+    maintainers = with lib.maintainers; [
+      mkg20001
+      siriobalmelli
+    ];
+  };
+}
@@ -0,0 +1,32 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p curl gnused nix coreutils nix-prefetch
+# shellcheck shell=bash
+
+set -euo pipefail
+
+SCRIPT_DIR="$(dirname "${BASH_SOURCE[0]}")"
+PKG=$(basename "$SCRIPT_DIR")
+
+LATEST="18" # increment manually
+VERSION="${PKG/#odoo}"
+VERSION="${VERSION:-$LATEST}.0"
+
+RELEASE="$(
+    curl "https://nightly.odoo.com/$VERSION/nightly/src/" |
+        sed -nE 's/.*odoo_'"$VERSION"'.(20[0-9]{6}).tar.gz.*/\1/p' |
+        tail -n 1
+)"
+
+latestVersion="$VERSION.$RELEASE"
+currentVersion=$(nix-instantiate --eval -E "with import ./. {}; $PKG.version or (lib.getVersion $PKG)" | tr -d '"')
+
+if [[ "$currentVersion" == "$latestVersion" ]]; then
+    echo "$PKG is up-to-date: $currentVersion"
+    exit 0
+fi
+
+cd "$SCRIPT_DIR"
+
+sed -ri "s| hash.+ # odoo| hash = \"$(nix-prefetch -q fetchzip --option extra-experimental-features flakes --url "https://nightly.odoo.com/${VERSION}/nightly/src/odoo_${latestVersion}.zip")\"; # odoo|g" package.nix
+sed -ri "s|odoo_version = .+|odoo_version = \"$VERSION\";|" package.nix
+sed -ri "s|odoo_release = .+|odoo_release = \"$RELEASE\";|" package.nix
@@ -16,12 +16,12 @@ let
    ];
  };
 in
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
  pname = "oils-for-unix";
  version = "0.37.0";

  src = fetchurl {
-    url = "https://oils.pub/download/oils-for-unix-${version}.tar.gz";
+    url = "https://oils.pub/download/oils-for-unix-${finalAttrs.version}.tar.gz";
    hash = "sha256-9NQdIKBSPbz71LojH4Lt8lsI1JZdZbxx/LVmZtZ0MAA=";
  };

@@ -66,6 +66,10 @@ stdenv.mkDerivation rec {
  meta = {
    description = "Unix shell with JSON-compatible structured data. It's our upgrade path from bash to a better language and runtime";
    homepage = "https://www.oils.pub/";
+    longDescription = ''
+      This package installs both `osh` and `ysh`. To use one as a login shell,
+      select one of `pkgs.oils-for-unix.osh`, `pkgs.oils-for-unix.ysh`.
+    '';

    license = lib.licenses.asl20;

@@ -74,10 +78,24 @@ stdenv.mkDerivation rec {
      mkg20001
      melkor333
    ];
-    changelog = "https://www.oils.pub/release/${version}/changelog.html";
+    changelog = "https://www.oils.pub/release/${finalAttrs.version}/changelog.html";
  };

-  passthru = {
-    shellPath = "/bin/osh";
-  };
-}
+  passthru =
+    let
+      mkShell =
+        shellName:
+        symlinkJoin {
+          name = "oils-for-unix-${shellName}-${finalAttrs.version}";
+          paths = [ finalAttrs.finalPackage ];
+          passthru.shellPath = "/bin/${shellName}";
+          meta = finalAttrs.meta // {
+            mainProgram = shellName;
+          };
+        };
+    in
+    {
+      osh = mkShell "osh";
+      ysh = mkShell "ysh";
+    };
+})
@@ -14,7 +14,6 @@
  rustc,
  versionCheckHook,
  nix-update-script,
-  tsgolint,
 }:

 # Build with pnpm instead of buildRustPackage because Prettier integration
@@ -90,7 +89,6 @@ stdenv.mkDerivation (finalAttrs: {
    cp npm/oxfmt/configuration_schema.json $outPath/

    makeWrapper ${lib.getExe nodejs-slim} $out/bin/oxfmt \
-      --prefix PATH : "${lib.makeBinPath [ tsgolint ]}" \
      --add-flags $outPath/dist/cli.js

    runHook postInstall
@@ -3,8 +3,10 @@
  rustPlatform,
  fetchFromGitHub,
  cmake,
+  makeBinaryWrapper,
  nix-update-script,
  rust-jemalloc-sys,
+  tsgolint,
  versionCheckHook,
 }:

@@ -21,7 +23,10 @@ rustPlatform.buildRustPackage (finalAttrs: {

  cargoHash = "sha256-cesj9jwWHIFxpFV62QDgYl22EUE8qVjIbb2nRObAyLo=";

-  nativeBuildInputs = [ cmake ];
+  nativeBuildInputs = [
+    cmake
+    makeBinaryWrapper
+  ];
  buildInputs = [
    rust-jemalloc-sys
  ];
@@ -33,6 +38,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
  ];
  cargoTestFlags = finalAttrs.cargoBuildFlags;

+  postFixup = ''
+    wrapProgram $out/bin/oxlint \
+      --prefix PATH : "${lib.makeBinPath [ tsgolint ]}"
+  '';
+
  nativeInstallCheckInputs = [ versionCheckHook ];
  doInstallCheck = true;

@@ -84,7 +84,7 @@ stdenv.mkDerivation (finalAttrs: {
    homepage = "https://docs.part-db.de/";
    changelog = "https://github.com/Part-DB/Part-DB-server/releases/tag/v${version}";
    license = lib.licenses.agpl3Plus;
-    teams = with lib.teams; [ secshell ];
+    maintainers = with lib.maintainers; [ felbinger ];
    platforms = lib.platforms.linux;
  };
 })
@@ -0,0 +1,56 @@
+From 6466578967d3d39c46f7ec10b308bca36568697d Mon Sep 17 00:00:00 2001
+From: Paolo Lucente <pl+github@pmacct.net>
+Date: Tue, 11 Mar 2025 23:02:05 +0000
+Subject: [PATCH] * fix, making gcc15 happy. Patch contributed by Petr Gajdos
+
+---
+
+diff --git a/src/pmacct.h b/src/pmacct.h
+index ab7b3bba5..121141a28 100644
+--- a/src/pmacct.h
+++ b/src/pmacct.h
+@@ -368,9 +368,9 @@ struct child_ctl2 {
+ #include "util.h"
+ 
+ /* prototypes */
+-void startup_handle_falling_child();
+-void handle_falling_child();
+-void ignore_falling_child();
+void startup_handle_falling_child(int);
+void handle_falling_child(int);
+void ignore_falling_child(int);
+ void PM_sigint_handler(int);
+ void PM_sigalrm_noop_handler(int);
+ void reload(int);
+diff --git a/src/signals.c b/src/signals.c
+index 94fdbd12e..ad9a627e1 100644
+--- a/src/signals.c
+++ b/src/signals.c
+@@ -29,7 +29,7 @@
+ extern struct plugins_list_entry *plugin_list;
+ 
+ /* functions */
+-void startup_handle_falling_child()
+void startup_handle_falling_child(int unused)
+ {
+   int i, j;
+ 
+@@ -42,7 +42,7 @@ void startup_handle_falling_child()
+   }
+ }
+ 
+-void handle_falling_child()
+void handle_falling_child(int unused)
+ {
+   struct plugins_list_entry *list = NULL;
+   int j, ret;
+@@ -100,7 +100,7 @@ void handle_falling_child()
+   }
+ }
+ 
+-void ignore_falling_child()
+void ignore_falling_child(int unused)
+ {
+   pid_t cpid;
+   int status;
+
@@ -2,6 +2,7 @@
  lib,
  stdenv,
  fetchFromGitHub,
+  fetchpatch,
  pkg-config,
  autoreconfHook,
  libtool,
@@ -38,6 +39,14 @@ stdenv.mkDerivation (finalAttrs: {
    hash = "sha256-3gV6GUhTQnH09NRIJQI0xBn05Bgo3AJsE2cSxNPXITo=";
  };

+  patches = [
+    # Fixes GCC15 compatability
+    # Can be removed with the next release
+    # Custom version of https://github.com/pmacct/pmacct/commit/6466578967d3d39c46f7ec10b308bca36568697d.patch
+    # without the copyright date changes.
+    ./gcc15-compat.patch
+  ];
+
  nativeBuildInputs = [
    autoreconfHook
    pkg-config
@@ -34,11 +34,11 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "PortfolioPerformance";
-  version = "0.81.0";
+  version = "0.81.1";

  src = fetchurl {
    url = "https://github.com/buchen/portfolio/releases/download/${finalAttrs.version}/PortfolioPerformance-${finalAttrs.version}-linux.gtk.x86_64.tar.gz";
-    hash = "sha256-j1FoN35ESHfUxS2zBc/ugoDnp92QRdJX86Bhy/q26A0=";
+    hash = "sha256-t3S5wsMPrzxuB/6MB/mbysTizvArRoQ1Ap3UVJZLe1w=";
  };

  nativeBuildInputs = [
@@ -8,22 +8,22 @@

 buildNpmPackage (finalAttrs: {
  pname = "psitransfer";
-  version = "2.3.1";
+  version = "2.3.2";

  src = fetchFromGitHub {
    owner = "psi-4ward";
    repo = "psitransfer";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-I5+SgPR53zdgTwHd4tdSoPr1y1iQ/JHH0KXqexgkGVE=";
+    hash = "sha256-i2W3sOOxXM5UHxB20EjpOhmu08PQvaflIC4+Qk+ZnIQ=";
  };

-  npmDepsHash = "sha256-BZpd/fsuV77uj2bGZcqBpIuOq3YlUw2bxovOfu8b9iE=";
+  npmDepsHash = "sha256-cd9Qkw3uOvpQVoLRPphjKjPsBomxaBwdM+ZlhLwJqYM=";

  app = buildNpmPackage {
    pname = "psitransfer-app";
    inherit (finalAttrs) version src;

-    npmDepsHash = "sha256-zEGYv6TaHzgPCB3mHP2UMh8VkFqSBdrLuP5KjuEU0p8=";
+    npmDepsHash = "sha256-j8eUi3HP6gfjIDD5lli5ypHcpWaOaFLKENe5IYQzchk=";

    postPatch = ''
      # https://github.com/psi-4ward/psitransfer/pull/284
@@ -21,13 +21,13 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "readest";
-  version = "0.9.96";
+  version = "0.9.97";

  src = fetchFromGitHub {
    owner = "readest";
    repo = "readest";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-3PCdcSF9ocDqHzK9P/FJQwch5u5zVLQ3eDNSGJQGSKw=";
+    hash = "sha256-JrqjOFfO6GGggRhHWq1B/mhcVQgQeFfT51WXlvlFW5Y=";
    fetchSubmodules = true;
  };

@@ -42,7 +42,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
    inherit (finalAttrs) pname version src;
    pnpm = pnpm_9;
    fetcherVersion = 1;
-    hash = "sha256-Ea/J3W3L8vVDlIRY/szaCfcqunjiFU6yL+e8h4c5UHg=";
+    hash = "sha256-Y4GaHo1Jf99F8UhHbNfaAje2tE1QXwbd2upr6eN9qKE=";
  };

  pnpmRoot = "../..";
@@ -1,13 +1,13 @@
 [
  {
    "pname": "Avalonia",
-    "version": "11.0.0",
-    "hash": "sha256-7QE0MtD1QDiG3gRx5xW33E33BXyEtASQSw+Wi3Lmy3E="
+    "version": "11.3.7",
+    "hash": "sha256-FsBz3mwSn+JZvSACEFZGzYBdX+4rFHSFQfl9RYT7BAM="
  },
  {
    "pname": "Avalonia.Angle.Windows.Natives",
-    "version": "2.1.0.2023020321",
-    "hash": "sha256-TWop9cvak6cMv2vrA/GlpuYBxS8Fuj5UmupGIV7Q5Ks="
+    "version": "2.1.25547.20250602",
+    "hash": "sha256-LE/lENAHptmz6t3T/AoJwnhpda+xs7PqriNGzdcfg8M="
  },
  {
    "pname": "Avalonia.AvaloniaEdit",
@@ -16,94 +16,89 @@
  },
  {
    "pname": "Avalonia.BuildServices",
-    "version": "0.0.28",
-    "hash": "sha256-7NQWQl3xrBDOXhGihCkt5DIrws48KyDGon/7+gPzMDU="
+    "version": "11.3.1",
+    "hash": "sha256-JYcA/DgTHRJ02/FcURqtJnXYhhdzki8DGECLkZ4zONg="
  },
  {
    "pname": "Avalonia.Controls.ColorPicker",
-    "version": "11.0.0",
-    "hash": "sha256-xzbJvbOYGHtd8rtKgsMTtOarbVQ8mIvs7IruODv8jxs="
-  },
-  {
-    "pname": "Avalonia.Controls.DataGrid",
-    "version": "11.0.0",
-    "hash": "sha256-Ukvt2JebIWb+y1x77EAVl2Nbay92OX30k5TdwElvjGI="
+    "version": "11.3.7",
+    "hash": "sha256-zBUuXE2NEaGUMBkHt/RUYw4H1+VSjur5zgMszu2tgL8="
  },
  {
    "pname": "Avalonia.Desktop",
-    "version": "11.0.0",
-    "hash": "sha256-jopgP4nMzEqrMuzCpUSd30j1uNMS8vcCO125U8YKwyM="
+    "version": "11.3.7",
+    "hash": "sha256-ZRtKTtS3/B/EysQWNok3Sx3lL/ECvsbc3iPxSMTBPuE="
  },
  {
    "pname": "Avalonia.Diagnostics",
-    "version": "11.0.0",
-    "hash": "sha256-6dqx4JIrmjnDDa1mhI7CCiKPfaIR1qDK+ZZrl1OgnYw="
+    "version": "11.3.7",
+    "hash": "sha256-JJ6JYM1FrhqMi6i645OvmcYWmZKfZ/Qiw4AASUD7rKE="
  },
  {
    "pname": "Avalonia.Fonts.Inter",
-    "version": "11.0.0",
-    "hash": "sha256-VaWAQk1+LlaKokkAg2je5jKUajmIySJ65Dh5KE+ac+0="
+    "version": "11.3.7",
+    "hash": "sha256-9ODF5k1aAIIYB+yv0TNRtfulaQW9AGlUAI8J8yZzp3w="
  },
  {
    "pname": "Avalonia.FreeDesktop",
-    "version": "11.0.0",
-    "hash": "sha256-Q18zDlzjXApnV1hANvh/OQGmKSdB/ajZ84bTgRhFWhA="
+    "version": "11.3.7",
+    "hash": "sha256-kXrt0kdUH1TBE86ZOpCKSD8sMZv3DP6aris3/0oOBPQ="
  },
  {
    "pname": "Avalonia.Native",
-    "version": "11.0.0",
-    "hash": "sha256-UOf5jXEGg6tTnWgX8qLQ5raythkusO/gN5BjHtC+/Mg="
+    "version": "11.3.7",
+    "hash": "sha256-y1ruQwDrGv859FDWGAoxu8vub6mqWE+LQPb9kb1zrPM="
  },
  {
    "pname": "Avalonia.ReactiveUI",
-    "version": "11.0.0",
-    "hash": "sha256-EBugQUNJI6xw21jul16bineWU0y5aCAZ/XUJqYQzF7o="
+    "version": "11.3.7",
+    "hash": "sha256-tSujuoZFHr00FGdZl1zXVLylQaHoaYxv8qEuFgBIuLA="
  },
  {
    "pname": "Avalonia.Remote.Protocol",
-    "version": "11.0.0",
-    "hash": "sha256-gkVpdbk/0RDM7Hhq0jwZwltDpTsGRmbX+ZFTjWYYoKw="
+    "version": "11.3.7",
+    "hash": "sha256-A3FubRH8Li81pYhEUGQatM0etli5lSkDf2+iPxD95gs="
  },
  {
    "pname": "Avalonia.Skia",
-    "version": "11.0.0",
-    "hash": "sha256-A01nrs3Ij1eTo6tPmu7++T1K+Wo/H/9LvpeuOUGbQeU="
+    "version": "11.3.0",
+    "hash": "sha256-p+mWsyrYsC9PPhNjOxPZwarGuwmIjxaQ4Ml/2XiEuEc="
+  },
+  {
+    "pname": "Avalonia.Skia",
+    "version": "11.3.7",
+    "hash": "sha256-uA9qA5+SSAT6I+F4gRs8Uhr5mPkUD4le5IrQIeIOxKg="
  },
  {
    "pname": "Avalonia.Svg",
-    "version": "11.0.0.1",
-    "hash": "sha256-7p/doak1h7bNtjAvnELCR5WtiGmCbFkrSF5Wds3rwSg="
+    "version": "11.3.0",
+    "hash": "sha256-P/9rzOZfIjjNMom1sy6ZAYIrK/YCuW/Dfm/H5gXDbwg="
  },
  {
    "pname": "Avalonia.Svg.Skia",
-    "version": "11.0.0.1",
-    "hash": "sha256-zpkQcv1tF45cUV+POzhND52ntUcV2qU0e7ww3HB+3K8="
+    "version": "11.3.0",
+    "hash": "sha256-4MY70GVJYZI4eGYw+++lXfpuoKJuvc9EJoU/ty4yF0E="
  },
  {
    "pname": "Avalonia.Themes.Simple",
-    "version": "11.0.0",
-    "hash": "sha256-temZl8DKFuhIewVQDAqq1b+sF1RLfZ8CoZ0Eho41h+M="
+    "version": "11.3.7",
+    "hash": "sha256-JNteZ2nIzrLFjLfnUTce2T/JmVgXXkgMbsXGtIayWl0="
  },
  {
    "pname": "Avalonia.Win32",
-    "version": "11.0.0",
-    "hash": "sha256-o+bNmGBLiQoBTPXb6Ban1AmwvR6bbKmTE5HY6EslV7Y="
+    "version": "11.3.7",
+    "hash": "sha256-aktfE6X2Qa1JBVaiFt2FqZQBiTTskPKtHssM3Zr9cP0="
  },
  {
    "pname": "Avalonia.X11",
-    "version": "11.0.0",
-    "hash": "sha256-zyA2ZKathdIO48GjfG0bQdWjGLgd7ohIGw8O7mX+pL0="
+    "version": "11.3.7",
+    "hash": "sha256-oZ5sQDFYwx6vyrALZcup4Xl1yUPeb6WG1ejJAecbx3U="
  },
  {
    "pname": "Castle.Core",
    "version": "5.1.1",
    "hash": "sha256-oVkQB+ON7S6Q27OhXrTLaxTL0kWB58HZaFFuiw4iTrE="
  },
-  {
-    "pname": "ColorTextBlock.Avalonia",
-    "version": "11.0.0-d1",
-    "hash": "sha256-8EEmUYrMLBdZ4gNolsiBTkFWjRTB3TWVXkH0H8J1xe0="
-  },
  {
    "pname": "ColorTextBlock.Avalonia",
    "version": "11.0.2",
@@ -114,6 +109,11 @@
    "version": "1.3.0",
    "hash": "sha256-HoiYZuABqQdt6Sm1KvMm4MLLYCyWuB4DT6WZp2BqxUw="
  },
+  {
+    "pname": "DialogHost.Avalonia",
+    "version": "0.8.1",
+    "hash": "sha256-5gMb8Ap53YFIyFYfpceAd53RzlK0OF5PbiQtyCT5hew="
+  },
  {
    "pname": "DryIoc.dll",
    "version": "5.4.1",
@@ -126,13 +126,13 @@
  },
  {
    "pname": "DynamicData",
-    "version": "7.9.5",
-    "hash": "sha256-3XjOMuFathku9oWyss360+Ze5UMP7tSmUbMoax7qONU="
+    "version": "8.4.1",
+    "hash": "sha256-r+haH5VlmZFJTEJ3UedsYybw+oddn/CSvfm6x7PrrQ4="
  },
  {
    "pname": "ExCSS",
-    "version": "4.1.4",
-    "hash": "sha256-7dKCwRC+Jt4CTLz9LF3LpmaB8ch1HFrcan7CmM3toPg="
+    "version": "4.3.0",
+    "hash": "sha256-7QGbwOlT1EEkgUULKWSJO3H8BzvV4KP/mUZE/9/3r6M="
  },
  {
    "pname": "FakeItEasy",
@@ -140,34 +140,69 @@
    "hash": "sha256-+FLBsGvUV+B17vhqNRmWYOUAWa0zI5pYPlcJGb1iIhE="
  },
  {
-    "pname": "Fizzler",
-    "version": "1.2.1",
-    "hash": "sha256-FROW1WzitXTauf2Hn7YejOLqNKN2Nd+Q2etFB1pYsvA="
+    "pname": "HarfBuzzSharp",
+    "version": "7.3.0.3",
+    "hash": "sha256-1vDIcG1aVwVABOfzV09eAAbZLFJqibip9LaIx5k+JxM="
  },
  {
    "pname": "HarfBuzzSharp",
-    "version": "2.8.2.3",
-    "hash": "sha256-4tbdgUabPjlkBm3aUFeocj4Fdslmms2olDFpzOLyqoQ="
+    "version": "8.3.0.1",
+    "hash": "sha256-ZQwyxpI6jB804Z3d1JAhLqyHIu42fo6mpmk5GVFbEzk="
+  },
+  {
+    "pname": "HarfBuzzSharp",
+    "version": "8.3.1.1",
+    "hash": "sha256-614yv6bK9ynhdUnvW4wIkgpBe2sqTh28U9cDZzdhPc0="
  },
  {
    "pname": "HarfBuzzSharp.NativeAssets.Linux",
-    "version": "2.8.2.3",
-    "hash": "sha256-3xwVfNfKTkuLdnT+e3bfG9tNTdEmar7ByzY+NTlUKLg="
+    "version": "7.3.0.3",
+    "hash": "sha256-HW5r16wdlgDMbE/IfE5AQGDVFJ6TS6oipldfMztx+LM="
+  },
+  {
+    "pname": "HarfBuzzSharp.NativeAssets.Linux",
+    "version": "8.3.1.1",
+    "hash": "sha256-sBbez6fc9axVcsBbIHbpQh/MM5NHlMJgSu6FyuZzVyU="
  },
  {
    "pname": "HarfBuzzSharp.NativeAssets.macOS",
-    "version": "2.8.2.3",
-    "hash": "sha256-ZohUEaovj/sRB4rjuJIOq6S9eim3m+qMlpHIebNDTRQ="
+    "version": "7.3.0.3",
+    "hash": "sha256-UpAVfRIYY8Wh8xD4wFjrXHiJcvlBLuc2Xdm15RwQ76w="
+  },
+  {
+    "pname": "HarfBuzzSharp.NativeAssets.macOS",
+    "version": "8.3.0.1",
+    "hash": "sha256-bpow26ydfzv9w6XCtZOcsGqMUVcfmvnIo5qPqtl9NQo="
+  },
+  {
+    "pname": "HarfBuzzSharp.NativeAssets.macOS",
+    "version": "8.3.1.1",
+    "hash": "sha256-hK20KbX2OpewIO5qG5gWw5Ih6GoLcIDgFOqCJIjXR/Q="
  },
  {
    "pname": "HarfBuzzSharp.NativeAssets.WebAssembly",
-    "version": "2.8.2.3",
-    "hash": "sha256-ZsiBGpXfODHUHPgU/50k9QR/j6Klo7rsB0SUt8zYcBA="
+    "version": "7.3.0.3",
+    "hash": "sha256-jHrU70rOADAcsVfVfozU33t/5B5Tk0CurRTf4fVQe3I="
+  },
+  {
+    "pname": "HarfBuzzSharp.NativeAssets.WebAssembly",
+    "version": "8.3.1.1",
+    "hash": "sha256-mLKoLqI47ZHXqTMLwP1UCm7faDptUfQukNvdq6w/xxw="
  },
  {
    "pname": "HarfBuzzSharp.NativeAssets.Win32",
-    "version": "2.8.2.3",
-    "hash": "sha256-5GSzM5IUoOwK+zJg0d74WlT3n1VZly8pKlyjiqVocCI="
+    "version": "7.3.0.3",
+    "hash": "sha256-v/PeEfleJcx9tsEQAo5+7Q0XPNgBqiSLNnB2nnAGp+I="
+  },
+  {
+    "pname": "HarfBuzzSharp.NativeAssets.Win32",
+    "version": "8.3.0.1",
+    "hash": "sha256-2+FA4EfAQ68q1nJlXUuqDcETwIA+6OvD0DB/lMnbKVY="
+  },
+  {
+    "pname": "HarfBuzzSharp.NativeAssets.Win32",
+    "version": "8.3.1.1",
+    "hash": "sha256-Um4iwLdz9XtaDSAsthNZdev6dMiy7OBoHOrorMrMYyo="
  },
  {
    "pname": "HtmlAgilityPack",
@@ -199,11 +234,6 @@
    "version": "11.0.2",
    "hash": "sha256-F+A56Zw+smQJhB4Wd8P1Bcm0jqSBUw7y21S4GDnIJzY="
  },
-  {
-    "pname": "Markdown.Avalonia.Tight",
-    "version": "11.0.0-d1",
-    "hash": "sha256-0ze59lFF8zq7ylWlu5roKAfrsn2ESbZ41LptjvmYSU8="
-  },
  {
    "pname": "Markdown.Avalonia.Tight",
    "version": "11.0.2",
@@ -211,39 +241,14 @@
  },
  {
    "pname": "MessageBox.Avalonia",
-    "version": "2.3.1-rc1",
-    "hash": "sha256-inBUfNAFAD+OgQ3/9830uOd7mx+GTgTRKrsoXtLD+48="
+    "version": "3.2.0",
+    "hash": "sha256-LoB1rWPLGmeCypbn54qwE7T9nxHDqFVIJNL6qezS6Kw="
  },
  {
    "pname": "MicroCom.Runtime",
    "version": "0.11.0",
    "hash": "sha256-VdwpP5fsclvNqJuppaOvwEwv2ofnAI5ZSz2V+UEdLF0="
  },
-  {
-    "pname": "Microsoft.CodeAnalysis.Analyzers",
-    "version": "3.0.0",
-    "hash": "sha256-KDbCfsBWSJ5ohEXUKp1s1LX9xA2NPvXE/xVzj68EdC0="
-  },
-  {
-    "pname": "Microsoft.CodeAnalysis.Common",
-    "version": "3.8.0",
-    "hash": "sha256-3G9vSc/gHH7FWgOySLTut1+eEaf3H66qcPOvNPLOx4o="
-  },
-  {
-    "pname": "Microsoft.CodeAnalysis.CSharp",
-    "version": "3.8.0",
-    "hash": "sha256-i/r3V/No/VzqmJlWxpGoirvlbJDbBPa/ONZtzYrxuc4="
-  },
-  {
-    "pname": "Microsoft.CodeAnalysis.CSharp.Scripting",
-    "version": "3.8.0",
-    "hash": "sha256-fA9Qu+vTyMZ9REzxJ4aMg/SHCDRk4q9k4ZGUdynoHnA="
-  },
-  {
-    "pname": "Microsoft.CodeAnalysis.Scripting.Common",
-    "version": "3.8.0",
-    "hash": "sha256-866jMHp8kbc1FYpKuUWnd7ViU6kGJTAxPcL/IjXrT0I="
-  },
  {
    "pname": "Microsoft.CodeCoverage",
    "version": "16.7.1",
@@ -254,11 +259,6 @@
    "version": "4.0.1",
    "hash": "sha256-0huoqR2CJ3Z9Q2peaKD09TV3E6saYSqDGZ290K8CrH8="
  },
-  {
-    "pname": "Microsoft.CSharp",
-    "version": "4.3.0",
-    "hash": "sha256-a3dAiPaVuky0wpcHmpTVtAQJNGZ2v91/oArA+dpJgj8="
-  },
  {
    "pname": "Microsoft.Extensions.DependencyInjection",
    "version": "7.0.0",
@@ -304,11 +304,6 @@
    "version": "1.1.0",
    "hash": "sha256-FeM40ktcObQJk4nMYShB61H/E8B7tIKfl9ObJ0IOcCM="
  },
-  {
-    "pname": "Microsoft.NETCore.Platforms",
-    "version": "2.1.2",
-    "hash": "sha256-gYQQO7zsqG+OtN4ywYQyfsiggS2zmxw4+cPXlK+FB5Q="
-  },
  {
    "pname": "Microsoft.NETCore.Targets",
    "version": "1.0.1",
@@ -339,11 +334,6 @@
    "version": "4.3.0",
    "hash": "sha256-mBNDmPXNTW54XLnPAUwBRvkIORFM7/j0D0I2SyQPDEg="
  },
-  {
-    "pname": "Microsoft.Win32.SystemEvents",
-    "version": "6.0.0",
-    "hash": "sha256-N9EVZbl5w1VnMywGXyaVWzT9lh84iaJ3aD48hIBk1zA="
-  },
  {
    "pname": "NETStandard.Library",
    "version": "1.6.1",
@@ -361,13 +351,13 @@
  },
  {
    "pname": "Projektanker.Icons.Avalonia",
-    "version": "6.6.0-rc1.1",
-    "hash": "sha256-UiY/xQ86e4SrkFpaYFgSEGcPpgkxie5y6KsGlp9gShM="
+    "version": "9.6.2",
+    "hash": "sha256-BMbZQ2Hj80Yxcx8mNZ8+A4fxyB/Sa0QhFX5gC6jAueA="
  },
  {
    "pname": "Projektanker.Icons.Avalonia.FontAwesome",
-    "version": "6.6.0-rc1.1",
-    "hash": "sha256-rIcR1IlWjVO8cTW5Q93PCXnljNI3S/WQv+o4YXR77dc="
+    "version": "9.6.2",
+    "hash": "sha256-GumFdzG2GPCxfAU47Qk8a0RI4IlSzSTmRFMJ5ZVFvDg="
  },
  {
    "pname": "PropertyChanged.SourceGenerator",
@@ -376,8 +366,8 @@
  },
  {
    "pname": "ReactiveUI",
-    "version": "18.3.1",
-    "hash": "sha256-1rf4icGRKTR3XIWJpkQJCG7ObRM+72ITB5K+ND1is9M="
+    "version": "20.1.1",
+    "hash": "sha256-p9l2GMzBRchKb4gW9pQ3DIKhs2O9fX3t/V7jDDztBqE="
  },
  {
    "pname": "runtime.any.System.Collections",
@@ -586,8 +576,8 @@
  },
  {
    "pname": "Semi.Avalonia",
-    "version": "11.0.0",
-    "hash": "sha256-se/sc0QsAhzTv82JmBHoJ1jcmokqDZih8eEEX8CkR8s="
+    "version": "11.3.7",
+    "hash": "sha256-iOf7KhTmHt0vqkRyloM+yueo/acHHwFQd/5UZ1r0SD8="
  },
  {
    "pname": "Serilog",
@@ -621,43 +611,38 @@
  },
  {
    "pname": "ShimSkiaSharp",
-    "version": "1.0.0.1",
-    "hash": "sha256-j9V8IDg7vmnWNV65pDZ/wgj5wKLcmb4Fdbf8vbcP6sc="
+    "version": "3.0.2",
+    "hash": "sha256-rxPdc2A9ORfqpaEqF8AByxmaeRCTr9JzDTlp3j46dKw="
  },
  {
    "pname": "SkiaSharp",
-    "version": "2.88.3",
-    "hash": "sha256-WyMAjnQt8ZsuWpGLI89l/f4bHvv+cg7FdTAL7CtJBvs="
+    "version": "3.119.1",
+    "hash": "sha256-TIVr52NpQ9cab5eJCcH/OYHjNOTKhwCqpClK2c8S4TM="
  },
  {
    "pname": "SkiaSharp.HarfBuzz",
-    "version": "2.88.3",
-    "hash": "sha256-ykTtwAzO+ne5Wmss/IDvfUlR84wG5Xx0/AOC590Xvys="
+    "version": "3.116.1",
+    "hash": "sha256-GYu9itkxAJUmj7Z4etHGUvPLdtdNr+y0mcUauArRnhE="
  },
  {
    "pname": "SkiaSharp.NativeAssets.Linux",
-    "version": "2.88.3",
-    "hash": "sha256-eExWAAURgnwwm2fRwsK/rf+TeOAPs2n02XZzC0zeUjU="
+    "version": "3.119.1",
+    "hash": "sha256-TTY6bxFPk27JZKefivb+N/k0eTAGTlmDRyhRvZ4Gjmc="
  },
  {
    "pname": "SkiaSharp.NativeAssets.macOS",
-    "version": "2.88.3",
-    "hash": "sha256-8G4swiLMr6XS3kjfO/YC1PyoVdfSq7nxZthZZ+KTKqQ="
+    "version": "3.119.1",
+    "hash": "sha256-0QJGcO91MWLSeQpE4ZNn/KUVoHRcrPeDbKklxCVB00o="
  },
  {
    "pname": "SkiaSharp.NativeAssets.WebAssembly",
-    "version": "2.88.3",
-    "hash": "sha256-/SkV2pIZnt0ziSKB7gt7U2Rltk2Id+zOzbmqgfWUtvA="
+    "version": "2.88.9",
+    "hash": "sha256-vgFL4Pdy3O1RKBp+T9N3W4nkH9yurZ0suo8u3gPmmhY="
  },
  {
    "pname": "SkiaSharp.NativeAssets.Win32",
-    "version": "2.88.3",
-    "hash": "sha256-2PhMTwRHitT13KCKiZltKIFieAvNY4jBmVZ2ndVynA8="
-  },
-  {
-    "pname": "Splat",
-    "version": "14.4.1",
-    "hash": "sha256-i1yzIVpKdFjZMI4J8H970nZCxszklgDitYTEKKz0zA8="
+    "version": "3.119.1",
+    "hash": "sha256-ySPkn8SrShOqhihC33EJ4HJt9desDISC4gAI4FQBi2U="
  },
  {
    "pname": "Splat",
@@ -669,6 +654,11 @@
    "version": "14.7.1",
    "hash": "sha256-RzNQU8tTstC1MBZL6D11Ivq69pmPvl+A9eT9zXhdSOc="
  },
+  {
+    "pname": "Splat",
+    "version": "15.1.1",
+    "hash": "sha256-WipAVaUx2HrYNQ9LcYm496LndmSpVbuzJxzP9FA6Ohg="
+  },
  {
    "pname": "Splat.Microsoft.Extensions.DependencyInjection",
    "version": "14.6.37",
@@ -681,18 +671,18 @@
  },
  {
    "pname": "Svg.Custom",
-    "version": "1.0.0.1",
-    "hash": "sha256-bRCllLNP+95+xov0ttRzvAgqCJ/x/BfOFPooVNcNngI="
+    "version": "3.0.2",
+    "hash": "sha256-OVAL2kFLJQ2h8hDouLBVusAHUyC5ky2d5NbvJA8BYsk="
  },
  {
    "pname": "Svg.Model",
-    "version": "1.0.0.1",
-    "hash": "sha256-xrOGrMYTWvblI0BMMhVMv9Vm2x9rlJfRhvsb5Zel1E8="
+    "version": "3.0.2",
+    "hash": "sha256-ravea4oKkzkrY24v2u/N5m1tOugFtHQysMdAkVk5SZQ="
  },
  {
    "pname": "Svg.Skia",
-    "version": "1.0.0.1",
-    "hash": "sha256-fsuiMVlaDaZpHq387kugQhFPpIuW0E5KMZ6J8O09iPw="
+    "version": "3.0.2",
+    "hash": "sha256-BMa0SyPs53YloLZ3G6ZgR8guvCIJ2MW9QwQ0VblPS5Q="
  },
  {
    "pname": "System.AppContext",
@@ -724,20 +714,20 @@
    "version": "1.6.0",
    "hash": "sha256-gnu+8nN48GAd4GRgeB5cAQmW7VnCubL/8h7zO377fd0="
  },
-  {
-    "pname": "System.Collections.Immutable",
-    "version": "5.0.0",
-    "hash": "sha256-GdwSIjLMM0uVfE56VUSLVNgpW0B//oCeSFj8/hSlbM8="
-  },
  {
    "pname": "System.Collections.Immutable",
    "version": "7.0.0",
    "hash": "sha256-9an2wbxue2qrtugYES9awshQg+KfJqajhnhs45kQIdk="
  },
+  {
+    "pname": "System.Collections.Immutable",
+    "version": "9.0.5",
+    "hash": "sha256-gkdeCPvmRWtUQqW3LOTGdmf2DzY0D9OKeW1jvd3EbSM="
+  },
  {
    "pname": "System.ComponentModel.Annotations",
-    "version": "4.5.0",
-    "hash": "sha256-15yE2NoT9vmL9oGCaxHClQR1jLW1j1ef5hHMg55xRso="
+    "version": "5.0.0",
+    "hash": "sha256-0pST1UHgpeE6xJrYf5R+U7AwIlH3rVC3SpguilI/MAg="
  },
  {
    "pname": "System.Console",
@@ -779,21 +769,11 @@
    "version": "4.3.0",
    "hash": "sha256-hCETZpHHGVhPYvb4C0fh4zs+8zv4GPoixagkLZjpa9Q="
  },
-  {
-    "pname": "System.Drawing.Common",
-    "version": "6.0.0",
-    "hash": "sha256-/9EaAbEeOjELRSMZaImS1O8FmUe8j4WuFUw1VOrPyAo="
-  },
  {
    "pname": "System.Dynamic.Runtime",
    "version": "4.0.11",
    "hash": "sha256-qWqFVxuXioesVftv2RVJZOnmojUvRjb7cS3Oh3oTit4="
  },
-  {
-    "pname": "System.Dynamic.Runtime",
-    "version": "4.3.0",
-    "hash": "sha256-k75gjOYimIQtLBD5NDzwwi3ZMUBPRW3jmc3evDMMJbU="
-  },
  {
    "pname": "System.Globalization",
    "version": "4.0.11",
@@ -866,8 +846,13 @@
  },
  {
    "pname": "System.IO.Pipelines",
-    "version": "6.0.0",
-    "hash": "sha256-xfjF4UqTMJpf8KsBWUyJlJkzPTOO/H5MW023yTYNQSA="
+    "version": "8.0.0",
+    "hash": "sha256-LdpB1s4vQzsOODaxiKstLks57X9DTD5D6cPx8DE1wwE="
+  },
+  {
+    "pname": "System.IO.Pipelines",
+    "version": "9.0.4",
+    "hash": "sha256-4E3H0n6UloSxvN41xi7hltJb9+hfaFbqwb/eOQOfNsI="
  },
  {
    "pname": "System.Linq",
@@ -889,11 +874,6 @@
    "version": "4.3.0",
    "hash": "sha256-+3pvhZY7rip8HCbfdULzjlC9FPZFpYoQxhkcuFm2wk8="
  },
-  {
-    "pname": "System.Memory",
-    "version": "4.5.4",
-    "hash": "sha256-3sCEfzO4gj5CYGctl9ZXQRRhwAraMQfse7yzKoRe65E="
-  },
  {
    "pname": "System.Net.Http",
    "version": "4.3.0",
@@ -914,11 +894,6 @@
    "version": "4.3.0",
    "hash": "sha256-il7dr5VT/QWDg/0cuh+4Es2u8LY//+qqiY9BZmYxSus="
  },
-  {
-    "pname": "System.Numerics.Vectors",
-    "version": "4.5.0",
-    "hash": "sha256-qdSTIFgf2htPS+YhLGjAGiLN8igCYJnCCo6r78+Q+c8="
-  },
  {
    "pname": "System.ObjectModel",
    "version": "4.0.12",
@@ -936,13 +911,8 @@
  },
  {
    "pname": "System.Reactive",
-    "version": "5.0.0",
-    "hash": "sha256-M5Z8pw8rVb8ilbnTdaOptzk5VFd5DlKa7zzCpuytTtE="
-  },
-  {
-    "pname": "System.Reactive.Linq",
-    "version": "5.0.0",
-    "hash": "sha256-K2t5JSmwsqWtYZj9IUGUdnCJaJlhCII07KtHP8Iu4B4="
+    "version": "6.0.1",
+    "hash": "sha256-Lo5UMqp8DsbVSUxa2UpClR1GoYzqQQcSxkfyFqB/d4Q="
  },
  {
    "pname": "System.Reflection",
@@ -996,8 +966,13 @@
  },
  {
    "pname": "System.Reflection.Metadata",
-    "version": "5.0.0",
-    "hash": "sha256-Wo+MiqhcP9dQ6NuFGrQTw6hpbJORFwp+TBNTq2yhGp8="
+    "version": "9.0.5",
+    "hash": "sha256-HhI7ENFGiQXOQmc+BORqFzGtW/989pmm+W4exAWw/8Q="
+  },
+  {
+    "pname": "System.Reflection.MetadataLoadContext",
+    "version": "9.0.5",
+    "hash": "sha256-B4vsFUR2aFyne7ehDWzW3xIxzyfWjMpr9aTxQFJuhJM="
  },
  {
    "pname": "System.Reflection.Primitives",
@@ -1039,11 +1014,6 @@
    "version": "4.3.0",
    "hash": "sha256-51813WXpBIsuA6fUtE5XaRQjcWdQ2/lmEokJt97u0Rg="
  },
-  {
-    "pname": "System.Runtime.CompilerServices.Unsafe",
-    "version": "4.7.1",
-    "hash": "sha256-UvyoDV8O0oY3HPG1GbA56YVdvwTGEfjYR5gW1O7IK4U="
-  },
  {
    "pname": "System.Runtime.Extensions",
    "version": "4.1.0",
@@ -1149,11 +1119,6 @@
    "version": "4.3.0",
    "hash": "sha256-GctHVGLZAa/rqkBNhsBGnsiWdKyv6VDubYpGkuOkBLg="
  },
-  {
-    "pname": "System.Text.Encoding.CodePages",
-    "version": "4.5.1",
-    "hash": "sha256-PIhkv59IXjyiuefdhKxS9hQfEwO9YWRuNudpo53HQfw="
-  },
  {
    "pname": "System.Text.Encoding.Extensions",
    "version": "4.0.11",
@@ -1166,13 +1131,13 @@
  },
  {
    "pname": "System.Text.Encodings.Web",
-    "version": "7.0.0",
-    "hash": "sha256-tF8qt9GZh/nPy0mEnj6nKLG4Lldpoi/D8xM5lv2CoYQ="
+    "version": "9.0.4",
+    "hash": "sha256-NOxnuUHtLVT+aTaThLSw8UFgF3ViEL/0ZTliM42LnlQ="
  },
  {
    "pname": "System.Text.Json",
-    "version": "7.0.0",
-    "hash": "sha256-198zqA6NR4lGCKgpdy/ptkS0jsYRT6KUjewtfi4Fi2k="
+    "version": "9.0.4",
+    "hash": "sha256-oIOqfOIIUXXVkfFiTCI9wwIJBETQqF7ZcOJv2iYuq1s="
  },
  {
    "pname": "System.Text.RegularExpressions",
@@ -1214,11 +1179,6 @@
    "version": "4.3.0",
    "hash": "sha256-X2hQ5j+fxcmnm88Le/kSavjiGOmkcumBGTZKBLvorPc="
  },
-  {
-    "pname": "System.Threading.Tasks.Extensions",
-    "version": "4.5.4",
-    "hash": "sha256-owSpY8wHlsUXn5xrfYAiu847L6fAKethlvYx97Ri1ng="
-  },
  {
    "pname": "System.Threading.ThreadPool",
    "version": "4.3.0",
@@ -1229,11 +1189,6 @@
    "version": "4.3.0",
    "hash": "sha256-pmhslmhQhP32TWbBzoITLZ4BoORBqYk25OWbru04p9s="
  },
-  {
-    "pname": "System.ValueTuple",
-    "version": "4.5.0",
-    "hash": "sha256-niH6l2fU52vAzuBlwdQMw0OEoRS/7E1w5smBFoqSaAI="
-  },
  {
    "pname": "System.Xml.ReaderWriter",
    "version": "4.0.11",
@@ -1271,8 +1226,8 @@
  },
  {
    "pname": "Tmds.DBus.Protocol",
-    "version": "0.15.0",
-    "hash": "sha256-4gk2vXDjKFaBh82gTkwg3c/5GRjiH+bvM5elfDSbKTU="
+    "version": "0.21.2",
+    "hash": "sha256-gaK/5aAummyin6ptnhaJbnA0ih4+2xADrtrLfFbHwYI="
  },
  {
    "pname": "xunit",
@@ -1,25 +1,35 @@
 {
  lib,
-  bc,
  buildDotnetModule,
  fetchFromGitHub,
+  fetchpatch2,
+  dotnetCorePackages,
+  bc,
  copyDesktopItems,
  icoutils,
+  versionCheckHook,
  makeDesktopItem,
-  dotnetCorePackages,
 }:

 buildDotnetModule rec {
  pname = "scarab";
-  version = "2.6.0.0";
+  version = "2.7.0.0";

  src = fetchFromGitHub {
    owner = "fifty-six";
    repo = "scarab";
    tag = "v${version}";
-    hash = "sha256-xnvS3FDY4hi3yauwoSzO1fO6tJJAwFCkAc0Wzfs/puQ=";
+    hash = "sha256-3sztodNIB05MHA2mMPAjizRHCjiOMYFNChsmXfQJq0I=";
  };

+  patches = [
+    (fetchpatch2 {
+      name = "fix-test-missing-shasum.patch";
+      url = "https://github.com/fifty-six/Scarab/commit/581e86fefb457772d2d067f094b6dafcc49a4075.patch?full_index=1";
+      hash = "sha256-N5a0QeJFQzvxX8RavwPILuLg10pWLVQhvodWpeUtItE=";
+    })
+  ];
+
  dotnet-sdk = dotnetCorePackages.sdk_8_0;
  nugetDeps = ./deps.json;
  projectFile = "Scarab/Scarab.csproj";
@@ -37,6 +47,9 @@ buildDotnetModule rec {

  doCheck = true;

+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
  postFixup = ''
    # Icons for the desktop file
    icotool -x $src/Scarab/Assets/omegamaggotprime.ico
@@ -27,7 +27,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    description = "Declarative secrets, every environment, any provider";
    homepage = "https://secretspec.dev";
    license = with lib.licenses; [ asl20 ];
-    teams = [ lib.teams.cachix ];
+    maintainers = with lib.maintainers; [
+      domenkozar
+      sandydoo
+    ];
    mainProgram = "secretspec";
  };
 })
@@ -7,14 +7,14 @@

 python3.pkgs.buildPythonApplication rec {
  pname = "sigma-cli";
-  version = "2.0.0";
+  version = "2.0.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "SigmaHQ";
    repo = "sigma-cli";
    tag = "v${version}";
-    hash = "sha256-styE30IO5g3KoJ3IxdYiiu9xqh0OeD59WWcLk42wOCo=";
+    hash = "sha256-ZYWkQguoTmGo+kuyPSByyukdA2EMdWKjHddYsML9JwA=";
  };

  pythonRelaxDeps = [ "click" ];
@@ -2,9 +2,11 @@
  lib,
  stdenv,
  fetchFromGitHub,
-  qt5,
+  qt6,
+  mdbtools,
  p7zip,
  python3,
+  sqlite,
  installShellFiles,

  # Whether to compile with XDG support
@@ -14,24 +16,29 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "skyscraper";
-  version = "3.17.5";
+  version = "3.18.0";

  src = fetchFromGitHub {
    owner = "Gemba";
    repo = "skyscraper";
    rev = "refs/tags/${finalAttrs.version}";
-    hash = "sha256-JbU3enkzVUNOwJ4NuqIxAscvFShSCssj95W5nmSaO6c=";
+    hash = "sha256-z6Y5JUKvwxYgE7sdXvRNOsbUTON5i/DX1q9y4wRXixE=";
  };

  strictDeps = true;

  nativeBuildInputs = [
-    qt5.wrapQtAppsHook
-    qt5.qmake
+    qt6.wrapQtAppsHook
+    qt6.qmake
    installShellFiles
  ];

-  buildInputs = [ python3 ];
+  buildInputs = [
+    qt6.qtbase
+    mdbtools
+    sqlite
+    python3
+  ];

  postPatch = lib.optionalString enableXdg ''
    substituteInPlace skyscraper.pro --replace-fail "#DEFINES+=XDG" "DEFINES+=XDG"
@@ -45,6 +52,13 @@ stdenv.mkDerivation (finalAttrs: {
  preFixup = ''
    qtWrapperArgs+=(--prefix PATH : ${lib.makeBinPath [ p7zip ]})
    chmod +x $out/bin/*.py
+    sed -i '2i\\export PATH="${
+      lib.makeBinPath [
+        mdbtools
+        sqlite
+      ]
+    }:$PATH"' \
+      $out/bin/mdb2sqlite.sh
  '';

  env.PREFIX = placeholder "out";
@@ -8,13 +8,13 @@

 stdenv.mkDerivation rec {
  pname = "smlpkg";
-  version = "0.1.6";
+  version = "0.1.7";

  src = fetchFromGitHub {
    owner = "diku-dk";
    repo = "smlpkg";
    rev = "v${version}";
-    sha256 = "sha256-g7w4/E+BHeiic5bT1RFF/CGQz5Mc1g2kzoNXsija3HU=";
+    sha256 = "sha256-zdWObV/W6fmQ6bFznEVEtp95D8t2YZd45sIC15XQwYM=";
  };

  enableParallelBuilding = true;
@@ -7,22 +7,22 @@

 stdenv.mkDerivation rec {
  pname = "sonivox";
-  version = "3.6.16";
+  version = "4.0.0";

  src = fetchFromGitHub {
-    owner = "pedrolcl";
+    owner = "EmbeddedSynth";
    repo = "sonivox";
-    rev = "v${version}";
-    hash = "sha256-2OWlm1GZI08OeiG3AswRyvguv9MUYo1dLo6QUPr3r3s=";
+    tag = "v${version}";
+    hash = "sha256-eOC/7R45X93Q9KKnP+/fyPMESOVyTnzpqnLHnDQwLnQ=";
  };

  nativeBuildInputs = [ cmake ];

  meta = {
-    homepage = "https://github.com/pedrolcl/sonivox";
+    homepage = "https://github.com/EmbeddedSynth/sonivox";
    description = "MIDI synthesizer library";
    license = lib.licenses.asl20;
-    maintainers = [ ];
-    platforms = lib.platforms.linux;
+    maintainers = [ lib.maintainers.wegank ];
+    platforms = lib.platforms.all;
  };
 }
@@ -302,7 +302,6 @@ stdenvNoCC.mkDerivation rec {
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [
      msgilligan
-      _1000101
    ];
    platforms = [
      "x86_64-linux"
@@ -18,16 +18,16 @@

 buildGoModule rec {
  pname = "supersonic" + lib.optionalString waylandSupport "-wayland";
-  version = "0.19.0";
+  version = "0.20.0";

  src = fetchFromGitHub {
    owner = "dweymouth";
    repo = "supersonic";
    tag = "v${version}";
-    hash = "sha256-GMmIUDgbFFrOqDJ13C0o1fHg1tiWSjbCm36VPD7/IGw=";
+    hash = "sha256-/zHqD5e3ZmLoaY3/KJSBtQpF0fzAr2kG1FSauzSduvo=";
  };

-  vendorHash = "sha256-FQmaxDIVWCxyFdgz03aNRXFyi8UeMeCqiVHNZOqq/8Q=";
+  vendorHash = "sha256-hDE0ZKZLAUgztLqxMHtTj8AU0sIAX26bi7eCb2JFo3Q=";

  nativeBuildInputs = [
    copyDesktopItems
@@ -1,13 +1,15 @@
 {
-  stdenv,
-  lib,
  fetchFromGitHub,
+  lib,
+  libpulseaudio,
  meson,
  ninja,
+  nix-update-script,
  pkg-config,
-  libpulseaudio,
-  systemd,
+  stdenv,
+  systemdMinimal,
 }:
+
 stdenv.mkDerivation (finalAttrs: {
  pname = "sway-audio-idle-inhibit";
  version = "0.2.0";
@@ -15,10 +17,12 @@ stdenv.mkDerivation (finalAttrs: {
  src = fetchFromGitHub {
    owner = "ErikReider";
    repo = "SwayAudioIdleInhibit";
-    rev = "v${finalAttrs.version}";
+    tag = "v${finalAttrs.version}";
    hash = "sha256-AIK/2CPXWie72quzCcofZMQ7OVsggNm2Cq9PBJXKyhw=";
  };

+  strictDeps = true;
+
  nativeBuildInputs = [
    meson
    ninja
@@ -27,15 +31,27 @@ stdenv.mkDerivation (finalAttrs: {

  buildInputs = [
    libpulseaudio
-    systemd
+    systemdMinimal
  ];

+  passthru.updateScript = nix-update-script { };
+
  meta = {
-    description = "Prevents swayidle from sleeping while any application is outputting or receiving audio";
+    description = "Prevent swayidle/hypridle from sleeping";
+    longDescription = ''
+      SwayAudioIdleInhibit prevents swayidle/hypridle from sleeping
+      while any application is outputting or receiving audio.
+
+      This requires systemd/elogind inhibit support and only works for
+      Pulseaudio/Pipewire Pulse.
+    '';
    homepage = "https://github.com/ErikReider/SwayAudioIdleInhibit";
    license = lib.licenses.gpl3Only;
    platforms = lib.platforms.linux;
-    maintainers = with lib.maintainers; [ rafaelrc ];
+    maintainers = with lib.maintainers; [
+      rafaelrc
+      yiyu
+    ];
    mainProgram = "sway-audio-idle-inhibit";
  };
 })
@@ -13,11 +13,12 @@ rustPlatform.buildRustPackage (finalAttrs: {
  src = fetchFromGitHub {
    owner = "rgwood";
    repo = "systemctl-tui";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-OzOc0osaKoRVuo+fBJOhsZAiFfm0ZHj6POUjRaIZGsc=";
+    # https://github.com/rgwood/systemctl-tui/issues/68#issuecomment-3735677971
+    tag = "v${finalAttrs.version}-take2";
+    hash = "sha256-6SN8c8gDVsvFFyrcFjdO70pJpVxWG/AbdB6V4mM5Q5Y=";
  };

-  cargoHash = "sha256-MSpex0G1RJsI5RCrAlSgeY2/6flndwCjdtopWfuXNts=";
+  cargoHash = "sha256-4VlKJUxmxC1dIZYsUMLhNzOJTYacpddlKZUSwjKlzJ8=";

  nativeInstallCheckInputs = [
    versionCheckHook
@@ -17,14 +17,14 @@
 # See $out/share/tango/db/create_db.sh
 stdenv.mkDerivation rec {
  pname = "tango-database";
-  version = "5.25";
+  version = "5.28";

  src = fetchFromGitLab {
    owner = "tango-controls";
    repo = "TangoDatabase";
    tag = "Database-Release-${version}";
    fetchSubmodules = true;
-    hash = "sha256-hu2TIPxXyUtLK3bHFHuBYho23TGLkmsHfxEabsjsvmE=";
+    hash = "sha256-r8jrsDR22u30l1R6mK95KsLWHhheZa4/N6n/Xv4mKPc=";
  };

  nativeBuildInputs = [
@@ -60,6 +60,7 @@ stdenv.mkDerivation rec {
  meta = {
    description = "Tango distributed control system - database server";
    homepage = "https://gitlab.com/tango-controls/TangoDatabase";
+    changelog = "https://gitlab.com/tango-controls/TangoDatabase/-/blob/Database-Release-${version}/RELEASE_NOTES.md";
    license = lib.licenses.gpl3Plus;
    platforms = lib.platforms.linux;
    maintainers = [ lib.maintainers.gilice ];
@@ -8,16 +8,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "typstyle";
-  version = "0.14.1";
+  version = "0.14.4";

  src = fetchFromGitHub {
    owner = "typstyle-rs";
    repo = "typstyle";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-YAMC1IMs3TioTx3rnb5CdYgviR3gP89b2rfOuZVVg3M=";
+    hash = "sha256-zDvO++UEA94Kdfu4/qCqfF6IgdCtpIjaVZjZdlkQgNw=";
  };

-  cargoHash = "sha256-nmIDgt6KRYAEWmJxufj/TyYWuVGG6/tiYA8iTneKnVc=";
+  cargoHash = "sha256-9Z2l982ELoMOAzsFMhQzaXcb1vX8Y6aek0j/HbTzp38=";

  # Disabling tests requiring network access
  checkFlags = [
@@ -112,7 +112,6 @@ stdenv.mkDerivation rec {

    license = lib.licenses.gpl3Plus;

-    maintainers = [ lib.maintainers.eelco ];
    platforms =
      with lib.platforms;
      lib.intersectLists (x86 ++ power ++ s390x ++ armv7 ++ aarch64 ++ mips ++ riscv64) (
@@ -11,19 +11,19 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "vue-language-server";
-  version = "3.2.1";
+  version = "3.2.2";

  src = fetchFromGitHub {
    owner = "vuejs";
    repo = "language-tools";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-0bW8US0pp5capY2KnyQ0HuZQ3xpLSNqAA4YiBwF9ljY=";
+    hash = "sha256-oVIWRCnJkJK1CsgNp7l95uuILeXv2XuwwfGElGnOEyU=";
  };

  pnpmDeps = fetchPnpmDeps {
    inherit (finalAttrs) pname version src;
    fetcherVersion = 1;
-    hash = "sha256-NefWKlxX6HLIxBw0DeVOh0M1BVdncFsqebRNeU0dx4U=";
+    hash = "sha256-lxRify3uJnqYH6btmXU9yaO8LJDGBZcyONLUHv2rLqg=";
  };

  nativeBuildInputs = [
@@ -57,7 +57,7 @@ stdenv.mkDerivation (finalAttrs: {
      find subprojects -type d -name .git -prune -execdir rm -r {} +
    '';
  };
-  __structuredAttrs = true;
+  __structuredAttrs = false;
  nativeBuildInputs = [
    SDL2
    meson
@@ -39,7 +39,7 @@ let

  hash =
    {
-      x86_64-linux = "sha256-dJRLoPV04bfjVbEoL1iCJUZwFl07I5o/rlKmUQ7xmzw=";
+      x86_64-linux = "sha256-s+o4nSCjLvbJZBb6quh8DkfQxTZ7erSCJhC/DLiyNCc=";
    }
    .${system} or throwSystem;

@@ -48,7 +48,7 @@ let
 in
 stdenvNoCC.mkDerivation rec {
  pname = "xpipe";
-  version = "20.2";
+  version = "20.3";

  src = fetchzip {
    url = "https://github.com/xpipe-io/xpipe/releases/download/${version}/xpipe-portable-linux-${arch}.tar.gz";
@@ -6,13 +6,13 @@
 }:

 callPackage ./default.nix rec {
-  version = "2.1-20250826";
+  version = "2.1-20251030";

  src = fetchFromGitHub {
    owner = "openresty";
    repo = "luajit2";
    rev = "v${version}";
-    hash = "sha256-fF3xgAy2IjFy4LdXPlk4RuX+IclOXaw3YR24wyMBNgM=";
+    hash = "sha256-SICmM+/dvp/36UAWAH0l7D938iFDimnoKBOjlOodrCY=";
  };

  inherit self passthruFun;
@@ -25,11 +25,11 @@ let
 in
 stdenv.mkDerivation rec {
  pname = "drumstick";
-  version = "2.10.0";
+  version = "2.11.0";

  src = fetchurl {
    url = "mirror://sourceforge/drumstick/${version}/drumstick-${version}.tar.bz2";
-    hash = "sha256-rFoH1daXHiT3LZWQRP+buzMRQSWLJfGMgRtJ9XFy/L0=";
+    hash = "sha256-vPlhQ+i8gifI/UIXii7KhZQ+RYBdnE09FVCXQiJcQdU=";
  };

  patches = [ ./drumstick-plugins.patch ];
@@ -1,12 +1,17 @@
 {
  stdenv,
  config,
+  coreutils,
  lib,
  fetchFromGitHub,
+  runtimeShell,
  cmake,
+  gnugrep,
+  gawk,
  libusb1,
  nlohmann_json,
  ninja,
+  makeWrapper,
  pkg-config,
  gcc,
  libgbm,
@@ -14,6 +19,7 @@
  glfw,
  libGLU,
  curl,
+  v4l-utils,
  cudaSupport ? config.cudaSupport,
  cudaPackages ? { },
  enablePython ? false,
@@ -82,6 +88,7 @@ stdenv'.mkDerivation rec {
    cmake
    ninja
    pkg-config
+    makeWrapper
  ]
  ++ lib.optionals cudaSupport [
    cudaPackages.cuda_nvcc
@@ -104,8 +111,66 @@ stdenv'.mkDerivation rec {
  # done
  # ( https://github.com/IntelRealSense/meta-intel-realsense/issues/20 )
  postInstall = ''
+    libexec=$out/libexec
+
+    mkdir -p $out/lib/udev/rules.d
+    mkdir -p $libexec
+
+    # To be consumed via services.udev.packages.
+    install -m644 ../config/99-realsense-d4xx-mipi-dfu.rules $out/lib/udev/rules.d
+    install -m644 ../config/99-realsense-libusb.rules $out/lib/udev/rules.d
+
+    # Copy all binaries used by rules.
+    install -m755 ../config/usb-R200-in $libexec
+    install -m755 ../config/usb-R200-in_udev $libexec
+    install -m755 ../scripts/rs-enum.sh $libexec
+    install -m755 ../scripts/rs_ipu6_d457_bind.sh $libexec
+
+    # Patch all shebangs.
+    patchShebangs $libexec
+
+    substituteInPlace $libexec/usb-R200-in_udev \
+      --replace-fail '/usr/local/bin/usb-R200-in' $libexec/usb-R200-i
+
+    substituteInPlace $libexec/usb-R200-in \
+      --replace-fail 'lockdir="/dswork.lock"' 'lockdir="/run/lock/dswork.lock"'
+
+    wrapProgram $libexec/rs-enum.sh \
+      --prefix PATH : ${
+        lib.makeBinPath [
+          coreutils
+          gawk
+          gnugrep
+          v4l-utils
+        ]
+      }
+
+    wrapProgram $libexec/rs_ipu6_d457_bind.sh \
+      --prefix PATH : ${
+        lib.makeBinPath [
+          coreutils
+          gnugrep
+          v4l-utils
+        ]
+      }
+
+    # Replace plugdev group with uaccess tag for modern systemd behavior
+    substituteInPlace $out/lib/udev/rules.d/99-realsense-libusb.rules \
+      --replace-fail "/bin/sh" "${runtimeShell}" \
+      --replace-fail "chmod" "${coreutils}/bin/chmod" \
+      --replace-fail "uname" "${coreutils}/bin/uname" \
+      --replace-fail "sleep" "${coreutils}/bin/sleep" \
+      --replace-fail "cut" "${coreutils}/bin/cut" \
+      --replace-fail 'GROUP:="plugdev"' 'TAG+="uaccess"' \
+      --replace-fail '/usr/local/bin/usb-R200-in_udev' $libexec/usb-R200-in_udev
+
+    substituteInPlace $out/lib/udev/rules.d/99-realsense-d4xx-mipi-dfu.rules \
+      --replace-fail '/bin/bash' '${runtimeShell}' \
+      --replace-fail 'rs_ipu6_d457_bind.sh' $libexec/rs_ipu6_d457_bind.sh \
+      --replace-fail 'rs-enum.sh' $libexec/rs-enum.sh
+
    substituteInPlace $out/lib/cmake/realsense2/realsense2Targets.cmake \
-    --replace-fail "\''${_IMPORT_PREFIX}/include" "$dev/include"
+      --replace-fail "\''${_IMPORT_PREFIX}/include" "$dev/include"
  ''
  + lib.optionalString enablePython ''
    cp ../wrappers/python/pyrealsense2/__init__.py $out/${pythonPackages.python.sitePackages}/pyrealsense2
@@ -67,7 +67,7 @@ in
  };

  sdbus-cpp_2 = generic {
-    version = "2.1.0";
-    hash = "sha256-JnjabBr7oELLsUV9a+dAAaRyUzaMIriu90vkaVJg2eY=";
+    version = "2.2.1";
+    hash = "sha256-uC31StWk3qATPyshX7MkwrxEcBASeIv4e5/jtgzZzMQ=";
  };
 }
@@ -31,7 +31,7 @@
  writableTmpDirAsHomeHook,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "accelerate";
  version = "1.12.0";
  pyproject = true;
@@ -39,7 +39,7 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "huggingface";
    repo = "accelerate";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
    hash = "sha256-PwwaQSLOm+8Hd3trM1P+jRhYyoWM3QxOe5XT99haEmg=";
  };

@@ -108,6 +108,13 @@ buildPythonPackage rec {
    # TypeError: unsupported operand type(s) for /: 'NoneType' and 'int' (it seems cpuinfo doesn't work here)
    "test_mpi_multicpu_config_cmd"
  ]
+  ++
+    lib.optionals
+      (stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isAarch64 && (pythonAtLeast "3.14"))
+      [
+        # RuntimeError: There is no current event loop in thread 'MainThread'
+        "test_accelerate_test"
+      ]
  ++ lib.optionals (!config.cudaSupport) [
    # requires ptxas from cudatoolkit, which is unfree
    "test_dynamo_extract_model"
@@ -187,9 +194,9 @@ buildPythonPackage rec {
  meta = {
    homepage = "https://huggingface.co/docs/accelerate";
    description = "Simple way to train and use PyTorch models with multi-GPU, TPU, mixed-precision";
-    changelog = "https://github.com/huggingface/accelerate/releases/tag/${src.tag}";
+    changelog = "https://github.com/huggingface/accelerate/releases/tag/${finalAttrs.src.tag}";
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [ bcdarwin ];
    mainProgram = "accelerate";
  };
-}
+})
@@ -7,7 +7,7 @@
  pytestCheckHook,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "checkpoint-schedules";
  version = "1.0.4";
  pyproject = true;
@@ -15,7 +15,7 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "firedrakeproject";
    repo = "checkpoint_schedules";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
    hash = "sha256-3bn/KxxtRLRtOHFeULQdnndonpuhuYLL8/y/zoAurzY=";
  };

@@ -35,8 +35,8 @@ buildPythonPackage rec {
    homepage = "https://www.firedrakeproject.org/checkpoint_schedules";
    downloadPage = "https://github.com/firedrakeproject/checkpoint_schedules";
    description = "Schedules for incremental checkpointing of adjoint simulations";
-    changelog = "https://github.com/firedrakeproject/checkpoint_schedules/releases/tag/${src.tag}";
+    changelog = "https://github.com/firedrakeproject/checkpoint_schedules/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.lgpl3Only;
    maintainers = with lib.maintainers; [ qbisi ];
  };
-}
+})
@@ -6,7 +6,7 @@
  pytestCheckHook,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "constantdict";
  version = "2025.3";
  pyproject = true;
@@ -14,7 +14,7 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "matthiasdiener";
    repo = "constantdict";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
    hash = "sha256-jX6g9xBteZOc/7Ob5N8eUSCycb6JoE5i38T52zknOTI=";
  };

@@ -38,8 +38,8 @@ buildPythonPackage rec {
    homepage = "https://matthiasdiener.github.io/constantdict";
    downloadPage = "https://github.com/matthiasdiener/constantdict";
    description = "Immutable dictionary class for Python, implemented as a thin layer around Python's builtin dict class";
-    changelog = "https://github.com/matthiasdiener/constantdict/releases/tag/${src.tag}";
+    changelog = "https://github.com/matthiasdiener/constantdict/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ qbisi ];
  };
-}
+})
@@ -18,14 +18,14 @@

 buildPythonPackage rec {
  pname = "dashscope";
-  version = "1.25.5";
+  version = "1.25.6";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "dashscope";
    repo = "dashscope-sdk-python";
    tag = "v${version}";
-    hash = "sha256-HlztUCtLiDd2XztF3bUR411l1xuynYIErZHyWJUp/co=";
+    hash = "sha256-rArpiEXiy/HVaNYSwONS71d0SucQ9uIbZcvlyaO/EOI=";
  };

  build-system = [ setuptools ];
@@ -6,16 +6,16 @@
  pytestCheckHook,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "disposable-email-domains";
-  version = "0.0.153";
+  version = "0.0.155";
  pyproject = true;

  # No tags on GitHub
  src = fetchPypi {
    pname = "disposable_email_domains";
-    inherit version;
-    hash = "sha256-b4C/OKBMR48lJ5+e1Mx7PJO2ZvITvar213qYkrFnmV0=";
+    inherit (finalAttrs) version;
+    hash = "sha256-ahYGxlERS2iQRLcubq/N1vwCk3s8NiCMLoDQu00nS1s=";
  };

  build-system = [
@@ -32,4 +32,4 @@ buildPythonPackage rec {
    license = lib.licenses.cc0;
    maintainers = with lib.maintainers; [ GaetanLepage ];
  };
-}
+})
@@ -18,7 +18,7 @@
  pytestCheckHook,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "fenics-basix";
  version = "0.10.0.post0";
  pyproject = true;
@@ -26,7 +26,7 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "fenics";
    repo = "basix";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
    hash = "sha256-iKG6Cs28D0scPEIRKoGk/CgquKzGZvIjf4UIj4MQXHA=";
  };

@@ -76,8 +76,8 @@ buildPythonPackage rec {
    homepage = "https://fenicsproject.org";
    downloadPage = "https://github.com/fenics/basix";
    description = "Finite element definition and tabulation runtime library";
-    changelog = "https://github.com/fenics/basix/releases/tag/${src.tag}";
+    changelog = "https://github.com/fenics/basix/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ qbisi ];
  };
-}
+})
@@ -55,7 +55,7 @@ let
    }
  );
 in
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  inherit (dolfinx)
    version
    src
@@ -136,7 +136,7 @@ buildPythonPackage rec {
    homepage = "https://fenicsproject.org";
    downloadPage = "https://github.com/fenics/dolfinx";
    description = "Computational environment of FEniCSx and implements the FEniCS Problem Solving Environment in C++ and Python";
-    changelog = "https://github.com/fenics/dolfinx/releases/tag/${src.tag}";
+    changelog = "https://github.com/fenics/dolfinx/releases/tag/v${finalAttrs.version}";
    license = with lib.licenses; [
      bsd2
      lgpl3Plus
@@ -144,4 +144,4 @@ buildPythonPackage rec {
    platforms = lib.platforms.unix;
    maintainers = with lib.maintainers; [ qbisi ];
  };
-}
+})
@@ -13,7 +13,7 @@
  addBinToPathHook,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "fenics-ffcx";
  version = "0.10.1.post0";
  pyproject = true;
@@ -21,7 +21,7 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "fenics";
    repo = "ffcx";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
    hash = "sha256-uV3sfK6tpdoVf+O/EYZw3yR1PdqkoXt4q66zwQ8h/Ks=";
  };

@@ -56,7 +56,7 @@ buildPythonPackage rec {
    homepage = "https://fenicsproject.org";
    downloadPage = "https://github.com/fenics/ffcx";
    description = "FEniCSx Form Compiler";
-    changelog = "https://github.com/fenics/ffcx/releases/tag/${src.tag}";
+    changelog = "https://github.com/fenics/ffcx/releases/tag/v${finalAttrs.version}";
    mainProgram = "ffcx";
    license = with lib.licenses; [
      unlicense
@@ -64,4 +64,4 @@ buildPythonPackage rec {
    ];
    maintainers = with lib.maintainers; [ qbisi ];
  };
-}
+})
@@ -7,7 +7,7 @@
  pytestCheckHook,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "fenics-ufl";
  version = "2025.2.0";
  pyproject = true;
@@ -15,7 +15,7 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "fenics";
    repo = "ufl";
-    tag = version;
+    tag = finalAttrs.version;
    hash = "sha256-REDjNiUM3bd166Pq92P9Yl4Ff9C9hFNjTWWO1FElHrU=";
  };

@@ -42,8 +42,8 @@ buildPythonPackage rec {
    homepage = "https://fenicsproject.org";
    downloadPage = "https://github.com/fenics/ufl";
    description = "Unified Form Language";
-    changelog = "https://github.com/fenics/ufl/releases/tag/${src.tag}";
+    changelog = "https://github.com/fenics/ufl/releases/tag/${finalAttrs.version}";
    license = lib.licenses.lgpl3Plus;
    maintainers = with lib.maintainers; [ qbisi ];
  };
-}
+})
@@ -14,7 +14,7 @@
  nix-update-script,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "firedrake-fiat";
  version = "2025.10.1";
  pyproject = true;
@@ -22,7 +22,7 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "firedrakeproject";
    repo = "fiat";
-    tag = version;
+    tag = finalAttrs.version;
    hash = "sha256-x1/gf/QVez6GxPUafxdhxqyT0MkL6w2Qz6VAxRNufdc=";
  };

@@ -82,4 +82,4 @@ buildPythonPackage rec {
    license = lib.licenses.lgpl3Plus;
    maintainers = with lib.maintainers; [ qbisi ];
  };
-}
+})
@@ -57,7 +57,7 @@ let
    mpi-pytest = self.callPackage mpi-pytest.override { };
  });
 in
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "firedrake";
  version = "2025.10.2";
  pyproject = true;
@@ -65,7 +65,7 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "firedrakeproject";
    repo = "firedrake";
-    tag = version;
+    tag = finalAttrs.version;
    hash = "sha256-A0dr9A1fm74IzpYiVxzdo4jtELYH7JBeRMOD9uYJODQ=";
  };

@@ -183,4 +183,4 @@ buildPythonPackage rec {
    ];
    maintainers = with lib.maintainers; [ qbisi ];
  };
-}
+})
@@ -8,14 +8,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "iamdata";
-  version = "0.1.202601091";
+  version = "0.1.202601111";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "cloud-copilot";
    repo = "iam-data-python";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-LcaoTSP53u13zchMRIzMNJBzqd3YZjSt+U06bhd/Ui4=";
+    hash = "sha256-OWyuLeeXEWGkXbP+nSNZ4VmbCtDOjazIpe4q5fhaCdc=";
  };

  __darwinAllowLocalNetworking = true;
@@ -11,21 +11,21 @@
  pythonAtLeast,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "inform";
-  version = "1.35";
-  format = "pyproject";
+  version = "1.36";
+  pyproject = true;

  src = fetchFromGitHub {
    owner = "KenKundert";
    repo = "inform";
-    tag = "v${version}";
-    hash = "sha256-FQc8R4MJ5RKJi70ADboy2Lw6IwLaI3hup60GcnPxV60=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-x2xLEcywMaYhq/SWPVu48zTHJW3/MWujjr4y6/uEClU=";
  };

-  nativeBuildInputs = [ flit-core ];
+  build-system = [ flit-core ];

-  propagatedBuildInputs = [
+  dependencies = [
    arrow
    six
  ];
@@ -52,8 +52,8 @@ buildPythonPackage rec {
      allow you to simply and cleanly print different types of messages.
    '';
    homepage = "https://inform.readthedocs.io";
-    changelog = "https://github.com/KenKundert/inform/blob/${src.tag}/doc/releases.rst";
+    changelog = "https://github.com/KenKundert/inform/blob/${finalAttrs.src.tag}/doc/releases.rst";
    license = lib.licenses.gpl3Only;
    maintainers = with lib.maintainers; [ jeremyschlatter ];
  };
-}
+})
@@ -18,14 +18,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "lance-namespace";
-  version = "0.4.4";
+  version = "0.4.5";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "lancedb";
    repo = "lance-namespace";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-aNo6rrWnnFpFk3iPX1sQsuXTDkE5ZRA/9P7TQeJr4iI=";
+    hash = "sha256-cUwvPPOQemusthuTMttdojqApnWL4JmCdSB5oGZCfZ8=";
  };

  sourceRoot = "${finalAttrs.src.name}/python/lance_namespace_urllib3_client";
@@ -30,14 +30,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "lance-namespace";
-  version = "0.4.4";
+  version = "0.4.5";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "lancedb";
    repo = "lance-namespace";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-aNo6rrWnnFpFk3iPX1sQsuXTDkE5ZRA/9P7TQeJr4iI=";
+    hash = "sha256-cUwvPPOQemusthuTMttdojqApnWL4JmCdSB5oGZCfZ8=";
  };

  sourceRoot = "${finalAttrs.src.name}/python/lance_namespace";
@@ -40,7 +40,7 @@
  nix-update-script,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "lancedb";
  version = "0.26.1";
  pyproject = true;
@@ -48,14 +48,14 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "lancedb";
    repo = "lancedb";
-    tag = "python-v${version}";
+    tag = "python-v${finalAttrs.version}";
    hash = "sha256-yx4cwO7qRH9/1rW0UFz17HkvJ8utJynYoAHnN+wPpKw=";
  };

  buildAndTestSubdir = "python";

  cargoDeps = rustPlatform.fetchCargoVendor {
-    inherit pname version src;
+    inherit (finalAttrs) pname version src;
    hash = "sha256-ymoA/KKL7oLgp5u/NcXxbYfOueiKH+bpLxLcO+mn0Eo=";
  };

@@ -139,8 +139,8 @@ buildPythonPackage rec {
  meta = {
    description = "Developer-friendly, serverless vector database for AI applications";
    homepage = "https://github.com/lancedb/lancedb";
-    changelog = "https://github.com/lancedb/lancedb/releases/tag/python-v${version}";
+    changelog = "https://github.com/lancedb/lancedb/releases/tag/${finalAttrs.src.tag}";
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [ natsukium ];
  };
-}
+})
@@ -25,14 +25,14 @@

 buildPythonPackage rec {
  pname = "langchain-xai";
-  version = "1.2.0";
+  version = "1.2.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "langchain-ai";
    repo = "langchain";
    tag = "langchain-xai==${version}";
-    hash = "sha256-aYl6tYPJgNE7zUQJ1hwaEzFUBgMK6MyXcvB9jJBOPHk=";
+    hash = "sha256-Eryr68TQDN37AwJVEm1jJvwqcxMjl2KO42dy7doJCrA=";
  };

  sourceRoot = "${src.name}/libs/partners/xai";
@@ -21,14 +21,14 @@

 buildPythonPackage rec {
  pname = "mcdreforged";
-  version = "2.15.5";
+  version = "2.15.6";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "MCDReforged";
    repo = "MCDReforged";
    tag = "v${version}";
-    hash = "sha256-4zThW18/6aO5gCsxx7TNM+q0Z7/c6G5zUxbCMpwEsEU=";
+    hash = "sha256-k5Mn1GepLoCIiKV8Ys2SZI7hX0rqZKgI6r1l0sM2ty8=";
  };

  build-system = [ setuptools ];
@@ -21,22 +21,25 @@
  writableTmpDirAsHomeHook,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "mlx-lm";
-  version = "0.26.3";
+  version = "0.30.2";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "ml-explore";
    repo = "mlx-lm";
-    tag = "v${version}";
-    hash = "sha256-O4wW7wvIqSeBv01LoUCHm0/CgcRc5RfFHjvwyccp6UM=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-6WlKAchze5B724XYwzpVHy+17HlMcGSYjJw0aOdm5yw=";
  };

  build-system = [
    setuptools
  ];

+  pythonRelaxDeps = [
+    "transformers"
+  ];
  dependencies = [
    jinja2
    mlx
@@ -53,9 +56,7 @@ buildPythonPackage rec {
    writableTmpDirAsHomeHook
  ];

-  pythonImportsCheck = [
-    "mlx_lm"
-  ];
+  pythonImportsCheck = [ "mlx_lm" ];

  disabledTestPaths = [
    # Requires network access to huggingface.co
@@ -65,22 +66,26 @@ buildPythonPackage rec {
    "tests/test_tokenizers.py"
    "tests/test_utils.py::TestUtils::test_convert"
    "tests/test_utils.py::TestUtils::test_load"
-    "tests/test_utils_load_model.py"
    "tests/test_prompt_cache.py::TestPromptCache::test_cache_to_quantized"
    "tests/test_prompt_cache.py::TestPromptCache::test_cache_with_generate"
    "tests/test_prompt_cache.py::TestPromptCache::test_trim_cache_with_generate"
+
    # RuntimeError: [metal_kernel] No GPU back-end.
    "tests/test_losses.py"
    "tests/test_models.py::TestModels::test_bitnet"
+
+    # TypeError: 'NoneType' object is not callable
+    "tests/test_models.py::TestModels::test_gated_delta"
+    "tests/test_models.py::TestModels::test_gated_delta_masked"
  ];

  meta = {
    description = "Run LLMs with MLX";
    homepage = "https://github.com/ml-explore/mlx-lm";
-    changelog = "https://github.com/ml-explore/mlx-lm/releases/tag/v${version}";
+    changelog = "https://github.com/ml-explore/mlx-lm/releases/tag/${finalAttrs.src.tag}";
    license = lib.licenses.mit;
    platforms = [
      "aarch64-darwin"
    ];
  };
-}
+})
@@ -1,5 +1,6 @@
 {
  lib,
+  stdenv,
  buildPythonPackage,
  fetchFromGitHub,
  replaceVars,
@@ -22,6 +23,9 @@
  pytestCheckHook,
  python,
  runCommand,
+
+  # passthru
+  mlx,
 }:

 let
@@ -33,121 +37,120 @@ let
    hash = "sha256-15FvyPOFqTOr5vdWQoPnZz+mYH919++EtghjozDlnSA=";
  };

-  mlx = buildPythonPackage rec {
-    pname = "mlx";
-    version = "0.30.1";
-    pyproject = true;
-
-    src = fetchFromGitHub {
-      owner = "ml-explore";
-      repo = "mlx";
-      tag = "v${version}";
-      hash = "sha256-Vt0RH+70VBwUjXSfPTsNdRS3g0ookJHhzf2kvgEtgH8=";
-    };
-
-    patches = [
-      (replaceVars ./darwin-build-fixes.patch {
-        sdkVersion = apple-sdk.version;
-      })
-    ];
-
-    postPatch = ''
-      substituteInPlace pyproject.toml \
-        --replace-fail "nanobind==2.10.2" "nanobind"
-
-      substituteInPlace mlx/backend/cpu/jit_compiler.cpp \
-        --replace-fail "g++" "$CXX"
-    '';
-
-    dontUseCmakeConfigure = true;
-
-    enableParallelBuilding = true;
-
-    # Allows multiple cores to be used in Python builds.
-    postUnpack = ''
-      export MAKEFLAGS+="''${enableParallelBuilding:+-j$NIX_BUILD_CORES}"
-    '';
-
-    # updates the wrong fetcher rev attribute
-    passthru.skipBulkUpdate = true;
-
-    env = {
-      DEV_RELEASE = 1;
-      CMAKE_ARGS = toString [
-        # NOTE The `metal` command-line utility used to build the Metal kernels is not open-source.
-        # To build mlx with Metal support in Nix, you'd need to use one of the sandbox escape
-        # hatches which let you interact with a native install of Xcode, such as `composeXcodeWrapper`
-        # or by changing the upstream (e.g., https://github.com/zed-industries/zed/discussions/7016).
-        (lib.cmakeBool "MLX_BUILD_METAL" false)
-        (lib.cmakeBool "USE_SYSTEM_FMT" true)
-        (lib.cmakeOptionType "filepath" "FETCHCONTENT_SOURCE_DIR_GGUFLIB" "${gguf-tools}")
-        (lib.cmakeOptionType "filepath" "FETCHCONTENT_SOURCE_DIR_JSON" "${nlohmann_json.src}")
-      ];
-    };
-
-    build-system = [
-      setuptools
-    ];
-
-    nativeBuildInputs = [
-      cmake
-    ];
-
-    buildInputs = [
-      fmt
-      gguf-tools
-      nanobind
-      nlohmann_json
-      pybind11
-    ];
-
-    pythonImportsCheck = [ "mlx" ];
-
-    # Run the mlx Python test suite.
-    nativeCheckInputs = [
-      numpy
-      pytestCheckHook
-    ];
-
-    enabledTestPaths = [
-      "python/tests/"
-    ];
-
-    # Additional testing by executing the example Python scripts supplied with mlx
-    # using the version of the library we've built.
-    passthru.tests = {
-      mlxTest =
-        runCommand "run-mlx-examples"
-          {
-            buildInputs = [ mlx ];
-            nativeBuildInputs = [ python ];
-          }
-          ''
-            cp ${src}/examples/python/logistic_regression.py .
-            ${python.interpreter} logistic_regression.py
-            rm logistic_regression.py
-
-            cp ${src}/examples/python/linear_regression.py .
-            ${python.interpreter} linear_regression.py
-            rm linear_regression.py
-
-            touch $out
-          '';
-    };
-
-    meta = {
-      homepage = "https://github.com/ml-explore/mlx";
-      description = "Array framework for Apple silicon";
-      changelog = "https://github.com/ml-explore/mlx/releases/tag/${src.tag}";
-      license = lib.licenses.mit;
-      platforms = [ "aarch64-darwin" ];
-      maintainers = with lib.maintainers; [
-        Gabriella439
-        booxter
-        cameronyule
-        viraptor
-      ];
-    };
-  };
 in
-mlx
+buildPythonPackage (finalAttrs: {
+  pname = "mlx";
+  version = "0.30.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "ml-explore";
+    repo = "mlx";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Vt0RH+70VBwUjXSfPTsNdRS3g0ookJHhzf2kvgEtgH8=";
+  };
+
+  patches = [
+    (replaceVars ./darwin-build-fixes.patch {
+      sdkVersion = apple-sdk.version;
+    })
+  ];
+
+  postPatch = ''
+    substituteInPlace pyproject.toml \
+      --replace-fail "nanobind==2.10.2" "nanobind"
+
+    substituteInPlace mlx/backend/cpu/jit_compiler.cpp \
+      --replace-fail "g++" "${lib.getExe' stdenv.cc "c++"}"
+  '';
+
+  dontUseCmakeConfigure = true;
+
+  enableParallelBuilding = true;
+
+  # Allows multiple cores to be used in Python builds.
+  postUnpack = ''
+    export MAKEFLAGS+="''${enableParallelBuilding:+-j$NIX_BUILD_CORES}"
+  '';
+
+  # updates the wrong fetcher rev attribute
+  passthru.skipBulkUpdate = true;
+
+  env = {
+    DEV_RELEASE = 1;
+    CMAKE_ARGS = toString [
+      # NOTE The `metal` command-line utility used to build the Metal kernels is not open-source.
+      # To build mlx with Metal support in Nix, you'd need to use one of the sandbox escape
+      # hatches which let you interact with a native install of Xcode, such as `composeXcodeWrapper`
+      # or by changing the upstream (e.g., https://github.com/zed-industries/zed/discussions/7016).
+      (lib.cmakeBool "MLX_BUILD_METAL" false)
+      (lib.cmakeBool "USE_SYSTEM_FMT" true)
+      (lib.cmakeOptionType "filepath" "FETCHCONTENT_SOURCE_DIR_GGUFLIB" "${gguf-tools}")
+      (lib.cmakeOptionType "filepath" "FETCHCONTENT_SOURCE_DIR_JSON" "${nlohmann_json.src}")
+    ];
+  };
+
+  build-system = [
+    setuptools
+  ];
+
+  nativeBuildInputs = [
+    cmake
+  ];
+
+  buildInputs = [
+    fmt
+    gguf-tools
+    nanobind
+    nlohmann_json
+    pybind11
+  ];
+
+  pythonImportsCheck = [ "mlx" ];
+
+  # Run the mlx Python test suite.
+  nativeCheckInputs = [
+    numpy
+    pytestCheckHook
+  ];
+
+  enabledTestPaths = [
+    "python/tests/"
+  ];
+
+  # Additional testing by executing the example Python scripts supplied with mlx
+  # using the version of the library we've built.
+  passthru.tests = {
+    mlxTest =
+      runCommand "run-mlx-examples"
+        {
+          buildInputs = [ mlx ];
+          nativeBuildInputs = [ python ];
+        }
+        ''
+          cp ${finalAttrs.src}/examples/python/logistic_regression.py .
+          ${python.interpreter} logistic_regression.py
+          rm logistic_regression.py
+
+          cp ${finalAttrs.src}/examples/python/linear_regression.py .
+          ${python.interpreter} linear_regression.py
+          rm linear_regression.py
+
+          touch $out
+        '';
+  };
+
+  meta = {
+    homepage = "https://github.com/ml-explore/mlx";
+    description = "Array framework for Apple silicon";
+    changelog = "https://github.com/ml-explore/mlx/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    platforms = [ "aarch64-darwin" ];
+    maintainers = with lib.maintainers; [
+      Gabriella439
+      booxter
+      cameronyule
+      viraptor
+    ];
+  };
+})
@@ -9,7 +9,7 @@
  mpiCheckPhaseHook,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "mpi-pytest";
  version = "2025.7";
  pyproject = true;
@@ -17,7 +17,7 @@ buildPythonPackage rec {
  src = fetchFromGitHub {
    owner = "firedrakeproject";
    repo = "mpi-pytest";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
    hash = "sha256-TZj1hObMVzYfAUC0UjXMvUThbKCNdiB1FMSA0AHjZ9s=";
  };

@@ -45,8 +45,8 @@ buildPythonPackage rec {
  meta = {
    homepage = "https://github.com/firedrakeproject/mpi-pytest";
    description = "Pytest plugin that lets you run tests in parallel with MPI";
-    changelog = "https://github.com/firedrakeproject/mpi-pytest/releases/tag/${src.tag}";
+    changelog = "https://github.com/firedrakeproject/mpi-pytest/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.lgpl3Plus;
    maintainers = with lib.maintainers; [ qbisi ];
  };
-}
+})
@@ -42,6 +42,6 @@ buildPythonPackage rec {
    changelog = "https://github.com/napalm-automation-community/napalm-ros/releases/tag/${src.tag}";
    license = lib.licenses.gpl2Plus;
    platforms = lib.platforms.linux;
-    teams = with lib.teams; [ secshell ];
+    maintainers = with lib.maintainers; [ felbinger ];
  };
 }
@@ -42,6 +42,6 @@ buildPythonPackage rec {
    changelog = "https://github.com/Kani999/netbox-attachments/releases/tag/${src.tag}";
    license = lib.licenses.asl20;
    platforms = lib.platforms.linux;
-    teams = with lib.teams; [ secshell ];
+    maintainers = with lib.maintainers; [ felbinger ];
  };
 }
@@ -37,6 +37,6 @@ buildPythonPackage rec {
    homepage = "https://github.com/netbox-community/netbox-bgp";
    changelog = "https://github.com/netbox-community/netbox-bgp/releases/tag/${src.tag}";
    license = lib.licenses.asl20;
-    teams = with lib.teams; [ secshell ];
+    maintainers = with lib.maintainers; [ felbinger ];
  };
 }
--- a/Show More
+++ b/Show More