From 8da14d62120bbfcf9681f4ef4a0c53621708fae0 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Tue, 24 Feb 2026 14:02:09 +0000 Subject: [PATCH 01/34] python3Packages.ijson: 3.4.0.post0 -> 3.5.0 --- pkgs/development/python-modules/ijson/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/ijson/default.nix b/pkgs/development/python-modules/ijson/default.nix index 4a9a252f9b06..a5171ad9ca43 100644 --- a/pkgs/development/python-modules/ijson/default.nix +++ b/pkgs/development/python-modules/ijson/default.nix @@ -10,12 +10,12 @@ buildPythonPackage rec { pname = "ijson"; - version = "3.4.0.post0"; + version = "3.5.0"; pyproject = true; src = fetchPypi { inherit pname version; - hash = "sha256-mqAtxwuyRWcKbKf7pze5kq7rSJU2CYBiL35Wjb8j5B4="; + hash = "sha256-lGiHYHIOP1IScxs8uNMCZ/mgRfs4+zhwJU57lQQkbzE="; }; build-system = [ setuptools ]; From 082660093584bffe39c5f12fec3a562bda373e20 Mon Sep 17 00:00:00 2001 From: Michael Daniels Date: Fri, 13 Mar 2026 22:02:56 -0400 Subject: [PATCH 02/34] man-pages: fix `can't resolve man7/groff_man.7` error when running `man man` Fixes: #498875 --- pkgs/by-name/ma/man-pages/package.nix | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/pkgs/by-name/ma/man-pages/package.nix b/pkgs/by-name/ma/man-pages/package.nix index b8427e1ac992..be1ac104d5af 100644 --- a/pkgs/by-name/ma/man-pages/package.nix +++ b/pkgs/by-name/ma/man-pages/package.nix @@ -4,6 +4,7 @@ fetchurl, directoryListingUpdater, gawk, + groff, man, pcre2, nixosTests, @@ -27,6 +28,13 @@ stdenv.mkDerivation (finalAttrs: { hash = "sha256-0Y8hpgKwl3ilqQlr8b6EQbdzPpmBUEdKzPcD0WX06/Q="; }; + # See https://git.kernel.org/pub/scm/docs/man-pages/man-pages.git/tree/man/man7/man.7, + # https://github.com/NixOS/nixpkgs/issues/498875 + postPatch = '' + substituteInPlace man/man7/man.7 \ + --replace-fail '.so man7/groff_man.7' '.so ${lib.getMan groff}/share/man/man7/groff_man.7' + ''; + nativeInstallCheckInputs = [ gawk man From 7b96b5bfde8fe90d18fcbc4e52311c0279e809d3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Thu, 26 Mar 2026 12:02:56 -0700 Subject: [PATCH 03/34] domoticz: mark insecure --- pkgs/by-name/do/domoticz/package.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkgs/by-name/do/domoticz/package.nix b/pkgs/by-name/do/domoticz/package.nix index e9e10aae3263..beeeafccb3a0 100644 --- a/pkgs/by-name/do/domoticz/package.nix +++ b/pkgs/by-name/do/domoticz/package.nix @@ -105,5 +105,8 @@ stdenv.mkDerivation (finalAttrs: { platforms = lib.platforms.all; broken = stdenv.hostPlatform.isDarwin; # never built on Hydra https://hydra.nixos.org/job/nixpkgs/staging-next/domoticz.x86_64-darwin mainProgram = "domoticz"; + knownVulnerabilities = [ + "CVE-2026-1001" + ]; }; }) From 59204f1458efadd0b7316ae6bd2a599248be5dfc Mon Sep 17 00:00:00 2001 From: Sarah Clark Date: Thu, 26 Mar 2026 18:04:46 -0700 Subject: [PATCH 04/34] python3Packages.google-cloud-asset: fix broken update --- .../google-cloud-asset/default.nix | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/pkgs/development/python-modules/google-cloud-asset/default.nix b/pkgs/development/python-modules/google-cloud-asset/default.nix index 328218688a74..7d7c1d370a2e 100644 --- a/pkgs/development/python-modules/google-cloud-asset/default.nix +++ b/pkgs/development/python-modules/google-cloud-asset/default.nix @@ -2,7 +2,6 @@ lib, buildPythonPackage, fetchFromGitHub, - gitUpdater, google-api-core, google-cloud-access-context-manager, google-cloud-org-policy, @@ -11,6 +10,7 @@ grpc-google-iam-v1, libcst, mock, + nix-update-script, proto-plus, protobuf, pytest-asyncio, @@ -20,14 +20,14 @@ buildPythonPackage rec { pname = "google-cloud-asset"; - version = "3.31.3"; + version = "4.2.0"; pyproject = true; src = fetchFromGitHub { owner = "googleapis"; repo = "google-cloud-python"; - tag = "google-cloud-build-v${version}"; - sha256 = "sha256-qQ+8X6I8lt4OTgbvODsbdab2dYUk0wxWsbaVT2T651U="; + tag = "google-cloud-asset-v${version}"; + sha256 = "sha256-dVgcnnInqjUjySL7wjxGzI33t1YZJ8e9mSsmjAJ+fBI="; }; sourceRoot = "${src.name}/packages/google-cloud-asset"; @@ -66,15 +66,17 @@ buildPythonPackage rec { "google.cloud.asset_v1" "google.cloud.asset_v1p1beta1" "google.cloud.asset_v1p2beta1" - "google.cloud.asset_v1p4beta1" "google.cloud.asset_v1p5beta1" ]; passthru = { # python updater script sets the wrong tag skipBulkUpdate = true; - updateScript = gitUpdater { - rev-prefix = "google-cloud-asset-v"; + updateScript = nix-update-script { + extraArgs = [ + "--version-regexp" + "^google-cloud-asset: v([0-9.]+)" + ]; }; }; From 3ac077c51f49f3d06499f9d2773202dd1f849392 Mon Sep 17 00:00:00 2001 From: Sarah Clark Date: Thu, 26 Mar 2026 18:06:49 -0700 Subject: [PATCH 05/34] python3Packages.google-cloud-asset: migrate to finalAttrs --- .../python-modules/google-cloud-asset/default.nix | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/pkgs/development/python-modules/google-cloud-asset/default.nix b/pkgs/development/python-modules/google-cloud-asset/default.nix index 7d7c1d370a2e..363463ff49d9 100644 --- a/pkgs/development/python-modules/google-cloud-asset/default.nix +++ b/pkgs/development/python-modules/google-cloud-asset/default.nix @@ -18,7 +18,7 @@ setuptools, }: -buildPythonPackage rec { +buildPythonPackage (finalAttrs: { pname = "google-cloud-asset"; version = "4.2.0"; pyproject = true; @@ -26,11 +26,11 @@ buildPythonPackage rec { src = fetchFromGitHub { owner = "googleapis"; repo = "google-cloud-python"; - tag = "google-cloud-asset-v${version}"; + tag = "google-cloud-asset-v${finalAttrs.version}"; sha256 = "sha256-dVgcnnInqjUjySL7wjxGzI33t1YZJ8e9mSsmjAJ+fBI="; }; - sourceRoot = "${src.name}/packages/google-cloud-asset"; + sourceRoot = "${finalAttrs.src.name}/packages/google-cloud-asset"; build-system = [ setuptools ]; @@ -83,8 +83,8 @@ buildPythonPackage rec { meta = { description = "Python Client for Google Cloud Asset API"; homepage = "https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-asset"; - changelog = "https://github.com/googleapis/google-cloud-python/blob/google-cloud-asset-${src.tag}/packages/google-cloud-asset/CHANGELOG.md"; + changelog = "https://github.com/googleapis/google-cloud-python/blob/google-cloud-asset-${finalAttrs.src.tag}/packages/google-cloud-asset/CHANGELOG.md"; license = lib.licenses.asl20; maintainers = [ lib.maintainers.sarahec ]; }; -} +}) From 480a5dae0de18bc69be60b36e9c991e4d0698b6a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Fri, 27 Mar 2026 11:16:12 -0700 Subject: [PATCH 06/34] python3Packages.python-pooldose: 0.8.6 -> 0.9.0 Diff: https://github.com/lmaertin/python-pooldose/compare/0.8.6...0.9.0 Changelog: https://github.com/lmaertin/python-pooldose/blob/0.9.0/CHANGELOG.md --- pkgs/development/python-modules/python-pooldose/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/python-pooldose/default.nix b/pkgs/development/python-modules/python-pooldose/default.nix index a514ef9aef33..4fb147aa3af3 100644 --- a/pkgs/development/python-modules/python-pooldose/default.nix +++ b/pkgs/development/python-modules/python-pooldose/default.nix @@ -12,14 +12,14 @@ buildPythonPackage rec { pname = "python-pooldose"; - version = "0.8.6"; + version = "0.9.0"; pyproject = true; src = fetchFromGitHub { owner = "lmaertin"; repo = "python-pooldose"; tag = version; - hash = "sha256-MbfFCE88xWGGRkRPqZ9oftaydxs5R2cgIcdU0YqWQi4="; + hash = "sha256-7oG0qm0GMiFVgs6tQo9o2jaCZ/rou96QPRpLU853AQs="; }; build-system = [ setuptools ]; From 5a7ed5ce4b84c802bb0bceb0f17e97c7464b2162 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Fri, 27 Mar 2026 11:18:08 -0700 Subject: [PATCH 07/34] python3Packages.idasen-ha: 2.6.4 -> 2.6.5 Diff: https://github.com/abmantis/idasen-ha/compare/2.6.4...2.6.5 Changelog: https://github.com/abmantis/idasen-ha/releases/tag/2.6.5 --- pkgs/development/python-modules/idasen-ha/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/idasen-ha/default.nix b/pkgs/development/python-modules/idasen-ha/default.nix index 5b2484a7d1f5..c16194db8176 100644 --- a/pkgs/development/python-modules/idasen-ha/default.nix +++ b/pkgs/development/python-modules/idasen-ha/default.nix @@ -10,14 +10,14 @@ buildPythonPackage rec { pname = "idasen-ha"; - version = "2.6.4"; + version = "2.6.5"; pyproject = true; src = fetchFromGitHub { owner = "abmantis"; repo = "idasen-ha"; tag = version; - hash = "sha256-CBm9vCsfiVYj7tFTXWC+I3QYUdQ9EsjDJ6ed/BDf4S4="; + hash = "sha256-Ksckc4aayv33Xd4tmfzCUq8e5kWPnxw7xAlPKOIlmow="; }; build-system = [ setuptools ]; From 52ab97554e7a074b1858deeda5e195819898825d Mon Sep 17 00:00:00 2001 From: Marcin Serwin Date: Fri, 27 Mar 2026 20:24:28 +0100 Subject: [PATCH 08/34] azahar: 2124.3 -> 2125.0.1, switch to fetchFromGitHub Signed-off-by: Marcin Serwin --- pkgs/by-name/az/azahar/package.nix | 34 ++++++++++++++++++++++++------ 1 file changed, 28 insertions(+), 6 deletions(-) diff --git a/pkgs/by-name/az/azahar/package.nix b/pkgs/by-name/az/azahar/package.nix index 0edc749c12e1..cfb78f9d8cbe 100644 --- a/pkgs/by-name/az/azahar/package.nix +++ b/pkgs/by-name/az/azahar/package.nix @@ -7,7 +7,7 @@ doxygen, dynarmic, enet, - fetchzip, + fetchFromGitHub, fmt, ffmpeg_6-headless, glslang, @@ -19,6 +19,7 @@ libusb1, moltenvk, nlohmann_json, + oaknut, openal, openssl, pipewire, @@ -30,6 +31,7 @@ soundtouch, stdenv, vulkan-headers, + vulkan-memory-allocator, xbyak, libxext, libx11, @@ -47,6 +49,7 @@ enableGamemode ? lib.meta.availableOn stdenv.hostPlatform gamemode, nix-update-script, darwinMinVersionHook, + fetchpatch, }: let inherit (lib) @@ -58,11 +61,20 @@ let in stdenv.mkDerivation (finalAttrs: { pname = "azahar"; - version = "2124.3"; + version = "2125.0.1"; - src = fetchzip { - url = "https://github.com/azahar-emu/azahar/releases/download/${finalAttrs.version}/azahar-unified-source-${finalAttrs.version}.tar.xz"; - hash = "sha256-JpqEJIKdmSJ5D9Q+a6YbHMJNTCK3+vDaSCSI23i60pk="; + src = fetchFromGitHub { + owner = "azahar-emu"; + repo = "azahar"; + tag = finalAttrs.version; + postCheckout = '' + git -C "$out/externals" submodule update --init \ + teakra zstd discord-rpc spirv-headers spirv-tools sirit xxHash \ + faad2/faad2 lodepng/lodepng dds-ktx nihstro "$out/dist/compatibility_list" + echo "${finalAttrs.version}" > "$out/GIT-TAG" + git -C "$out" rev-parse HEAD > "$out/GIT-COMMIT" + ''; + hash = "sha256-KzM2FWJPxZtkpwvK4DSdfNuxE8yy1OVaioVegQbBSWk="; }; strictDeps = true; @@ -100,7 +112,7 @@ stdenv.mkDerivation (finalAttrs: { soundtouch SDL2 vulkan-headers - xbyak + vulkan-memory-allocator # https://github.com/azahar-emu/azahar/issues/1283 # spirv-tools @@ -109,6 +121,8 @@ stdenv.mkDerivation (finalAttrs: { # Azahar uses zstd_seekable which is not currently packaged in nixpkgs # zstd ] + ++ optionals stdenv.hostPlatform.isx86_64 [ xbyak ] + ++ optionals stdenv.hostPlatform.isAarch64 [ oaknut ] ++ optionals enableQtTranslations [ qt6.qttools ] ++ optionals enableCubeb [ cubeb ] ++ optionals useDiscordRichPresence [ rapidjson ] @@ -124,6 +138,14 @@ stdenv.mkDerivation (finalAttrs: { (darwinMinVersionHook "13.4") ]; + patches = [ + (fetchpatch { + name = "cmake-Add-option-to-use-system-oaknut.patch"; + url = "https://github.com/azahar-emu/azahar/commit/6201256e15ee4d4fc053933545abf50fc46be178.patch"; + hash = "sha256-03eIubAJ65W9clI9iaLcLNAAMbkX4E507nYNV8DVwZc="; + }) + ]; + postPatch = '' # We already know the submodules are present substituteInPlace CMakeLists.txt \ From 7e77fe418b1c54522f07fbeff0b0b37a274f80f9 Mon Sep 17 00:00:00 2001 From: Ryan Horiguchi Date: Sat, 28 Mar 2026 16:05:39 +0100 Subject: [PATCH 09/34] tautulli: 2.16.1 -> 2.17.0 --- pkgs/by-name/ta/tautulli/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/ta/tautulli/package.nix b/pkgs/by-name/ta/tautulli/package.nix index 55785b012d11..c50c8750ccbd 100644 --- a/pkgs/by-name/ta/tautulli/package.nix +++ b/pkgs/by-name/ta/tautulli/package.nix @@ -7,7 +7,7 @@ python3Packages.buildPythonApplication (finalAttrs: { pname = "Tautulli"; - version = "2.16.1"; + version = "2.17.0"; pyproject = false; pythonPath = [ python3Packages.setuptools ]; @@ -20,7 +20,7 @@ python3Packages.buildPythonApplication (finalAttrs: { owner = "Tautulli"; repo = "Tautulli"; tag = "v${finalAttrs.version}"; - sha256 = "sha256-Zct7EhnU5LROO23Joz6OxQTtC9uGZhtceSG+aX6MI2c="; + sha256 = "sha256-1NslfaQLQvYM0WeAxzAmZVHTgVbFB2XK/8T+EoCMK1k="; }; installPhase = '' From b5eb9eaf577426c9aae8d8384a066dcaf6c5d2d3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Sat, 28 Mar 2026 08:19:19 -0700 Subject: [PATCH 10/34] python3Packages.azure-kusto-data: unpon ijson --- pkgs/development/python-modules/azure-kusto-data/default.nix | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/pkgs/development/python-modules/azure-kusto-data/default.nix b/pkgs/development/python-modules/azure-kusto-data/default.nix index 678d5bfa09e3..e12333d8b9f3 100644 --- a/pkgs/development/python-modules/azure-kusto-data/default.nix +++ b/pkgs/development/python-modules/azure-kusto-data/default.nix @@ -39,6 +39,10 @@ buildPythonPackage rec { build-system = [ uv-build ]; + pythonRelaxDeps = [ + "ijson" + ]; + dependencies = [ azure-core azure-identity From a8f1d92737fc0aad6175c304a2879b3f33665d8b Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 28 Mar 2026 15:50:42 +0000 Subject: [PATCH 11/34] zsv: 1.3.0 -> 1.4.0 --- pkgs/by-name/zs/zsv/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/zs/zsv/package.nix b/pkgs/by-name/zs/zsv/package.nix index fcc68c152be9..c94de9e19b53 100644 --- a/pkgs/by-name/zs/zsv/package.nix +++ b/pkgs/by-name/zs/zsv/package.nix @@ -8,13 +8,13 @@ stdenv.mkDerivation (finalAttrs: { pname = "zsv"; - version = "1.3.0"; + version = "1.4.0"; src = fetchFromGitHub { owner = "liquidaty"; repo = "zsv"; tag = "v${finalAttrs.version}"; - hash = "sha256-6Gc9RDrQmayTnCoFHYN8B3gdqR3CPyyLWtO31WpnJ3o="; + hash = "sha256-ht6sg93bHrNTw1tEEkd9vRl5aIsc1q7nASakvECdyzI="; }; buildInputs = [ jq ]; From 424d61535138b911e3457c40f4c1df8b46d19b5a Mon Sep 17 00:00:00 2001 From: Tristan Ross Date: Tue, 24 Feb 2026 10:22:52 -0800 Subject: [PATCH 12/34] llvmPackages_22: 22.1.0-rc3 -> 22.1.2 --- pkgs/development/compilers/llvm/default.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/development/compilers/llvm/default.nix b/pkgs/development/compilers/llvm/default.nix index fecdaa3aac1e..45fd8be98b49 100644 --- a/pkgs/development/compilers/llvm/default.nix +++ b/pkgs/development/compilers/llvm/default.nix @@ -26,7 +26,7 @@ let "19.1.7".officialRelease.sha256 = "sha256-cZAB5vZjeTsXt9QHbP5xluWNQnAHByHtHnAhVDV0E6I="; "20.1.8".officialRelease.sha256 = "sha256-ysyB/EYxi2qE9fD5x/F2zI4vjn8UDoo1Z9ukiIrjFGw="; "21.1.8".officialRelease.sha256 = "sha256-pgd8g9Yfvp7abjCCKSmIn1smAROjqtfZaJkaUkBSKW0="; - "22.1.0-rc3".officialRelease.sha256 = "sha256-vGG7lDdDFW427lS384Bl7Pt9QFgK1XVxLmtm878xmxU="; + "22.1.2".officialRelease.sha256 = "sha256-z6YcxgDd3F3JwfU5Y/wMw5MK+ZPISI3KLwHwUaraTuw="; "23.0.0-git".gitRelease = { rev = "23374f95ed1362cfcabcb1a1a95bc81fc58b70b9"; rev-version = "23.0.0-unstable-2026-02-15"; From 571b048b326dbdc69fe5aed3eba09a3767143974 Mon Sep 17 00:00:00 2001 From: Tristan Ross Date: Tue, 24 Feb 2026 12:34:49 -0800 Subject: [PATCH 13/34] llvmPackages_latest: 21.1.8 -> 22.1.2 --- pkgs/top-level/aliases.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix index 3e1c4acc1f0c..e07ae68b7cf9 100644 --- a/pkgs/top-level/aliases.nix +++ b/pkgs/top-level/aliases.nix @@ -244,7 +244,7 @@ in mapAliases { # LLVM packages for (integration) testing that should not be used inside Nixpkgs: - llvmPackages_latest = llvmPackages_21; + llvmPackages_latest = llvmPackages_22; llvmPackages_git = (callPackages ../development/compilers/llvm { }).git; # these are for convenience, not for backward compat., and shouldn't expire until the package is deprecated. clang18Stdenv = lib.lowPrio llvmPackages_18.stdenv; From 72b36d0f013561ba68e5533f75866ac7fdfcb324 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 28 Mar 2026 16:22:27 +0000 Subject: [PATCH 14/34] python3Packages.pyanglianwater: 3.1.1 -> 3.1.2 --- pkgs/development/python-modules/pyanglianwater/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/pyanglianwater/default.nix b/pkgs/development/python-modules/pyanglianwater/default.nix index cc19ede851c5..283dbddc0acc 100644 --- a/pkgs/development/python-modules/pyanglianwater/default.nix +++ b/pkgs/development/python-modules/pyanglianwater/default.nix @@ -12,14 +12,14 @@ buildPythonPackage rec { pname = "pyanglianwater"; - version = "3.1.1"; + version = "3.1.2"; pyproject = true; src = fetchFromGitHub { owner = "pantherale0"; repo = "pyanglianwater"; tag = version; - hash = "sha256-iMUrX6tyPVf/L/kUymmrqUO4JOaQUhWdrkRPiOBIVGg="; + hash = "sha256-Qe1LrM6pwuaWBQYRc7t1xJ38rIT1VlexkRcOGPX/BlA="; }; build-system = [ setuptools ]; From 32a65c1b80e05ba256fe04515860f36c7e6f1f44 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 28 Mar 2026 17:02:01 +0000 Subject: [PATCH 15/34] dprint-plugins.dprint-plugin-biome: 0.12.4 -> 0.12.5 --- pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix b/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix index 02b0b0b8e4ab..6d6d5aa9fbda 100644 --- a/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix +++ b/pkgs/by-name/dp/dprint/plugins/dprint-plugin-biome.nix @@ -1,7 +1,7 @@ { mkDprintPlugin }: mkDprintPlugin { description = "Biome (JS/TS/JSON) wrapper plugin"; - hash = "sha256-UXpqyifwSnkenmhO8tLmc0+KPtz8yZd/tST/LUEZkwo="; + hash = "sha256-dcM4Z9QP0B+gp2MnQxTfjIykPYZdwPuKnQRjjpL5DV8="; initConfig = { configExcludes = [ "**/node_modules" ]; configKey = "biome"; @@ -17,6 +17,6 @@ mkDprintPlugin { }; pname = "dprint-plugin-biome"; updateUrl = "https://plugins.dprint.dev/dprint/biome/latest.json"; - url = "https://plugins.dprint.dev/biome-0.12.4.wasm"; - version = "0.12.4"; + url = "https://plugins.dprint.dev/biome-0.12.5.wasm"; + version = "0.12.5"; } From fee4beb0ea7af84f1c0cad2e2a3411f1a26b783c Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sat, 28 Mar 2026 18:08:06 +0100 Subject: [PATCH 16/34] python3Packages.streamlit-folium: 0.26.2 -> 0.27.1 Diff: https://github.com/randyzwitch/streamlit-folium/compare/v0.26.2...v0.27.1 Changelog: https://github.com/randyzwitch/streamlit-folium/releases/tag/v0.27.1 --- pkgs/development/python-modules/streamlit-folium/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/streamlit-folium/default.nix b/pkgs/development/python-modules/streamlit-folium/default.nix index 22be9642330d..9cd90f60b14a 100644 --- a/pkgs/development/python-modules/streamlit-folium/default.nix +++ b/pkgs/development/python-modules/streamlit-folium/default.nix @@ -15,14 +15,14 @@ buildPythonPackage (finalAttrs: { pname = "streamlit-folium"; - version = "0.26.2"; + version = "0.27.1"; pyproject = true; src = fetchFromGitHub { owner = "randyzwitch"; repo = "streamlit-folium"; tag = "v${finalAttrs.version}"; - hash = "sha256-6BCJ1j6p46EA696Ll9p3JOwGywp5gdhFA6k6HhVAZYo="; + hash = "sha256-8FpU0dCuHlGvr2k8LAJs2tR3yRSIOHc+Q5V13oSNgEI="; }; postPatch = '' From ba0a2f65cbd39ca86fae40eb159fa92f2786760f Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sat, 28 Mar 2026 18:19:58 +0100 Subject: [PATCH 17/34] python3Packages.ttn-client: 1.2.3 -> 1.3.0 Diff: https://github.com/angelnu/thethingsnetwork_python_client/compare/v1.2.3...v1.3.0 Changelog: https://github.com/angelnu/thethingsnetwork_python_client/releases/tag/v1.3.0 --- pkgs/development/python-modules/ttn-client/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/ttn-client/default.nix b/pkgs/development/python-modules/ttn-client/default.nix index 06b56ff8ca8e..b47da005058e 100644 --- a/pkgs/development/python-modules/ttn-client/default.nix +++ b/pkgs/development/python-modules/ttn-client/default.nix @@ -10,14 +10,14 @@ buildPythonPackage rec { pname = "ttn-client"; - version = "1.2.3"; + version = "1.3.0"; pyproject = true; src = fetchFromGitHub { owner = "angelnu"; repo = "thethingsnetwork_python_client"; tag = "v${version}"; - hash = "sha256-PEkxEKet0nrowWJ4J3AqqqdecO4zSbTampz/Dx0QD2s="; + hash = "sha256-n5AvHE9oe7+vqxUsqqGeVcENU8+I0y0jikbulAHAR3Q="; }; build-system = [ hatchling ]; From 1e214fc86855b73b864b51ba3fff6618f9c43bae Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sat, 28 Mar 2026 18:21:28 +0100 Subject: [PATCH 18/34] python3Packages.sfrbox-api: 0.1.0 -> 0.1.1 Diff: https://github.com/hacf-fr/sfrbox-api/compare/v0.1.0...v0.1.1 Changelog: https://github.com/hacf-fr/sfrbox-api/releases/tag/v0.1.1 --- pkgs/development/python-modules/sfrbox-api/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/sfrbox-api/default.nix b/pkgs/development/python-modules/sfrbox-api/default.nix index cf5e50c40c18..871565303c8b 100644 --- a/pkgs/development/python-modules/sfrbox-api/default.nix +++ b/pkgs/development/python-modules/sfrbox-api/default.nix @@ -14,14 +14,14 @@ buildPythonPackage rec { pname = "sfrbox-api"; - version = "0.1.0"; + version = "0.1.1"; pyproject = true; src = fetchFromGitHub { owner = "hacf-fr"; repo = "sfrbox-api"; tag = "v${version}"; - hash = "sha256-B29wpOr8yClAuA0KfWTCs4nRLOm2gMU8ayyr5VbF+qQ="; + hash = "sha256-hK4d9wy2+wUp8elEHW0suu9frYPNnwFUlIRvjTXfRkc="; }; build-system = [ poetry-core ]; From 986107470087bfcb580041df4c1862fcc999cb23 Mon Sep 17 00:00:00 2001 From: azban Date: Sat, 28 Mar 2026 12:21:15 -0600 Subject: [PATCH 19/34] pyprland: 3.1.0 -> 3.3.0 --- pkgs/by-name/py/pyprland/package.nix | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/py/pyprland/package.nix b/pkgs/by-name/py/pyprland/package.nix index 900b8b06b936..ce6108a94259 100644 --- a/pkgs/by-name/py/pyprland/package.nix +++ b/pkgs/by-name/py/pyprland/package.nix @@ -7,16 +7,18 @@ python3Packages.buildPythonApplication (finalAttrs: { pname = "pyprland"; - version = "3.1.0"; + version = "3.3.0"; pyproject = true; src = fetchFromGitHub { owner = "hyprland-community"; repo = "pyprland"; tag = finalAttrs.version; - hash = "sha256-qayntjpE3WYBl6idfpwtvkEo61oHtc80uNEm0m4XA2o="; + hash = "sha256-h7eoNn8ygdtg5rp9S2PSgCa9HSTgDZOjFvGl6KRbAtY="; }; + build-system = [ python3Packages.hatchling ]; + nativeBuildInputs = with python3Packages; [ poetry-core ]; propagatedBuildInputs = with python3Packages; [ From e62c2e33da2e7776ccbc576db91c3cef887e76d4 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 28 Mar 2026 18:56:48 +0000 Subject: [PATCH 20/34] sillytavern: 1.16.0 -> 1.17.0 --- pkgs/by-name/si/sillytavern/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/si/sillytavern/package.nix b/pkgs/by-name/si/sillytavern/package.nix index 43e51882ba54..37d9e809db22 100644 --- a/pkgs/by-name/si/sillytavern/package.nix +++ b/pkgs/by-name/si/sillytavern/package.nix @@ -6,15 +6,15 @@ }: buildNpmPackage (finalAttrs: { pname = "sillytavern"; - version = "1.16.0"; + version = "1.17.0"; src = fetchFromGitHub { owner = "SillyTavern"; repo = "SillyTavern"; tag = finalAttrs.version; - hash = "sha256-v2OAyaKBczo7BdTyA3WUlcIko484YgcgvYmwUk60AeI="; + hash = "sha256-M4YvPsiCimbxHZoPO4+aIdwmYa4o5By+qnSl7FeAD5k="; }; - npmDepsHash = "sha256-fzKZnJbVXaPFn4l7VGiYBqJUT299fiVuKqfTZd2p53c="; + npmDepsHash = "sha256-BE8B7yALOi5WLWHAvSPC2lUCgAFjUCOUMc4Ru2RBdJM="; dontNpmBuild = true; From c42860a0f7109ae537707b9af52add4e0b22d42b Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 28 Mar 2026 19:38:33 +0000 Subject: [PATCH 21/34] signal-desktop: 8.4.0 -> 8.4.1 --- pkgs/by-name/si/signal-desktop/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/si/signal-desktop/package.nix b/pkgs/by-name/si/signal-desktop/package.nix index 398e7e0bcad7..6ab2d19e689c 100644 --- a/pkgs/by-name/si/signal-desktop/package.nix +++ b/pkgs/by-name/si/signal-desktop/package.nix @@ -55,13 +55,13 @@ let ''; }); - version = "8.4.0"; + version = "8.4.1"; src = fetchFromGitHub { owner = "signalapp"; repo = "Signal-Desktop"; tag = "v${version}"; - hash = "sha256-QUBeScKGlDQAZ4F08DD/DuxeT0Hut3MmuswsjGsy+Q0="; + hash = "sha256-HjIU7L3iSr51w3KxzmaVzOI6qtAyyyWTlK1HygNyEzw="; }; sticker-creator = stdenv.mkDerivation (finalAttrs: { @@ -171,7 +171,7 @@ stdenv.mkDerivation (finalAttrs: { env = { ELECTRON_SKIP_BINARY_DOWNLOAD = "1"; SIGNAL_ENV = "production"; - SOURCE_DATE_EPOCH = 1774459818; + SOURCE_DATE_EPOCH = 1774560637; } // lib.optionalAttrs stdenv.hostPlatform.isDarwin { # Disable code signing during local macOS builds. From b6baf590f33320c12da2ca248d0a0089018bfca9 Mon Sep 17 00:00:00 2001 From: SandaruKasa Date: Sat, 28 Mar 2026 22:48:38 +0300 Subject: [PATCH 22/34] cargo-bisect-rustc: add myself as a maintainer --- pkgs/by-name/ca/cargo-bisect-rustc/package.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/by-name/ca/cargo-bisect-rustc/package.nix b/pkgs/by-name/ca/cargo-bisect-rustc/package.nix index b0f4f9b78297..960350f94d4a 100644 --- a/pkgs/by-name/ca/cargo-bisect-rustc/package.nix +++ b/pkgs/by-name/ca/cargo-bisect-rustc/package.nix @@ -58,6 +58,6 @@ rustPlatform.buildRustPackage (finalAttrs: { asl20 mit ]; - maintainers = [ ]; + maintainers = with lib.maintainers; [ sandarukasa ]; }; }) From 6e86bbb0d027c8a06582f35fb7a0ecba2ab4b6ce Mon Sep 17 00:00:00 2001 From: SandaruKasa Date: Sat, 28 Mar 2026 22:54:32 +0300 Subject: [PATCH 23/34] cargo-bisect-rustc: use nix-update-script --- pkgs/by-name/ca/cargo-bisect-rustc/package.nix | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkgs/by-name/ca/cargo-bisect-rustc/package.nix b/pkgs/by-name/ca/cargo-bisect-rustc/package.nix index 960350f94d4a..c7b9977402fc 100644 --- a/pkgs/by-name/ca/cargo-bisect-rustc/package.nix +++ b/pkgs/by-name/ca/cargo-bisect-rustc/package.nix @@ -8,6 +8,7 @@ runCommand, patchelf, zlib, + nix-update-script, }: rustPlatform.buildRustPackage (finalAttrs: { @@ -50,6 +51,10 @@ rustPlatform.buildRustPackage (finalAttrs: { "--skip=test_github" # requires internet ]; + passthru = { + updateScript = nix-update-script { }; + }; + meta = { description = "Bisects rustc, either nightlies or CI artifacts"; mainProgram = "cargo-bisect-rustc"; From 623ada32eee255716ba43eca26c95d8ccbaab30d Mon Sep 17 00:00:00 2001 From: SandaruKasa Date: Sat, 28 Mar 2026 22:42:09 +0300 Subject: [PATCH 24/34] cargo-bisect-rustc: 0.6.8 -> 0.6.11 Diff: https://github.com/rust-lang/cargo-bisect-rustc/compare/v0.6.8...v0.6.11 --- .../0001-dynamically-patchelf-binaries.patch | 26 ++++++++++++------- .../by-name/ca/cargo-bisect-rustc/package.nix | 7 ++--- 2 files changed, 20 insertions(+), 13 deletions(-) diff --git a/pkgs/by-name/ca/cargo-bisect-rustc/0001-dynamically-patchelf-binaries.patch b/pkgs/by-name/ca/cargo-bisect-rustc/0001-dynamically-patchelf-binaries.patch index 3df226835ab9..5516cc42cbfe 100644 --- a/pkgs/by-name/ca/cargo-bisect-rustc/0001-dynamically-patchelf-binaries.patch +++ b/pkgs/by-name/ca/cargo-bisect-rustc/0001-dynamically-patchelf-binaries.patch @@ -1,17 +1,19 @@ diff --git a/src/toolchains.rs b/src/toolchains.rs -index 53a7ddb..795a711 100644 +index a4be8cdcfe..b3e4dc3cee 100644 --- a/src/toolchains.rs +++ b/src/toolchains.rs -@@ -206,6 +206,8 @@ impl Toolchain { +@@ -208,7 +208,9 @@ })?; } -+ nix_patchelf(tmpdir.path().to_path_buf()) -+ .expect("failed to patch toolchain for NixOS"); - fs::rename(tmpdir.into_path(), dest).map_err(InstallError::Move) +- fs::rename(tmpdir.keep(), dest).map_err(InstallError::Move) ++ let tmpdir = tmpdir.keep(); ++ nix_patchelf(tmpdir.clone()).expect("failed to patch toolchain for NixOS"); ++ fs::rename(tmpdir, dest).map_err(InstallError::Move) } -@@ -533,3 +535,42 @@ fn download_tarball( + pub(crate) fn remove(&self, dl_params: &DownloadParams) -> io::Result<()> { +@@ -564,3 +566,46 @@ res => res, } } @@ -25,8 +27,10 @@ index 53a7ddb..795a711 100644 + continue; + } + -+ eprintln!("info: you seem to be running NixOS. Attempting to patch {}", -+ entry.path().to_str().unwrap()); ++ eprintln!( ++ "info: you seem to be running NixOS. Attempting to patch {}", ++ entry.path().to_str().unwrap() ++ ); + let _ = ::std::process::Command::new("@patchelf@/bin/patchelf") + .arg("--set-interpreter") + .arg("@dynamicLinker@") @@ -43,8 +47,10 @@ index 53a7ddb..795a711 100644 + continue; + } + -+ eprintln!("info: you seem to be running NixOS. Attempting to patch {}", -+ entry.path().to_str().unwrap()); ++ eprintln!( ++ "info: you seem to be running NixOS. Attempting to patch {}", ++ entry.path().to_str().unwrap() ++ ); + let _ = ::std::process::Command::new("@patchelf@/bin/patchelf") + .arg("--set-rpath") + .arg("@libPath@") diff --git a/pkgs/by-name/ca/cargo-bisect-rustc/package.nix b/pkgs/by-name/ca/cargo-bisect-rustc/package.nix index c7b9977402fc..c78bd30d6d76 100644 --- a/pkgs/by-name/ca/cargo-bisect-rustc/package.nix +++ b/pkgs/by-name/ca/cargo-bisect-rustc/package.nix @@ -13,13 +13,13 @@ rustPlatform.buildRustPackage (finalAttrs: { pname = "cargo-bisect-rustc"; - version = "0.6.8"; + version = "0.6.11"; src = fetchFromGitHub { owner = "rust-lang"; repo = "cargo-bisect-rustc"; rev = "v${finalAttrs.version}"; - hash = "sha256-7HiM1oRuLSfRaum66duag/w8ncFdxRLF0yeSGlIey0Y="; + hash = "sha256-uyIdQn9EQnjBAHBPqvphaKg2KRufveOXOiHEKk0fTGQ="; }; patches = @@ -45,10 +45,11 @@ rustPlatform.buildRustPackage (finalAttrs: { buildInputs = [ openssl ]; - cargoHash = "sha256-SigRm2ZC7jH1iCEGRpka1G/e9kBEieFVU0YDBl2LfTM="; + cargoHash = "sha256-WSO5LvdJkAorSwsICz9NAWKNM7x4aeNvhGLhJSO6Vi8="; checkFlags = [ "--skip=test_github" # requires internet + "--skip=cli_tests" # trycmd does not seem to work in nix's sandbox ]; passthru = { From e6357eaaf16bcd0490260752b0919bf136ce9398 Mon Sep 17 00:00:00 2001 From: Cameron Brown Date: Sat, 28 Mar 2026 17:26:59 -0400 Subject: [PATCH 25/34] fava: 1.30.11 -> 1.30.12 --- pkgs/development/python-modules/fava/default.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/development/python-modules/fava/default.nix b/pkgs/development/python-modules/fava/default.nix index 7f83827ad604..7b70181c6588 100644 --- a/pkgs/development/python-modules/fava/default.nix +++ b/pkgs/development/python-modules/fava/default.nix @@ -25,17 +25,17 @@ let src = buildNpmPackage (finalAttrs: { pname = "fava-frontend"; - version = "1.30.11"; + version = "1.30.12"; src = fetchFromGitHub { owner = "beancount"; repo = "fava"; tag = "v${finalAttrs.version}"; - hash = "sha256-/e3HNAlezqUTt0RYxjrdktM/mwBpZ4CqRuYbLTzww0w="; + hash = "sha256-krRkcahikP0ChTCXeS/3MBq4v+VmBLViqaYSSGYt6Mc="; }; sourceRoot = "${finalAttrs.src.name}/frontend"; - npmDepsHash = "sha256-K0XDMTqqSq0wbCqs8HXXP0XgADJQaiYD2AN5ilAXfRM="; + npmDepsHash = "sha256-kZAwvyjPZUFJffYsr5917zX+0tMyydcOzfr/TDnoJKw="; makeCacheWritable = true; preBuild = '' From 6f928a78684ed33b70e844b2aa767878e5215218 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 28 Mar 2026 21:29:55 +0000 Subject: [PATCH 26/34] syft: 1.42.2 -> 1.42.3 --- pkgs/by-name/sy/syft/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/sy/syft/package.nix b/pkgs/by-name/sy/syft/package.nix index 507e4029fcc4..ecc5a5b03dea 100644 --- a/pkgs/by-name/sy/syft/package.nix +++ b/pkgs/by-name/sy/syft/package.nix @@ -8,13 +8,13 @@ buildGoModule (finalAttrs: { pname = "syft"; - version = "1.42.2"; + version = "1.42.3"; src = fetchFromGitHub { owner = "anchore"; repo = "syft"; tag = "v${finalAttrs.version}"; - hash = "sha256-Ewy5I/dEH5rt6RgCJsLNx/yemcPdzqbhAKyOvUzs7Uk="; + hash = "sha256-EPno5G2Wfgrcu9DdObn1NNwIkf2r6VgD/S2h/BUjIzU="; # populate values that require us to use git. By doing this in postFetch we # can delete .git afterwards and maintain better reproducibility of the src. leaveDotGit = true; @@ -29,7 +29,7 @@ buildGoModule (finalAttrs: { # hash mismatch with darwin proxyVendor = true; - vendorHash = "sha256-uT5dLpYeQDakfVr5r7FjbwBIwDtRfPkoBtvyrpA7GUo="; + vendorHash = "sha256-Iy5syp/Mbuuz422Ylzl6lN/Q60PwrYW1jMfNahEH3Xg="; nativeBuildInputs = [ installShellFiles ]; From 6cfe47f132db312e522e44d3a57efda089c3d81c Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sat, 28 Mar 2026 22:56:48 +0000 Subject: [PATCH 27/34] grafana-alloy: 1.14.1 -> 1.14.2 --- pkgs/by-name/gr/grafana-alloy/package.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/gr/grafana-alloy/package.nix b/pkgs/by-name/gr/grafana-alloy/package.nix index cc6fcf59da32..64680f984873 100644 --- a/pkgs/by-name/gr/grafana-alloy/package.nix +++ b/pkgs/by-name/gr/grafana-alloy/package.nix @@ -15,18 +15,18 @@ }: buildGoModule (finalAttrs: { pname = "grafana-alloy"; - version = "1.14.1"; + version = "1.14.2"; src = fetchFromGitHub { owner = "grafana"; repo = "alloy"; tag = "v${finalAttrs.version}"; - hash = "sha256-zgbbbuq+sb+nU1vgzaxEHGY77k+TXFrlvcvs/NSqQAM="; + hash = "sha256-77WMsnC2WgVnbw1BsCj9ayS6XPsVTghmtIyl9Dk71uY="; }; npmDeps = fetchNpmDeps { src = "${finalAttrs.src}/internal/web/ui"; - hash = "sha256-GT0yisPn+3FCtWL3he0i5zPMlaWNparQDefU69G4Yis="; + hash = "sha256-MiHFeyDxLzYF3t9H8OEn/bL10WRbzMcwlENs2FSJ4xo="; }; frontend = buildNpmPackage { @@ -54,7 +54,7 @@ buildGoModule (finalAttrs: { modRoot = "collector"; proxyVendor = true; - vendorHash = "sha256-A1mbMmpUxg5T7//X5PL1CPGB1OMPhertFvz4sPFTgOg="; + vendorHash = "sha256-i/BV987/ZYnCRYX8m9iFdtPo0vrWsmpn6UDs0q59sMM="; subPackages = [ "." ]; From b5208ba4408609108785d8f505e615c543ebb561 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 29 Mar 2026 02:51:14 +0000 Subject: [PATCH 28/34] reqable: 3.0.39 -> 3.0.40 --- pkgs/by-name/re/reqable/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/re/reqable/package.nix b/pkgs/by-name/re/reqable/package.nix index 75380997aed9..ba674528eff9 100644 --- a/pkgs/by-name/re/reqable/package.nix +++ b/pkgs/by-name/re/reqable/package.nix @@ -28,11 +28,11 @@ stdenv.mkDerivation (finalAttrs: { pname = "reqable"; - version = "3.0.39"; + version = "3.0.40"; src = fetchurl { url = "https://github.com/reqable/reqable-app/releases/download/${finalAttrs.version}/reqable-app-linux-x86_64.deb"; - hash = "sha256-xKoIS2m1SGMRSbLKP3Yf81nYVcsB9sn3RhKHJvH+nHE="; + hash = "sha256-ddbFkkJjgQyZJEe7sL5cBbpmamSzg7mVg/zr3kXGLzI="; }; nativeBuildInputs = [ From 3651831f903dcb94d2a8d132192ae764a9db348d Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 29 Mar 2026 03:36:44 +0000 Subject: [PATCH 29/34] delta: 0.19.1 -> 0.19.2 --- pkgs/by-name/de/delta/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/de/delta/package.nix b/pkgs/by-name/de/delta/package.nix index b2d601f9de64..e5ef35dec03f 100644 --- a/pkgs/by-name/de/delta/package.nix +++ b/pkgs/by-name/de/delta/package.nix @@ -13,16 +13,16 @@ rustPlatform.buildRustPackage (finalAttrs: { pname = "delta"; - version = "0.19.1"; + version = "0.19.2"; src = fetchFromGitHub { owner = "dandavison"; repo = "delta"; tag = finalAttrs.version; - hash = "sha256-JkJfyVgaiXBKgin9Lf+zB7znDd9BkX4GBX54Gt1LM7M="; + hash = "sha256-vW2mPAxlPXdwqyK/QhU/DOx6MD9u6DDVCDm0OEWm4AQ="; }; - cargoHash = "sha256-CLHJfwaNsOsCONadlLUjTwx1Sr+2ftKsJh8XrCoJ24I="; + cargoHash = "sha256-CC2ncgujdcn1CJxU16beCjfQ1HR2+f6D8qYbZULEm7g="; nativeBuildInputs = [ installShellFiles From f9343ec8791fb1af057b93c6c7bf46286a97124a Mon Sep 17 00:00:00 2001 From: Michael Daniels Date: Fri, 20 Mar 2026 20:28:28 -0400 Subject: [PATCH 30/34] trivy: add warning for version bumps --- pkgs/by-name/tr/trivy/package.nix | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/pkgs/by-name/tr/trivy/package.nix b/pkgs/by-name/tr/trivy/package.nix index c93a71bf04fa..38423c3c63a6 100644 --- a/pkgs/by-name/tr/trivy/package.nix +++ b/pkgs/by-name/tr/trivy/package.nix @@ -10,7 +10,14 @@ buildGoModule (finalAttrs: { pname = "trivy"; - version = "0.69.3"; + # As of March 2026, trivy has made compromised releases twice. + # At a minimum, before updating, check the diff of this package, and of all + # dependencies/GitHub Actions changes, carefully. + # Also read about how the previous compromises occurred, and ensure + # that the signs present then are not present now. + # Finally, weigh the risk of a compromised release against the expected + # benefit of the update, and consider the possibility of not updating. + version = "0.69.3"; # Did you read the comment? src = fetchFromGitHub { owner = "aquasecurity"; From 024ba49571ce10f5b81a4bcbe73c9f4e230a30ac Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 29 Mar 2026 03:44:35 +0000 Subject: [PATCH 31/34] sysdig-cli-scanner: 1.25.1 -> 1.25.2 --- .../sysdig-cli-scanner.versions.nix | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/pkgs/by-name/sy/sysdig-cli-scanner/sysdig-cli-scanner.versions.nix b/pkgs/by-name/sy/sysdig-cli-scanner/sysdig-cli-scanner.versions.nix index 5c7857afa5a0..18db2519ebd3 100644 --- a/pkgs/by-name/sy/sysdig-cli-scanner/sysdig-cli-scanner.versions.nix +++ b/pkgs/by-name/sy/sysdig-cli-scanner/sysdig-cli-scanner.versions.nix @@ -1,23 +1,23 @@ { - version = "1.25.1"; + version = "1.25.2"; x86_64-linux = { - url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.25.1/linux/amd64/sysdig-cli-scanner"; - hash = "sha256-Qg00JIeYpGPcgd9jlbyfOrklWVrseMMLwv5hw87RP/0="; + url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.25.2/linux/amd64/sysdig-cli-scanner"; + hash = "sha256-hSK1tCCIgMebYIi9e7XCkASHYsZ3GvniMubJxUdHyT8="; }; aarch64-linux = { - url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.25.1/linux/arm64/sysdig-cli-scanner"; - hash = "sha256-GBoNTdSod/IOfsCzYCqU9DLzj2LEjXUwig6gjMbCrYs="; + url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.25.2/linux/arm64/sysdig-cli-scanner"; + hash = "sha256-IxcW/tBU0YR8FRAKU4Tzq19/dGuYn5QMqNjG27ABo0I="; }; x86_64-darwin = { - url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.25.1/darwin/amd64/sysdig-cli-scanner"; - hash = "sha256-MtCtWY3/dIIzL3f4IyZzHQPXNuR+OQFR318jQNO5r78="; + url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.25.2/darwin/amd64/sysdig-cli-scanner"; + hash = "sha256-lS6O5c7MYmRepea6MdrVa8+EzrjcMjBCnmHdem6f2AE="; }; aarch64-darwin = { - url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.25.1/darwin/arm64/sysdig-cli-scanner"; - hash = "sha256-vjbpPx8swNwuhperEnDP9sQe+Q1vJU4ZfvLloE2gbh4="; + url = "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/1.25.2/darwin/arm64/sysdig-cli-scanner"; + hash = "sha256-H1HWvGL++3/SqSjmSbqU+tHx8Zxh47NAdFRWw/qJqVY="; }; } From 714cc8ba8e37bd826ebbc8a0361a4542e2a59570 Mon Sep 17 00:00:00 2001 From: Philip Taron Date: Sat, 28 Mar 2026 20:50:31 -0700 Subject: [PATCH 32/34] nixVersions.git: 2.35pre20260305 -> 2.35pre20260328 --- pkgs/tools/package-management/nix/default.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/tools/package-management/nix/default.nix b/pkgs/tools/package-management/nix/default.nix index fdcd5d298040..8772d9df0b1e 100644 --- a/pkgs/tools/package-management/nix/default.nix +++ b/pkgs/tools/package-management/nix/default.nix @@ -241,14 +241,14 @@ lib.makeExtensible ( nixComponents_git = (nixDependencies.callPackage ./modular/packages.nix rec { - version = "2.35pre20260305_${lib.substring 0 8 src.rev}"; + version = "2.35pre20260328_${lib.substring 0 8 src.rev}"; inherit teams; otherSplices = generateSplicesForNixComponents "nixComponents_git"; src = fetchFromGitHub { owner = "NixOS"; repo = "nix"; - rev = "124b277764bba830a35fea1dff7ced6db4b3f290"; - hash = "sha256-qTdRLFF1TgUj+EM34XO4nLyunSxKzbaSvKeuLdOmv2w="; + rev = "7edcd0a24dc71abb7caa600527833ef540c1bc86"; + hash = "sha256-fybp46IQmRN7lEUTChc3MTqxmRutmDO4RNSPEQfJQsQ="; }; }).appendPatches patches_common; From 5a3dd545096113f3fa1afbc72287e171e95a9ab6 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 29 Mar 2026 03:56:03 +0000 Subject: [PATCH 33/34] deck: 1.56.0 -> 1.57.0 --- pkgs/by-name/de/deck/package.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/de/deck/package.nix b/pkgs/by-name/de/deck/package.nix index 60c695d1eaf5..616a588f6d12 100644 --- a/pkgs/by-name/de/deck/package.nix +++ b/pkgs/by-name/de/deck/package.nix @@ -9,13 +9,13 @@ buildGoModule (finalAttrs: { pname = "deck"; - version = "1.56.0"; + version = "1.57.0"; src = fetchFromGitHub { owner = "Kong"; repo = "deck"; tag = "v${finalAttrs.version}"; - hash = "sha256-F57BuEU91wRLVaA4YYHyqCKdBL60ZiHEAyuuioLN66c="; + hash = "sha256-0j3/cFRKclyO4mpm+r5lBqM3uTnzUatfLqH2aUMDbUA="; }; nativeBuildInputs = [ installShellFiles ]; @@ -28,7 +28,7 @@ buildGoModule (finalAttrs: { ]; proxyVendor = true; # darwin/linux hash mismatch - vendorHash = "sha256-joVAsg714Nuizv1fYYMes7vGsWbIvmUPKRDuU/Hwyso="; + vendorHash = "sha256-/Cde+eGOqUsL3Q5jDtZaTzOTMnE72ncgBMQzcIeNVls="; postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) '' installShellCompletion --cmd deck \ From 9e399117afbe98b492ebc83651236c6f997f4631 Mon Sep 17 00:00:00 2001 From: "R. Ryantm" Date: Sun, 29 Mar 2026 05:50:09 +0000 Subject: [PATCH 34/34] prl-tools: 26.2.2-57373 -> 26.3.0-57392 --- pkgs/by-name/pr/prl-tools/package.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/by-name/pr/prl-tools/package.nix b/pkgs/by-name/pr/prl-tools/package.nix index 7a0ffc0fb7d1..75f7e3548a9e 100644 --- a/pkgs/by-name/pr/prl-tools/package.nix +++ b/pkgs/by-name/pr/prl-tools/package.nix @@ -45,13 +45,13 @@ let in stdenv.mkDerivation (finalAttrs: { pname = "prl-tools"; - version = "26.2.2-57373"; + version = "26.3.0-57392"; # We download the full distribution to extract prl-tools-lin.iso from # => ${dmg}/Parallels\ Desktop.app/Contents/Resources/Tools/prl-tools-lin.iso src = fetchurl { url = "https://download.parallels.com/desktop/v${lib.versions.major finalAttrs.version}/${finalAttrs.version}/ParallelsDesktop-${finalAttrs.version}.dmg"; - hash = "sha256-QsMMPzF7RRw2etxHLiOHc8ofSrO+rk/3T1Y3+zAnwnM="; + hash = "sha256-pVTlGXZVb/Q/6/i7B07KWb3Kg+5Lm06+v4ERxUjoW7o="; }; hardeningDisable = [