Merge master into staging-nixos

doc/release-notes/rl-2605.section.md

@@ -113,6 +113,8 @@
   retained for packages that have not completed migration. `asio_1_10` has been removed as no packages depend on it anymore.
   `asio` also no longer propagates `boost` as it is used independent from `boost` in most cases.
 
+- `stalwart-mail` has been renamed to `stalwart`
+
 - Ethercalc and its associated module have been removed, as the package is unmaintained and cannot be installed from source with npm now.
 
 - `coreth` has been removed, as upstream has moved it into `avalanchego`.

nixos/doc/manual/release-notes/rl-2311.section.md

@@ -983,8 +983,7 @@ Make sure to also check the many updates in the [Nixpkgs library](#sec-release-2
   [services.sitespeed-io](#opt-services.sitespeed-io.enable).
 
 - [stalwart-mail](https://stalw.art), an all-in-one email server (SMTP, IMAP,
-  JMAP). Available as
-  [services.stalwart-mail](#opt-services.stalwart-mail.enable).
+  JMAP). Available as `services.stalwart-mail`.
 
 
 - [tang](https://github.com/latchset/tang), a server for binding data to

nixos/doc/manual/release-notes/rl-2405.section.md

@@ -741,7 +741,7 @@ Use `services.pipewire.extraConfig` or `services.pipewire.configPackages` for Pi
 
 - `services.soju` now has a wrapper for the `sojuctl` command, pointed at the service config file. It also has the new option `adminSocket.enable`, which creates a unix admin socket at `/run/soju/admin`.
 
-- `services.stalwart-mail` uses the legacy version 0.6.X as default because newer `stalwart-mail` versions require a [manual upgrade process](https://github.com/stalwartlabs/mail-server/blob/main/UPGRADING.md). Change [`services.stalwart-mail.package`](#opt-services.stalwart-mail.package) to `pkgs.stalwart-mail` if you wish to switch to the new version.
+- `services.stalwart-mail` uses the legacy version 0.6.X as default because newer `stalwart-mail` versions require a [manual upgrade process](https://github.com/stalwartlabs/mail-server/blob/main/UPGRADING.md). Change `services.stalwart-mail.package` to `pkgs.stalwart-mail` if you wish to switch to the new version.
 
 - `services.teeworlds` module now has a wealth of configuration options, including a new `package` option.
 

nixos/doc/manual/release-notes/rl-2411.section.md

@@ -508,8 +508,7 @@
 
 - Legacy package `stalwart-mail_0_6` was dropped, please note the
   [manual upgrade process](https://github.com/stalwartlabs/mail-server/blob/main/UPGRADING.md)
-  before changing the package to `pkgs.stalwart-mail` in
-  [`services.stalwart-mail.package`](#opt-services.stalwart-mail.package).
+  before changing the package to `pkgs.stalwart-mail` in `services.stalwart-mail.package`.
 
 - `nomad_1_5` and `nomad_1_6` were dropped, as [they have reached end-of-life upstream](https://support.hashicorp.com/hc/en-us/articles/360021185113-Support-Period-and-End-of-Life-EOL-Policy). Evaluating them will throw an error.
 

nixos/doc/manual/release-notes/rl-2605.section.md

@@ -77,6 +77,11 @@ of pulling the upstream container image from Docker Hub. If you want the old beh
 }
 ```
 
+- `services.stalwart-mail` has been renamed to `services.stalwart` to align with upstream re-brand as an e-mail and collaboration server. Other notable breaking changes to module:
+
+  - `systemd.services.stalwart` owned by `stalwart:stalwart`. The `user` and `group` are configurable via `services.stalwart.user` and `services.stalwart.group`, respectively. By default, if `stateVersion` is older than `26.05`, will fallback to legacy value of `stalwart-mail` for both `user` and `group`.
+  - Default value for `services.stalwart.dataDir` has changed to `/var/lib/stalwart`. If `stateVersion` is older than `26.05`, will fallback to legacy value of `/var/lib/stalwart-mail`.
+
 - Ethercalc and its associated module have been removed, as the package is unmaintained and cannot be installed from source with npm now.
 
 - `services.cgit` before always had the git-http-backend and its "export all" setting enabled, which sidestepped any access control configured in cgit's settings. Now you have to make a decision and either enable or disable `services.cgit.gitHttpBackend.checkExportOkFiles` (or disable the git-http-backend).

nixos/modules/module-list.nix

@@ -779,7 +779,7 @@
   ./services/mail/rss2email.nix
   ./services/mail/schleuder.nix
   ./services/mail/spamassassin.nix
-  ./services/mail/stalwart-mail.nix
+  ./services/mail/stalwart.nix
   ./services/mail/sympa.nix
   ./services/mail/tlsrpt.nix
   ./services/mail/zeyple.nix

nixos/modules/services/mail/stalwart.nix

@@ -5,10 +5,12 @@
   ...
 }:
 let
-  cfg = config.services.stalwart-mail;
+  cfg = config.services.stalwart;
   configFormat = pkgs.formats.toml { };
-  configFile = configFormat.generate "stalwart-mail.toml" cfg.settings;
+  configFile = configFormat.generate "stalwart.toml" cfg.settings;
   useLegacyStorage = lib.versionOlder config.system.stateVersion "24.11";
+  useLegacyDefault = lib.versionOlder config.system.stateVersion "26.05";
+  default = if useLegacyDefault then "stalwart-mail" else "stalwart";
 
   parsePorts =
     listeners:
@@ -21,17 +23,22 @@ let
 
 in
 {
-  options.services.stalwart-mail = {
-    enable = lib.mkEnableOption "the Stalwart all-in-one email server";
+  imports = [
+    # since 0.12.0 (2025-05-26) release, upstream re-branded project to 'stalwart' due to inclusion of collaboration features (CalDAV, CardDAV, and WebDAV)
+    #  https://github.com/stalwartlabs/stalwart/releases/tag/v0.12.0
+    (lib.mkRenamedOptionModule [ "services" "stalwart-mail" ] [ "services" "stalwart" ])
+  ];
+  options.services.stalwart = {
+    enable = lib.mkEnableOption "the all-in-one collaboration and mail server, Stalwart";
 
-    package = lib.mkPackageOption pkgs "stalwart-mail" { };
+    package = lib.mkPackageOption pkgs "stalwart" { };
 
     openFirewall = lib.mkOption {
       type = lib.types.bool;
       default = false;
       description = ''
         Whether to open TCP firewall ports, which are specified in
-        {option}`services.stalwart-mail.settings.server.listener` on all interfaces.
+        {option}`services.stalwart.settings.server.listener` on all interfaces.
       '';
     };
 
@@ -39,7 +46,7 @@ in
       inherit (configFormat) type;
       default = { };
       description = ''
-        Configuration options for the Stalwart email server.
+        Configuration options for the Stalwart server.
         See <https://stalw.art/docs/category/configuration> for available options.
 
         By default, the module is configured to store everything locally.
@@ -48,18 +55,34 @@ in
 
     dataDir = lib.mkOption {
       type = lib.types.path;
-      default = "/var/lib/stalwart-mail";
+      default = if useLegacyDefault then "/var/lib/stalwart-mail" else "/var/lib/stalwart";
       description = ''
         Data directory for stalwart
       '';
     };
 
+    user = lib.mkOption {
+      type = lib.types.str;
+      inherit default;
+      description = ''
+        User ownership of service
+      '';
+    };
+
+    group = lib.mkOption {
+      type = lib.types.str;
+      inherit default;
+      description = ''
+        Group ownership of service
+      '';
+    };
+
     credentials = lib.mkOption {
       description = ''
-        Credentials envs used to configure Stalwart-Mail secrets.
+        Credentials envs used to configure Stalwart secrets.
         These secrets can be accessed in configuration values with
         the macros such as
-        `%{file:/run/credentials/stalwart-mail.service/VAR_NAME}%`.
+        `%{file:/run/credentials/stalwart.service/VAR_NAME}%`.
       '';
       type = lib.types.attrsOf lib.types.str;
       default = { };
@@ -90,7 +113,7 @@ in
     ];
 
     # Default config: all local
-    services.stalwart-mail.settings = {
+    services.stalwart.settings = {
       tracer.stdout = {
         type = lib.mkDefault "stdout";
         level = lib.mkDefault "info";
@@ -132,7 +155,7 @@ in
           );
         in
         {
-          path = "/var/cache/stalwart-mail";
+          path = "/var/cache/${default}";
           resource = lib.mkIf hasHttpListener (lib.mkDefault "file://${cfg.package.webadmin}/webadmin.zip");
         };
     };
@@ -142,20 +165,24 @@ in
     # service is restarted on a potentially large number of files.
     # That would cause unnecessary and unwanted delays.
     users = {
-      groups.stalwart-mail = { };
-      users.stalwart-mail = {
-        isSystemUser = true;
-        group = "stalwart-mail";
+      groups = lib.mkIf (cfg.group == default) {
+        ${cfg.group} = { };
+      };
+      users = lib.mkIf (cfg.user == default) {
+        ${cfg.user} = {
+          isSystemUser = true;
+          inherit (cfg) group;
+        };
       };
     };
 
     systemd.tmpfiles.rules = [
-      "d '${cfg.dataDir}' - stalwart-mail stalwart-mail - -"
+      "d '${cfg.dataDir}' - '${cfg.user}' '${cfg.group}' - -"
     ];
 
     systemd = {
-      services.stalwart-mail = {
-        description = "Stalwart Mail Server";
+      services.stalwart = {
+        description = "Stalwart Server";
         wantedBy = [ "multi-user.target" ];
         after = [
           "local-fs.target"
@@ -170,7 +197,7 @@ in
           KillSignal = "SIGINT";
           Restart = "on-failure";
           RestartSec = 5;
-          SyslogIdentifier = "stalwart-mail";
+          SyslogIdentifier = default;
 
           ExecStartPre =
             if useLegacyStorage then
@@ -190,12 +217,12 @@ in
           ReadWritePaths = [
             cfg.dataDir
           ];
-          CacheDirectory = "stalwart-mail";
-          StateDirectory = "stalwart-mail";
+          CacheDirectory = default;
+          StateDirectory = default;
 
           # Upstream uses "stalwart" as the username since 0.12.0
-          User = "stalwart-mail";
-          Group = "stalwart-mail";
+          User = cfg.user;
+          Group = cfg.group;
 
           # Bind standard privileged ports
           AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];

nixos/modules/services/web-servers/apache-httpd/default.nix

@@ -110,25 +110,20 @@ let
   }
   ++ cfg.extraModules;
 
-  loggingConf = (
-    if cfg.logFormat != "none" then
-      ''
-        ErrorLog ${cfg.logDir}/error.log
+  loggingConf = ''
+    ErrorLog ${if cfg.logFormat != "none" then "${cfg.logDir}/error.log" else "/dev/null"}
+    ${optionalString (cfg.logLevel != null) "LogLevel ${cfg.logLevel}"}
 
-        LogLevel notice
+    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
+    LogFormat "%h %l %u %t \"%r\" %>s %b" common
+    LogFormat "%{Referer}i -> %U" referer
+    LogFormat "%{User-agent}i" agent
+    ${optionalString (
+      cfg.logFormat == "custom"
+    ) "LogFormat ${lib.strings.escapeNixString cfg.customLogFormat} custom"}
 
-        LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
-        LogFormat "%h %l %u %t \"%r\" %>s %b" common
-        LogFormat "%{Referer}i -> %U" referer
-        LogFormat "%{User-agent}i" agent
-
-        CustomLog ${cfg.logDir}/access.log ${cfg.logFormat}
-      ''
-    else
-      ''
-        ErrorLog /dev/null
-      ''
-  );
+    CustomLog ${cfg.logDir}/access.log ${cfg.logFormat}
+  '';
 
   browserHacks = ''
     <IfModule mod_setenvif.c>
@@ -582,12 +577,67 @@ in
       };
 
       logFormat = mkOption {
-        type = types.str;
+        type = types.enum [
+          "combined"
+          "common"
+          "referer"
+          "agent"
+          "custom"
+          "none"
+        ];
         default = "common";
-        example = "combined";
+        example = "custom";
         description = ''
-          Log format for log files. Possible values are: combined, common, referer, agent, none.
-          See <https://httpd.apache.org/docs/2.4/logs.html> for more details.
+          Selects the access log format written to log files.
+
+          The values `combined`, `common`, `referer`, and `agent` correspond to predefined Apache HTTPD log formats.
+          Setting the value to `custom` enables the use of a user-defined format string specified via `customLogFormat`.
+          The value `none` disables access logging entirely.
+
+          Further details on Apache log formats are available at <https://httpd.apache.org/docs/2.4/logs.html>.
+        '';
+      };
+
+      customLogFormat = mkOption {
+        type = types.str;
+        default = null;
+        example = ''%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b'';
+        description = ''
+          Defines a custom Apache HTTPD access log format string.
+
+          This option is only consulted when `logFormat` is set to `custom`.
+          The value must be a valid Apache `LogFormat` specification and will be registered under the symbolic name `custom`.
+
+          See <https://httpd.apache.org/docs/2.4/logs.html#formats> for the formal definition of log format directives.
+        '';
+      };
+
+      logLevel = mkOption {
+        type =
+          with types;
+          nullOr (enum [
+            "emerg"
+            "alert"
+            "crit"
+            "error"
+            "warn"
+            "notice"
+            "info"
+            "debug"
+            "trace1"
+            "trace2"
+            "trace3"
+            "trace4"
+            "trace5"
+            "trace6"
+            "trace7"
+            "trace8"
+          ]);
+        default = "notice";
+        example = "crit";
+        description = ''
+          Controls the verbosity of the ErrorLog.
+          See <https://httpd.apache.org/docs/2.4/mod/core.html#loglevel> for more details.
         '';
       };
 

nixos/tests/all-tests.nix

@@ -1478,7 +1478,7 @@ in
   sslh = handleTest ./sslh.nix { };
   sssd-ldap = handleTestOn [ "x86_64-linux" "aarch64-linux" ] ./sssd-ldap.nix { };
   sssd-legacy-config = handleTestOn [ "x86_64-linux" "aarch64-linux" ] ./sssd-legacy-config.nix { };
-  stalwart-mail = runTest ./stalwart/stalwart-mail.nix;
+  stalwart = runTest ./stalwart/stalwart.nix;
   stargazer = runTest ./web-servers/stargazer.nix;
   starship = runTest ./starship.nix;
   startx = import ./startx.nix { inherit pkgs runTest; };

nixos/tests/stalwart/stalwart-config.nix

@@ -7,7 +7,7 @@ in
 {
   security.pki.certificateFiles = [ certs.ca.cert ];
 
-  services.stalwart-mail = {
+  services.stalwart = {
     enable = true;
     settings = {
       server.hostname = domain;
@@ -54,7 +54,7 @@ in
 
       store."rocksdb" = {
         type = "rocksdb";
-        path = "/var/lib/stalwart-mail/data";
+        path = "/var/lib/stalwart/data";
         compression = "lz4";
       };
 

nixos/tests/stalwart/stalwart.nix

@@ -1,4 +1,4 @@
-# Rudimentary test checking that the Stalwart email server can:
+# Rudimentary test checking that the Stalwart server can:
 # - receive some message through SMTP submission, then
 # - serve this message through IMAP.
 
@@ -8,13 +8,13 @@ let
 in
 { lib, ... }:
 {
-  name = "stalwart-mail";
+  name = "stalwart";
 
   nodes.main =
     { pkgs, ... }:
     {
       imports = [
-        ./stalwart-mail-config.nix
+        ./stalwart-config.nix
       ];
 
       environment.systemPackages = [
@@ -57,7 +57,7 @@ in
 
   testScript = # python
     ''
-      main.wait_for_unit("stalwart-mail.service")
+      main.wait_for_unit("stalwart.service")
       main.wait_for_open_port(587)
       main.wait_for_open_port(143)
       main.wait_for_open_port(80)
@@ -65,14 +65,14 @@ in
       main.succeed("test-smtp-submission")
 
       # restart stalwart to test rocksdb compaction of existing database
-      main.succeed("systemctl restart stalwart-mail.service")
+      main.succeed("systemctl restart stalwart.service")
       main.wait_for_open_port(587)
       main.wait_for_open_port(143)
       main.wait_for_open_port(80)
 
       main.succeed("test-imap-read")
 
-      main.succeed("test -d /var/cache/stalwart-mail/STALWART_WEBADMIN")
+      main.succeed("test -d /var/cache/stalwart-mail/STALWART_WEBADMIN || test -d /var/cache/stalwart/STALWART_WEBADMIN")
       main.succeed("curl --fail http://localhost")
     '';
 

pkgs/applications/video/obs-studio/plugins/obs-source-clone.nix

@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "obs-source-clone";
-  version = "0.2.0";
+  version = "0.2.1";
 
   src = fetchFromGitHub {
     owner = "exeldro";
     repo = "obs-source-clone";
     tag = finalAttrs.version;
-    hash = "sha256-LvxeADojLM33N3CmdwEHQ2FuORMlbKq961do5J7891M=";
+    hash = "sha256-It/TF7vAVzuANcNUG9whK9ZDLXpRHzwpGvV5I/YTVdo=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/aw/aws-vault/package.nix

@@ -10,17 +10,17 @@
 }:
 buildGoModule rec {
   pname = "aws-vault";
-  version = "7.9.0";
+  version = "7.9.3";
 
   src = fetchFromGitHub {
     owner = "ByteNess";
     repo = "aws-vault";
     rev = "v${version}";
-    hash = "sha256-G80hDf6rpWzgkS1VESBGUpTcShvnuCH1OAiMboOz37k=";
+    hash = "sha256-oQI1VjK4nQAErXgtUumdTwVB0maCfEv4WRF+buaHnKM=";
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-7ONAv0EooaseR5kpca8y2OX8yOKMID2xgkYC4rm4CcQ=";
+  vendorHash = "sha256-KXJSggr0kOTduv3yhDJbDNdSrfXS+d2UOFFn9UK519M=";
 
   nativeBuildInputs = [
     installShellFiles

pkgs/by-name/bc/bcachefs-tools/package.nix

@@ -28,18 +28,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "bcachefs-tools";
-  version = "1.35.2";
+  version = "1.36.0";
 
   src = fetchFromGitHub {
     owner = "koverstreet";
     repo = "bcachefs-tools";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-YreeoI9ct3Gt0za3bW4cFP8mA3mrgpVnHVUzfX1m5CI=";
+    hash = "sha256-VSx8M8W3j47xC0tPdKtEHeMcFJMpBBMHjf7ZiDiE79I=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) src;
-    hash = "sha256-1TxACD4xXZ3BfVdoQUCzWe5Ovv0tKw6ALBw0+tRLOaQ=";
+    hash = "sha256-o0UofdKgEe/R683TmZJlsd1QD1Iy1oMBVBSN6u2uvDM=";
   };
 
   postPatch = ''

pkgs/by-name/bu/burpsuite/package.nix

@@ -9,20 +9,20 @@
 }:
 
 let
-  version = "2026.1";
+  version = "2026.1.2";
 
   product =
     if proEdition then
       {
         productName = "pro";
         productDesktop = "Burp Suite Professional Edition";
-        hash = "sha256-4GvB1K4UZnZMor0jBWXvzgy0qfh234TZmtu6eSR4/jk=";
+        hash = "sha256-KF6VOXO3IKsysA3SBJJzL+G2yQEVpCQKL6IMYQhYFMc=";
       }
     else
       {
         productName = "community";
         productDesktop = "Burp Suite Community Edition";
-        hash = "sha256-q0vKBEIzO18mNX7bn1vhnstnGr1pwjMnHXq6HdtpJy0=";
+        hash = "sha256-5LNzF68VhGdWttzZCkw/Ign4x6V4EhU/EHMddeSVirk=";
       };
 
   src = fetchurl {

pkgs/by-name/ch/chipsec/package.nix

@@ -11,14 +11,14 @@
 
 python3.pkgs.buildPythonApplication rec {
   pname = "chipsec";
-  version = "1.13.19";
+  version = "1.13.20";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "chipsec";
     repo = "chipsec";
     tag = version;
-    hash = "sha256-QJDoUnmZhKimgVnKCarc70b1OZAF3uIKqefuXjD7dOg=";
+    hash = "sha256-TSw/1NdPGefWXRMleXTeLWDgRw/m+luIQ0lF8UlgfLs=";
   };
 
   patches = [

pkgs/by-name/de/deck/package.nix

@@ -9,13 +9,13 @@
 
 buildGoModule rec {
   pname = "deck";
-  version = "1.55.0";
+  version = "1.55.1";
 
   src = fetchFromGitHub {
     owner = "Kong";
     repo = "deck";
     tag = "v${version}";
-    hash = "sha256-Xw8IROfseCo4e0yDC5Y6aD/aTu9JYsGYjeSzSVIXd+E=";
+    hash = "sha256-Igj2Kw7ESH7Mjvf9CT4d/irfO5Crm6Xol4CJwfjDwHk=";
   };
 
   nativeBuildInputs = [ installShellFiles ];
@@ -28,7 +28,7 @@ buildGoModule rec {
   ];
 
   proxyVendor = true; # darwin/linux hash mismatch
-  vendorHash = "sha256-LmYsPrHKTYu07jLkAo7UsIV74sVyLSdhAwUV6Cu0JNQ=";
+  vendorHash = "sha256-4DMe8CbzTa8zIW8JGDm0TyxwNq+reXCVDo9Z7rWLbeQ=";
 
   postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
     installShellCompletion --cmd deck \

pkgs/by-name/fo/fosrl-olm/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule rec {
   pname = "olm";
-  version = "1.4.0";
+  version = "1.4.1";
 
   src = fetchFromGitHub {
     owner = "fosrl";
     repo = "olm";
     tag = version;
-    hash = "sha256-k5l8l8nLI52oox1qUHEax8l939NyDum/RbwEYOgCDIc=";
+    hash = "sha256-yzs+mveiZQ+7+hln3H3C5m7nSDdIIzwzSuuw7QlS9H0=";
   };
 
   vendorHash = "sha256-lqH/pMWeDsTJa39uJwHntCAUs0BwJiB0aMyFaI++5ms=";

pkgs/by-name/gw/gwyddion/package.nix

@@ -34,10 +34,10 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gwyddion";
-  version = "2.69";
+  version = "2.70";
   src = fetchurl {
     url = "mirror://sourceforge/gwyddion/gwyddion-${finalAttrs.version}.tar.xz";
-    sha256 = "sha256-WX62tR7ldaB/NQzAVzvHTQBaNJDZgyrRNqNp5w0w76Y=";
+    hash = "sha256-lC9OBBlFqFC8MtBRk6EVrIpRGKb4Qa+m1N6lEPmRP1k=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/in/inform6/package.nix

@@ -7,11 +7,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "inform6";
-  version = "6.42-r9";
+  version = "6.44-r3";
 
   src = fetchurl {
     url = "https://ifarchive.org/if-archive/infocom/compilers/inform6/source/inform-${finalAttrs.version}.tar.gz";
-    sha256 = "sha256-aHYjqjdISnyUxtruDDWD0cHEOxBpvm3+TfNxtGofezQ=";
+    hash = "sha256-NVO1bvDRdQowkkr6tBhDYzu7yLPd47XaTOXBivGJplk=";
   };
 
   buildInputs = [ perl ];

pkgs/by-name/ma/maestro/package.nix

@@ -10,11 +10,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "maestro";
-  version = "2.0.9";
+  version = "2.1.0";
 
   src = fetchurl {
     url = "https://github.com/mobile-dev-inc/maestro/releases/download/cli-${finalAttrs.version}/maestro.zip";
-    hash = "sha256-b1p50qqNvwqku3pv3dylkRgsZnZwExwx95RQ6zV5pQM=";
+    hash = "sha256-lzw01d/rXnRs6/Eo34qAA/9HG2FGsjy7rEHJqjbfEGY=";
   };
 
   dontUnpack = true;

pkgs/by-name/ne/neo4j/package.nix

@@ -12,11 +12,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "neo4j";
-  version = "2025.10.1";
+  version = "2025.12.1";
 
   src = fetchurl {
     url = "https://neo4j.com/artifact.php?name=neo4j-community-${finalAttrs.version}-unix.tar.gz";
-    hash = "sha256-aa3hZeM0ehMt6mZk/Of9qG85GnrvsasA8hzpQOppLwk=";
+    hash = "sha256-BsPXtsuVMuPsLAPyTQduOsrFq/5tc5T4VZENLBL3xUI=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/nv/nvc/package.nix

@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "nvc";
-  version = "1.18.2";
+  version = "1.19.0";
 
   src = fetchFromGitHub {
     owner = "nickg";
     repo = "nvc";
     tag = "r${finalAttrs.version}";
-    hash = "sha256-a1enY86rlLwlRSmY0R4ZfXUo6PddlIAeaKnvfJVcYCQ=";
+    hash = "sha256-99aYjP5YGMSM9V2gkU5tT5KeyddGjlxvzT7oKzU9WCg=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/op/openvino/package.nix

@@ -2,8 +2,6 @@
   lib,
   stdenv,
   fetchFromGitHub,
-  fetchpatch,
-  fetchurl,
   cudaSupport ? opencv.cudaSupport or false,
 
   # build
@@ -36,6 +34,7 @@
 let
   inherit (lib)
     cmakeBool
+    getLib
     ;
 
   # prevent scons from leaking in the default python version
@@ -56,28 +55,16 @@ in
 
 stdenv.mkDerivation rec {
   pname = "openvino";
-  version = "2025.2.1";
+  version = "2025.4.2";
 
   src = fetchFromGitHub {
     owner = "openvinotoolkit";
     repo = "openvino";
     tag = version;
     fetchSubmodules = true;
-    hash = "sha256-Bu0m7nGqyHwHsa7FKr4nvUh/poJxMTgwuAU81QBmI4g=";
+    hash = "sha256-DDzY3o3ehYf/JYxh3AK25z1/UcuDrbQpaYFRWxPvpmk=";
   };
 
-  patches = [
-    (fetchpatch {
-      name = "cmake4-compat.patch";
-      url = "https://github.com/openvinotoolkit/openvino/commit/677716c2471cadf1bf1268eca6343498a886a229.patch?full_index=1";
-      hash = "sha256-iaifJBdl7+tQZq1d8SiczUaXz+AdfMrLtwzfTmSG+XA=";
-    })
-    (fetchpatch {
-      url = "https://github.com/openvinotoolkit/openvino/commit/564d2d6b9ca179004d32b70466dbd088eef8a307.patch?full_index=1";
-      hash = "sha256-2khosDwlV7Dwxu0dvyDuCbo/XzR/eeYRGhlSieOfrFQ=";
-    })
-  ];
-
   outputs = [
     "out"
     "python"
@@ -107,8 +94,8 @@ stdenv.mkDerivation rec {
     "-Wno-dev"
     "-DCMAKE_MODULE_PATH:PATH=${placeholder "out"}/lib/cmake"
     "-DCMAKE_PREFIX_PATH:PATH=${placeholder "out"}"
-    "-DOpenCV_DIR=${lib.getLib opencv}/lib/cmake/opencv4/"
-    "-DProtobuf_LIBRARIES=${protobuf}/lib/libprotobuf${stdenv.hostPlatform.extensions.sharedLibrary}"
+    "-DOpenCV_DIR=${getLib opencv}/lib/cmake/opencv4/"
+    "-DProtobuf_LIBRARIES=${getLib protobuf}/lib/libprotobuf${stdenv.hostPlatform.extensions.sharedLibrary}"
     "-DPython_EXECUTABLE=${python.interpreter}"
 
     (cmakeBool "CMAKE_VERBOSE_MAKEFILE" true)
@@ -138,10 +125,6 @@ stdenv.mkDerivation rec {
     (cmakeBool "ENABLE_SYSTEM_TBB" true)
   ];
 
-  autoPatchelfIgnoreMissingDeps = [
-    "libngraph_backend.so"
-  ];
-
   # src/graph/src/plugins/intel_gpu/src/graph/include/reorder_inst.h:24:8: error: type 'struct typed_program_node' violates the C++ One Definition Rule [-Werror=odr]
   env.NIX_CFLAGS_COMPILE = "-Wno-odr";
 

pkgs/by-name/pl/plasticity/package.nix

@@ -40,11 +40,11 @@
 }:
 stdenv.mkDerivation rec {
   pname = "plasticity";
-  version = "25.2.11";
+  version = "25.3.7";
 
   src = fetchurl {
     url = "https://github.com/nkallen/plasticity/releases/download/v${version}/Plasticity-${version}-1.x86_64.rpm";
-    hash = "sha256-aqc6CDR3yBOGaRr+VjXQrTXZKvr9kqzaqcu5y30clCA=";
+    hash = "sha256-l4kuxB5Lh0BiwIxdu3BLdu0VyAeDK0QR6tf6ckqGweY=";
   };
 
   passthru.updateScript = ./update.sh;

pkgs/by-name/pr/prometheus-chrony-exporter/package.nix

@@ -7,13 +7,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "prometheus-chrony-exporter";
-  version = "0.12.2";
+  version = "0.12.3";
 
   src = fetchFromGitHub {
     owner = "superq";
     repo = "chrony_exporter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-YQmJ2MMvebrZUVzVGQxlDuUIEs0xRfKxcqH6iRHoY0k=";
+    hash = "sha256-TQTAflscPUWfI92eYQIpkseBi2tpqLZ0xO+KphTTqZE=";
     leaveDotGit = true;
     postFetch = ''
       cd "$out"
@@ -36,7 +36,7 @@ buildGoModule (finalAttrs: {
     "-X github.com/prometheus/common/version.BuildUser=nix@nixpkgs"
   ];
 
-  vendorHash = "sha256-WxYsvKIdAorBe0tFWpp8mfRfgdFjoxw1OSkwfB0MArg=";
+  vendorHash = "sha256-/iZo0HkRoLsumiM+q+8Hui6H+SYPTh7i6naTih4Cq8U=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/pr/proxypin/package.nix

@@ -9,7 +9,7 @@
 }:
 
 let
-  version = "1.2.3";
+  version = "1.2.4";
 in
 flutter338.buildFlutterApplication {
   pname = "proxypin";
@@ -19,7 +19,7 @@ flutter338.buildFlutterApplication {
     owner = "wanghongenpin";
     repo = "proxypin";
     tag = "v${version}";
-    hash = "sha256-0eYfE5ziEMcBpLZ7a48ZPn9pmektdgmMcpDvUz4JrFs=";
+    hash = "sha256-Dhs2b+tjXTPFZOGoi7YUliWkdJ5s1jIJkJsXTQ6w7QY=";
   };
 
   pubspecLock = lib.importJSON ./pubspec.lock.json;

pkgs/by-name/pr/proxypin/pubspec.lock.json

@@ -80,6 +80,16 @@
       "source": "hosted",
       "version": "1.1.2"
     },
+    "code_assets": {
+      "dependency": "transitive",
+      "description": {
+        "name": "code_assets",
+        "sha256": "83ccdaa064c980b5596c35dd64a8d3ecc68620174ab9b90b6343b753aa721687",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.0.0"
+    },
     "collection": {
       "dependency": "transitive",
       "description": {
@@ -104,11 +114,11 @@
       "dependency": "transitive",
       "description": {
         "name": "cross_file",
-        "sha256": "701dcfc06da0882883a2657c445103380e53e647060ad8d9dfb710c100996608",
+        "sha256": "28bb3ae56f117b5aec029d702a90f57d285cd975c3c5c281eaca38dbc47c5937",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.3.5+1"
+      "version": "0.3.5+2"
     },
     "crypto": {
       "dependency": "transitive",
@@ -165,11 +175,11 @@
       "dependency": "direct main",
       "description": {
         "name": "device_info_plus",
-        "sha256": "98f28b42168cc509abc92f88518882fd58061ea372d7999aecc424345c7bff6a",
+        "sha256": "4df8babf73058181227e18b08e6ea3520cf5fc5d796888d33b7cb0f33f984b7c",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "11.5.0"
+      "version": "12.3.0"
     },
     "device_info_plus_platform_interface": {
       "dependency": "transitive",
@@ -185,11 +195,11 @@
       "dependency": "transitive",
       "description": {
         "name": "equatable",
-        "sha256": "567c64b3cb4cf82397aac55f4f0cbd3ca20d77c6c03bedbc4ceaddc08904aef7",
+        "sha256": "3e0141505477fd8ad55d6eb4e7776d3fe8430be8e497ccb1521370c3f21a3e2b",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.0.7"
+      "version": "2.0.8"
     },
     "fake_async": {
       "dependency": "transitive",
@@ -205,11 +215,11 @@
       "dependency": "transitive",
       "description": {
         "name": "ffi",
-        "sha256": "289279317b4b16eb2bb7e271abccd4bf84ec9bdcbe999e278a94b804f5630418",
+        "sha256": "d07d37192dbf97461359c1518788f203b0c9102cfd2c35a716b823741219542c",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.1.4"
+      "version": "2.1.5"
     },
     "file": {
       "dependency": "transitive",
@@ -225,11 +235,11 @@
       "dependency": "direct main",
       "description": {
         "name": "file_picker",
-        "sha256": "d974b6ba2606371ac71dd94254beefb6fa81185bde0b59bdc1df09885da85fde",
+        "sha256": "57d9a1dd5063f85fa3107fb42d1faffda52fdc948cefd5fe5ea85267a5fc7343",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "10.3.8"
+      "version": "10.3.10"
     },
     "fixnum": {
       "dependency": "transitive",
@@ -269,7 +279,7 @@
       "version": "0.2.0"
     },
     "flutter_highlight": {
-      "dependency": "transitive",
+      "dependency": "direct main",
       "description": {
         "name": "flutter_highlight",
         "sha256": "7b96333867aa07e122e245c033b8ad622e4e3a42a1a2372cbb098a2541d8782c",
@@ -282,11 +292,11 @@
       "dependency": "direct main",
       "description": {
         "name": "flutter_js",
-        "sha256": "a04966b102967891ee4947d6e52b450676f16204876ba936e394008ca26db04b",
+        "sha256": "046428059ac7bef71e305dc35fc24be933b684684a43e83eab7ebd0dc407ad85",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "0.8.5"
+      "version": "0.8.7"
     },
     "flutter_lints": {
       "dependency": "direct dev",
@@ -356,6 +366,16 @@
       "source": "hosted",
       "version": "4.7.3"
     },
+    "glob": {
+      "dependency": "transitive",
+      "description": {
+        "name": "glob",
+        "sha256": "c3f1ee72c96f8f78935e18aa8cecced9ab132419e8625dc187e1c2408efc20de",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "2.1.3"
+    },
     "highlight": {
       "dependency": "transitive",
       "description": {
@@ -376,6 +396,16 @@
       "source": "hosted",
       "version": "2.2.3"
     },
+    "hooks": {
+      "dependency": "transitive",
+      "description": {
+        "name": "hooks",
+        "sha256": "5d309c86e7ce34cd8e37aa71cb30cb652d3829b900ab145e4d9da564b31d59f7",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.0.0"
+    },
     "http": {
       "dependency": "transitive",
       "description": {
@@ -430,11 +460,11 @@
       "dependency": "transitive",
       "description": {
         "name": "json_annotation",
-        "sha256": "1ce844379ca14835a50d2f019a3099f419082cfdd231cd86a142af94dd5c6bb1",
+        "sha256": "805fa86df56383000f640384b282ce0cb8431f1a7a2396de92fb66186d8c57df",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "4.9.0"
+      "version": "4.10.0"
     },
     "leak_tracker": {
       "dependency": "transitive",
@@ -480,11 +510,11 @@
       "dependency": "transitive",
       "description": {
         "name": "lints",
-        "sha256": "a5e2b223cb7c9c8efdc663ef484fdd95bb243bff242ef5b13e26883547fce9a0",
+        "sha256": "12f842a479589fea194fe5c5a3095abc7be0c1f2ddfa9a0e76aed1dbd26a87df",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "6.0.0"
+      "version": "6.1.0"
     },
     "logger": {
       "dependency": "direct main",
@@ -496,6 +526,16 @@
       "source": "hosted",
       "version": "2.6.2"
     },
+    "logging": {
+      "dependency": "transitive",
+      "description": {
+        "name": "logging",
+        "sha256": "c8245ada5f1717ed44271ed1c26b8ce85ca3228fd2ffdb75468ab01979309d61",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.3.0"
+    },
     "matcher": {
       "dependency": "transitive",
       "description": {
@@ -546,6 +586,26 @@
       "source": "hosted",
       "version": "1.0.4"
     },
+    "native_toolchain_c": {
+      "dependency": "transitive",
+      "description": {
+        "name": "native_toolchain_c",
+        "sha256": "89e83885ba09da5fdf2cdacc8002a712ca238c28b7f717910b34bcd27b0d03ac",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "0.17.4"
+    },
+    "objective_c": {
+      "dependency": "transitive",
+      "description": {
+        "name": "objective_c",
+        "sha256": "983c7fa1501f6dcc0cb7af4e42072e9993cb28d73604d25ebf4dab08165d997e",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "9.2.5"
+    },
     "path": {
       "dependency": "transitive",
       "description": {
@@ -580,11 +640,11 @@
       "dependency": "transitive",
       "description": {
         "name": "path_provider_foundation",
-        "sha256": "6d13aece7b3f5c5a9731eaf553ff9dcbc2eff41087fd2df587fd0fed9a3eb0c4",
+        "sha256": "2a376b7d6392d80cd3705782d2caa734ca4727776db0b6ec36ef3f1855197699",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.5.1"
+      "version": "2.6.0"
     },
     "path_provider_linux": {
       "dependency": "transitive",
@@ -736,6 +796,16 @@
       "source": "hosted",
       "version": "0.0.3"
     },
+    "pub_semver": {
+      "dependency": "transitive",
+      "description": {
+        "name": "pub_semver",
+        "sha256": "5bfcf68ca79ef689f8990d1160781b4bad40a3bd5e5218ad4076ddb7f4081585",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "2.2.0"
+    },
     "qr": {
       "dependency": "transitive",
       "description": {
@@ -860,11 +930,11 @@
       "dependency": "transitive",
       "description": {
         "name": "shared_preferences_android",
-        "sha256": "83af5c682796c0f7719c2bbf74792d113e40ae97981b8f266fa84574573556bc",
+        "sha256": "cbc40be9be1c5af4dab4d6e0de4d5d3729e6f3d65b89d21e1815d57705644a6f",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.4.18"
+      "version": "2.4.20"
     },
     "shared_preferences_foundation": {
       "dependency": "transitive",
@@ -1086,11 +1156,11 @@
       "dependency": "transitive",
       "description": {
         "name": "url_launcher_web",
-        "sha256": "4bd2b7b4dc4d4d0b94e5babfffbca8eac1a126c7f3d6ecbc1a11013faa3abba2",
+        "sha256": "d0412fcf4c6b31ecfdb7762359b7206ffba3bbffd396c6d9f9c4616ece476c1f",
         "url": "https://pub.dev"
       },
       "source": "hosted",
-      "version": "2.4.1"
+      "version": "2.4.2"
     },
     "url_launcher_windows": {
       "dependency": "transitive",
@@ -1212,6 +1282,16 @@
       "source": "hosted",
       "version": "6.6.1"
     },
+    "yaml": {
+      "dependency": "transitive",
+      "description": {
+        "name": "yaml",
+        "sha256": "b9da305ac7c39faa3f030eccd175340f968459dae4af175130b3fc47e40d76ce",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "3.1.3"
+    },
     "zstandard": {
       "dependency": "direct main",
       "description": {
@@ -1294,7 +1374,7 @@
     }
   },
   "sdks": {
-    "dart": ">=3.9.0 <4.0.0",
-    "flutter": ">=3.35.0"
+    "dart": ">=3.10.3 <4.0.0",
+    "flutter": ">=3.38.4"
   }
 }

pkgs/by-name/qt/qtcreator/package.nix

@@ -21,10 +21,10 @@
 }:
 let
   pname = "qtcreator";
-  version = "18.0.1";
+  version = "18.0.2";
   src = fetchurl {
     url = "mirror://qt/official_releases/${pname}/${lib.versions.majorMinor version}/${version}/qt-creator-opensource-src-${version}.tar.xz";
-    hash = "sha256-aQQ2lGfefL4swAk/K8LTfZ6NtNKqXTKblyraXrFzy1E=";
+    hash = "sha256-HP9kIjMjS23dQDidBeSQWAj5j9RDQhh/6RCSkKBJLIg=";
   };
   goModules =
     (buildGoModule {

pkgs/by-name/rm/rmpc/package.nix

@@ -38,12 +38,14 @@ rustPlatform.buildRustPackage rec {
       --bash target/completions/rmpc.bash \
       --fish target/completions/rmpc.fish \
       --zsh target/completions/_rmpc
+
+    install -m 444 -D assets/rmpc.desktop $out/share/applications/rmpc.desktop
   '';
 
   meta = {
     changelog = "https://github.com/mierak/rmpc/releases/tag/${src.rev}";
     description = "TUI music player client for MPD with album art support via kitty image protocol";
-    homepage = "https://mierak.github.io/rmpc/";
+    homepage = "https://rmpc.mierak.dev/";
     license = lib.licenses.bsd3;
     longDescription = ''
       Rusty Music Player Client is a beautiful, modern and configurable terminal-based Music Player

pkgs/by-name/so/sof-tools/package.nix

@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "sof-tools";
-  version = "2.14.2";
+  version = "2.14.3";
 
   src = fetchFromGitHub {
     owner = "thesofproject";
     repo = "sof";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-1LLpmcwz0NYhJ9eCeuQWCwjROPptS6MWq+LkkN4Bsek=";
+    hash = "sha256-eFK00qQ2BAajxWDl2La2+8Lj6GUUfeUAFhK5TC4XkCM=";
   };
 
   postPatch = ''

pkgs/by-name/st/stalwart-cli/package.nix

@@ -2,11 +2,11 @@
   lib,
   rustPlatform,
   versionCheckHook,
-  stalwart-mail,
+  stalwart,
 }:
 
 rustPlatform.buildRustPackage {
-  inherit (stalwart-mail) src version cargoDeps;
+  inherit (stalwart) src version cargoDeps;
   pname = "stalwart-cli";
 
   cargoBuildFlags = [
@@ -25,7 +25,7 @@ rustPlatform.buildRustPackage {
   dontVersionCheck = true;
 
   meta = {
-    inherit (stalwart-mail.meta) license homepage changelog;
+    inherit (stalwart.meta) license homepage changelog;
     description = "Stalwart Mail Server CLI";
     mainProgram = "stalwart-cli";
     maintainers = with lib.maintainers; [

pkgs/by-name/st/stalwart/package.nix

@@ -20,7 +20,7 @@
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
-  pname = "stalwart-mail" + (lib.optionalString stalwartEnterprise "-enterprise");
+  pname = "stalwart" + (lib.optionalString stalwartEnterprise "-enterprise");
   version = "0.15.4";
 
   src = fetchFromGitHub {
@@ -87,7 +87,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
     mkdir -p $out/lib/systemd/system
 
-    substitute resources/systemd/stalwart-mail.service $out/lib/systemd/system/stalwart-mail.service \
+    substitute resources/systemd/stalwart-mail.service $out/lib/systemd/system/stalwart.service \
       --replace-fail "__PATH__" "$out"
   '';
 
@@ -185,20 +185,23 @@ rustPlatform.buildRustPackage (finalAttrs: {
     webadmin = buildPackages.callPackage ./webadmin.nix { };
     spam-filter = callPackage ./spam-filter.nix { };
     updateScript = nix-update-script { };
-    tests.stalwart-mail = nixosTests.stalwart-mail;
+    tests.stalwart = nixosTests.stalwart;
   };
 
   meta = {
-    description = "Secure & Modern All-in-One Mail Server (IMAP, JMAP, SMTP)";
-    homepage = "https://github.com/stalwartlabs/mail-server";
-    changelog = "https://github.com/stalwartlabs/mail-server/blob/main/CHANGELOG.md";
+    description = "Secure, modern, all-in-one mail and collaboration server";
+    longDescription = ''
+      Secure, scalable and fluent in every protocol (IMAP, JMAP, SMTP, CalDAV, CardDAV, WebDAV).
+    '';
+    homepage = "https://github.com/stalwartlabs/stalwart";
+    changelog = "https://github.com/stalwartlabs/stalwart/blob/main/CHANGELOG.md";
     license = [
       lib.licenses.agpl3Only
     ]
     ++ lib.optionals stalwartEnterprise [
       {
         fullName = "Stalwart Enterprise License 1.0 (SELv1) Agreement";
-        url = "https://github.com/stalwartlabs/mail-server/blob/main/LICENSES/LicenseRef-SEL.txt";
+        url = "https://github.com/stalwartlabs/stalwart/blob/main/LICENSES/LicenseRef-SEL.txt";
         free = false;
         redistributable = false;
       }

pkgs/by-name/st/stalwart/spam-filter.nix

@@ -2,7 +2,7 @@
   lib,
   fetchFromGitHub,
   stdenv,
-  stalwart-mail,
+  stalwart,
   nix-update-script,
 }:
 
@@ -31,13 +31,13 @@ stdenv.mkDerivation (finalAttrs: {
   };
 
   meta = {
-    description = "Secure & modern all-in-one mail server Stalwart (spam-filter module)";
+    description = "Spam filter module for the Stalwart server";
     homepage = "https://github.com/stalwartlabs/spam-filter";
     changelog = "https://github.com/stalwartlabs/spam-filter/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = with lib.licenses; [
       mit
       asl20
     ];
-    inherit (stalwart-mail.meta) maintainers;
+    inherit (stalwart.meta) maintainers;
   };
 })

pkgs/by-name/st/stalwart/webadmin.nix

@@ -1,7 +1,7 @@
 {
   lib,
   rustPlatform,
-  stalwart-mail,
+  stalwart,
   fetchFromGitHub,
   trunk,
   tailwindcss_3,
@@ -68,10 +68,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
   };
 
   meta = {
-    description = "Secure & modern all-in-one mail server Stalwart (webadmin module)";
+    description = "Web administration module for the Stalwart server";
     homepage = "https://github.com/stalwartlabs/webadmin";
     changelog = "https://github.com/stalwartlabs/webadmin/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     license = lib.licenses.agpl3Only;
-    inherit (stalwart-mail.meta) maintainers;
+    inherit (stalwart.meta) maintainers;
   };
 })

pkgs/by-name/su/super-productivity/package.nix

@@ -18,7 +18,7 @@ let
 in
 buildNpmPackage rec {
   pname = "super-productivity";
-  version = "17.0.2";
+  version = "17.0.12";
 
   inherit nodejs;
 
@@ -26,7 +26,7 @@ buildNpmPackage rec {
     owner = "johannesjo";
     repo = "super-productivity";
     tag = "v${version}";
-    hash = "sha256-3NbWdKWLSqPyZfZmLzrkqwA/yEI4quhfnvtIhgbRPFA=";
+    hash = "sha256-34zM9Zm9wCYJb6klX94yWMIxze8QCzRLmP1vRVKb3+g=";
 
     postFetch = ''
       find $out -name package-lock.json -exec ${lib.getExe npm-lockfile-fix} -r {} \;
@@ -69,7 +69,7 @@ buildNpmPackage rec {
       dontInstall = true;
 
       outputHashMode = "recursive";
-      hash = "sha256-mWx0pNxTthqSeSwNM8BrsAf/hzbsclEqMFxGicKosZw=";
+      hash = "sha256-KFsV62V7FqTb73uJ0Y0Psm94uGAbGMCXs//7BIzIbc0=";
     }
   );
 

pkgs/by-name/sy/systemdgenie/package.nix

@@ -10,14 +10,14 @@
 
 stdenv.mkDerivation {
   pname = "systemdgenie";
-  version = "0.99.0-unstable-2026-01-02";
+  version = "0.99.0-unstable-2026-01-29";
 
   src = fetchFromGitLab {
     domain = "invent.kde.org";
     repo = "SystemdGenie";
     owner = "system";
-    rev = "c007f1dad545626c4b405538a281e41278b34762";
-    hash = "sha256-/D5F10U4cb5oEIMuS2OFtw93FG4W+FVmHYlzDsPQz6w=";
+    rev = "5f6665b8ae3e6300fd52da759ad5e5211a533ecb";
+    hash = "sha256-OzoJJYEcEsXKaAggvqpjN9YQEMX49bxvF5s0+ymplQs=";
   };
 
   strictDeps = true;

pkgs/by-name/ts/tsidp/package.nix

@@ -6,13 +6,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "tsidp";
-  version = "0.0.9";
+  version = "0.0.10";
 
   src = fetchFromGitHub {
     owner = "tailscale";
     repo = "tsidp";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ClN3aZ0mLmb4UPSW+oQSrKPar56wbHp+NXOzGA6GpCQ=";
+    hash = "sha256-q8TkH91Nt5F+/3DPMm8AFhE+DO6Mhil4hVxdku6NTQc=";
   };
 
   vendorHash = "sha256-iBy+osK+2LdkTzXhrkSaB6nWpUCpr8VkxJTtcfVCFuw=";

pkgs/by-name/yo/yoshimi/package.nix

@@ -23,13 +23,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "yoshimi";
-  version = "2.3.5.2";
+  version = "2.3.5.3";
 
   src = fetchFromGitHub {
     owner = "Yoshimi";
     repo = "yoshimi";
-    rev = finalAttrs.version;
-    hash = "sha256-X4g4AhPHg2ezHnAm8fWunatZgr3/PZxibzACplWogo8=";
+    tag = finalAttrs.version;
+    hash = "sha256-3/iFZfqUX2q4+6rD6AX3E8vXt0HP82PDDTqpiZTvtLw=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/src";

pkgs/development/compilers/sbcl/default.nix

@@ -316,6 +316,8 @@ stdenv.mkDerivation (self: {
   __darwinAllowLocalNetworking = true;
 
   meta = {
+    # Broken since 2025-09-05 https://hydra.nixos.org/job/nixpkgs/staging-next/sbcl.x86_64-darwin
+    broken = stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isx86_64;
     description = "Common Lisp compiler";
     homepage = "https://sbcl.org";
     license = lib.licenses.publicDomain; # and FreeBSD

pkgs/development/python-modules/adafruit-platformdetect/default.nix

@@ -5,15 +5,15 @@
   setuptools-scm,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "adafruit-platformdetect";
-  version = "3.86.0";
+  version = "3.87.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "adafruit_platformdetect";
-    inherit version;
-    hash = "sha256-VRcpjJp6Q2FND5u8WkSu0R0VgKgZXagfoJS9Q3v5gS8=";
+    inherit (finalAttrs) version;
+    hash = "sha256-RUkhGgTxydSCICkhBevVhaFYDYNTZye+jOLiHwyBFIY=";
   };
 
   build-system = [ setuptools-scm ];
@@ -26,8 +26,8 @@ buildPythonPackage rec {
   meta = {
     description = "Platform detection for use by Adafruit libraries";
     homepage = "https://github.com/adafruit/Adafruit_Python_PlatformDetect";
-    changelog = "https://github.com/adafruit/Adafruit_Python_PlatformDetect/releases/tag/${version}";
+    changelog = "https://github.com/adafruit/Adafruit_Python_PlatformDetect/releases/tag/${finalAttrs.version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})

pkgs/development/python-modules/aiobafi6/default.nix

@@ -9,16 +9,16 @@
   zeroconf,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "aiobafi6";
-  version = "0.10.0";
+  version = "0.10.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jfroy";
     repo = "aiobafi6";
-    tag = version;
-    hash = "sha256-7NIpIRVs6PFPByrGfVDA6P7JTvXGrzbH/lOPdPfZH04=";
+    tag = finalAttrs.version;
+    hash = "sha256-EXLMrZobSICAmWPREjx5D8boj/S/3AH5+lsWQlTCl1g=";
   };
 
   build-system = [ poetry-core ];
@@ -38,9 +38,9 @@ buildPythonPackage rec {
   meta = {
     description = "Library for communication with the Big Ass Fans i6 firmware";
     homepage = "https://github.com/jfroy/aiobafi6";
-    changelog = "https://github.com/jfroy/aiobafi6/releases/tag/${src.tag}";
+    changelog = "https://github.com/jfroy/aiobafi6/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "aiobafi6";
   };
-}
+})

pkgs/development/python-modules/aiohue/default.nix

@@ -9,27 +9,24 @@
   pytest-aiohttp,
   pytest-asyncio,
   pytest-cov-stub,
-  pythonOlder,
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "aiohue";
-  version = "4.8.0";
+  version = "4.8.1";
   pyproject = true;
 
-  disabled = pythonOlder "3.11";
-
   src = fetchFromGitHub {
     owner = "home-assistant-libs";
     repo = "aiohue";
-    tag = version;
-    hash = "sha256-IL9kKc2IHJJmlAYxC5hZPsgOhtfr14yD7VbEsWX2Klw=";
+    tag = finalAttrs.version;
+    hash = "sha256-Ex1ofLnpoO2oVQ3bc0Fy1kaSd1JGoL8DmnOgFRwz3D8=";
   };
 
   postPatch = ''
     substituteInPlace pyproject.toml \
-      --replace-fail 'version = "0.0.0"' 'version = "${version}"'
+      --replace-fail 'version = "0.0.0"' 'version = "${finalAttrs.version}"'
   '';
 
   build-system = [ setuptools ];
@@ -60,8 +57,8 @@ buildPythonPackage rec {
   meta = {
     description = "Python package to talk to Philips Hue";
     homepage = "https://github.com/home-assistant-libs/aiohue";
-    changelog = "https://github.com/home-assistant-libs/aiohue/releases/tag/${version}";
-    license = with lib.licenses; [ asl20 ];
+    changelog = "https://github.com/home-assistant-libs/aiohue/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})

pkgs/development/python-modules/django-modeltranslation/default.nix

@@ -15,7 +15,7 @@
 
 buildPythonPackage rec {
   pname = "django-modeltranslation";
-  version = "0.19.17";
+  version = "0.19.19";
   pyproject = true;
 
   disabled = pythonOlder "3.11";
@@ -24,7 +24,7 @@ buildPythonPackage rec {
     owner = "deschler";
     repo = "django-modeltranslation";
     tag = "v${version}";
-    hash = "sha256-SaCuo/vnH7fDZnOZvrV3HbLtq6q2bTzhPvBCdrzukoA=";
+    hash = "sha256-q00SmHW4GyV6p/+l/UsSkgTUOPEHOWd9420wnzKVNVc=";
   };
 
   build-system = [

pkgs/development/python-modules/mitogen/default.nix

@@ -7,14 +7,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "mitogen";
-  version = "0.3.38";
+  version = "0.3.39";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mitogen-hq";
     repo = "mitogen";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-DtW6MPXZZnMXKJM4m86UXq2oFnprJYHjYHJ70V5b+o0=";
+    hash = "sha256-VX8BvHTL3Ke6T+iGc4YGery5uXf/JvE7h5dnyK4/ESY=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/nextdns/default.nix

@@ -7,24 +7,21 @@
   pytest-asyncio,
   pytest-error-for-skips,
   pytestCheckHook,
-  pythonOlder,
   setuptools,
   syrupy,
   tenacity,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "nextdns";
-  version = "4.1.0";
+  version = "5.0.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.12";
-
   src = fetchFromGitHub {
     owner = "bieniu";
     repo = "nextdns";
-    tag = version;
-    hash = "sha256-VTOANFrGOI1XDU/5THWkj/o5AWIpXcPKmOF1IF0I22Y=";
+    tag = finalAttrs.version;
+    hash = "sha256-jZ+ULAlqaOnVWEHDPzIxIFjx+4eC3jMlXyX0QhfZUYM=";
   };
 
   build-system = [ setuptools ];
@@ -42,19 +39,13 @@ buildPythonPackage rec {
     syrupy
   ];
 
-  disabledTests = [
-    # mocked object called too many times
-    "test_retry_error"
-    "test_retry_success"
-  ];
-
   pythonImportsCheck = [ "nextdns" ];
 
   meta = {
     description = "Module for the NextDNS API";
     homepage = "https://github.com/bieniu/nextdns";
-    changelog = "https://github.com/bieniu/nextdns/releases/tag/${version}";
+    changelog = "https://github.com/bieniu/nextdns/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})

pkgs/development/python-modules/pubnub/default.nix

@@ -15,16 +15,16 @@
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "pubnub";
-  version = "10.5.0";
+  version = "10.6.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pubnub";
     repo = "python";
-    tag = version;
-    hash = "sha256-4EqP3HZuSXYB5P6xvPuwTou/2zHS0ClaAy42knbCMhc=";
+    tag = finalAttrs.version;
+    hash = "sha256-LInaKPvdRdVI71UpVZRKjRPvqGiQ4qzRC1uTTzFmHmA=";
   };
 
   pythonRelaxDeps = [ "httpx" ];
@@ -66,10 +66,10 @@ buildPythonPackage rec {
   meta = {
     description = "Python-based APIs for PubNub";
     homepage = "https://github.com/pubnub/python";
-    changelog = "https://github.com/pubnub/python/releases/tag/${src.tag}";
+    changelog = "https://github.com/pubnub/python/releases/tag/${finalAttrs.src.tag}";
     # PubNub Software Development Kit License Agreement
     # https://github.com/pubnub/python/blob/master/LICENSE
     license = lib.licenses.unfreeRedistributable;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})

pkgs/development/python-modules/pyexploitdb/default.nix

@@ -9,12 +9,12 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pyexploitdb";
-  version = "0.3.11";
+  version = "0.3.12";
   pyproject = true;
 
   src = fetchPypi {
     inherit (finalAttrs) pname version;
-    hash = "sha256-SKIGVjgNhM22Ia/ZxZD5uwFiE4XcYmnKMvNG/KGltYw=";
+    hash = "sha256-WTu7Oq4I+3gTXxJ5djIF+/TDFvlvsEFz59wz+4GnUdc=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/pymobiledevice3/default.nix

@@ -49,14 +49,14 @@
 
 buildPythonPackage rec {
   pname = "pymobiledevice3";
-  version = "7.3.6";
+  version = "7.4.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "doronz88";
     repo = "pymobiledevice3";
     tag = "v${version}";
-    hash = "sha256-xvtO+BWtXZxrg1VMoqKhSWJ7edkkZ+myAXtyPD4DXFg=";
+    hash = "sha256-sFpC9qG8RxrR35W0UtLslps5hK2VFhpSka2trzIQyIc=";
   };
 
   build-system = [

pkgs/development/python-modules/python-toolbox/default.nix

@@ -9,14 +9,14 @@
 
 buildPythonPackage rec {
   pname = "python-toolbox";
-  version = "1.3.1";
+  version = "1.3.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "cool-RR";
     repo = "python_toolbox";
     tag = version;
-    hash = "sha256-pbo4vhypM97OXh6CxK42EbZdrXljvj5rmP9C9RDPo5g=";
+    hash = "sha256-DzrA1c3rAo/8DnYo0DE7Kft0uCBqEwdAaUDjg4K2Mn4=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/pyvesync/default.nix

@@ -12,14 +12,14 @@
 
 buildPythonPackage rec {
   pname = "pyvesync";
-  version = "3.3.3";
+  version = "3.4.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "webdjoe";
     repo = "pyvesync";
     tag = version;
-    hash = "sha256-T8cDp1C95gubCfgvkEiqHUn4Rw7pFNCPELo3qNwt9vI=";
+    hash = "sha256-G1Ov8xXIVkklxfLqhHiYbRgHEsjTQhG7k1V6Amtc+w4=";
   };
 
   build-system = [ setuptools ];

pkgs/development/tools/wasmedge/default.nix

@@ -24,13 +24,13 @@ let
 in
 llvmPackages.stdenv.mkDerivation (finalAttrs: {
   pname = "wasmedge";
-  version = "0.15.0";
+  version = "0.16.1";
 
   src = fetchFromGitHub {
     owner = "WasmEdge";
     repo = "WasmEdge";
     rev = finalAttrs.version;
-    sha256 = "sha256-P4syb8v3EY/tHwG8FOvR+kgMew/nwG+pG2weN6172go=";
+    sha256 = "sha256-h98gjBITAYpD6pdrlgfOC0cAYdJA6i9fWdD0bMsuEK4=";
   };
 
   nativeBuildInputs = [

pkgs/servers/monitoring/prometheus/redis-exporter.nix

@@ -10,16 +10,16 @@
 
 buildGoModule rec {
   pname = "redis_exporter";
-  version = "1.80.0";
+  version = "1.80.2";
 
   src = fetchFromGitHub {
     owner = "oliver006";
     repo = "redis_exporter";
     rev = "v${version}";
-    sha256 = "sha256-52MOgevF5UtyP6c+lsStNeF7/Z1H2jcIYqSzq5mhdpA=";
+    sha256 = "sha256-ZWRIDPvR+72zINp027zbPUMQYiZyL6L2SbTjqTRQqN8=";
   };
 
-  vendorHash = "sha256-MkwkwfH7/hqJ89soHOGeR8iznXoNb/5Rbyg6tqcEhOg=";
+  vendorHash = "sha256-6xOcOBPve4snD7xzGx59HiqZMbQCwS4xQCuoKzyAxu8=";
 
   ldflags = [
     "-X main.BuildVersion=${version}"

pkgs/top-level/aliases.nix

@@ -1679,6 +1679,7 @@ mapAliases {
   src = throw "The \"src\" package has been renamed to \"simple-revision-control\". If you encounter this error and did not intend to use that package you may have a falsely constructed overlay."; # Added 2025-11-19
   ssm-agent = throw "'ssm-agent' has been renamed to/replaced by 'amazon-ssm-agent'"; # Converted to throw 2025-10-27
   stacer = throw "'stacer' has been removed because it was abandoned upstream and relied upon vulnerable software"; # Added 2025-11-08
+  stalwart-mail = warnAlias "'stalwart-mail' has been renamed to/replaced by 'stalwart'" stalwart; # Added 2026-01-19
   starpls-bin = throw "'starpls-bin' has been renamed to/replaced by 'starpls'"; # Converted to throw 2025-10-27
   station = throw "station has been removed from nixpkgs, as there were no committers among its maintainers to unblock security issues"; # Added 2025-06-16
   steam-run-native = throw "'steam-run-native' has been renamed to/replaced by 'steam-run'"; # Converted to throw 2025-10-27

pkgs/top-level/all-packages.nix

@@ -8830,10 +8830,10 @@ with pkgs;
     enableAirplay2 = true;
   };
 
-  stalwart-mail-webadmin = stalwart-mail.webadmin;
-  stalwart-mail-spam-filter = stalwart-mail.spam-filter;
+  stalwart-webadmin = stalwart.webadmin;
+  stalwart-spam-filter = stalwart.spam-filter;
 
-  stalwart-mail-enterprise = stalwart-mail.override {
+  stalwart-enterprise = stalwart.override {
     stalwartEnterprise = true;
   };