From c4448c63a7e5614cd32db488ec162740f5580dde Mon Sep 17 00:00:00 2001
From: bstanderline <153822813+bstanderline@users.noreply.github.com>
Date: Wed, 11 Feb 2026 15:41:10 +0000
Subject: [PATCH 01/74] zabbix70: 7.0.22 -> 7.0.23

---
 pkgs/servers/monitoring/zabbix/versions.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/monitoring/zabbix/versions.nix b/pkgs/servers/monitoring/zabbix/versions.nix
index f8a9d9bc2acb..c4f0911afa3f 100644
--- a/pkgs/servers/monitoring/zabbix/versions.nix
+++ b/pkgs/servers/monitoring/zabbix/versions.nix
@@ -8,8 +8,8 @@ generic: {
     hash = "sha256-twEwY7nGJWoYX25gAe/31DuDGxg6o5Ez1u5STQVw6Fw=";
   };
   v70 = generic {
-    version = "7.0.22";
-    hash = "sha256-enR5SyEkYH2ANr42zBBNoFai+2U4EchKy+KfP22Xhgo=";
+    version = "7.0.23";
+    hash = "sha256-Q+pfyx5dsl50vcg+qJNtebgJO2FK9OiJQXSFvHTwYeI=";
   };
   v60 = generic {
     version = "6.0.43";

From c2d094aada63defeddab8916799660275e4c4e17 Mon Sep 17 00:00:00 2001
From: bstanderline <153822813+bstanderline@users.noreply.github.com>
Date: Wed, 11 Feb 2026 15:42:45 +0000
Subject: [PATCH 02/74] zabbix: 6.0.43 -> 6.0.44

---
 pkgs/servers/monitoring/zabbix/versions.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/monitoring/zabbix/versions.nix b/pkgs/servers/monitoring/zabbix/versions.nix
index c4f0911afa3f..d05fc87d7228 100644
--- a/pkgs/servers/monitoring/zabbix/versions.nix
+++ b/pkgs/servers/monitoring/zabbix/versions.nix
@@ -12,7 +12,7 @@ generic: {
     hash = "sha256-Q+pfyx5dsl50vcg+qJNtebgJO2FK9OiJQXSFvHTwYeI=";
   };
   v60 = generic {
-    version = "6.0.43";
-    hash = "sha256-FsRgW9sd1AYIIUjyz+eM8zV6uJuDdpVS4xfw+MB+HpY=";
+    version = "6.0.44";
+    hash = "sha256-TveW2ofMnm3PXUPwoklTPe48tI6dED/dAQKjwO2P4F4=";
   };
 }

From f29300bf477a72dc6bad31d34f5a986e24d268aa Mon Sep 17 00:00:00 2001
From: bstanderline <153822813+bstanderline@users.noreply.github.com>
Date: Wed, 11 Feb 2026 16:10:56 +0000
Subject: [PATCH 03/74] zabbix72: Remove

---
 pkgs/servers/monitoring/zabbix/versions.nix | 4 ----
 pkgs/top-level/aliases.nix                  | 1 +
 pkgs/top-level/all-packages.nix             | 1 -
 3 files changed, 1 insertion(+), 5 deletions(-)

diff --git a/pkgs/servers/monitoring/zabbix/versions.nix b/pkgs/servers/monitoring/zabbix/versions.nix
index d05fc87d7228..475fae3004b0 100644
--- a/pkgs/servers/monitoring/zabbix/versions.nix
+++ b/pkgs/servers/monitoring/zabbix/versions.nix
@@ -3,10 +3,6 @@ generic: {
     version = "7.4.6";
     hash = "sha256-zMGw1psEFzsOeu7KlHi7b11JmccdTtUPgXNRvwEaaYs=";
   };
-  v72 = generic {
-    version = "7.2.15";
-    hash = "sha256-twEwY7nGJWoYX25gAe/31DuDGxg6o5Ez1u5STQVw6Fw=";
-  };
   v70 = generic {
     version = "7.0.23";
     hash = "sha256-Q+pfyx5dsl50vcg+qJNtebgJO2FK9OiJQXSFvHTwYeI=";
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 458acd37e0cf..baf9252d8f1b 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -2354,6 +2354,7 @@ mapAliases {
   youtube-music = lib.warnOnInstantiate "'youtube-music' has been renamed to 'pear-desktop'" pear-desktop; # Added 2025-12-23
   yubikey-manager-qt = throw "'yubikey-manager-qt' has been removed due to being archived upstream. Consider using 'yubioath-flutter' instead."; # Added 2025-06-07
   yubikey-personalization-gui = throw "'yubikey-personalization-gui' has been removed due to being archived upstream. Consider using 'yubioath-flutter' instead."; # Added 2025-06-07
+  zabbix72 = throw "'zabbix72' was removed as it has reached its end of life"; # Added 2026-02-11
   zandronum-alpha = throw "'zandronum-alpha' has been removed as it was broken and the stable version has caught up"; # Added 2025-10-19
   zandronum-alpha-server = throw "'zandronum-alpha-server' has been removed as it was broken and the stable version has caught up"; # Added 2025-10-19
   zashboard = throw "'zashboard' has been removed because upstream repository source code has been deleted"; # Added 2025-12-29
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 29e3cd02d8ba..ece2783491f3 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -8808,7 +8808,6 @@ with pkgs;
   };
 
   zabbix74 = recurseIntoAttrs (zabbixFor "v74");
-  zabbix72 = recurseIntoAttrs (zabbixFor "v72");
   zabbix70 = recurseIntoAttrs (zabbixFor "v70");
   zabbix60 = recurseIntoAttrs (zabbixFor "v60");
 

From 6a91f5f4210a6e734288ce3c2db6610d42d317bc Mon Sep 17 00:00:00 2001
From: bstanderline <153822813+bstanderline@users.noreply.github.com>
Date: Fri, 13 Feb 2026 12:02:37 +0000
Subject: [PATCH 04/74] zabbix74: 7.4.6 -> 7.4.7

---
 pkgs/servers/monitoring/zabbix/versions.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/monitoring/zabbix/versions.nix b/pkgs/servers/monitoring/zabbix/versions.nix
index 475fae3004b0..022841633488 100644
--- a/pkgs/servers/monitoring/zabbix/versions.nix
+++ b/pkgs/servers/monitoring/zabbix/versions.nix
@@ -1,7 +1,7 @@
 generic: {
   v74 = generic {
-    version = "7.4.6";
-    hash = "sha256-zMGw1psEFzsOeu7KlHi7b11JmccdTtUPgXNRvwEaaYs=";
+    version = "7.4.7";
+    hash = "sha256-FsOZQv6yg9euoX6Ccfy0/9usBpkVYVjcs3IZZ095m9g=";
   };
   v70 = generic {
     version = "7.0.23";

From 260e241250ff8c4cd18742764539c9a0507a567d Mon Sep 17 00:00:00 2001
From: Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>
Date: Sun, 15 Feb 2026 19:03:16 +0200
Subject: [PATCH 05/74] yarn-zpm: 6.0.0-rc.13 -> 6.0.0-rc.15

---
 pkgs/by-name/ya/yarn-zpm/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ya/yarn-zpm/package.nix b/pkgs/by-name/ya/yarn-zpm/package.nix
index 8fa77ca5d160..7781a020e630 100644
--- a/pkgs/by-name/ya/yarn-zpm/package.nix
+++ b/pkgs/by-name/ya/yarn-zpm/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "yarn-zpm";
-  version = "6.0.0-rc.13";
+  version = "6.0.0-rc.15";
 
   src = fetchFromGitHub {
     owner = "yarnpkg";
     repo = "zpm";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Mfzy2dmnQWD8B3bYhMnqAic7rv4JS6pzuqGKrrCqCY0=";
+    hash = "sha256-2HIEZR8gfze1Xf0LIQiMxjXAjs2NfZrs0mf/l/uku4U=";
   };
 
-  cargoHash = "sha256-k5lOVe9Ju6BjHswaN7WrzpHgyuOcHTCOEH+ExzUC5lc=";
+  cargoHash = "sha256-gDgJ2u0Rm8pOB/XILy69qQCFSB5DbqbQI/LcVf/97Ng=";
 
   cargoBuildFlags = [ "--package=zpm" ];
   cargoTestFlags = [ "--package=zpm" ];

From 205f9673fe2ba1890b727d1009c482f52473f08c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 24 Feb 2026 13:42:48 +0000
Subject: [PATCH 06/74] kubevirt: 1.7.0 -> 1.7.1

---
 pkgs/by-name/ku/kubevirt/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ku/kubevirt/package.nix b/pkgs/by-name/ku/kubevirt/package.nix
index e19627a465f3..4dccf07ad152 100644
--- a/pkgs/by-name/ku/kubevirt/package.nix
+++ b/pkgs/by-name/ku/kubevirt/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "kubevirt";
-  version = "1.7.0";
+  version = "1.7.1";
 
   src = fetchFromGitHub {
     owner = "kubevirt";
     repo = "kubevirt";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-0dfZbhcFSIU9TFxQ3UT8Sz+tgeiqVke+RxVwlxw49Hk=";
+    hash = "sha256-fG+iIWAbvgrtrUfDEXFWbxoJdNuQFN9grp4JHzSjlYs=";
   };
 
   vendorHash = null;

From 9807d08a3d0c08f5bd0c5696723fa74ce7767caa Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Sat, 28 Feb 2026 18:47:53 +0000
Subject: [PATCH 07/74] bookstack: 25.12.3 -> 25.12.8

---
 pkgs/by-name/bo/bookstack/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/bo/bookstack/package.nix b/pkgs/by-name/bo/bookstack/package.nix
index 248976e703f3..5ba4ed54b7b4 100644
--- a/pkgs/by-name/bo/bookstack/package.nix
+++ b/pkgs/by-name/bo/bookstack/package.nix
@@ -8,16 +8,16 @@
 
 php83.buildComposerProject2 (finalAttrs: {
   pname = "bookstack";
-  version = "25.12.3";
+  version = "25.12.8";
 
   src = fetchFromGitHub {
     owner = "bookstackapp";
     repo = "bookstack";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-IP1IffCDPPudtgwIv3gqPud9p7WjGbXrLlnoAZ56Gu8=";
+    hash = "sha256-1dyY66pU73IYa1sOvOn6HTvs1Cww06jvHJl5s/QB6r4=";
   };
 
-  vendorHash = "sha256-Q7Qz/LwycyKjDuD6vBQY6z7CcT4H/i+9KaC13CgS6Fc=";
+  vendorHash = "sha256-sb5Tn/yPEQAVWwbC5AwXTU34Mc8aK5PDV5Wp+XH3ruk=";
 
   passthru = {
     phpPackage = php83;

From 5f83595ff1ea7e10ae0e7d01cc233d19f6dd5ae1 Mon Sep 17 00:00:00 2001
From: Luna Nova <git@lunnova.dev>
Date: Sat, 28 Feb 2026 09:27:10 -0800
Subject: [PATCH 08/74] rocmPackages.llvm: use clang config file instead of
 deprecated GCC_INSTALL_PREFIX

---
 .../development/rocm-modules/llvm/default.nix | 21 ++++++++++++-------
 1 file changed, 14 insertions(+), 7 deletions(-)

diff --git a/pkgs/development/rocm-modules/llvm/default.nix b/pkgs/development/rocm-modules/llvm/default.nix
index 77be091e4c62..d6a54f3b5387 100644
--- a/pkgs/development/rocm-modules/llvm/default.nix
+++ b/pkgs/development/rocm-modules/llvm/default.nix
@@ -197,10 +197,23 @@ let
         rm -rf $out/lib/cmake $out/lib/lib*.a
         mkdir -p $out/lib/clang/${llvmMajorVersion}/lib/linux/
         ln -s $out/lib/linux/libclang_rt.* $out/lib/clang/${llvmMajorVersion}/lib/linux/
+        mkdir -p $out/lib/clang/${llvmMajorVersion}/lib/${stdenv.hostPlatform.config}/
+        for f in $out/lib/linux/*-${stdenv.hostPlatform.parsed.cpu.name}.*; do
+          [ -e "$f" ] || continue
+          base="$(basename "$f" | sed 's/-${stdenv.hostPlatform.parsed.cpu.name}\././')"
+          ln -sf "$f" "$out/lib/clang/${llvmMajorVersion}/lib/${stdenv.hostPlatform.config}/$base"
+        done
 
         find $out -type f -exec sed -i "s|${cc.out}|$out|g" {} +
         find $out -type f -exec sed -i "s|${cc.dev}|$out|g" {} +
 
+        # Clang config file: redirect resource dir to the sysroot (where compiler-rt
+        # lives) and set GCC install prefix for header/library search
+        cat > $out/bin/${stdenv.hostPlatform.config}.cfg <<CFG
+        -resource-dir=$out/lib/clang/${llvmMajorVersion}
+        ${lib.optionalString (!withLibcxx) "--gcc-toolchain=${gcc-prefix}"}
+        CFG
+
         ${lib.getExe rdfind} -makesymlinks true ${
           builtins.concatStringsSep " " (map (x: "${x}/lib") paths)
         } $out/ # create links *within* the sysroot to save space
@@ -376,13 +389,7 @@ overrideLlvmPackagesRocm (s: {
         cmakeFlags =
           # TODO: Remove in followup, tblgen now works correctly but would rebuild
           (builtins.filter tablegenUsage old.cmakeFlags)
-          ++ commonCmakeFlags
-          ++ lib.optionals (!withLibcxx) [
-            # FIXME: Config file in rocm-toolchain instead of GCC_INSTALL_PREFIX?
-            # Expected to be fully removed eventually
-            "-DUSE_DEPRECATED_GCC_INSTALL_PREFIX=ON"
-            "-DGCC_INSTALL_PREFIX=${gcc-prefix}"
-          ];
+          ++ commonCmakeFlags;
         preFixup = ''
           ${toString old.preFixup or ""}
           moveToOutput "lib/lib*.a" "$dev"

From 691e492590924df4c39d90c8c1c58bfbe7333117 Mon Sep 17 00:00:00 2001
From: Luna Nova <git@lunnova.dev>
Date: Sat, 28 Feb 2026 10:02:48 -0800
Subject: [PATCH 09/74] rocmPackages: 7.1.1 -> 7.2.0

Thanks @GZGavinZhao for providing continued support in the form of
the ISA compat patch set.

Co-Authored-By: Gavin Zhao <git@gzgz.dev>
---
 .../rocm-modules/amdsmi/default.nix           |   4 +-
 .../rocm-modules/aqlprofile/default.nix       |   4 +-
 pkgs/development/rocm-modules/clr/default.nix |   8 +-
 .../rocm-modules/composable_kernel/base.nix   |   4 +-
 .../composable_kernel/default.nix             |   2 +
 .../development/rocm-modules/half/default.nix |   2 +-
 .../rocm-modules/hip-common/default.nix       |   4 +-
 .../rocm-modules/hipblas-common/default.nix   |   4 +-
 .../rocm-modules/hipblas/default.nix          |   4 +-
 .../TensileCreateLibrary-refactor.patch       | 265 ++++++++----------
 .../rocm-modules/hipblaslt/default.nix        |  13 +-
 .../rocm-modules/hipcub/default.nix           |   4 +-
 .../rocm-modules/hipfft/default.nix           |   4 +-
 .../rocm-modules/hipfort/default.nix          |  14 +-
 .../rocm-modules/hipify/default.nix           |   4 +-
 .../rocm-modules/hiprand/default.nix          |   4 +-
 .../rocm-modules/hipsolver/default.nix        |   4 +-
 .../rocm-modules/hipsparse/default.nix        |   4 +-
 .../development/rocm-modules/llvm/default.nix |  65 +++--
 .../opt-offload-compress-on-by-default.patch  |   2 +-
 .../perf-shorten-gcclib-include-paths.patch   |  38 +--
 .../rocm-modules/migraphx/default.nix         |   4 +-
 .../rocm-modules/miopen/default.nix           |  82 ++----
 pkgs/development/rocm-modules/miopen/kdbs.nix |  26 ++
 .../rocm-modules/mivisionx/default.nix        |   4 +-
 .../development/rocm-modules/rccl/default.nix |   4 +-
 pkgs/development/rocm-modules/rdc/default.nix |   4 +-
 .../rocm-modules/rocalution/default.nix       |   4 +-
 .../rocm-modules/rocblas/default.nix          |  10 +-
 .../rocm-modules/rocdbgapi/default.nix        |   4 +-
 .../rocm-modules/rocfft/default.nix           |   4 +-
 .../rocm-modules/rocgdb/default.nix           |   4 +-
 .../rocm-modules/rocm-cmake/default.nix       |   4 +-
 .../rocm-modules/rocm-comgr/default.nix       |  12 +-
 .../rocm-modules/rocm-core/default.nix        |   5 +-
 .../rocm-modules/rocm-device-libs/default.nix |   6 -
 .../rocm-modules/rocm-runtime/default.nix     |  17 +-
 .../rocm-modules/rocm-smi/default.nix         |   4 +-
 .../rocm-modules/rocminfo/default.nix         |   4 +-
 .../rocm-modules/rocmlir/default.nix          |   4 +-
 .../rocm-modules/rocprim/default.nix          |   4 +-
 .../rocprofiler-register/default.nix          |   4 +-
 .../rocm-modules/rocprofiler/default.nix      |   4 +-
 .../rocm-modules/rocr-debug-agent/default.nix |   4 +-
 .../rocm-modules/rocrand/default.nix          |   4 +-
 .../rocm-modules/rocsolver/default.nix        |   4 +-
 .../rocm-modules/rocsparse/default.nix        |   6 +-
 .../rocm-modules/rocthrust/default.nix        |   4 +-
 .../rocm-modules/roctracer/default.nix        |   2 +-
 .../rocm-modules/rocwmma/default.nix          |   4 +-
 pkgs/development/rocm-modules/rpp/default.nix |   4 +-
 .../rocm-modules/tensile/default.nix          |   9 +-
 52 files changed, 346 insertions(+), 370 deletions(-)
 create mode 100644 pkgs/development/rocm-modules/miopen/kdbs.nix

diff --git a/pkgs/development/rocm-modules/amdsmi/default.nix b/pkgs/development/rocm-modules/amdsmi/default.nix
index 16647a728bb8..ccd7e4d5062a 100644
--- a/pkgs/development/rocm-modules/amdsmi/default.nix
+++ b/pkgs/development/rocm-modules/amdsmi/default.nix
@@ -21,12 +21,12 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "amdsmi";
-  version = "7.1.1";
+  version = "7.2.0";
   src = fetchFromGitHub {
     owner = "rocm";
     repo = "amdsmi";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-BGe3+8YFwu41ZVAF+VtN5Cn9pfzGxmCg/Rpq8qWOEoM=";
+    hash = "sha256-3V3B9+B3cpg0ebvsmX6wwvKoTIHbXtvbpIQHs4tkeWU=";
   };
 
   postPatch = ''
diff --git a/pkgs/development/rocm-modules/aqlprofile/default.nix b/pkgs/development/rocm-modules/aqlprofile/default.nix
index 8c5105348489..3b11e86862d5 100644
--- a/pkgs/development/rocm-modules/aqlprofile/default.nix
+++ b/pkgs/development/rocm-modules/aqlprofile/default.nix
@@ -8,12 +8,12 @@
 
 stdenv.mkDerivation {
   pname = "aqlprofile";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "aqlprofile";
-    tag = "rocm-7.1.1";
+    tag = "rocm-7.2.0";
     hash = "sha256-MAZUHo52gb0aZSFnKugMlXxcDkmMwhy1AFF1RDRgRVk=";
   };
 
diff --git a/pkgs/development/rocm-modules/clr/default.nix b/pkgs/development/rocm-modules/clr/default.nix
index 181102c6bd1a..8907b0050195 100644
--- a/pkgs/development/rocm-modules/clr/default.nix
+++ b/pkgs/development/rocm-modules/clr/default.nix
@@ -70,7 +70,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "clr";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -84,7 +84,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "clr";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-ofsq1uqMixtum5C6cp/UgTDpgGPfj+rAd6PoDx5iLLw=";
+    hash = "sha256-zz2O4Qsl1zXMC25L714azsFR2PROAvdpjgKhRolmt1w=";
   };
 
   nativeBuildInputs = [
@@ -148,8 +148,8 @@ stdenv.mkDerivation (finalAttrs: {
     ./cmake-find-x11-libgl.patch
     (fetchpatch {
       # [PATCH] rocclr: Extend HIP ISA compatibility checks
-      sha256 = "sha256-InUSIFI1MgkfocBEoZjO2BCgXNyfF10ehh9jkTtAPXs=";
-      url = "https://github.com/GZGavinZhao/rocm-systems/commit/937dcfdd316b589509c061809186fe5451d22431.patch";
+      sha256 = "sha256-3MsDL+OQg24wH1RDhbao74RuIbzEAmduwla9KOPzQ/M=";
+      url = "https://github.com/GZGavinZhao/rocm-systems/commit/039cb23b24d739adb8c0f9de8b550d9f557de031.patch";
       relative = "projects/clr";
     })
   ];
diff --git a/pkgs/development/rocm-modules/composable_kernel/base.nix b/pkgs/development/rocm-modules/composable_kernel/base.nix
index b3071460b6d6..8875a7d4b1b0 100644
--- a/pkgs/development/rocm-modules/composable_kernel/base.nix
+++ b/pkgs/development/rocm-modules/composable_kernel/base.nix
@@ -42,7 +42,7 @@ stdenv.mkDerivation (finalAttrs: {
   '';
 
   pname = "composable_kernel_base";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -58,7 +58,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "composable_kernel";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-exdkyTIK03dzlCXHm3j8ehEb9NxLOxPX9QyfMsiCgSs=";
+    hash = "sha256-ABL0MSmWtqAeY5uyw8Ib64npB2v82baUnzLpmrEgDn4=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/composable_kernel/default.nix b/pkgs/development/rocm-modules/composable_kernel/default.nix
index 0a9dac5db87a..ae0707fabbd0 100644
--- a/pkgs/development/rocm-modules/composable_kernel/default.nix
+++ b/pkgs/development/rocm-modules/composable_kernel/default.nix
@@ -54,6 +54,7 @@ let
       targets = [
         "device_grouped_conv1d_fwd_instance"
         "device_grouped_conv2d_fwd_instance"
+        "device_grouped_conv2d_fwd_bias_bnorm_clamp_instance"
         "device_grouped_conv2d_fwd_bias_clamp_instance"
         "device_grouped_conv2d_fwd_clamp_instance"
         "device_grouped_conv2d_fwd_dynamic_op_instance"
@@ -77,6 +78,7 @@ let
       targets = [
         "device_grouped_conv3d_fwd_instance"
         "device_grouped_conv3d_fwd_clamp_instance"
+        "device_grouped_conv3d_fwd_bias_bnorm_clamp_instance"
         "device_grouped_conv3d_fwd_bias_clamp_instance"
         "device_grouped_conv3d_fwd_bilinear_instance"
         "device_grouped_conv3d_fwd_convinvscale_instance"
diff --git a/pkgs/development/rocm-modules/half/default.nix b/pkgs/development/rocm-modules/half/default.nix
index a7f73bde23fd..9f61563c37ae 100644
--- a/pkgs/development/rocm-modules/half/default.nix
+++ b/pkgs/development/rocm-modules/half/default.nix
@@ -9,7 +9,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "half";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
diff --git a/pkgs/development/rocm-modules/hip-common/default.nix b/pkgs/development/rocm-modules/hip-common/default.nix
index 750d539c6906..cc9b3a4e71d5 100644
--- a/pkgs/development/rocm-modules/hip-common/default.nix
+++ b/pkgs/development/rocm-modules/hip-common/default.nix
@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "hip-common";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "HIP";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-aI41HdyzyE5HtCbzFmTQYGMiFyQELM/MTVOAbQsg8So=";
+    hash = "sha256-eQ+jHc6MlZePPIwJQMB8NKiEcE26i83+U21vKgfGFFM=";
   };
 
   dontConfigure = true;
diff --git a/pkgs/development/rocm-modules/hipblas-common/default.nix b/pkgs/development/rocm-modules/hipblas-common/default.nix
index 8343f3c256fb..c5c2bf902abe 100644
--- a/pkgs/development/rocm-modules/hipblas-common/default.nix
+++ b/pkgs/development/rocm-modules/hipblas-common/default.nix
@@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "hipblas-common";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "hipBLAS-common";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-sswqYIv3c5ArT6dQ3MRru7ZZVA0VxoKW/a0pYTBpjgE=";
+    hash = "sha256-oOelDrk7TLe9/17fzaw6CDPL4MGAoITJL90ahHzhaAE=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/hipblas/default.nix b/pkgs/development/rocm-modules/hipblas/default.nix
index 63998f5f2368..0138aa5fe84f 100644
--- a/pkgs/development/rocm-modules/hipblas/default.nix
+++ b/pkgs/development/rocm-modules/hipblas/default.nix
@@ -24,7 +24,7 @@
 # Can also use cuBLAS
 stdenv.mkDerivation (finalAttrs: {
   pname = "hipblas";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "hipBLAS";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-2wDnYZapJ4fU/JZpy6qOf5+DYuatWmCw/hA8WO5x2T0=";
+    hash = "sha256-w7myy4FO2vKm91OOfSGWO3bxR8jAvjU68oqI7aJX82c=";
   };
 
   postPatch = ''
diff --git a/pkgs/development/rocm-modules/hipblaslt/TensileCreateLibrary-refactor.patch b/pkgs/development/rocm-modules/hipblaslt/TensileCreateLibrary-refactor.patch
index eb50942a095d..1accf91426f4 100644
--- a/pkgs/development/rocm-modules/hipblaslt/TensileCreateLibrary-refactor.patch
+++ b/pkgs/development/rocm-modules/hipblaslt/TensileCreateLibrary-refactor.patch
@@ -1,53 +1,3 @@
-diff --git a/tensilelite/Tensile/SolutionStructs/Naming.py b/tensilelite/Tensile/SolutionStructs/Naming.py
-index 4f220960db1d..99535e246650 100644
---- a/tensilelite/Tensile/SolutionStructs/Naming.py
-+++ b/tensilelite/Tensile/SolutionStructs/Naming.py
-@@ -105,7 +105,6 @@ def _getName(state, requiredParameters: frozenset, splitGSU: bool, ignoreInterna
-     if splitGSU:
-       state["GlobalSplitU"] = "M" if (state["GlobalSplitU"] > 1 or state["GlobalSplitU"] == -1) else state["GlobalSplitU"]
- 
--
-   requiredParametersTemp = set(requiredParameters.union(["GlobalSplitU"]))
- 
-   if ignoreInternalArgs:
-diff --git a/tensilelite/Tensile/CustomYamlLoader.py b/tensilelite/Tensile/CustomYamlLoader.py
-index bab8c687509..e03f456fbec 100644
---- a/tensilelite/Tensile/CustomYamlLoader.py
-+++ b/tensilelite/Tensile/CustomYamlLoader.py
-@@ -1,3 +1,6 @@
-+# Copyright © Advanced Micro Devices, Inc., or its affiliates.
-+# SPDX-License-Identifier: MIT
-+
- import yaml
- from pathlib import Path
- 
-Author: Luna Nova <git@lunnova.dev>
-Date:   Sun Oct 12 11:52:10 2025 -0700
-
-    [hipblaslt] intern strings to reduce duplicate memory for solution keys
-
-diff --git a/tensilelite/Tensile/CustomYamlLoader.py b/tensilelite/Tensile/CustomYamlLoader.py
-index 685e69220c..9fdf38d8e5 100644
---- a/tensilelite/Tensile/CustomYamlLoader.py
-+++ b/tensilelite/Tensile/CustomYamlLoader.py
-@@ -1,6 +1,7 @@
- # Copyright © Advanced Micro Devices, Inc., or its affiliates.
- # SPDX-License-Identifier: MIT
- 
-+import sys
- import yaml
- from pathlib import Path
- 
-@@ -85,7 +86,7 @@ def parse_scalar(loader: yaml.Loader):
-         if not evt.style:
-             return None
- 
--    return value
-+    return sys.intern(value)
- 
- def load_yaml_stream(yaml_path: Path, loader_type: yaml.Loader):
-     with open(yaml_path, 'r') as f:
-
 diff --git a/tensilelite/Tensile/Common/Parallel.py b/tensilelite/Tensile/Common/Parallel.py
 index 1a2bf9e119..f46100c7b8 100644
 --- a/tensilelite/Tensile/Common/Parallel.py
@@ -55,7 +5,7 @@ index 1a2bf9e119..f46100c7b8 100644
 @@ -22,43 +22,58 @@
  #
  ################################################################################
- 
+
 -import concurrent.futures
 -import itertools
 +import multiprocessing
@@ -67,10 +17,10 @@ index 1a2bf9e119..f46100c7b8 100644
 -from joblib import Parallel, delayed
 +from functools import partial
 +from typing import Any, Callable
- 
+
  from .Utilities import tqdm
- 
- 
+
+
 -def joblibParallelSupportsGenerator():
 -    import joblib
 -    from packaging.version import Version
@@ -81,7 +31,7 @@ index 1a2bf9e119..f46100c7b8 100644
 +            return int(os.environ['CMAKE_BUILD_PARALLEL_LEVEL'])
 +        except ValueError:
 +            pass
- 
+
 -    joblibVer = joblib.__version__
 -    return Version(joblibVer) >= Version("1.4.0")
 +    # 2. Parse MAKEFLAGS for -jN
@@ -89,12 +39,12 @@ index 1a2bf9e119..f46100c7b8 100644
 +    match = re.search(r'-j\s*(\d+)', makeflags)
 +    if match:
 +        return int(match.group(1))
- 
+
 +    return -1
- 
+
 -def CPUThreadCount(enable=True):
 -    from .GlobalParameters import globalParameters
- 
+
 +def CPUThreadCount(enable=True):
      if not enable:
          return 1
@@ -121,7 +71,7 @@ index 1a2bf9e119..f46100c7b8 100644
 -        if cpuThreads == -1:
 -            return cpu_count
 +            cpuThreads = len(os.sched_getaffinity(0))
- 
+
 -        return min(cpu_count, cpuThreads)
 +    if os.name == "nt":
 +        # Windows supports at most 61 workers because the scheduler uses
@@ -129,13 +79,13 @@ index 1a2bf9e119..f46100c7b8 100644
 +        # is actually 64, but some handles are needed for accounting).
 +        cpuThreads = min(cpuThreads, 61)
 +    return max(1, cpuThreads)
- 
- 
+
+
  def pcallWithGlobalParamsMultiArg(f, args, newGlobalParameters):
 @@ -71,19 +86,22 @@ def pcallWithGlobalParamsSingleArg(f, arg, newGlobalParameters):
      return f(arg)
- 
- 
+
+
 -def apply_print_exception(item, *args):
 -    # print(item, args)
 +def OverwriteGlobalParameters(newGlobalParameters):
@@ -166,8 +116,8 @@ index 1a2bf9e119..f46100c7b8 100644
      finally:
 @@ -98,154 +116,121 @@ def OverwriteGlobalParameters(newGlobalParameters):
      GlobalParameters.globalParameters.update(newGlobalParameters)
- 
- 
+
+
 -def ProcessingPool(enable=True, maxTasksPerChild=None):
 -    import multiprocessing
 -    import multiprocessing.dummy
@@ -191,10 +141,10 @@ index 1a2bf9e119..f46100c7b8 100644
 +def progress_logger(iterable, total, message, min_log_interval=5.0):
 +    """
 +    Generator that wraps an iterable and logs progress with time-based throttling.
- 
+
 +    Only logs progress if at least min_log_interval seconds have passed since last log.
 +    Only prints completion message if task took >= min_log_interval seconds.
- 
+
 -def ParallelMap(function, objects, message="", enable=True, method=None, maxTasksPerChild=None):
 +    Yields (index, item) tuples.
      """
@@ -212,7 +162,7 @@ index 1a2bf9e119..f46100c7b8 100644
 +    start_time = time.time()
 +    last_log_time = start_time
 +    log_interval = 1 + (total // 100)
- 
+
 -    threadCount = CPUThreadCount(enable)
 -    pool = ProcessingPool(enable, maxTasksPerChild)
 -
@@ -251,12 +201,12 @@ index 1a2bf9e119..f46100c7b8 100644
 +                print(f"{message}\t{idx+1: 5d}/{total: 5d}")
 +                last_log_time = current_time
 +        yield idx, item
- 
+
 -    if message != "":
 -        message += ": "
 +    elapsed = time.time() - start_time
 +    final_idx = idx + 1 if 'idx' in locals() else 0
- 
+
 -    print("{0}Launching {1} threads{2}...".format(message, threadCount, countMessage))
 -    sys.stdout.flush()
 -    currentTime = time.time()
@@ -268,8 +218,8 @@ index 1a2bf9e119..f46100c7b8 100644
 -    return rv
 +    if elapsed >= min_log_interval or last_log_time > start_time:
 +        print(f"{message} done in {elapsed:.1f}s!\t{final_idx: 5d}/{total: 5d}")
- 
- 
+
+
 -def ParallelMapReturnAsGenerator(function, objects, message="", enable=True, multiArg=True):
 -    from .GlobalParameters import globalParameters
 +def imap_with_progress(pool, func, iterable, total, message, chunksize):
@@ -277,10 +227,10 @@ index 1a2bf9e119..f46100c7b8 100644
 +    for _, result in progress_logger(pool.imap(func, iterable, chunksize=chunksize), total, message):
 +        results.append(result)
 +    return results
- 
+
 -    threadCount = CPUThreadCount(enable)
 -    print("{0}Launching {1} threads...".format(message, threadCount))
- 
+
 -    if threadCount <= 1 and globalParameters["ShowProgressBar"]:
 -        # Provide a progress bar for single-threaded operation.
 -        callFunc = lambda args: function(*args) if multiArg else lambda args: function(args)
@@ -288,7 +238,7 @@ index 1a2bf9e119..f46100c7b8 100644
 +def _ParallelMap_generator(worker, objects, objLen, message, chunksize, threadCount, globalParameters, maxtasksperchild):
 +    # separate fn because yield makes the entire fn a generator even if unreachable
 +    ctx = multiprocessing.get_context('forkserver' if os.name != 'nt' else 'spawn')
- 
+
 -    with concurrent.futures.ProcessPoolExecutor(max_workers=threadCount) as executor:
 -        resultFutures = (executor.submit(function, *arg if multiArg else arg) for arg in objects)
 -        for result in concurrent.futures.as_completed(resultFutures):
@@ -297,8 +247,8 @@ index 1a2bf9e119..f46100c7b8 100644
 +                  initializer=OverwriteGlobalParameters, initargs=(globalParameters,)) as pool:
 +        for _, result in progress_logger(pool.imap_unordered(worker, objects, chunksize=chunksize), objLen, message):
 +            yield result
- 
- 
+
+
  def ParallelMap2(
 -    function, objects, message="", enable=True, multiArg=True, return_as="list", procs=None
 +    function: Callable,
@@ -333,7 +283,7 @@ index 1a2bf9e119..f46100c7b8 100644
      """
 -    Generally equivalent to list(map(function, objects)), possibly executing in parallel.
 +    from .GlobalParameters import globalParameters
- 
+
 -      message: A message describing the operation to be performed.
 -      enable: May be set to false to disable parallelism.
 -      multiArg: True if objects represent multiple arguments
@@ -342,23 +292,23 @@ index 1a2bf9e119..f46100c7b8 100644
 -    if return_as in ("generator", "generator_unordered") and not joblibParallelSupportsGenerator():
 -        return ParallelMapReturnAsGenerator(function, objects, message, enable, multiArg)
 +    threadCount = CPUThreadCount(enable)
- 
+
 -    from .GlobalParameters import globalParameters
 +    if not hasattr(objects, "__len__"):
 +        objects = list(objects)
- 
+
 -    threadCount = procs if procs else CPUThreadCount(enable)
 +    objLen = len(objects)
 +    if objLen == 0:
 +        return [] if return_as == "list" else iter([])
- 
+
 -    threadCount = CPUThreadCount(enable)
 +    f = (lambda x: function(*x)) if multiArg else function
 +    if objLen == 1:
 +        print(f"{message}: (1 task)")
 +        result = [f(x) for x in objects]
 +        return result if return_as == "list" else iter(result)
- 
+
 -    if threadCount <= 1 and globalParameters["ShowProgressBar"]:
 -        # Provide a progress bar for single-threaded operation.
 -        return [function(*args) if multiArg else function(args) for args in tqdm(objects, message)]
@@ -367,7 +317,7 @@ index 1a2bf9e119..f46100c7b8 100644
 +        if objLen
 +        else ""
 +    )
- 
+
 -    countMessage = ""
 -    try:
 -        countMessage = " for {} tasks".format(len(objects))
@@ -419,19 +369,19 @@ index ffceb636f5..127b3386a1 100644
 --- a/tensilelite/Tensile/CustomKernels.py
 +++ b/tensilelite/Tensile/CustomKernels.py
 @@ -24,7 +24,9 @@
- 
+
  from . import CUSTOM_KERNEL_PATH
  from Tensile.Common.ValidParameters import checkParametersAreValid, validParameters, newMIValidParameters
 +from Tensile.CustomYamlLoader import DEFAULT_YAML_LOADER
- 
+
 +from functools import lru_cache
  import yaml
- 
+
  import os
 @@ -58,10 +60,13 @@ def getCustomKernelConfigAndAssembly(name, directory=CUSTOM_KERNEL_PATH):
- 
+
      return (config, assembly)
- 
+
 +# getCustomKernelConfig will get called repeatedly on the same file
 +# 20x logic loading speedup for aquavanjaram_Cijk_Ailk_Bljk_F8NH_HHS_BH_Bias_HAS_SAB_SAV_freesize_custom_GSUs
 +@lru_cache
@@ -442,13 +392,34 @@ index ffceb636f5..127b3386a1 100644
 +        return yaml.load(rawConfig, Loader=DEFAULT_YAML_LOADER)["custom.config"]
      except yaml.scanner.ScannerError as e:
          raise RuntimeError("Failed to read configuration for custom kernel: {0}\nDetails:\n{1}".format(name, e))
- 
+
+diff --git a/tensilelite/Tensile/CustomYamlLoader.py b/tensilelite/Tensile/CustomYamlLoader.py
+index e03f456fbe..ed7510f2ce 100644
+--- a/tensilelite/Tensile/CustomYamlLoader.py
++++ b/tensilelite/Tensile/CustomYamlLoader.py
+@@ -1,6 +1,7 @@
+ # Copyright © Advanced Micro Devices, Inc., or its affiliates.
+ # SPDX-License-Identifier: MIT
+
++import sys
+ import yaml
+ from pathlib import Path
+
+@@ -70,7 +71,7 @@ def parse_scalar(loader: yaml.Loader):
+     elif is_float(value_lower):
+         return float(value_lower)
+
+-    return value
++    return sys.intern(value)
+
+ def load_yaml_stream(yaml_path: Path, loader_type: yaml.Loader):
+     with open(yaml_path, 'r') as f:
 diff --git a/tensilelite/Tensile/TensileCreateLibrary/Run.py b/tensilelite/Tensile/TensileCreateLibrary/Run.py
-index 835ed9c019..024c6c49c1 100644
+index 22d19851a3..348068b3bf 100644
 --- a/tensilelite/Tensile/TensileCreateLibrary/Run.py
 +++ b/tensilelite/Tensile/TensileCreateLibrary/Run.py
 @@ -26,8 +26,10 @@ import rocisa
- 
+
  import functools
  import glob
 +import gc
@@ -460,8 +431,8 @@ index 835ed9c019..024c6c49c1 100644
  from timeit import default_timer as timer
 @@ -78,6 +80,25 @@ from Tensile.Utilities.Decorators.Timing import timing
  from .ParseArguments import parseArguments
- 
- 
+
+
 +def getMemoryUsage():
 +    """Get peak and current memory usage in MB."""
 +    rusage = resource.getrusage(resource.RUSAGE_SELF)
@@ -484,11 +455,11 @@ index 835ed9c019..024c6c49c1 100644
  class KernelCodeGenResult(NamedTuple):
      err: int
      src: str
-@@ -115,6 +136,29 @@ def processKernelSource(kernelWriterAssembly, data, splitGSU, kernel) -> KernelC
+@@ -115,6 +136,29 @@ def processKernelSource(kernelWriterAssembly, data, outOptions, splitGSU, kernel
      )
- 
- 
-+def processAndAssembleKernelTCL(kernelWriterAssembly, rocisa_data, splitGSU, kernel, assemblyTmpPath, assembler):
+
+
++def processAndAssembleKernelTCL(kernelWriterAssembly, rocisa_data, outOptions, splitGSU, kernel, assemblyTmpPath, assembler):
 +    """
 +    Pipeline function for TCL mode that:
 +    1. Generates kernel source
@@ -496,7 +467,7 @@ index 835ed9c019..024c6c49c1 100644
 +    3. Assembles to .o file
 +    4. Deletes .s file
 +    """
-+    result = processKernelSource(kernelWriterAssembly, rocisa_data, splitGSU, kernel)
++    result = processKernelSource(kernelWriterAssembly, rocisa_data, outOptions, splitGSU, kernel)
 +    return writeAndAssembleKernel(result, assemblyTmpPath, assembler)
 +
 +
@@ -516,8 +487,8 @@ index 835ed9c019..024c6c49c1 100644
      removeKernelNames = []
 @@ -189,6 +233,24 @@ def writeAssembly(asmPath: Union[Path, str], result: KernelCodeGenResult):
      return path, isa, wfsize, minResult
- 
- 
+
+
 +def writeAndAssembleKernel(result: KernelCodeGenResult, asmPath: Union[Path, str], assembler):
 +    """Write assembly file and immediately assemble it to .o file"""
 +    if result.err:
@@ -539,13 +510,14 @@ index 835ed9c019..024c6c49c1 100644
  def writeHelpers(
      outputPath, kernelHelperObjs, KERNEL_HELPER_FILENAME_CPP, KERNEL_HELPER_FILENAME_H
  ):
-@@ -268,13 +330,14 @@ def writeSolutionsAndKernels(
+@@ -272,14 +334,15 @@ def writeSolutionsAndKernels(
      numAsmKernels = len(asmKernels)
      numKernels = len(asmKernels)
      assert numKernels == numAsmKernels, "Only assembly kernels are supported in TensileLite"
 -    asmIter = zip(
 -        itertools.repeat(kernelWriterAssembly),
 -        itertools.repeat(rocisa.rocIsa.getInstance().getData()),
+-        itertools.repeat(outOptions),
 -        itertools.repeat(splitGSU),
 -        asmKernels
 +
@@ -553,6 +525,7 @@ index 835ed9c019..024c6c49c1 100644
 +        processKernelSource,
 +        kernelWriterAssembly=kernelWriterAssembly,
 +        data=rocisa.rocIsa.getInstance().getData(),
++        outOptions=outOptions,
 +        splitGSU=splitGSU
      )
 -    asmResults = ParallelMap2(processKernelSource, asmIter, "Generating assembly kernels", return_as="list")
@@ -560,12 +533,12 @@ index 835ed9c019..024c6c49c1 100644
      removeInvalidSolutionsAndKernels(
          asmResults, asmKernels, solutions, errorTolerant, getVerbosity(), splitGSU
      )
-@@ -282,19 +345,21 @@ def writeSolutionsAndKernels(
+@@ -287,19 +350,21 @@ def writeSolutionsAndKernels(
          asmResults, asmKernels, solutions, splitGSU
      )
- 
+
 -    def assemble(ret):
--        p, isa, wavefrontsize, result = ret
+-        p, isa, wavefrontsize, _ = ret
 -        asmToolchain.assembler(isaToGfx(isa), wavefrontsize, str(p), str(p.with_suffix(".o")))
 -
 -    unaryWriteAssembly = functools.partial(writeAssembly, assemblyTmpPath)
@@ -586,33 +559,41 @@ index 835ed9c019..024c6c49c1 100644
      )
 +    del asmResults
 +    gc.collect()
- 
+
      writeHelpers(outputPath, kernelHelperObjs, KERNEL_HELPER_FILENAME_CPP, KERNEL_HELPER_FILENAME_H)
      srcKernelFile = Path(outputPath) / "Kernels.cpp"
-@@ -369,32 +434,31 @@ def writeSolutionsAndKernelsTCL(
- 
+@@ -376,40 +441,35 @@ def writeSolutionsAndKernelsTCL(
+
      uniqueAsmKernels = [k for k in asmKernels if not k.duplicate]
- 
--    def assemble(ret):
--        p, isa, wavefrontsize, result = ret
--        asmToolchain.assembler(isaToGfx(isa), wavefrontsize, str(p), str(p.with_suffix(".o")))
+
+-    def assemble(ret, removeTemporaries: bool):
+-        asmPath, isa, wavefrontsize, result = ret
+-        asmToolchain.assembler(isaToGfx(isa), wavefrontsize, str(asmPath), str(asmPath.with_suffix(".o")))
+-        if removeTemporaries:
+-            asmPath.unlink()
 -        return result
 -
+-    unaryAssemble = functools.partial(assemble, removeTemporaries=removeTemporaries)
+-
+     outOptions = rocisa.rocIsa.getInstance().getOutputOptions()
+     outOptions.outputNoComment = not disableAsmComments
+
 -    unaryProcessKernelSource = functools.partial(
 -        processKernelSource,
 +    processKernelFn = functools.partial(
 +        processAndAssembleKernelTCL,
          kernelWriterAssembly,
          rocisa.rocIsa.getInstance().getData(),
+         outOptions,
          splitGSU,
 +        assemblyTmpPath=assemblyTmpPath,
 +        assembler=asmToolchain.assembler
      )
- 
+
 -    unaryWriteAssembly = functools.partial(writeAssembly, assemblyTmpPath)
 -    compose = lambda *F: functools.reduce(lambda f, g: lambda x: f(g(x)), F)
 -    ret = ParallelMap2(
--        compose(assemble, unaryWriteAssembly, unaryProcessKernelSource),
+-        compose(unaryAssemble, unaryWriteAssembly, unaryProcessKernelSource),
 +    results = ParallelMap2(
 +        processKernelFn,
          uniqueAsmKernels,
@@ -635,10 +616,10 @@ index 835ed9c019..024c6c49c1 100644
      buildAssemblyCodeObjectFiles(
          asmToolchain.linker,
          asmToolchain.bundler,
-@@ -493,6 +557,15 @@ def generateKernelHelperObjects(solutions: List[Solution], cxxCompiler: str, isa
+@@ -508,6 +568,15 @@ def generateKernelHelperObjects(solutions: List[Solution], cxxCompiler: str, isa
      return sorted(khos, key=sortByEnum, reverse=True) # Ensure that we write Enum kernel helpers are first in list
- 
- 
+
+
 +def libraryIter(lib: MasterSolutionLibrary):
 +    if len(lib.solutions):
 +        for i, s in enumerate(lib.solutions.items()):
@@ -650,11 +631,11 @@ index 835ed9c019..024c6c49c1 100644
 +
  @timing
  def generateLogicDataAndSolutions(logicFiles, args, assembler: Assembler, isaInfoMap):
- 
-@@ -508,26 +581,23 @@ def generateLogicDataAndSolutions(logicFiles, args, assembler: Assembler, isaInf
+
+@@ -523,26 +592,23 @@ def generateLogicDataAndSolutions(logicFiles, args, assembler: Assembler, isaInf
      printSolutionRejectionReason = True
      printIndexAssignmentInfo = False
- 
+
 -    fIter = zip(
 -        logicFiles,
 -        itertools.repeat(assembler),
@@ -672,7 +653,7 @@ index 835ed9c019..024c6c49c1 100644
 +        isaInfoMap=isaInfoMap,
 +        lazyLibraryLoading=args["LazyLibraryLoading"]
      )
- 
+
 -    def libraryIter(lib: MasterSolutionLibrary):
 -        if len(lib.solutions):
 -            for i, s in enumerate(lib.solutions.items()):
@@ -691,31 +672,31 @@ index 835ed9c019..024c6c49c1 100644
 +        multiArg=False,
      ):
          _, architectureName, _, _, _, newLibrary = library
- 
-@@ -539,6 +609,9 @@ def generateLogicDataAndSolutions(logicFiles, args, assembler: Assembler, isaInf
+
+@@ -554,6 +620,9 @@ def generateLogicDataAndSolutions(logicFiles, args, assembler: Assembler, isaInf
          else:
              masterLibraries[architectureName] = newLibrary
              masterLibraries[architectureName].version = args["CodeObjectVersion"]
 +        del library, newLibrary
 +
 +    gc.collect()
- 
+
      # Sort masterLibraries to make global soln index values deterministic
      solnReIndex = 0
-@@ -734,6 +807,9 @@ def run():
+@@ -751,6 +820,9 @@ def run():
      )
      stop_wsk = timer()
      print(f"Time to generate kernels (s): {(stop_wsk-start_wsk):3.2f}")
 +    numKernelHelperObjs = len(kernelHelperObjs)
 +    del kernelWriterAssembly, kernelHelperObjs
 +    gc.collect()
- 
+
      archs = [ # is this really different than the other archs above?
          isaToGfx(arch)
-@@ -751,13 +827,10 @@ def run():
+@@ -768,13 +840,10 @@ def run():
              if kName not in solDict:
                  solDict["%s"%kName] = kernel
- 
+
 -    def writeMsl(name, lib):
 -        filename = os.path.join(newLibraryDir, name)
 -        lib.applyNaming(splitGSU)
@@ -725,13 +706,13 @@ index 835ed9c019..024c6c49c1 100644
      LibraryIO.write(filename, libraryMapping, "msgpack")
 +    del libraryMapping
 +    gc.collect()
- 
+
      start_msl = timer()
      for archName, newMasterLibrary in masterLibraries.items():
-@@ -774,12 +847,22 @@ def run():
+@@ -791,12 +860,22 @@ def run():
                      kName = getKeyNoInternalArgs(s.originalSolution, splitGSU)
                      s.sizeMapping.CUOccupancy = solDict["%s"%kName]["CUOccupancy"]
- 
+
 -            ParallelMap2(writeMsl,
 +            writeFn = functools.partial(
 +                writeMasterSolutionLibrary,
@@ -749,15 +730,15 @@ index 835ed9c019..024c6c49c1 100644
      print(f"Time to write master solution libraries (s): {(stop_msl-start_msl):3.2f}")
 +    del masterLibraries, solutions, kernels, solDict
 +    gc.collect()
- 
+
      if not arguments["KeepBuildTmp"]:
          buildTmp = Path(arguments["OutputPath"]).parent / "library" / "build_tmp"
-@@ -796,8 +879,11 @@ def run():
+@@ -813,8 +892,11 @@ def run():
      print("")
- 
+
      stop = timer()
 +    peak_memory_mb, current_memory_mb = getMemoryUsage()
- 
+
      print(f"Total time (s): {(stop-start):3.2f}")
      print(f"Total kernels processed: {numKernels}")
      print(f"Kernels processed per second: {(numKernels/(stop-start)):3.2f}")
@@ -772,7 +753,7 @@ index e33c617b6f..ba163e9918 100644
 @@ -303,8 +303,7 @@ def avoidRegressions(originalDir, incrementalDir, outputPath, forceMerge, noEff=
          logicsFiles[origFile] = origFile
          logicsFiles[incFile] = incFile
- 
+
 -    iters = zip(logicsFiles.keys())
 -    logicsList = ParallelMap2(loadData, iters, "Loading Logics...", return_as="list")
 +    logicsList = ParallelMap2(loadData, logicsFiles.keys(), "Loading Logics...", return_as="list", multiArg=False)
@@ -785,11 +766,11 @@ index 5ff265d0ed..c1803a6349 100644
 +++ b/tensilelite/Tensile/TensileUpdateLibrary.py
 @@ -26,7 +26,7 @@ from . import LibraryIO
  from .Tensile import addCommonArguments, argUpdatedGlobalParameters
- 
+
  from .Common import assignGlobalParameters, print1, restoreDefaultGlobalParameters, HR, \
 -                    globalParameters, architectureMap, ensurePath, ParallelMap, __version__
 +                    globalParameters, architectureMap, ensurePath, ParallelMap2, __version__
- 
+
  import argparse
  import copy
 @@ -149,7 +149,7 @@ def TensileUpdateLibrary(userArgs):
@@ -798,8 +779,8 @@ index 5ff265d0ed..c1803a6349 100644
      fIter = zip(logicFiles, itertools.repeat(args.logic_path), itertools.repeat(outputPath))
 -    libraries = ParallelMap(UpdateLogic, fIter, "Updating logic files", method=lambda x: x.starmap)
 +    libraries = ParallelMap2(UpdateLogic, fIter, "Updating logic files", multiArg=True, return_as="list")
- 
- 
+
+
  def main():
 diff --git a/tensilelite/Tensile/Toolchain/Assembly.py b/tensilelite/Tensile/Toolchain/Assembly.py
 index a8b91e8d62..265e1d532c 100644
@@ -808,16 +789,16 @@ index a8b91e8d62..265e1d532c 100644
 @@ -30,7 +30,7 @@ import subprocess
  from pathlib import Path
  from typing import List, Union, NamedTuple
- 
+
 -from Tensile.Common import print2
 +from Tensile.Common import print1, print2
  from Tensile.Common.Architectures import isaToGfx
  from ..SolutionStructs import Solution
- 
+
 @@ -92,8 +92,26 @@ def buildAssemblyCodeObjectFiles(
          if coName:
            coFileMap[asmDir / (coName + extCoRaw)].add(str(asmDir / (kernel["BaseName"] + extObj)))
- 
+
 +      # Build reference count map for .o files to handle shared object files
 +      # (.o files from kernels marked .duplicate in TensileCreateLibrary)
 +      objFileRefCount = collections.Counter()
diff --git a/pkgs/development/rocm-modules/hipblaslt/default.nix b/pkgs/development/rocm-modules/hipblaslt/default.nix
index e139079eb95e..5fb88a4c78cc 100644
--- a/pkgs/development/rocm-modules/hipblaslt/default.nix
+++ b/pkgs/development/rocm-modules/hipblaslt/default.nix
@@ -70,14 +70,17 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "hipblaslt${clr.gpuArchSuffix}";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rocm-libraries";
-    rev = "a676499add42941ff6af1e8d3f0504416dac7429";
-    hash = "sha256-zIYdHFbHyP2V6dkx6Ueb6NBqWu8tJji2hSWF9zWEJa4=";
-    sparseCheckout = [ "projects/hipblaslt" ];
+    rev = "rocm-${finalAttrs.version}";
+    hash = "sha256-I2dGn4Ld5lZeML8GePcLPssplBZ+4weNR6uBEqFdZVg=";
+    sparseCheckout = [
+      "projects/hipblaslt"
+      "shared"
+    ];
   };
   sourceRoot = "${finalAttrs.src.name}/projects/hipblaslt";
   env.CXX = compiler;
@@ -203,7 +206,7 @@ stdenv.mkDerivation (finalAttrs: {
     # Move binaries to appropriate outputs and delete leftover /bin
     + ''
       mkdir -p $benchmark/bin
-      mv $out/bin/hipblaslt-{api-overhead,sequence,bench*} $out/bin/*.yaml $out/bin/*.py $benchmark/bin
+      mv $out/bin/hipblaslt-{api-overhead,bench*} $out/bin/*.yaml $out/bin/*.py $benchmark/bin
       ${lib.optionalString buildTests ''
         mkdir -p $test/bin
         mv $out/bin/hipblas-test $test/bin
diff --git a/pkgs/development/rocm-modules/hipcub/default.nix b/pkgs/development/rocm-modules/hipcub/default.nix
index 3c2efe114059..75a9edb5934d 100644
--- a/pkgs/development/rocm-modules/hipcub/default.nix
+++ b/pkgs/development/rocm-modules/hipcub/default.nix
@@ -17,7 +17,7 @@
 # CUB can also be used as a backend instead of rocPRIM.
 stdenv.mkDerivation (finalAttrs: {
   pname = "hipcub";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -33,7 +33,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "hipCUB";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-3/499pX7hFKJwbhSEH3/bMhNdyabK36jLv8s5TC2fuw=";
+    hash = "sha256-hIIpU1E/X6bPIhFfauNLPnFNBYSwtoxZV335Huw9fCA=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/hipfft/default.nix b/pkgs/development/rocm-modules/hipfft/default.nix
index 669208f218f2..c0e9d4284dc7 100644
--- a/pkgs/development/rocm-modules/hipfft/default.nix
+++ b/pkgs/development/rocm-modules/hipfft/default.nix
@@ -21,7 +21,7 @@
 # Can also use cuFFT
 stdenv.mkDerivation (finalAttrs: {
   pname = "hipfft";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "hipFFT";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-6FyI9s6H/lHFhm8aUqB9+vvJ0CRIVWCFLNoJprvsI6o=";
+    hash = "sha256-5zeL3o/Dfh0iyZOj5CHyfEQdFNehD2BLmllnZRdpsQI=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/development/rocm-modules/hipfort/default.nix b/pkgs/development/rocm-modules/hipfort/default.nix
index 401ecbee4953..7f9a0b2e3406 100644
--- a/pkgs/development/rocm-modules/hipfort/default.nix
+++ b/pkgs/development/rocm-modules/hipfort/default.nix
@@ -1,7 +1,6 @@
 {
   lib,
   stdenv,
-  fetchpatch,
   fetchFromGitHub,
   rocmUpdateScript,
   cmake,
@@ -11,24 +10,15 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "hipfort";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "hipfort";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-IVLhp8rYtKhkt8K8Mc0qyrp670oKoK0QeclnJjO36pY=";
+    hash = "sha256-XaB4jauCN41tgD1YHHA2td/yckwfMBemBe/iL0SCxQo=";
   };
 
-  patches = [
-    (fetchpatch {
-      name = "hipfort-fix-cmake-4.patch";
-      url = "https://github.com/ROCm/hipfort/commit/75552c7ec48e3bd6a914c57c9475ec573ccb37d9.patch";
-      hash = "sha256-S9r1V6cUo9QbKbu/NK4wIvXMV6BFv7+/n9mjCScVk40=";
-      includes = [ "bin/*" ];
-    })
-  ];
-
   nativeBuildInputs = [
     cmake
     rocm-cmake
diff --git a/pkgs/development/rocm-modules/hipify/default.nix b/pkgs/development/rocm-modules/hipify/default.nix
index ea0bd5ebf806..cce9bb153bd5 100644
--- a/pkgs/development/rocm-modules/hipify/default.nix
+++ b/pkgs/development/rocm-modules/hipify/default.nix
@@ -12,13 +12,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "hipify";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "HIPIFY";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-NbFFHAAvMGpvIryhEbktN5w03Cpay9lEqelqkUT9dpQ=";
+    hash = "sha256-LC0lnYetV7RPVw92zew6za6bDH4zmnERXUM4MVaRVtc=";
   };
 
   strictDeps = true;
diff --git a/pkgs/development/rocm-modules/hiprand/default.nix b/pkgs/development/rocm-modules/hiprand/default.nix
index 856d15ad1ca1..63f34e625e5a 100644
--- a/pkgs/development/rocm-modules/hiprand/default.nix
+++ b/pkgs/development/rocm-modules/hiprand/default.nix
@@ -14,7 +14,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "hiprand";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -27,7 +27,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "hipRAND";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-yypKwJ5p2aSAqapEHre9eOjjaFAI8Q1dDYWhwfrrdhg=";
+    hash = "sha256-mhhwYswewcRYKGoVAB/ZTIY8ubFSlTDXKZFoJpoDf2o=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/hipsolver/default.nix b/pkgs/development/rocm-modules/hipsolver/default.nix
index b4cc56a6abec..a16a5676921b 100644
--- a/pkgs/development/rocm-modules/hipsolver/default.nix
+++ b/pkgs/development/rocm-modules/hipsolver/default.nix
@@ -21,7 +21,7 @@
 # Can also use cuSOLVER
 stdenv.mkDerivation (finalAttrs: {
   pname = "hipsolver";
-  version = "7.1.0";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "hipSOLVER";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-n0+Xy92mBhI2vjB7pFHGt2UgPIHo9rO2ZxGxkz30Otw=";
+    hash = "sha256-xrzRU3X0zlmK6t8Bz4p5ihnJnadrqiW1BW2HLRDpu1M=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/hipsparse/default.nix b/pkgs/development/rocm-modules/hipsparse/default.nix
index 136996934b78..df2edc82f203 100644
--- a/pkgs/development/rocm-modules/hipsparse/default.nix
+++ b/pkgs/development/rocm-modules/hipsparse/default.nix
@@ -19,7 +19,7 @@
 # This can also use cuSPARSE as a backend instead of rocSPARSE
 stdenv.mkDerivation (finalAttrs: {
   pname = "hipsparse";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -35,7 +35,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "hipSPARSE";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-zaMAsLfUYkMUiA2vnGiK0//+vZwugqt5T6xJU4FBrRo=";
+    hash = "sha256-DmanHHlDny/SweYrSes4xQeWoF6TV+AoThyDHQpz+hQ=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/llvm/default.nix b/pkgs/development/rocm-modules/llvm/default.nix
index d6a54f3b5387..aa08cba5a250 100644
--- a/pkgs/development/rocm-modules/llvm/default.nix
+++ b/pkgs/development/rocm-modules/llvm/default.nix
@@ -2,7 +2,7 @@
   lib,
   stdenv,
   # LLVM version closest to ROCm fork to override
-  llvmPackages_20,
+  llvmPackages_22,
   overrideCC,
   lndir,
   rocm-device-libs,
@@ -22,23 +22,27 @@
   # leaving compressed line tables (-g1 -gz) unstripped
   # TODO: Should also apply to downstream packages which use rocmClangStdenv?
   profilableStdenv ? false,
+  # FIXME: proper two-stage bootstrap & PGO/BOLT/LTO
+  # LTO currently disabled due to llvm 22 vs 22.1 bitcode mismatch between
+  # llvmPackages_22 (22.1) and ROCm LLVM (22.0). Uses new bitcode attr
+  # 105 nocreateundeforpoison fails to link hipify.
   # Whether to use LTO when building the ROCm toolchain
   # Slows down this toolchain's build, for typical ROCm usecase
   # time saved building composable_kernel and other heavy packages
   # will outweight that. ~3-4% speedup multiplied by thousands
   # of corehours.
-  withLto ? true,
+  withLto ? false,
   # whether rocm stdenv uses libcxx (clang c++ stdlib) instead of gcc stdlibc++
   withLibcxx ? false,
 }:
 
 let
-  version = "7.1.1";
+  version = "7.2.0";
   # major version of this should be the clang version ROCm forked from
-  rocmLlvmVersion = "20.0.0-rocm";
+  rocmLlvmVersion = "22.0.0-rocm";
   # llvmPackages_base version should match rocmLlvmVersion
   # so libllvm's bitcode is compatible with the built toolchain
-  llvmPackages_base = llvmPackages_20;
+  llvmPackages_base = llvmPackages_22;
   llvmPackagesNoBintools = llvmPackages_base.override {
     bootBintools = null;
     bootBintoolsNoLibc = null;
@@ -115,7 +119,7 @@ let
     owner = "ROCm";
     repo = "llvm-project";
     rev = "rocm-${version}";
-    hash = "sha256-CfknIRVeR1bCKh1xzXKl3ehVp0kWT0uGrI9C1HTSKVo=";
+    hash = "sha256-I/Bxq1JjU9N4h3vXj/tbD3xPYY4+N7QzYA8UTIq1EL0=";
   };
   llvmMajorVersion = lib.versions.major rocmLlvmVersion;
   # An llvmPackages (pkgs/development/compilers/llvm/) built from ROCm LLVM's source tree
@@ -246,6 +250,9 @@ let
     (lib.cmakeFeature "LLVM_ENABLE_ZSTD" "FORCE_ON")
     # required for threaded ThinLTO to work
     (lib.cmakeBool "LLVM_ENABLE_THREADS" true)
+    # third-party/benchmark is broken in rocm-7.2.0
+    # error: '__COUNTER__' is a C2y extension [-Werror,-Wc2y-extensions]
+    (lib.cmakeBool "LLVM_INCLUDE_BENCHMARKS" false)
     # LLVM tries to call git to embed VCS info if FORCE_VC_ aren't set
     (lib.cmakeFeature "LLVM_FORCE_VC_REVISION" "rocm-${version}")
     (lib.cmakeFeature "LLVM_FORCE_VC_REPOSITORY" "https://github.com/ROCm/llvm-project")
@@ -288,13 +295,6 @@ in
 overrideLlvmPackagesRocm (s: {
   libllvm = (s.prev.libllvm.override { }).overrideAttrs (old: {
     patches = old.patches ++ [
-      (fetchpatch {
-        # fix compile error in tools/gold/gold-plugin.cpp
-        name = "gold-plugin-fix.patch";
-        url = "https://github.com/llvm/llvm-project/commit/b0baa1d8bd68a2ce2f7c5f2b62333e410e9122a1.patch";
-        hash = "sha256-yly93PvGIXOnFeDGZ2W+W6SyhdWFM6iwA+qOeaptrh0=";
-        relative = "llvm";
-      })
       ./perf-increase-namestring-size.patch
       # TODO: consider reapplying "Don't include aliases in RegisterClassInfo::IgnoreCSRForAllocOrder"
       # it was reverted as it's a pessimization for non-GPU archs, but this compiler
@@ -355,7 +355,17 @@ overrideLlvmPackagesRocm (s: {
         passthru = old.passthru // {
           inherit gcc-prefix;
         };
-        patches = old.patches ++ [
+        patches = [
+          (fetchpatch {
+            # [clang][cmake] Add option to control scan-build-py installation (#172727)
+            name = "clang-scan-build-py-configurable.patch";
+            url = "https://github.com/llvm/llvm-project/commit/f5759eeb63a3a5ce7d555c13c3126cea84e0c7b1.patch";
+            relative = "clang";
+            hash = "sha256-73IDPGZWKX4vny3x5FJ3/NQw8XRad9UNwfYkvQdMB4s=";
+          })
+        ]
+        ++ old.patches
+        ++ [
           # Never add FHS include paths
           ./clang-bodge-ignore-systemwide-incls.diff
           # Prevents builds timing out if a single compiler invocation is very slow but
@@ -365,11 +375,23 @@ overrideLlvmPackagesRocm (s: {
           ./perf-shorten-gcclib-include-paths.patch
           (fetchpatch {
             # [ClangOffloadBundler]: Add GetBundleIDsInFile to OffloadBundler
-            sha256 = "sha256-G/mzUdFfrJ2bLJgo4+mBcR6Ox7xGhWu5X+XxT4kH2c8=";
-            url = "https://github.com/GZGavinZhao/rocm-llvm-project/commit/6d296f879b0fed830c54b2a9d26240da86c8bb3a.patch";
+            sha256 = "sha256-OsarDZXuJ5vAXTP4i0NBUeK/r6tQPumaqmMWkf29UtM=";
+            url = "https://github.com/GZGavinZhao/rocm-llvm-project/commit/c7de294b0d1d25f277f9d1cbb2c9e09c7600e210.patch";
             relative = "clang";
           })
         ];
+        # ROCm 7.2 commits 4dda51261a6 "Replace hostexec with upstream rpc"
+        # and 2ca1509d6d2 "Put the RTL, Back!", added CGEmitEmissaryExec.cpp which
+        # includes ../../openmp/device/include/EmissaryIds.h, breaking
+        # standalone clang builds. The upstream PR llvm/llvm-project#175265
+        # ("[OpenMP] support for Emissary APIs") moves EmissaryIds.h into
+        # clang/lib/Headers/ so this should not be needed once that lands
+        # and ROCm rebases onto it.
+        postUnpack = ''
+          ${old.postUnpack or ""}
+          mkdir -p "''${sourceRoot}/openmp/device/include"
+          ln -s "${llvmSrc}/openmp/device/include/EmissaryIds.h" "''${sourceRoot}/openmp/device/include/"
+        '';
         hardeningDisable = [ "all" ];
         nativeBuildInputs = old.nativeBuildInputs ++ [
           removeReferencesTo
@@ -388,8 +410,7 @@ overrideLlvmPackagesRocm (s: {
         # https://github.com/llvm/llvm-project/blob/6976deebafa8e7de993ce159aa6b82c0e7089313/clang/cmake/caches/DistributionExample-stage2.cmake#L9-L11
         cmakeFlags =
           # TODO: Remove in followup, tblgen now works correctly but would rebuild
-          (builtins.filter tablegenUsage old.cmakeFlags)
-          ++ commonCmakeFlags;
+          (builtins.filter tablegenUsage old.cmakeFlags) ++ commonCmakeFlags;
         preFixup = ''
           ${toString old.preFixup or ""}
           moveToOutput "lib/lib*.a" "$dev"
@@ -444,14 +465,6 @@ overrideLlvmPackagesRocm (s: {
       isGNU = false;
     };
   compiler-rt-libc = s.prev.compiler-rt-libc.overrideAttrs (old: {
-    patches = old.patches ++ [
-      # fix build with glibc >= 2.42
-      (fetchpatch {
-        url = "https://github.com/llvm/llvm-project/commit/59978b21ad9c65276ee8e14f26759691b8a65763.patch";
-        hash = "sha256-ys5SMLfO3Ay9nCX9GV5yRCQ6pLsseFu/ZY6Xd6OL4p0=";
-        relative = "compiler-rt";
-      })
-    ];
     meta = old.meta // llvmMeta;
   });
   compiler-rt = s.final.compiler-rt-libc;
diff --git a/pkgs/development/rocm-modules/llvm/opt-offload-compress-on-by-default.patch b/pkgs/development/rocm-modules/llvm/opt-offload-compress-on-by-default.patch
index 5b43528c3271..d5cb1a363ea5 100644
--- a/pkgs/development/rocm-modules/llvm/opt-offload-compress-on-by-default.patch
+++ b/pkgs/development/rocm-modules/llvm/opt-offload-compress-on-by-default.patch
@@ -17,6 +17,6 @@ index 33f12fb2d075d..ba35f65210c7a 100644
    if (TCArgs.hasFlag(options::OPT_offload_compress,
 -                     options::OPT_no_offload_compress, false))
 +                     options::OPT_no_offload_compress, true))
-     CmdArgs.push_back("-compress");
+     CmdArgs.push_back("--compress");
    if (TCArgs.hasArg(options::OPT_v))
      CmdArgs.push_back("-verbose");
diff --git a/pkgs/development/rocm-modules/llvm/perf-shorten-gcclib-include-paths.patch b/pkgs/development/rocm-modules/llvm/perf-shorten-gcclib-include-paths.patch
index a973851725d8..b23a3886c3d0 100644
--- a/pkgs/development/rocm-modules/llvm/perf-shorten-gcclib-include-paths.patch
+++ b/pkgs/development/rocm-modules/llvm/perf-shorten-gcclib-include-paths.patch
@@ -1,4 +1,4 @@
-From ef6c5b353861be727c98f1319c81d0c6b609d644 Mon Sep 17 00:00:00 2001
+From 8c64deff2a82fcca5b521362193a1fd8b1a0dca7 Mon Sep 17 00:00:00 2001
 From: Luna Nova <git@lunnova.dev>
 Date: Tue, 17 Dec 2024 04:29:11 -0800
 Subject: [PATCH] HACK: Get canonical GCC include path so doesn't have
@@ -6,21 +6,20 @@ Subject: [PATCH] HACK: Get canonical GCC include path so doesn't have
 
 This allows more of the strings used in compilation to fit inside
 fixed size stack allocated buffers instead of spilling into the heap
-
 ---
- clang/lib/Driver/ToolChains/Gnu.cpp | 16 ++++++++++------
+ lib/Driver/ToolChains/Gnu.cpp | 16 ++++++++++------
  1 file changed, 10 insertions(+), 6 deletions(-)
 
-diff --git a/clang/lib/Driver/ToolChains/Gnu.cpp b/clang/lib/Driver/ToolChains/Gnu.cpp
-index af9fd46f0ce7b..a63a7a93f6a78 100644
+diff --git a/lib/Driver/ToolChains/Gnu.cpp b/lib/Driver/ToolChains/Gnu.cpp
+index 07df9864636..b1201b999f0 100644
 --- a/lib/Driver/ToolChains/Gnu.cpp
 +++ b/lib/Driver/ToolChains/Gnu.cpp
-@@ -3394,29 +3394,33 @@ bool Generic_GCC::addLibStdCXXIncludePaths(Twine IncludeDir, StringRef Triple,
-   if (!getVFS().exists(IncludeDir))
+@@ -3326,29 +3326,33 @@ static bool addLibStdCXXIncludePaths(llvm::vfs::FileSystem &vfs,
+   if (!vfs.exists(IncludeDir))
      return false;
  
 +  SmallString<260> CanonicalIncludeDir;
-+  if (getVFS().getRealPath(IncludeDir, CanonicalIncludeDir))
++  if (vfs.getRealPath(IncludeDir, CanonicalIncludeDir))
 +    return false;
 +
    // Debian native gcc uses g++-multiarch-incdir.diff which uses
@@ -34,24 +33,27 @@ index af9fd46f0ce7b..a63a7a93f6a78 100644
 -      (Include + "/" + Triple + Dir.substr(Include.size()) + IncludeSuffix)
 +      (Include + "/" + Triple + CanonicalIncludeDir.substr(Include.size()) + IncludeSuffix)
            .str();
-   if (DetectDebian && !getVFS().exists(Path))
+   if (DetectDebian && !vfs.exists(Path))
      return false;
  
    // GPLUSPLUS_INCLUDE_DIR
--  addSystemInclude(DriverArgs, CC1Args, IncludeDir);
-+  addSystemInclude(DriverArgs, CC1Args, CanonicalIncludeDir);
+-  ToolChain::addSystemInclude(DriverArgs, CC1Args, IncludeDir);
++  ToolChain::addSystemInclude(DriverArgs, CC1Args, CanonicalIncludeDir);
    // GPLUSPLUS_TOOL_INCLUDE_DIR. If Triple is not empty, add a target-dependent
    // include directory.
    if (DetectDebian)
-     addSystemInclude(DriverArgs, CC1Args, Path);
+     ToolChain::addSystemInclude(DriverArgs, CC1Args, Path);
    else if (!Triple.empty())
-     addSystemInclude(DriverArgs, CC1Args,
--                     IncludeDir + "/" + Triple + IncludeSuffix);
-+                     CanonicalIncludeDir + "/" + Triple + IncludeSuffix);
+     ToolChain::addSystemInclude(DriverArgs, CC1Args,
+-                                IncludeDir + "/" + Triple + IncludeSuffix);
++                                CanonicalIncludeDir + "/" + Triple + IncludeSuffix);
    // GPLUSPLUS_BACKWARD_INCLUDE_DIR
--  addSystemInclude(DriverArgs, CC1Args, IncludeDir + "/backward");
-+  if (getVFS().exists(CanonicalIncludeDir + "/backward"))
-+    addSystemInclude(DriverArgs, CC1Args, CanonicalIncludeDir + "/backward");
+-  ToolChain::addSystemInclude(DriverArgs, CC1Args, IncludeDir + "/backward");
++  if (vfs.exists(CanonicalIncludeDir + "/backward"))
++    ToolChain::addSystemInclude(DriverArgs, CC1Args, CanonicalIncludeDir + "/backward");
    return true;
  }
  
+-- 
+2.52.0
+
diff --git a/pkgs/development/rocm-modules/migraphx/default.nix b/pkgs/development/rocm-modules/migraphx/default.nix
index cfbf3c0afde2..0e6f84ca1487 100644
--- a/pkgs/development/rocm-modules/migraphx/default.nix
+++ b/pkgs/development/rocm-modules/migraphx/default.nix
@@ -58,7 +58,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "migraphx";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -74,7 +74,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "AMDMIGraphX";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-s6w4bF7koK4wnf6leVKBzwIB4X2ROHa3EgX6XuJIAew=";
+    hash = "sha256-FBAVsk4x3ATLDYtfzcPUPnUTwe36maIAY1/FwqG6jD0=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/miopen/default.nix b/pkgs/development/rocm-modules/miopen/default.nix
index 77ac8cab1533..301b847cf3dd 100644
--- a/pkgs/development/rocm-modules/miopen/default.nix
+++ b/pkgs/development/rocm-modules/miopen/default.nix
@@ -4,7 +4,7 @@
   callPackage,
   fetchFromGitHub,
   fetchpatch,
-  rocmUpdateScript,
+  fetchurl,
   runCommand,
   pkg-config,
   cmake,
@@ -43,7 +43,7 @@
 let
   # FIXME: cmake files need patched to include this properly
   cFlags = "-Wno-documentation-pedantic --offload-compress -I${hipblas-common}/include -I${hipblas}/include -I${roctracer}/include -I${nlohmann_json}/include -I${sqlite.dev}/include -I${rocrand}/include";
-  version = "7.1.1";
+  version = "7.2.0";
 
   # Targets outside this list will get
   # error: use of undeclared identifier 'CK_BUFFER_RESOURCE_3RD_DWORD'
@@ -65,42 +65,12 @@ let
     "gfx1201"
   ] gpuTargets;
 
-  kdbTargets = lib.intersectLists [
-    "gfx900"
-    "gfx906"
-    "gfx908"
-    "gfx90a"
-    "gfx942"
-    "gfx1030"
-  ] gpuTargets;
-
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "MIOpen";
     rev = "rocm-${version}";
-    hash = "sha256-g0AEpuUiwKCu/doiRh9mW34W04m4ynHoarSyl6tR/aE=";
-    fetchLFS = true;
+    hash = "sha256-OwBFzUruHHeJD7n3zLs/NsU5cNEjwkwFgim4m2/1hR0=";
     fetchSubmodules = true;
-    # WORKAROUND: .lfsconfig is incorrectly set to exclude everything upstream
-    leaveDotGit = true;
-    # FIXME: if someone can reduce the level of awful here that would be really nice
-    postFetch = ''
-      export HOME=$(mktemp -d)
-      cd $out
-      git remote add origin $url
-      git fetch origin +refs/tags/rocm-${version}:refs/tags/rocm-${version}
-      git clean -fdx
-      git switch -c rocm-${version} refs/tags/rocm-${version}
-      git config lfs.fetchexclude "none"
-      rm .lfsconfig
-      git lfs install
-      git lfs track "*.kdb.bz2"
-      git lfs fetch --include="src/kernels/**"
-      git lfs pull --include="src/kernels/**"
-      git lfs checkout
-
-      rm -rf .git
-    '';
   };
 
   latex = lib.optionalAttrs buildDocs (
@@ -120,19 +90,27 @@ let
     )
   );
 
-  kernelDatabases = lib.genAttrs kdbTargets (
-    target:
-    runCommand "miopen-${target}.kdb" { preferLocalBuild = true; } ''
-      ${lbzip2}/bin/lbzip2 -ckd ${src}/src/kernels/${target}.kdb.bz2 > $out
-    ''
-  );
+  # Kernel databases moved from Git LFS to DVC (anonymous s3 bucket s3://therock-dvc/rocm-libraries)
+  fetchKdb =
+    name:
+    { url, hash }:
+    runCommand "miopen-${name}.kdb" { preferLocalBuild = true; } ''
+      ${lbzip2}/bin/lbzip2 -ckd ${
+        fetchurl {
+          inherit url hash;
+          name = "${name}.kdb.bz2";
+        }
+      } > $out
+    '';
+
+  kdbs = lib.mapAttrs fetchKdb (import ./kdbs.nix);
 
   linkKDBsTo =
     targetPath:
     lib.concatStringsSep "" (
-      map (target: ''
-        ln -sf ${kernelDatabases.${target}} ${targetPath}/${target}.kdb
-      '') kdbTargets
+      lib.mapAttrsToList (name: kdb: ''
+        ln -sf ${kdb} ${targetPath}/${name}.kdb
+      '') kdbs
     );
 in
 stdenv.mkDerivation (finalAttrs: {
@@ -153,14 +131,13 @@ stdenv.mkDerivation (finalAttrs: {
       url = "https://github.com/ROCm/MIOpen/commit/3413d2daaeb44b7d6eadcc03033a5954a118491e.patch";
       hash = "sha256-ST4snUcTmmSI1Ogx815KEX9GdMnmubsavDzXCGJkiKs=";
     })
-    # FIXME: We need to rebase or drop this arch compat patch
-    # https://github.com/ROCm/MIOpen/issues/3540 suggests that
-    # arch compat patching doesn't work correctly for gfx1031
-    # (fetchpatch {
-    #   name = "Extend-MIOpen-ISA-compatibility.patch";
-    #   url = "https://github.com/GZGavinZhao/MIOpen/commit/416088b534618bd669a765afce59cfc7197064c1.patch";
-    #   hash = "sha256-OwONCA68y8s2GqtQj+OtotXwUXQ5jM8tpeM92iaD4MU=";
-    # })
+    (fetchpatch {
+      # [miopen] Extend HIP ISA compatibility
+      name = "Extend-MIOpen-ISA-compatibility.patch";
+      url = "https://github.com/GZGavinZhao/rocm-libraries/commit/02f0fedffdc197f146dd45f41e10990a00cde3ee.patch";
+      hash = "sha256-My32iZw75rvB4fyvUJJ2kw2bU9/39awGteFGjzijixw=";
+      relative = "projects/miopen";
+    })
   ];
 
   outputs = [
@@ -308,11 +285,6 @@ stdenv.mkDerivation (finalAttrs: {
       inherit frugally-deep nlohmann_json;
     };
   };
-  passthru.updateScript = rocmUpdateScript {
-    name = finalAttrs.pname;
-    inherit (finalAttrs.src) owner;
-    inherit (finalAttrs.src) repo;
-  };
 
   meta = {
     description = "Machine intelligence library for ROCm";
diff --git a/pkgs/development/rocm-modules/miopen/kdbs.nix b/pkgs/development/rocm-modules/miopen/kdbs.nix
new file mode 100644
index 000000000000..9f9c627633cc
--- /dev/null
+++ b/pkgs/development/rocm-modules/miopen/kdbs.nix
@@ -0,0 +1,26 @@
+{
+  gfx1030 = {
+    url = "https://therock-dvc.s3.amazonaws.com/rocm-libraries/files/md5/22/c4bd38cc34d3906add061ee57b099b";
+    hash = "sha256-LESExp7sFl7osCM7HdVMpzOE0dU7953e2yzgeHSGgfI=";
+  };
+  gfx900 = {
+    url = "https://therock-dvc.s3.amazonaws.com/rocm-libraries/files/md5/cf/9c12dafe25b15ea1e93088b7b061af";
+    hash = "sha256-lFFB5GQFTjUnx3JDx816yH+96OGRt9XvBzfLFFHtUrE=";
+  };
+  gfx906 = {
+    url = "https://therock-dvc.s3.amazonaws.com/rocm-libraries/files/md5/04/b3be6a15c700ff382e0a5e136010e1";
+    hash = "sha256-cn1ODLcUQi+/QJUlWbELukMUj4+b1vjjRhhTseL9tdM=";
+  };
+  gfx908 = {
+    url = "https://therock-dvc.s3.amazonaws.com/rocm-libraries/files/md5/35/b9082b72e661dc5e37f14de1d9d4ed";
+    hash = "sha256-pI30zpZL3OEP3aeLdVpM00nHeTyD5K+XDH47g0W2A+M=";
+  };
+  gfx90a = {
+    url = "https://therock-dvc.s3.amazonaws.com/rocm-libraries/files/md5/a1/1615323e06c5774fe19cf34c51baef";
+    hash = "sha256-TkzSgY3V/Xs5YXfr69TrL8JjqDr1MZMgeBeQ/e2kEjE=";
+  };
+  gfx942 = {
+    url = "https://therock-dvc.s3.amazonaws.com/rocm-libraries/files/md5/6a/fe97d7bd441fe15280b28b6e3b1748";
+    hash = "sha256-fyhnR3+xPFkHLN36dI9UYIhqoVstt5RpareGn2S9lMM=";
+  };
+}
diff --git a/pkgs/development/rocm-modules/mivisionx/default.nix b/pkgs/development/rocm-modules/mivisionx/default.nix
index 7f3efb6a7824..183f8cdd457b 100644
--- a/pkgs/development/rocm-modules/mivisionx/default.nix
+++ b/pkgs/development/rocm-modules/mivisionx/default.nix
@@ -40,13 +40,13 @@ stdenv.mkDerivation (finalAttrs: {
         "cpu"
     );
 
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "MIVisionX";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-aC6GUPK6ZSOAx+PHHB4gLPNAG5U/kapqX7YWilusDw8=";
+    hash = "sha256-rdYQt001kFi9FjVL5R8XVzT+Y+rZVeMsbjXCJEB887A=";
   };
 
   patches = [
diff --git a/pkgs/development/rocm-modules/rccl/default.nix b/pkgs/development/rocm-modules/rccl/default.nix
index b8fe44a4ee6e..f05efa2a139b 100644
--- a/pkgs/development/rocm-modules/rccl/default.nix
+++ b/pkgs/development/rocm-modules/rccl/default.nix
@@ -40,7 +40,7 @@ in
 # infiniband ib_peer_mem support isn't in the mainline kernel but is carried by some distros
 stdenv.mkDerivation (finalAttrs: {
   pname = "rccl${clr.gpuArchSuffix}";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -58,7 +58,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rccl";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-3u7D3Gre1n+4Lf+cK+RMfCUM9c46pXZjdhGOrwIKM0w=";
+    hash = "sha256-Kpobn0fR7/mXGVWYjNQ35sToRWLfOQTHRbjuSYj1of4=";
   };
 
   requiredSystemFeatures = [ "big-parallel" ]; # Very resource intensive LTO
diff --git a/pkgs/development/rocm-modules/rdc/default.nix b/pkgs/development/rocm-modules/rdc/default.nix
index aaa0104c94d3..86113a40e82d 100644
--- a/pkgs/development/rocm-modules/rdc/default.nix
+++ b/pkgs/development/rocm-modules/rdc/default.nix
@@ -49,7 +49,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "rdc";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -65,7 +65,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rdc";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-oJS0fBeISpgjZkaMfFl/Yq7mPOsdaZDqiRjSPv7kT1Q=";
+    hash = "sha256-gF17mcbsqsL2K9pwTAVG9E6nVY4pi2lC88WyPa0xMes=";
   };
 
   patches = [
diff --git a/pkgs/development/rocm-modules/rocalution/default.nix b/pkgs/development/rocm-modules/rocalution/default.nix
index 08482070905f..f377b44bb81a 100644
--- a/pkgs/development/rocm-modules/rocalution/default.nix
+++ b/pkgs/development/rocm-modules/rocalution/default.nix
@@ -22,7 +22,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocalution";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -41,7 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rocALUTION";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-UkXbcbhaTulCqW1FZHwTyUZLFSnj7WmLYqlPqu5m6YM=";
+    hash = "sha256-7ZlY0GVIsUJE8OOAkQwQ4pXNHKzgCQomQOET9+TKQN4=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocblas/default.nix b/pkgs/development/rocm-modules/rocblas/default.nix
index 293cd0f966ee..d61f34b83e94 100644
--- a/pkgs/development/rocm-modules/rocblas/default.nix
+++ b/pkgs/development/rocm-modules/rocblas/default.nix
@@ -40,13 +40,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocblas${clr.gpuArchSuffix}";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rocBLAS";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-obKypbYmnSeOtOr7g0pxOz02YfzZ0bGugTtznkeHz14=";
+    hash = "sha256-oY6yELFnpnDDksu63Go88TGLAgC64tUaPIbaRgD2qus=";
   };
 
   outputs = [ "out" ] ++ lib.optional buildBenchmarks "benchmark" ++ lib.optional buildTests "test";
@@ -137,9 +137,9 @@ stdenv.mkDerivation (finalAttrs: {
   patches = [
     (fetchpatch {
       name = "Extend-rocBLAS-HIP-ISA-compatibility.patch";
-      url = "https://github.com/GZGavinZhao/rocm-libraries/commit/2850f22f80f90c9e498f520608a82989a4932ec3.patch";
-      hash = "sha256-SPsdEwGe+r8bQudkChRzBDAgu3tPQWFweZCgzh+4nOE=";
-      stripLen = 2;
+      url = "https://github.com/GZGavinZhao/rocm-libraries/commit/49f21f3cfe7eb4b8ac724eef81fa2cae97a3c22e.patch";
+      hash = "sha256-vAVVpTwt49lGHu2YopR1X68v5LwFOjUYuSC4ucBpFGg=";
+      relative = "projects/rocblas";
     })
   ];
 
diff --git a/pkgs/development/rocm-modules/rocdbgapi/default.nix b/pkgs/development/rocm-modules/rocdbgapi/default.nix
index b856c57ebb71..a7d9e68dd8e6 100644
--- a/pkgs/development/rocm-modules/rocdbgapi/default.nix
+++ b/pkgs/development/rocm-modules/rocdbgapi/default.nix
@@ -47,7 +47,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocdbgapi";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -62,7 +62,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "ROCdbgapi";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-RwYZJPwGhNtSSvmSgy0AsNTc98cav0/u9jH5f93sB9M=";
+    hash = "sha256-KqvhwfIv8pbr8WbnfAKl71fg5yxbwYcpzZcGU9Htdkc=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocfft/default.nix b/pkgs/development/rocm-modules/rocfft/default.nix
index 426faa1a9410..c33e74f0174b 100644
--- a/pkgs/development/rocm-modules/rocfft/default.nix
+++ b/pkgs/development/rocm-modules/rocfft/default.nix
@@ -20,13 +20,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocfft${clr.gpuArchSuffix}";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rocFFT";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-1Ho3b5NmnzfLhDnvH6FECigs6OgpbJrxw4EnqKyaHA0=";
+    hash = "sha256-AFBV5tlhNYH9+d0KG7mCjSifKfRt+8c1ie5wASTiQXM=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocgdb/default.nix b/pkgs/development/rocm-modules/rocgdb/default.nix
index debc2d12966f..ee2a1dc5a550 100644
--- a/pkgs/development/rocm-modules/rocgdb/default.nix
+++ b/pkgs/development/rocm-modules/rocgdb/default.nix
@@ -23,13 +23,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocgdb";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "ROCgdb";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-LDVGO++voqwVMM6RcRtgbXTUvFLTyg/TFdSZanv5Xdc=";
+    hash = "sha256-oml/HLExnnjh7+axeWPZRWecpwK2BnzVOaGvXYhrxKs=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocm-cmake/default.nix b/pkgs/development/rocm-modules/rocm-cmake/default.nix
index 311a848863a0..e24d92c09d74 100644
--- a/pkgs/development/rocm-modules/rocm-cmake/default.nix
+++ b/pkgs/development/rocm-modules/rocm-cmake/default.nix
@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocm-cmake";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rocm-cmake";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-im6UO0crO0Jc27zkTsdvJYPHit8IGlw/vDPGrmP1XqY=";
+    hash = "sha256-gY6jzIIN1pSXGbCMN6y35Q/VJgbIqWDRjD8aI/fc1L0=";
   };
 
   nativeBuildInputs = [ cmake ];
diff --git a/pkgs/development/rocm-modules/rocm-comgr/default.nix b/pkgs/development/rocm-modules/rocm-comgr/default.nix
index ed824ad5a94d..76be666ae174 100644
--- a/pkgs/development/rocm-modules/rocm-comgr/default.nix
+++ b/pkgs/development/rocm-modules/rocm-comgr/default.nix
@@ -30,20 +30,20 @@ stdenv.mkDerivation (finalAttrs: {
   patches = [
     # [Comgr] Extend ISA compatibility
     (fetchpatch {
-      sha256 = "sha256-dgow0kwSWM1TnkqWOZDRQrh5nuF8p5jbYyOLCpQsH4k=";
-      url = "https://github.com/GZGavinZhao/rocm-llvm-project/commit/a439e4f37ce71de48d4a979594276e3be0e6278f.patch";
+      sha256 = "sha256-X2VPGigK582J+a/u2Kg74w25/+CTpVWU9D3Eqgnb2PU=";
+      url = "https://github.com/GZGavinZhao/rocm-llvm-project/commit/7002dc04863d38c57cfd2e6fc60a1cf5a613fd8e.patch";
       relative = "amd/comgr";
     })
-    #[Comgr] Extend ISA compatibility for CCOB
+    # [Comgr] Extend ISA compatibility for CCOB
     (fetchpatch {
-      sha256 = "sha256-PCi0QHLiEQCTIYRtSSbhOjXANJ3zC3VLdMED1BEfQeg=";
-      url = "https://github.com/GZGavinZhao/rocm-llvm-project/commit/fa80abb77d5ae6f8d89ab956e7ebda9c802a804f.patch";
+      sha256 = "sha256-/50I+PqxL3oaQMqg5vR7+ibUcXO1SvfXBdw/sybRt1o=";
+      url = "https://github.com/GZGavinZhao/rocm-llvm-project/commit/2c1e44fc3eacadcafdd4ada3e3184a092b6f26c5.patch";
       relative = "amd/comgr";
     })
   ];
 
   postPatch = ''
-    substituteInPlace cmake/opencl_pch.cmake \
+    substituteInPlace cmake/opencl_header.cmake \
       --replace-fail "\''${CLANG_CMAKE_DIR}/../../../" "${llvm.clang-unwrapped.lib}"
   '';
 
diff --git a/pkgs/development/rocm-modules/rocm-core/default.nix b/pkgs/development/rocm-modules/rocm-core/default.nix
index 0902dc58ae60..153fb9593e40 100644
--- a/pkgs/development/rocm-modules/rocm-core/default.nix
+++ b/pkgs/development/rocm-modules/rocm-core/default.nix
@@ -17,13 +17,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocm-core";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rocm-core";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-3WQPR7v7LRoo4ioCXzkUEqnJdXA3uxSgoZZQvEG5Gqg=";
+    hash = "sha256-AqD6MByFAtY6IzAFXdCrCANPXqROaGHybdKixv3NbXE=";
   };
 
   patches = [
@@ -41,6 +41,7 @@ stdenv.mkDerivation (finalAttrs: {
     "-DROCM_VERSION=${finalAttrs.version}"
     "-DBUILD_ID=${finalAttrs.env.BUILD_ID}"
     "-DCMAKE_INSTALL_LIBDIR=lib"
+    "-DCMAKE_INSTALL_LIBEXECDIR=libexec"
     "-DCMAKE_INSTALL_INCLUDEDIR=include"
     "-DCMAKE_INSTALL_BINDIR=bin"
   ];
diff --git a/pkgs/development/rocm-modules/rocm-device-libs/default.nix b/pkgs/development/rocm-modules/rocm-device-libs/default.nix
index b66fe0bbe1f8..06a86f3a51d2 100644
--- a/pkgs/development/rocm-modules/rocm-device-libs/default.nix
+++ b/pkgs/development/rocm-modules/rocm-device-libs/default.nix
@@ -37,12 +37,6 @@ stdenv.mkDerivation (finalAttrs: {
 
   patches = [
     ./cmake.patch
-    (fetchpatch {
-      name = "cmake-4-compat-dont-set-cmp0053.patch";
-      url = "https://github.com/ROCm/llvm-project/commit/a18cc4c7cb51f94182b6018c7c73acde1b8ebddb.patch";
-      hash = "sha256-kp/Ld0IhjWgRbRR9R/CKdkI9ELvPkQSAMqPsAPFxzhM=";
-      relative = "amd/device-libs";
-    })
   ];
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocm-runtime/default.nix b/pkgs/development/rocm-modules/rocm-runtime/default.nix
index ed10cc0f993d..576125ea1163 100644
--- a/pkgs/development/rocm-modules/rocm-runtime/default.nix
+++ b/pkgs/development/rocm-modules/rocm-runtime/default.nix
@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocm-runtime";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "ROCR-Runtime";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-gqe1trGc/Cu1XFA4aYjOzFurUgebLbdTHEJi4iw2+kk=";
+    hash = "sha256-6xELKQ/uqAoorsCR/H7d8iNK7LsVNsW2DRRZo5cU7UM=";
   };
 
   cmakeBuildType = "RelWithDebInfo";
@@ -59,7 +59,7 @@ stdenv.mkDerivation (finalAttrs: {
     (fetchpatch {
       # [PATCH] rocr: Extend HIP ISA compatibility check
       sha256 = "sha256-8r2Lb5lBfFaZC3knCxfXGcnkzNv6JxOKyJn2rD5gus4=";
-      url = "https://github.com/GZGavinZhao/rocm-systems/commit/c13cd118fcc8e0bc9ae8de62897542dca7352b71.patch";
+      url = "https://github.com/GZGavinZhao/rocm-systems/commit/dcef23cf896f4dcbc7ed81abeaa4ec2208dcdd8c.patch";
       relative = "projects/rocr-runtime";
     })
     (fetchpatch {
@@ -67,17 +67,6 @@ stdenv.mkDerivation (finalAttrs: {
       url = "https://github.com/ROCm/ROCR-Runtime/commit/41bfc66aef437a5b349f71105fa4b907cc7e17d5.patch";
       hash = "sha256-A7VhPR3eSsmjq2cTBSjBIz9i//WiNjoXm0EsRKtF+ns=";
     })
-    (fetchpatch {
-      # [PATCH] hsakmt: bump vgpr count for gfx1151 (#1807) (#1986)
-      # We apply only the change that adds a GFX_VERSION_GFX1151 define but
-      # *not* the default vgpr change which causes crashes on old kernels
-      # This was later partially reverted in # [PATCH] Revert "hsakmt: bump vgpr count for gfx1151 (#1807) (#1986)"
-      name = "rocr-runtime-gfx1151-vgpr.patch";
-      url = "https://github.com/ROCm/rocm-systems/commit/09ba45b3f43ec333a84a0ca178fcd1e3ea9400a9.patch";
-      relative = "projects/rocr-runtime";
-      includes = [ "libhsakmt/src/libhsakmt.h" ];
-      hash = "sha256-/V5i+sr88n7fK4yNjR/FpY0ZpiEG5xAD6Oq+9ZOikd4=";
-    })
     (fetchpatch {
       # [PATCH] hsakmt: Expose and use CWSR and Control stack sizes (#2200)
       # Fixes potential mismatches between stack sizes configured in amdgpu kernel module
diff --git a/pkgs/development/rocm-modules/rocm-smi/default.nix b/pkgs/development/rocm-modules/rocm-smi/default.nix
index 838d6c81977e..4f14eb134c04 100644
--- a/pkgs/development/rocm-modules/rocm-smi/default.nix
+++ b/pkgs/development/rocm-modules/rocm-smi/default.nix
@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocm-smi";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rocm_smi_lib";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-/3to1+45n+D8snwrFVhApSMWp/rIXmTFK+BiA0mcKZo=";
+    hash = "sha256-IeOutA/Mpt/75VpdcfPnZrWvx6GG/JLaQNfBrNKb+Mw=";
   };
 
   propagatedBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocminfo/default.nix b/pkgs/development/rocm-modules/rocminfo/default.nix
index 0e9b2301b4ab..7a83e147b890 100644
--- a/pkgs/development/rocm-modules/rocminfo/default.nix
+++ b/pkgs/development/rocm-modules/rocminfo/default.nix
@@ -12,14 +12,14 @@
 }:
 
 stdenv.mkDerivation (finalAttrs: {
-  version = "7.1.1";
+  version = "7.2.0";
   pname = "rocminfo";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rocminfo";
     rev = "rocm-${finalAttrs.version}";
-    sha256 = "sha256-SuW34m2ep69+dj1rb0vqfQcK83FBtjlMLqSMCUZltU4=";
+    sha256 = "sha256-Md91iH2YWU7ziNE//xxKuk2RrXdujO9mY6SZY5R9TqA=";
   };
 
   strictDeps = true;
diff --git a/pkgs/development/rocm-modules/rocmlir/default.nix b/pkgs/development/rocm-modules/rocmlir/default.nix
index 47b5ae1ff3d2..ac6e997d5b9e 100644
--- a/pkgs/development/rocm-modules/rocmlir/default.nix
+++ b/pkgs/development/rocm-modules/rocmlir/default.nix
@@ -42,7 +42,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocmlir${suffix}";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -55,7 +55,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rocMLIR";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-A9vUvsEZrZlNEW4cscF66L48rJQ1zJYmIzwXQ2QzJ3s=";
+    hash = "sha256-gg37odxZETpH7HqY+44KQta6f0vxfcxhzMAqxU6vicY=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocprim/default.nix b/pkgs/development/rocm-modules/rocprim/default.nix
index 10df2cbb347f..c416214daa39 100644
--- a/pkgs/development/rocm-modules/rocprim/default.nix
+++ b/pkgs/development/rocm-modules/rocprim/default.nix
@@ -15,7 +15,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocprim";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -31,7 +31,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rocPRIM";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-/O6aEF23IaUSVzEDRqIlpYpxNCSTa/CwVDgXOhvTrQc=";
+    hash = "sha256-/6x4S8W4MbWY+M2b46Tmebj2echBIs31OnKq+50M21M=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocprofiler-register/default.nix b/pkgs/development/rocm-modules/rocprofiler-register/default.nix
index 821a4d9de569..c586a894845a 100644
--- a/pkgs/development/rocm-modules/rocprofiler-register/default.nix
+++ b/pkgs/development/rocm-modules/rocprofiler-register/default.nix
@@ -18,13 +18,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocprofiler-register";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rocprofiler-register";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-XlBz5rDMvnPxyCiqpEpIUWzbHJ1BbMzeCJTrP5kKf+w=";
+    hash = "sha256-6jr6dfmCjeP5PCNfLDMmh8IO9Hxz6RvLlacNwIWQduQ=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/development/rocm-modules/rocprofiler/default.nix b/pkgs/development/rocm-modules/rocprofiler/default.nix
index 9fa4f70b1138..e9259c045b9b 100644
--- a/pkgs/development/rocm-modules/rocprofiler/default.nix
+++ b/pkgs/development/rocm-modules/rocprofiler/default.nix
@@ -44,13 +44,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocprofiler";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rocprofiler";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-V+E+6D/mBW/NVdHSBVUVMG5Z/QOF73vfZ5rryW2VBtI=";
+    hash = "sha256-W32VAdtZdFmkHeUwyHIIHk8yRnABq6gUaHLZ9Bj8kYI=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/development/rocm-modules/rocr-debug-agent/default.nix b/pkgs/development/rocm-modules/rocr-debug-agent/default.nix
index f829f9e5a090..c2805349d87e 100644
--- a/pkgs/development/rocm-modules/rocr-debug-agent/default.nix
+++ b/pkgs/development/rocm-modules/rocr-debug-agent/default.nix
@@ -12,13 +12,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocr-debug-agent";
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rocr_debug_agent";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-zW92HyK4nGcDaJxmBaHeURAivs6dU059WxaywL6dAk4=";
+    hash = "sha256-w2Zg4kpuKy68DkVGsBTUsjRZoV/Y/Z3Q8s0oSIR3Ask=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocrand/default.nix b/pkgs/development/rocm-modules/rocrand/default.nix
index b4ac228ef5f0..83b1a77600e0 100644
--- a/pkgs/development/rocm-modules/rocrand/default.nix
+++ b/pkgs/development/rocm-modules/rocrand/default.nix
@@ -15,7 +15,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocrand${clr.gpuArchSuffix}";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -31,7 +31,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rocRAND";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-QhHxpjr3SqeSSMS4QmnDq8zIxEeUtrgwb9JG84jfJgY=";
+    hash = "sha256-BX1A74ZBXE0fqYqA7WijezCezUOpEciUm6k2vhFQlA4=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocsolver/default.nix b/pkgs/development/rocm-modules/rocsolver/default.nix
index bf19c63e8dfe..2e91b9b157e1 100644
--- a/pkgs/development/rocm-modules/rocsolver/default.nix
+++ b/pkgs/development/rocm-modules/rocsolver/default.nix
@@ -37,7 +37,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocsolver${clr.gpuArchSuffix}";
-  version = "7.1.0";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -53,7 +53,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rocSOLVER";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-U5RrV90UZiIUgLYleLJ6rFHWRFMQNyh3zezRusj7T0M=";
+    hash = "sha256-aCmNTF8P0Y7piPkRnu/+DWFhTd7X8mDcaQpotfw/4hM=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/rocsparse/default.nix b/pkgs/development/rocm-modules/rocsparse/default.nix
index c6bfded26eb0..3eb12cc60ad7 100644
--- a/pkgs/development/rocm-modules/rocsparse/default.nix
+++ b/pkgs/development/rocm-modules/rocsparse/default.nix
@@ -7,6 +7,7 @@
   cmake,
   rocm-cmake,
   rocprim,
+  rocblas,
   clr,
   gfortran,
   gtest,
@@ -19,7 +20,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocsparse${clr.gpuArchSuffix}";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -35,7 +36,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rocSPARSE";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-ZNeFslIQZlFCNqWHmrpcxDuOvVu1cjiEd8b6ZNXcZzo=";
+    hash = "sha256-jmrX1a09DlQTkuXwkrInt9pKX5pk3oCO88S0pKXXhO0=";
   };
 
   nativeBuildInputs = [
@@ -48,6 +49,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   buildInputs = [
     rocprim
+    rocblas
   ]
   ++ lib.optionals (buildTests || buildBenchmarks) [
     gtest
diff --git a/pkgs/development/rocm-modules/rocthrust/default.nix b/pkgs/development/rocm-modules/rocthrust/default.nix
index 74f7c0f24a6e..2887e5789a9b 100644
--- a/pkgs/development/rocm-modules/rocthrust/default.nix
+++ b/pkgs/development/rocm-modules/rocthrust/default.nix
@@ -15,7 +15,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocthrust";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -31,7 +31,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rocThrust";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-Gncy0wvN8M4JSmnjbxaED+M9rLo4A/7LCCq/6temiZU=";
+    hash = "sha256-BDxFeCR2FfZI+TGMi2jBDHORCoAnFwk8WGGKMckCkmU=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/roctracer/default.nix b/pkgs/development/rocm-modules/roctracer/default.nix
index cfd1045e3ab8..c6326d3b7e63 100644
--- a/pkgs/development/rocm-modules/roctracer/default.nix
+++ b/pkgs/development/rocm-modules/roctracer/default.nix
@@ -19,7 +19,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "roctracer";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
diff --git a/pkgs/development/rocm-modules/rocwmma/default.nix b/pkgs/development/rocm-modules/rocwmma/default.nix
index 929df7d207d0..16637ef0c3b3 100644
--- a/pkgs/development/rocm-modules/rocwmma/default.nix
+++ b/pkgs/development/rocm-modules/rocwmma/default.nix
@@ -19,7 +19,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "rocwmma";
-  version = "7.1.1";
+  version = "7.2.0";
 
   outputs = [
     "out"
@@ -38,7 +38,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rocWMMA";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-6hvdq3J8UhldcyNqXxi9UEF+P0RgG8o5YdIZLzvpgXw=";
+    hash = "sha256-O+P+pobPnlKnmJQylFp/qUQLE1kJKbxjMWyGS6lc3Mo=";
   };
 
   patches = lib.optionals (buildTests || buildBenchmarks) [
diff --git a/pkgs/development/rocm-modules/rpp/default.nix b/pkgs/development/rocm-modules/rpp/default.nix
index 7fd682a066d7..8a2f54277b38 100644
--- a/pkgs/development/rocm-modules/rpp/default.nix
+++ b/pkgs/development/rocm-modules/rpp/default.nix
@@ -29,13 +29,13 @@ stdenv.mkDerivation (finalAttrs: {
         "cpu"
     );
 
-  version = "7.1.1";
+  version = "7.2.0";
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "rpp";
     rev = "rocm-${finalAttrs.version}";
-    hash = "sha256-ZlJRV57ybPsczvoWwd5vr2n7EKje0vj2GJYsvVY+qas=";
+    hash = "sha256-mET9nZReO3BrNZkcNeB7hOwIQaVZ8OD7lPD3b1Jot2k=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/rocm-modules/tensile/default.nix b/pkgs/development/rocm-modules/tensile/default.nix
index 306174ddf1d4..954b0c51cbe8 100644
--- a/pkgs/development/rocm-modules/tensile/default.nix
+++ b/pkgs/development/rocm-modules/tensile/default.nix
@@ -18,14 +18,14 @@
 
 buildPythonPackage rec {
   pname = "tensile";
-  version = "7.1.1";
+  version = "7.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ROCm";
     repo = "Tensile";
     rev = "rocm-${version}";
-    hash = "sha256-uYLlbtXrc8m8/RpMbP7WaS7VYGIUm2LHYzv00DZAzvE=";
+    hash = "sha256-pTuEeu+0E+RlpdeFho0mJmx/V/tou/ZRLYX9KoWEPpA=";
   };
 
   # TODO: It should be possible to run asm caps test ONCE for all supported arches
@@ -58,8 +58,9 @@ buildPythonPackage rec {
     ./tensile-create-library-dont-copy-twice.diff
     (fetchpatch {
       # [PATCH] Extend Tensile HIP ISA compatibility
-      sha256 = "sha256-d+fVf/vz+sxGqJ96vuxe0jRMgbC5K6j5FQ5SJ1e3Sl8=";
-      url = "https://github.com/GZGavinZhao/Tensile/commit/855cb15839849addb0816a6dde45772034a3e41f.patch";
+      sha256 = "sha256-ZHXNYSeLkhhNDaIfdqQm68Pxmh1shUL7mAVmh8/I6Xk=";
+      url = "https://github.com/GZGavinZhao/rocm-libraries/commit/1f7135dfc0cdb175c8f0e5eb71b2d24699942873.patch";
+      relative = "shared/tensile";
     })
   ];
 

From 331070f87dccf834b3534a5ca5c15b70b74a0f5e Mon Sep 17 00:00:00 2001
From: Luna Nova <git@lunnova.dev>
Date: Sat, 28 Feb 2026 10:04:16 -0800
Subject: [PATCH 10/74] rocmPackages.llvm: revert loop unrolling pessimisation

Reverting a patch that caused terrible performance for some
large langle mangle workloads.

See also rocm-systems issue 2865 and rocm llvm-project pull 1349
---
 pkgs/development/rocm-modules/llvm/default.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/pkgs/development/rocm-modules/llvm/default.nix b/pkgs/development/rocm-modules/llvm/default.nix
index aa08cba5a250..b67e4d8fc62c 100644
--- a/pkgs/development/rocm-modules/llvm/default.nix
+++ b/pkgs/development/rocm-modules/llvm/default.nix
@@ -295,6 +295,16 @@ in
 overrideLlvmPackagesRocm (s: {
   libllvm = (s.prev.libllvm.override { }).overrideAttrs (old: {
     patches = old.patches ++ [
+      (fetchpatch {
+        # Revert of a patch that cause perf regression by pessimising loop unrolling decisions
+        # See PR and issue discussion
+        # https://github.com/ROCm/rocm-systems/issues/2865 https://github.com/ROCm/llvm-project/pull/1349
+        name = "rocm-llvm-revert-unrolling-regression.patch";
+        url = "https://github.com/ROCm/llvm-project/commit/f58b06dce1f9c15707c5f808fd002e18c2accf7e.patch";
+        hash = "sha256-pH+3C7PSDqNfOF014sA5Rvm+sc2IJMQJfysS2bvj/o0=";
+        # stripLen instead of relative to avoid filterdiff mangling /dev/null on the deleted test file
+        stripLen = 1;
+      })
       ./perf-increase-namestring-size.patch
       # TODO: consider reapplying "Don't include aliases in RegisterClassInfo::IgnoreCSRForAllocOrder"
       # it was reverted as it's a pessimization for non-GPU archs, but this compiler

From 3376d1efb5177861e3a82cc830322b75e8d65d90 Mon Sep 17 00:00:00 2001
From: Luna Nova <git@lunnova.dev>
Date: Sat, 28 Feb 2026 10:11:35 -0800
Subject: [PATCH 11/74] rocmPackages.miopen: add updateScript for DVC S3 kdb
 files

Files were moved to DVC in rocm-libraries PR 1594
---
 .../rocm-modules/miopen/default.nix           |  1 +
 pkgs/development/rocm-modules/miopen/kdbs.nix |  1 +
 .../development/rocm-modules/miopen/update.sh | 48 +++++++++++++++++++
 3 files changed, 50 insertions(+)
 create mode 100755 pkgs/development/rocm-modules/miopen/update.sh

diff --git a/pkgs/development/rocm-modules/miopen/default.nix b/pkgs/development/rocm-modules/miopen/default.nix
index 301b847cf3dd..90845f67582e 100644
--- a/pkgs/development/rocm-modules/miopen/default.nix
+++ b/pkgs/development/rocm-modules/miopen/default.nix
@@ -285,6 +285,7 @@ stdenv.mkDerivation (finalAttrs: {
       inherit frugally-deep nlohmann_json;
     };
   };
+  passthru.updateScript = ./update.sh;
 
   meta = {
     description = "Machine intelligence library for ROCm";
diff --git a/pkgs/development/rocm-modules/miopen/kdbs.nix b/pkgs/development/rocm-modules/miopen/kdbs.nix
index 9f9c627633cc..d4156a97324d 100644
--- a/pkgs/development/rocm-modules/miopen/kdbs.nix
+++ b/pkgs/development/rocm-modules/miopen/kdbs.nix
@@ -1,3 +1,4 @@
+# Generated by update.sh
 {
   gfx1030 = {
     url = "https://therock-dvc.s3.amazonaws.com/rocm-libraries/files/md5/22/c4bd38cc34d3906add061ee57b099b";
diff --git a/pkgs/development/rocm-modules/miopen/update.sh b/pkgs/development/rocm-modules/miopen/update.sh
new file mode 100755
index 000000000000..4baef06dd1b0
--- /dev/null
+++ b/pkgs/development/rocm-modules/miopen/update.sh
@@ -0,0 +1,48 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p curl jq nix common-updater-scripts
+
+set -euo pipefail
+
+gh_curl() { curl ${GITHUB_TOKEN:+-u ":$GITHUB_TOKEN"} -sf "$@"; }
+
+version="${1:-$(gh_curl "https://api.github.com/repos/ROCm/MIOpen/releases?per_page=4" \
+  | jq -re 'map(.tag_name // .name)
+    | map(select(test("^rocm-[0-9]+\\.[0-9]+(\\.[0-9]+)?$")))
+    | first | ltrimstr("rocm-")')}"
+
+# main source version
+echo "Updating MIOpen to $version" >&2
+update-source-version rocmPackages.miopen "$version" --ignore-same-hash
+
+# kdbs.nix from s3 bucket
+cd "$(dirname "${BASH_SOURCE[0]}")"
+bucket="https://therock-dvc.s3.amazonaws.com/rocm-libraries/files/md5"
+
+# Fetch directory listing; extract name + download_url for .dvc files
+dvc_entries=$(gh_curl "https://api.github.com/repos/ROCm/MIOpen/contents/src/kernels?ref=rocm-${version}" \
+  | jq -r '.[] | select(.name | endswith(".kdb.bz2.dvc")) | "\(.name)\t\(.download_url)"')
+
+[[ -n "$dvc_entries" ]] || { echo "No .kdb.bz2.dvc files found, upstream likely changed packaging again" >&2; exit 1; }
+
+{
+  echo "# Generated by update.sh"
+  echo "{"
+
+  while IFS=$'\t' read -r dvc_file raw_url; do
+    arch="${dvc_file%.kdb.bz2.dvc}"
+    md5=$(curl -sf "$raw_url" | awk '/- md5:/{print $3}')
+    url="${bucket}/${md5:0:2}/${md5:2}"
+    sri=$(nix --extra-experimental-features nix-command store prefetch-file --json "$url" --name "${arch}.kdb.bz2" | jq -r .hash)
+    echo "  $arch: $sri" >&2
+    cat <<EOF
+  $arch = {
+    url = "$url";
+    hash = "$sri";
+  };
+EOF
+  done <<< "$dvc_entries"
+
+  echo "}"
+} > kdbs.nix
+
+echo "Wrote kdbs.nix" >&2

From 1675da7003baff3dd107d166a13b47a23a9161c6 Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Sun, 1 Mar 2026 16:58:53 -0800
Subject: [PATCH 12/74] paratype-pt-{sans,serif,mono}: use installFonts hook

---
 pkgs/by-name/pa/paratype-pt-mono/package.nix  | 9 ++-------
 pkgs/by-name/pa/paratype-pt-sans/package.nix  | 9 ++-------
 pkgs/by-name/pa/paratype-pt-serif/package.nix | 9 ++-------
 3 files changed, 6 insertions(+), 21 deletions(-)

diff --git a/pkgs/by-name/pa/paratype-pt-mono/package.nix b/pkgs/by-name/pa/paratype-pt-mono/package.nix
index a0573a129183..9ac174af376b 100644
--- a/pkgs/by-name/pa/paratype-pt-mono/package.nix
+++ b/pkgs/by-name/pa/paratype-pt-mono/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenvNoCC,
   fetchFromGitHub,
+  installFonts,
 }:
 
 stdenvNoCC.mkDerivation {
@@ -16,13 +17,7 @@ stdenvNoCC.mkDerivation {
     rootDir = "ofl/ptmono";
   };
 
-  installPhase = ''
-    runHook preInstall
-
-    install -Dm644 *.ttf -t $out/share/fonts/truetype
-
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     homepage = "https://www.paratype.ru/catalog/font/pt/pt-mono";
diff --git a/pkgs/by-name/pa/paratype-pt-sans/package.nix b/pkgs/by-name/pa/paratype-pt-sans/package.nix
index 000ac93e602b..f9743d5a107e 100644
--- a/pkgs/by-name/pa/paratype-pt-sans/package.nix
+++ b/pkgs/by-name/pa/paratype-pt-sans/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenvNoCC,
   fetchFromGitHub,
+  installFonts,
 }:
 
 stdenvNoCC.mkDerivation {
@@ -16,13 +17,7 @@ stdenvNoCC.mkDerivation {
     rootDir = "ofl/ptsans";
   };
 
-  installPhase = ''
-    runHook preInstall
-
-    install -Dm644 *.ttf -t $out/share/fonts/truetype
-
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     homepage = "https://www.paratype.ru/catalog/font/pt/pt-sans";
diff --git a/pkgs/by-name/pa/paratype-pt-serif/package.nix b/pkgs/by-name/pa/paratype-pt-serif/package.nix
index f84c4f0df42b..122d4cb21b57 100644
--- a/pkgs/by-name/pa/paratype-pt-serif/package.nix
+++ b/pkgs/by-name/pa/paratype-pt-serif/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenvNoCC,
   fetchFromGitHub,
+  installFonts,
 }:
 
 stdenvNoCC.mkDerivation {
@@ -16,13 +17,7 @@ stdenvNoCC.mkDerivation {
     rootDir = "ofl/ptserif";
   };
 
-  installPhase = ''
-    runHook preInstall
-
-    install -Dm644 *.ttf -t $out/share/fonts/truetype
-
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     homepage = "https://www.paratype.ru/catalog/font/pt/pt-serif";

From ac37ca2cc9b1756c1723d1f986efe6bdaa63e93f Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Sun, 1 Mar 2026 17:00:06 -0800
Subject: [PATCH 13/74] komika-fonts: use installFonts hook

---
 pkgs/by-name/ko/komika-fonts/package.nix | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/ko/komika-fonts/package.nix b/pkgs/by-name/ko/komika-fonts/package.nix
index 76b47f9d258b..c8a500f4ce71 100644
--- a/pkgs/by-name/ko/komika-fonts/package.nix
+++ b/pkgs/by-name/ko/komika-fonts/package.nix
@@ -2,6 +2,7 @@
   stdenvNoCC,
   lib,
   fetchzip,
+  installFonts,
   variants ? [
     "display"
     "hand"
@@ -74,11 +75,8 @@ stdenvNoCC.mkDerivation {
   sourceRoot = ".";
 
   srcs = map (variant: fetchFont fontMap.${variant}) selectedFonts;
-  installPhase = ''
-    runHook preInstall
-    install -Dm444 **/*.ttf -t $out/share/fonts/ttf
-    runHook postInstall
-  '';
+
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     homepage = "https://pedroreina.net/apostrophiclab/";

From e0125d45950bda1d44b8f102a19f26ee06b3f7ef Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Sun, 1 Mar 2026 17:01:07 -0800
Subject: [PATCH 14/74] komikahuna: use installFonts hook

---
 pkgs/by-name/ko/komikahuna/package.nix | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/ko/komikahuna/package.nix b/pkgs/by-name/ko/komikahuna/package.nix
index be5a71eba227..ef0317e48581 100644
--- a/pkgs/by-name/ko/komikahuna/package.nix
+++ b/pkgs/by-name/ko/komikahuna/package.nix
@@ -2,6 +2,7 @@
   stdenvNoCC,
   lib,
   fetchzip,
+  installFonts,
 }:
 
 stdenvNoCC.mkDerivation {
@@ -14,11 +15,7 @@ stdenvNoCC.mkDerivation {
     stripRoot = false;
   };
 
-  installPhase = ''
-    runHook preInstall
-    install -Dm444 *.ttf -t $out/share/fonts/ttf
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     homepage = "https://pedroreina.net/apostrophiclab/0049-Komikahuna/komikahuna.html";

From ccc911be834079ed7c3cc203469c5dfb77480a00 Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Sun, 1 Mar 2026 17:02:07 -0800
Subject: [PATCH 15/74] komikandy: use installFonts hook

---
 pkgs/by-name/ko/komikandy/package.nix | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/ko/komikandy/package.nix b/pkgs/by-name/ko/komikandy/package.nix
index fa3ee8d69c34..65891d45df6e 100644
--- a/pkgs/by-name/ko/komikandy/package.nix
+++ b/pkgs/by-name/ko/komikandy/package.nix
@@ -2,6 +2,7 @@
   stdenvNoCC,
   lib,
   fetchzip,
+  installFonts,
 }:
 
 stdenvNoCC.mkDerivation {
@@ -14,11 +15,7 @@ stdenvNoCC.mkDerivation {
     stripRoot = false;
   };
 
-  installPhase = ''
-    runHook preInstall
-    install -Dm444 *.ttf -t $out/share/fonts/ttf
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     homepage = "https://pedroreina.net/apostrophiclab/0122-Komikandy/komikandy.html";

From 12689f98681d4c4307283d0a293d8e87543ab2f6 Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Sun, 1 Mar 2026 17:02:58 -0800
Subject: [PATCH 16/74] komikazba: use installFonts hook

---
 pkgs/by-name/ko/komikazba/package.nix | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/ko/komikazba/package.nix b/pkgs/by-name/ko/komikazba/package.nix
index 159ef68da2cc..ccbac628ddc3 100644
--- a/pkgs/by-name/ko/komikazba/package.nix
+++ b/pkgs/by-name/ko/komikazba/package.nix
@@ -2,6 +2,7 @@
   stdenvNoCC,
   lib,
   fetchzip,
+  installFonts,
 }:
 
 stdenvNoCC.mkDerivation {
@@ -14,11 +15,7 @@ stdenvNoCC.mkDerivation {
     stripRoot = false;
   };
 
-  installPhase = ''
-    runHook preInstall
-    install -Dm444 *.ttf -t $out/share/fonts/ttf
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     homepage = "https://pedroreina.net/apostrophiclab/0052-Komikazba/komikazba.html";

From 52b52848b8a909cedfa09ce7a4cce3f5c25aa98a Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Sun, 1 Mar 2026 17:03:44 -0800
Subject: [PATCH 17/74] komikaze: use installFonts hook

---
 pkgs/by-name/ko/komikaze/package.nix | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/ko/komikaze/package.nix b/pkgs/by-name/ko/komikaze/package.nix
index a203174dc643..3f5a7f86cdfa 100644
--- a/pkgs/by-name/ko/komikaze/package.nix
+++ b/pkgs/by-name/ko/komikaze/package.nix
@@ -2,6 +2,7 @@
   stdenvNoCC,
   lib,
   fetchzip,
+  installFonts,
 }:
 
 stdenvNoCC.mkDerivation {
@@ -14,11 +15,7 @@ stdenvNoCC.mkDerivation {
     stripRoot = false;
   };
 
-  installPhase = ''
-    runHook preInstall
-    install -Dm444 *.ttf -t $out/share/fonts/ttf
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     homepage = "https://pedroreina.net/apostrophiclab/0045-Komikaze/komikaze.html";

From f49b4695399038497ce730a3b5fb9e818a807885 Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Sun, 1 Mar 2026 17:04:44 -0800
Subject: [PATCH 18/74] komikazoom: use installFonts hook

---
 pkgs/by-name/ko/komikazoom/package.nix | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/ko/komikazoom/package.nix b/pkgs/by-name/ko/komikazoom/package.nix
index 5bc73917c794..64d5767dfe36 100644
--- a/pkgs/by-name/ko/komikazoom/package.nix
+++ b/pkgs/by-name/ko/komikazoom/package.nix
@@ -2,6 +2,7 @@
   stdenvNoCC,
   lib,
   fetchzip,
+  installFonts,
 }:
 
 stdenvNoCC.mkDerivation {
@@ -14,11 +15,7 @@ stdenvNoCC.mkDerivation {
     stripRoot = false;
   };
 
-  installPhase = ''
-    runHook preInstall
-    install -Dm444 *.ttf -t $out/share/fonts/ttf
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   meta = {
     homepage = "https://pedroreina.net/apostrophiclab/0046-Komikazoom/komikazoom.html";

From 0f9435591dddbe077848e11f228023576b2d7e89 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Mon, 2 Mar 2026 03:47:14 +0000
Subject: [PATCH 19/74] hydralauncher: 3.8.3 -> 3.9.0

---
 pkgs/by-name/hy/hydralauncher/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/hy/hydralauncher/package.nix b/pkgs/by-name/hy/hydralauncher/package.nix
index 89578079812b..39f2726a8e46 100644
--- a/pkgs/by-name/hy/hydralauncher/package.nix
+++ b/pkgs/by-name/hy/hydralauncher/package.nix
@@ -6,10 +6,10 @@
 }:
 let
   pname = "hydralauncher";
-  version = "3.8.3";
+  version = "3.9.0";
   src = fetchurl {
     url = "https://github.com/hydralauncher/hydra/releases/download/v${version}/hydralauncher-${version}.AppImage";
-    hash = "sha256-1oePQ33Bpt2GKEQgCIVAVjnF04rLY9fraUuodoLlx8o=";
+    hash = "sha256-5UyS/SfEol0tnKTnELr7goj3ATJXUQPqYsR1dSdV3tY=";
   };
 
   appimageContents = appimageTools.extractType2 { inherit pname src version; };

From 11698393d89584eb24686f29fcd5f0338ac7f0ae Mon Sep 17 00:00:00 2001
From: pancaek <20342389+pancaek@users.noreply.github.com>
Date: Sun, 1 Mar 2026 17:15:20 -0800
Subject: [PATCH 20/74] atkinson-hyperlegible-{next,mono}: use installFonts
 hook

---
 pkgs/by-name/at/atkinson-hyperlegible-mono/package.nix | 8 ++++----
 pkgs/by-name/at/atkinson-hyperlegible-next/package.nix | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/pkgs/by-name/at/atkinson-hyperlegible-mono/package.nix b/pkgs/by-name/at/atkinson-hyperlegible-mono/package.nix
index ac492f1dee9f..e8992b04834e 100644
--- a/pkgs/by-name/at/atkinson-hyperlegible-mono/package.nix
+++ b/pkgs/by-name/at/atkinson-hyperlegible-mono/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenvNoCC,
   fetchFromGitHub,
+  installFonts,
 }:
 
 stdenvNoCC.mkDerivation {
@@ -15,14 +16,13 @@ stdenvNoCC.mkDerivation {
     hash = "sha256-V0zWbNYT3RGO9vjX+GHfO38ywMozcZVJkBZH+8G5sC0=";
   };
 
+  nativeBuildInputs = [ installFonts ];
+
   dontBuild = true;
 
+  # default installPhase invokes python, but we still want the font hook to run
   installPhase = ''
     runHook preInstall
-
-    install -Dm644 -t $out/share/fonts/opentype fonts/otf/*
-    install -Dm644 -t $out/share/fonts/variable fonts/variable/*
-
     runHook postInstall
   '';
 
diff --git a/pkgs/by-name/at/atkinson-hyperlegible-next/package.nix b/pkgs/by-name/at/atkinson-hyperlegible-next/package.nix
index 639b4d5040da..008735231ebc 100644
--- a/pkgs/by-name/at/atkinson-hyperlegible-next/package.nix
+++ b/pkgs/by-name/at/atkinson-hyperlegible-next/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenvNoCC,
   fetchFromGitHub,
+  installFonts,
 }:
 
 stdenvNoCC.mkDerivation {
@@ -17,12 +18,11 @@ stdenvNoCC.mkDerivation {
 
   dontBuild = true;
 
+  nativeBuildInputs = [ installFonts ];
+
+  # default installPhase invokes python, but we still want the font hook to run
   installPhase = ''
     runHook preInstall
-
-    install -Dm644 -t $out/share/fonts/opentype fonts/otf/*
-    install -Dm644 -t $out/share/fonts/variable fonts/variable/*
-
     runHook postInstall
   '';
 

From efc912e9d9d6a11aee8ac492e37f2ba44b06e4e5 Mon Sep 17 00:00:00 2001
From: kraftnix <kraftnix@protonmail.com>
Date: Mon, 2 Mar 2026 15:07:05 +0100
Subject: [PATCH 21/74] karma: 0.115 -> 0.125

---
 pkgs/by-name/ka/karma/package.nix | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/ka/karma/package.nix b/pkgs/by-name/ka/karma/package.nix
index b877aa8249d4..79e2c73642ab 100644
--- a/pkgs/by-name/ka/karma/package.nix
+++ b/pkgs/by-name/ka/karma/package.nix
@@ -10,20 +10,20 @@
 
 buildGoModule (finalAttrs: {
   pname = "karma";
-  version = "0.115";
+  version = "0.125";
 
   src = fetchFromGitHub {
     owner = "prymitive";
     repo = "karma";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-SW/nmJcSk/LmoKLuD5stsSaRGaJctl6hVSODNCT9i64=";
+    hash = "sha256-/Iv7/CUwY/RlunXOd9H5xu4AzL/iXUEu+extyqinJ7M=";
   };
 
-  vendorHash = "sha256-Y55AaB8KRV+Tq/Trg1BOOwziyt+yJ2b3iVYA6bDebQY=";
+  vendorHash = "sha256-O+f8drIs+XOvLo8ifB/SHkBBxj0KPg2H1MAcCyJvLe4=";
 
   npmDeps = fetchNpmDeps {
     src = "${finalAttrs.src}/ui";
-    hash = "sha256-/L+eU0xwaopL2im9epiZiZ23dUqJ+3OwhWw/rIZC6hI=";
+    hash = "sha256-wcQ6QWoRm+aQRf1L7xkmQIbYnfN+Fr/D0LeRlEK5nbE=";
   };
 
   npmRoot = "ui";
@@ -65,6 +65,9 @@ buildGoModule (finalAttrs: {
     mainProgram = "karma";
     homepage = "https://karma-dashboard.io/";
     license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ nukaduka ];
+    maintainers = with lib.maintainers; [
+      nukaduka
+      kraftnix
+    ];
   };
 })

From 3bc0e6a4c5fc9c8652694b0eaccebd8b1c419f5e Mon Sep 17 00:00:00 2001
From: Luna Nova <git@lunnova.dev>
Date: Mon, 2 Mar 2026 09:23:58 -0800
Subject: [PATCH 22/74] rocmPackages: sha256 = -> hash =

---
 pkgs/development/rocm-modules/clr/default.nix |  2 +-
 .../development/rocm-modules/llvm/default.nix |  2 +-
 .../rocm-modules/rocm-comgr/default.nix       |  4 +-
 .../rocm-modules/rocm-runtime/default.nix     |  2 +-
 .../rocm-modules/rocminfo/default.nix         |  2 +-
 .../rocm-modules/rocsparse/deps.nix           | 48 +++++++++----------
 .../rocm-modules/tensile/default.nix          |  2 +-
 7 files changed, 31 insertions(+), 31 deletions(-)

diff --git a/pkgs/development/rocm-modules/clr/default.nix b/pkgs/development/rocm-modules/clr/default.nix
index 8907b0050195..71451c81e443 100644
--- a/pkgs/development/rocm-modules/clr/default.nix
+++ b/pkgs/development/rocm-modules/clr/default.nix
@@ -148,7 +148,7 @@ stdenv.mkDerivation (finalAttrs: {
     ./cmake-find-x11-libgl.patch
     (fetchpatch {
       # [PATCH] rocclr: Extend HIP ISA compatibility checks
-      sha256 = "sha256-3MsDL+OQg24wH1RDhbao74RuIbzEAmduwla9KOPzQ/M=";
+      hash = "sha256-3MsDL+OQg24wH1RDhbao74RuIbzEAmduwla9KOPzQ/M=";
       url = "https://github.com/GZGavinZhao/rocm-systems/commit/039cb23b24d739adb8c0f9de8b550d9f557de031.patch";
       relative = "projects/clr";
     })
diff --git a/pkgs/development/rocm-modules/llvm/default.nix b/pkgs/development/rocm-modules/llvm/default.nix
index b67e4d8fc62c..161f30355735 100644
--- a/pkgs/development/rocm-modules/llvm/default.nix
+++ b/pkgs/development/rocm-modules/llvm/default.nix
@@ -385,7 +385,7 @@ overrideLlvmPackagesRocm (s: {
           ./perf-shorten-gcclib-include-paths.patch
           (fetchpatch {
             # [ClangOffloadBundler]: Add GetBundleIDsInFile to OffloadBundler
-            sha256 = "sha256-OsarDZXuJ5vAXTP4i0NBUeK/r6tQPumaqmMWkf29UtM=";
+            hash = "sha256-OsarDZXuJ5vAXTP4i0NBUeK/r6tQPumaqmMWkf29UtM=";
             url = "https://github.com/GZGavinZhao/rocm-llvm-project/commit/c7de294b0d1d25f277f9d1cbb2c9e09c7600e210.patch";
             relative = "clang";
           })
diff --git a/pkgs/development/rocm-modules/rocm-comgr/default.nix b/pkgs/development/rocm-modules/rocm-comgr/default.nix
index 76be666ae174..4e1d5432a178 100644
--- a/pkgs/development/rocm-modules/rocm-comgr/default.nix
+++ b/pkgs/development/rocm-modules/rocm-comgr/default.nix
@@ -30,13 +30,13 @@ stdenv.mkDerivation (finalAttrs: {
   patches = [
     # [Comgr] Extend ISA compatibility
     (fetchpatch {
-      sha256 = "sha256-X2VPGigK582J+a/u2Kg74w25/+CTpVWU9D3Eqgnb2PU=";
+      hash = "sha256-X2VPGigK582J+a/u2Kg74w25/+CTpVWU9D3Eqgnb2PU=";
       url = "https://github.com/GZGavinZhao/rocm-llvm-project/commit/7002dc04863d38c57cfd2e6fc60a1cf5a613fd8e.patch";
       relative = "amd/comgr";
     })
     # [Comgr] Extend ISA compatibility for CCOB
     (fetchpatch {
-      sha256 = "sha256-/50I+PqxL3oaQMqg5vR7+ibUcXO1SvfXBdw/sybRt1o=";
+      hash = "sha256-/50I+PqxL3oaQMqg5vR7+ibUcXO1SvfXBdw/sybRt1o=";
       url = "https://github.com/GZGavinZhao/rocm-llvm-project/commit/2c1e44fc3eacadcafdd4ada3e3184a092b6f26c5.patch";
       relative = "amd/comgr";
     })
diff --git a/pkgs/development/rocm-modules/rocm-runtime/default.nix b/pkgs/development/rocm-modules/rocm-runtime/default.nix
index 576125ea1163..6ee5a951aaf1 100644
--- a/pkgs/development/rocm-modules/rocm-runtime/default.nix
+++ b/pkgs/development/rocm-modules/rocm-runtime/default.nix
@@ -58,7 +58,7 @@ stdenv.mkDerivation (finalAttrs: {
     ./queue-failure.patch
     (fetchpatch {
       # [PATCH] rocr: Extend HIP ISA compatibility check
-      sha256 = "sha256-8r2Lb5lBfFaZC3knCxfXGcnkzNv6JxOKyJn2rD5gus4=";
+      hash = "sha256-8r2Lb5lBfFaZC3knCxfXGcnkzNv6JxOKyJn2rD5gus4=";
       url = "https://github.com/GZGavinZhao/rocm-systems/commit/dcef23cf896f4dcbc7ed81abeaa4ec2208dcdd8c.patch";
       relative = "projects/rocr-runtime";
     })
diff --git a/pkgs/development/rocm-modules/rocminfo/default.nix b/pkgs/development/rocm-modules/rocminfo/default.nix
index 7a83e147b890..712cae5a0303 100644
--- a/pkgs/development/rocm-modules/rocminfo/default.nix
+++ b/pkgs/development/rocm-modules/rocminfo/default.nix
@@ -19,7 +19,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "ROCm";
     repo = "rocminfo";
     rev = "rocm-${finalAttrs.version}";
-    sha256 = "sha256-Md91iH2YWU7ziNE//xxKuk2RrXdujO9mY6SZY5R9TqA=";
+    hash = "sha256-Md91iH2YWU7ziNE//xxKuk2RrXdujO9mY6SZY5R9TqA=";
   };
 
   strictDeps = true;
diff --git a/pkgs/development/rocm-modules/rocsparse/deps.nix b/pkgs/development/rocm-modules/rocsparse/deps.nix
index e39b6de39673..00096ca4bf7b 100644
--- a/pkgs/development/rocm-modules/rocsparse/deps.nix
+++ b/pkgs/development/rocm-modules/rocsparse/deps.nix
@@ -6,7 +6,7 @@
 
 {
   matrix-01 = fetchzip {
-    sha256 = "sha256-AHur5ZIDZTFRrO2GV0ieXrffq4KUiGWiZ59pv0fUtEQ=";
+    hash = "sha256-AHur5ZIDZTFRrO2GV0ieXrffq4KUiGWiZ59pv0fUtEQ=";
 
     urls = [
       "${mirror1}/SNAP/amazon0312.tar.gz"
@@ -15,7 +15,7 @@
   };
 
   matrix-02 = fetchzip {
-    sha256 = "sha256-0rSxaN4lQcdaCLsvlgicG70FXUxXeERPiEmQ4MzbRdE=";
+    hash = "sha256-0rSxaN4lQcdaCLsvlgicG70FXUxXeERPiEmQ4MzbRdE=";
 
     urls = [
       "${mirror1}/Muite/Chebyshev4.tar.gz"
@@ -24,7 +24,7 @@
   };
 
   matrix-03 = fetchzip {
-    sha256 = "sha256-hDzDWDUnHEyFedX/tMNq83ZH8uWyM4xtZYUUAD3rizo=";
+    hash = "sha256-hDzDWDUnHEyFedX/tMNq83ZH8uWyM4xtZYUUAD3rizo=";
 
     urls = [
       "${mirror1}/FEMLAB/sme3Dc.tar.gz"
@@ -33,7 +33,7 @@
   };
 
   matrix-04 = fetchzip {
-    sha256 = "sha256-GmN2yOt/MoX01rKe05aTyB3ypUP4YbQGOITZ0BqPmC0=";
+    hash = "sha256-GmN2yOt/MoX01rKe05aTyB3ypUP4YbQGOITZ0BqPmC0=";
 
     urls = [
       "${mirror1}/Williams/webbase-1M.tar.gz"
@@ -42,7 +42,7 @@
   };
 
   matrix-05 = fetchzip {
-    sha256 = "sha256-gQNjfVyWzNM9RwImJGhkhahRmZz74LzDs1oijL7mI7k=";
+    hash = "sha256-gQNjfVyWzNM9RwImJGhkhahRmZz74LzDs1oijL7mI7k=";
 
     urls = [
       "${mirror1}/Williams/mac_econ_fwd500.tar.gz"
@@ -51,7 +51,7 @@
   };
 
   matrix-06 = fetchzip {
-    sha256 = "sha256-87cdZjntNcTuz5BtO59irhcuRbPllWSbhCEX3Td02qc=";
+    hash = "sha256-87cdZjntNcTuz5BtO59irhcuRbPllWSbhCEX3Td02qc=";
 
     urls = [
       "${mirror1}/Williams/mc2depi.tar.gz"
@@ -60,7 +60,7 @@
   };
 
   matrix-07 = fetchzip {
-    sha256 = "sha256-WRamuJX3D8Tm+k0q67RjUDG3DeNAxhKiaPkk5afY5eU=";
+    hash = "sha256-WRamuJX3D8Tm+k0q67RjUDG3DeNAxhKiaPkk5afY5eU=";
 
     urls = [
       "${mirror1}/Bova/rma10.tar.gz"
@@ -69,7 +69,7 @@
   };
 
   matrix-08 = fetchzip {
-    sha256 = "sha256-5dhkm293Mc3lzakKxHy5W5XIn4Rw+gihVh7gyrjEHXo=";
+    hash = "sha256-5dhkm293Mc3lzakKxHy5W5XIn4Rw+gihVh7gyrjEHXo=";
 
     urls = [
       "${mirror1}/JGD_BIBD/bibd_22_8.tar.gz"
@@ -78,7 +78,7 @@
   };
 
   matrix-09 = fetchzip {
-    sha256 = "sha256-czjLWCjXAjZCk5TGYHaEkwSAzQu3TQ3QyB6eNKR4G88=";
+    hash = "sha256-czjLWCjXAjZCk5TGYHaEkwSAzQu3TQ3QyB6eNKR4G88=";
 
     urls = [
       "${mirror1}/Hamm/scircuit.tar.gz"
@@ -87,7 +87,7 @@
   };
 
   matrix-10 = fetchzip {
-    sha256 = "sha256-bYuLnJViAIcIejAkh69/bsNAVIDU4wfTLtD+nmHd6FM=";
+    hash = "sha256-bYuLnJViAIcIejAkh69/bsNAVIDU4wfTLtD+nmHd6FM=";
 
     urls = [
       "${mirror1}/Sandia/ASIC_320k.tar.gz"
@@ -96,7 +96,7 @@
   };
 
   matrix-11 = fetchzip {
-    sha256 = "sha256-aDwn8P1khYjo2Agbq5m9ZBInJUxf/knJNvyptt0fak0=";
+    hash = "sha256-aDwn8P1khYjo2Agbq5m9ZBInJUxf/knJNvyptt0fak0=";
 
     urls = [
       "${mirror1}/GHS_psdef/bmwcra_1.tar.gz"
@@ -105,7 +105,7 @@
   };
 
   matrix-12 = fetchzip {
-    sha256 = "sha256-8OJqA/byhlAZd869TPUzZFdsOiwOoRGfKyhM+RMjXoY=";
+    hash = "sha256-8OJqA/byhlAZd869TPUzZFdsOiwOoRGfKyhM+RMjXoY=";
 
     urls = [
       "${mirror1}/HB/nos1.tar.gz"
@@ -114,7 +114,7 @@
   };
 
   matrix-13 = fetchzip {
-    sha256 = "sha256-FS0rKqmg+uHwsM/yGfQLBdd7LH/rUrdutkNGBD/Mh1I=";
+    hash = "sha256-FS0rKqmg+uHwsM/yGfQLBdd7LH/rUrdutkNGBD/Mh1I=";
 
     urls = [
       "${mirror1}/HB/nos2.tar.gz"
@@ -123,7 +123,7 @@
   };
 
   matrix-14 = fetchzip {
-    sha256 = "sha256-DANnlrNJikrI7Pst9vRedtbuxepyHmCIu2yhltc4Qcs=";
+    hash = "sha256-DANnlrNJikrI7Pst9vRedtbuxepyHmCIu2yhltc4Qcs=";
 
     urls = [
       "${mirror1}/HB/nos3.tar.gz"
@@ -132,7 +132,7 @@
   };
 
   matrix-15 = fetchzip {
-    sha256 = "sha256-21mUgqjWGUfYgiWwSrKh9vH8Vdt3xzcefmqYNYRpxiY=";
+    hash = "sha256-21mUgqjWGUfYgiWwSrKh9vH8Vdt3xzcefmqYNYRpxiY=";
 
     urls = [
       "${mirror1}/HB/nos4.tar.gz"
@@ -141,7 +141,7 @@
   };
 
   matrix-16 = fetchzip {
-    sha256 = "sha256-FOuXvGqBBFNkVS6cexmkluret54hCfCOdK+DOZllE4c=";
+    hash = "sha256-FOuXvGqBBFNkVS6cexmkluret54hCfCOdK+DOZllE4c=";
 
     urls = [
       "${mirror1}/HB/nos5.tar.gz"
@@ -150,7 +150,7 @@
   };
 
   matrix-17 = fetchzip {
-    sha256 = "sha256-+7NI1rA/qQxYPpjXKHvAaCZ+LSaAJ4xuJvMRMBEUYxg=";
+    hash = "sha256-+7NI1rA/qQxYPpjXKHvAaCZ+LSaAJ4xuJvMRMBEUYxg=";
 
     urls = [
       "${mirror1}/HB/nos6.tar.gz"
@@ -159,7 +159,7 @@
   };
 
   matrix-18 = fetchzip {
-    sha256 = "sha256-q3NxJjbwGGcFiQ9nhWfUKgZmdVwCfPmgQoqy0AqOsNc=";
+    hash = "sha256-q3NxJjbwGGcFiQ9nhWfUKgZmdVwCfPmgQoqy0AqOsNc=";
 
     urls = [
       "${mirror1}/HB/nos7.tar.gz"
@@ -168,7 +168,7 @@
   };
 
   matrix-19 = fetchzip {
-    sha256 = "sha256-0GAN6qmVfD+tprIigzuUUUwm5KVhkN9X65wMEvFltDY=";
+    hash = "sha256-0GAN6qmVfD+tprIigzuUUUwm5KVhkN9X65wMEvFltDY=";
 
     urls = [
       "${mirror1}/DNVS/shipsec1.tar.gz"
@@ -177,7 +177,7 @@
   };
 
   matrix-20 = fetchzip {
-    sha256 = "sha256-f28Du/Urxsiq5NkRmRO10Zz9vvGRjEchquzHzbZpZ7U=";
+    hash = "sha256-f28Du/Urxsiq5NkRmRO10Zz9vvGRjEchquzHzbZpZ7U=";
 
     urls = [
       "${mirror1}/Cote/mplate.tar.gz"
@@ -186,7 +186,7 @@
   };
 
   matrix-21 = fetchzip {
-    sha256 = "sha256-O+Wy0NfCU1hVUOfNR1dJpvDHLBwwa301IRJDrQJnhak=";
+    hash = "sha256-O+Wy0NfCU1hVUOfNR1dJpvDHLBwwa301IRJDrQJnhak=";
 
     urls = [
       "${mirror1}/Bai/qc2534.tar.gz"
@@ -195,7 +195,7 @@
   };
 
   matrix-22 = fetchzip {
-    sha256 = "sha256-oxMnt8U5Cf1ILWcBdU6W9jdSMMm+U6bIVl8nm3n3+OA=";
+    hash = "sha256-oxMnt8U5Cf1ILWcBdU6W9jdSMMm+U6bIVl8nm3n3+OA=";
 
     urls = [
       "${mirror1}/Chevron/Chevron2.tar.gz"
@@ -204,7 +204,7 @@
   };
 
   matrix-23 = fetchzip {
-    sha256 = "sha256-MFD9BxFI/3IS7yatW121BAI04fbqrXpgYDT5UKjeKcU=";
+    hash = "sha256-MFD9BxFI/3IS7yatW121BAI04fbqrXpgYDT5UKjeKcU=";
 
     urls = [
       "${mirror1}/Chevron/Chevron3.tar.gz"
@@ -213,7 +213,7 @@
   };
 
   matrix-24 = fetchzip {
-    sha256 = "sha256-ikS8O51pe1nt3BNyhvfvqCbVL0+bg/da9bqGqeBDkTg=";
+    hash = "sha256-ikS8O51pe1nt3BNyhvfvqCbVL0+bg/da9bqGqeBDkTg=";
 
     urls = [
       "${mirror1}/Chevron/Chevron4.tar.gz"
diff --git a/pkgs/development/rocm-modules/tensile/default.nix b/pkgs/development/rocm-modules/tensile/default.nix
index 954b0c51cbe8..b04622b32086 100644
--- a/pkgs/development/rocm-modules/tensile/default.nix
+++ b/pkgs/development/rocm-modules/tensile/default.nix
@@ -58,7 +58,7 @@ buildPythonPackage rec {
     ./tensile-create-library-dont-copy-twice.diff
     (fetchpatch {
       # [PATCH] Extend Tensile HIP ISA compatibility
-      sha256 = "sha256-ZHXNYSeLkhhNDaIfdqQm68Pxmh1shUL7mAVmh8/I6Xk=";
+      hash = "sha256-ZHXNYSeLkhhNDaIfdqQm68Pxmh1shUL7mAVmh8/I6Xk=";
       url = "https://github.com/GZGavinZhao/rocm-libraries/commit/1f7135dfc0cdb175c8f0e5eb71b2d24699942873.patch";
       relative = "shared/tensile";
     })

From f180b0a75f2e468422cd915689650367785f51d2 Mon Sep 17 00:00:00 2001
From: Bobby Rong <rjl931189261@126.com>
Date: Mon, 2 Mar 2026 12:51:32 +0000
Subject: [PATCH 23/74] xfce4-panel: 4.20.6 -> 4.20.7

https://gitlab.xfce.org/xfce/xfce4-panel/-/compare/xfce4-panel-4.20.6...xfce4-panel-4.20.7
---
 pkgs/by-name/xf/xfce4-panel/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/xf/xfce4-panel/package.nix b/pkgs/by-name/xf/xfce4-panel/package.nix
index 6e44474b825d..a405e1306290 100644
--- a/pkgs/by-name/xf/xfce4-panel/package.nix
+++ b/pkgs/by-name/xf/xfce4-panel/package.nix
@@ -31,7 +31,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "xfce4-panel";
-  version = "4.20.6";
+  version = "4.20.7";
 
   outputs = [
     "out"
@@ -43,7 +43,7 @@ stdenv.mkDerivation (finalAttrs: {
     owner = "xfce";
     repo = "xfce4-panel";
     tag = "xfce4-panel-${finalAttrs.version}";
-    hash = "sha256-yfiF+ciuRNJzBt3n1rH2ywA1vNGYRVHu2ojf/EIGwyg=";
+    hash = "sha256-tL32ymLhV1QK84223iEgGrKdZXm5/nB3MumDyDIrSHQ=";
   };
 
   nativeBuildInputs = [

From 67f4eb8fc536981d169047b3ba9e2932596edd16 Mon Sep 17 00:00:00 2001
From: Bobby Rong <rjl931189261@126.com>
Date: Mon, 2 Mar 2026 12:52:14 +0000
Subject: [PATCH 24/74] xfce4-screensaver: 4.20.1 -> 4.20.2

https://gitlab.xfce.org/apps/xfce4-screensaver/-/compare/xfce4-screensaver-4.20.1...xfce4-screensaver-4.20.2
---
 pkgs/by-name/xf/xfce4-screensaver/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/xf/xfce4-screensaver/package.nix b/pkgs/by-name/xf/xfce4-screensaver/package.nix
index a4cefb0fc5c2..74f19b53a0eb 100644
--- a/pkgs/by-name/xf/xfce4-screensaver/package.nix
+++ b/pkgs/by-name/xf/xfce4-screensaver/package.nix
@@ -35,14 +35,14 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "xfce4-screensaver";
-  version = "4.20.1";
+  version = "4.20.2";
 
   src = fetchFromGitLab {
     domain = "gitlab.xfce.org";
     owner = "apps";
     repo = "xfce4-screensaver";
     tag = "xfce4-screensaver-${finalAttrs.version}";
-    hash = "sha256-FdO6fZTKBPjncjBBe2rK5DSfVLHTRFpo9NtgZ5nFgRU=";
+    hash = "sha256-zNA43ZrREZB5D0fNa+mmvtA9tDPxIMVpQsHzx/r+hzk=";
   };
 
   strictDeps = true;

From 530c9058ba4b1fd734014b9fc3f5d6609770154c Mon Sep 17 00:00:00 2001
From: Bobby Rong <rjl931189261@126.com>
Date: Mon, 2 Mar 2026 12:53:42 +0000
Subject: [PATCH 25/74] mousepad: 0.6.5 -> 0.7.0

https://gitlab.xfce.org/apps/mousepad/-/compare/mousepad-0.6.5...mousepad-0.7.0
---
 pkgs/by-name/mo/mousepad/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/mo/mousepad/package.nix b/pkgs/by-name/mo/mousepad/package.nix
index f9e7c5f6edb9..b4e15267aab4 100644
--- a/pkgs/by-name/mo/mousepad/package.nix
+++ b/pkgs/by-name/mo/mousepad/package.nix
@@ -19,14 +19,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "mousepad";
-  version = "0.6.5";
+  version = "0.7.0";
 
   src = fetchFromGitLab {
     domain = "gitlab.xfce.org";
     owner = "apps";
     repo = "mousepad";
     tag = "mousepad-${finalAttrs.version}";
-    hash = "sha256-5ywpQY4KUnjFCLSAXQo3huzZf94YHK9SLmkkNtfx4Ho=";
+    hash = "sha256-zoPzMqXfY3ir8MOYXTr+ZNmxISdMgKQEWwIgsVD9oMw=";
   };
 
   strictDeps = true;

From 1644ad045d862de87d1202f02a6f783e6bcbf5ee Mon Sep 17 00:00:00 2001
From: Bobby Rong <rjl931189261@126.com>
Date: Mon, 2 Mar 2026 12:54:09 +0000
Subject: [PATCH 26/74] xfce4-session: 4.20.3 -> 4.20.4

https://gitlab.xfce.org/xfce/xfce4-session/-/compare/xfce4-session-4.20.3...xfce4-session-4.20.4
---
 pkgs/by-name/xf/xfce4-session/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/xf/xfce4-session/package.nix b/pkgs/by-name/xf/xfce4-session/package.nix
index 05dbbb9848b3..01de6eb316e4 100644
--- a/pkgs/by-name/xf/xfce4-session/package.nix
+++ b/pkgs/by-name/xf/xfce4-session/package.nix
@@ -22,14 +22,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "xfce4-session";
-  version = "4.20.3";
+  version = "4.20.4";
 
   src = fetchFromGitLab {
     domain = "gitlab.xfce.org";
     owner = "xfce";
     repo = "xfce4-session";
     tag = "xfce4-session-${finalAttrs.version}";
-    hash = "sha256-HfVspmAkjuGgoI87VHNHFGZP17ZA0b31llY93gUtWxs=";
+    hash = "sha256-mL5fOWJtpkpskBQmyYhcVRzGJlzAHsvtcy4j3DceOBE=";
   };
 
   nativeBuildInputs = [

From 17719d83f819cb99ac797ea3bf1e2e7bbd0443af Mon Sep 17 00:00:00 2001
From: Bobby Rong <rjl931189261@126.com>
Date: Mon, 2 Mar 2026 12:55:34 +0000
Subject: [PATCH 27/74] xfce4-settings: 4.20.3 -> 4.20.4

https://gitlab.xfce.org/xfce/xfce4-settings/-/compare/xfce4-settings-4.20.3...xfce4-settings-4.20.4
---
 pkgs/by-name/xf/xfce4-settings/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/xf/xfce4-settings/package.nix b/pkgs/by-name/xf/xfce4-settings/package.nix
index 2b9cea1288ea..0bbda06c2a25 100644
--- a/pkgs/by-name/xf/xfce4-settings/package.nix
+++ b/pkgs/by-name/xf/xfce4-settings/package.nix
@@ -34,14 +34,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "xfce4-settings";
-  version = "4.20.3";
+  version = "4.20.4";
 
   src = fetchFromGitLab {
     domain = "gitlab.xfce.org";
     owner = "xfce";
     repo = "xfce4-settings";
     tag = "xfce4-settings-${finalAttrs.version}";
-    hash = "sha256-dQyALVooaie2vkETghddKM4HqAZQmx3E9UJ+ChKtydc=";
+    hash = "sha256-EAiu29wctXg0EjdFVJOl+0nh1A0l2E44v+i/o5l/PQ8=";
   };
 
   nativeBuildInputs = [

From 96d42ef33b76d8c805587753db9ac99b03818eac Mon Sep 17 00:00:00 2001
From: Bobby Rong <rjl931189261@126.com>
Date: Mon, 2 Mar 2026 12:57:00 +0000
Subject: [PATCH 28/74] xfce4-docklike-plugin: 0.5.0 -> 0.5.1

https://gitlab.xfce.org/panel-plugins/xfce4-docklike-plugin/-/compare/xfce4-docklike-plugin-0.5.0...xfce4-docklike-plugin-0.5.1
---
 pkgs/by-name/xf/xfce4-docklike-plugin/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/xf/xfce4-docklike-plugin/package.nix b/pkgs/by-name/xf/xfce4-docklike-plugin/package.nix
index f4b41cf177fc..521e442b8a65 100644
--- a/pkgs/by-name/xf/xfce4-docklike-plugin/package.nix
+++ b/pkgs/by-name/xf/xfce4-docklike-plugin/package.nix
@@ -21,14 +21,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "xfce4-docklike-plugin";
-  version = "0.5.0";
+  version = "0.5.1";
 
   src = fetchFromGitLab {
     domain = "gitlab.xfce.org";
     owner = "panel-plugins";
     repo = "xfce4-docklike-plugin";
     tag = "xfce4-docklike-plugin-${finalAttrs.version}";
-    hash = "sha256-1R9qQKqn/CIV36GYmyg54t3xiY23qUs5EMLxvAIavK8=";
+    hash = "sha256-p4uRdxwV8cfRPQ3eGfa4/Wt3Im7hgze3UvK9a7pW94o=";
   };
 
   strictDeps = true;

From f6f7c3e2fc3859b650fc24b911994997a59016c7 Mon Sep 17 00:00:00 2001
From: Bobby Rong <rjl931189261@126.com>
Date: Tue, 3 Mar 2026 19:52:44 +0800
Subject: [PATCH 29/74] nixos/xfce: Enable gnome-keyring

https://gitlab.xfce.org/xfce/xfce4-session/-/commit/4b5aca3b7daa33745e37d75cab474725305d2f07
---
 nixos/modules/services/x11/desktop-managers/xfce.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/x11/desktop-managers/xfce.nix b/nixos/modules/services/x11/desktop-managers/xfce.nix
index 941f06ae6edf..55da49799e31 100644
--- a/nixos/modules/services/x11/desktop-managers/xfce.nix
+++ b/nixos/modules/services/x11/desktop-managers/xfce.nix
@@ -224,6 +224,7 @@ in
     services.accounts-daemon.enable = true;
     services.upower.enable = config.powerManagement.enable;
     services.gnome.glib-networking.enable = true;
+    services.gnome.gnome-keyring.enable = mkDefault true;
     services.gvfs.enable = true;
     services.tumbler.enable = true;
     services.system-config-printer.enable = (mkIf config.services.printing.enable (mkDefault true));

From a8bdc4855bcc012a2acd185079c352b821804574 Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:44:10 +0100
Subject: [PATCH 30/74] python3Packages.azure-mgmt-postgresqlflexibleservers:
 2.0.0 -> 3.0.0b1

Signed-off-by: Paul Meyer <katexochen0@gmail.com>
---
 .../azure-mgmt-postgresqlflexibleservers/default.nix          | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/azure-mgmt-postgresqlflexibleservers/default.nix b/pkgs/development/python-modules/azure-mgmt-postgresqlflexibleservers/default.nix
index 6227d4ce04d7..33e545a1d328 100644
--- a/pkgs/development/python-modules/azure-mgmt-postgresqlflexibleservers/default.nix
+++ b/pkgs/development/python-modules/azure-mgmt-postgresqlflexibleservers/default.nix
@@ -13,13 +13,13 @@
 
 buildPythonPackage rec {
   pname = "azure-mgmt-postgresqlflexibleservers";
-  version = "2.0.0";
+  version = "3.0.0b1";
   pyproject = true;
 
   src = fetchPypi {
     pname = "azure_mgmt_postgresqlflexibleservers";
     inherit version;
-    hash = "sha256-E9L0W6IYo2T7BAVoT4Bw8mGuPtWX1aVNBOMphzLEzao=";
+    hash = "sha256-Vo1/vuxAAgVznCppDZCTygNFAMl5uopc3QbiEeFbLv8=";
   };
 
   build-system = [

From cd9f0d9ff2b08e86b3bdd9c099c46b9f565bcb62 Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:44:34 +0100
Subject: [PATCH 31/74] python3Packages.azure-mgmt-redhatopenshift: 2.0.0 ->
 3.0.0

Signed-off-by: Paul Meyer <katexochen0@gmail.com>
---
 .../python-modules/azure-mgmt-redhatopenshift/default.nix     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/azure-mgmt-redhatopenshift/default.nix b/pkgs/development/python-modules/azure-mgmt-redhatopenshift/default.nix
index b06dd38f9fef..ca6f2075e64d 100644
--- a/pkgs/development/python-modules/azure-mgmt-redhatopenshift/default.nix
+++ b/pkgs/development/python-modules/azure-mgmt-redhatopenshift/default.nix
@@ -10,13 +10,13 @@
 
 buildPythonPackage rec {
   pname = "azure-mgmt-redhatopenshift";
-  version = "2.0.0";
+  version = "3.0.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "azure_mgmt_redhatopenshift";
     inherit version;
-    hash = "sha256-nTBKy7p8n0JWEmn3ByEKranHteoJkPJyLfYFmaCOOq4=";
+    hash = "sha256-R3XJvfNjI4g02hReX1n5doOrBPjdvSUN5F1F4zeYMn8=";
   };
 
   build-system = [ setuptools ];

From 59adee2382bad4c477d2e0c9580ad3eb41d51e4d Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:44:57 +0100
Subject: [PATCH 32/74] azure-cli: 2.83.0 -> 2.84.0

Signed-off-by: Paul Meyer <katexochen0@gmail.com>
---
 pkgs/by-name/az/azure-cli/package.nix         | 4 ++--
 pkgs/by-name/az/azure-cli/python-packages.nix | 7 ++-----
 2 files changed, 4 insertions(+), 7 deletions(-)

diff --git a/pkgs/by-name/az/azure-cli/package.nix b/pkgs/by-name/az/azure-cli/package.nix
index 8f50b370dcad..baa92f42729f 100644
--- a/pkgs/by-name/az/azure-cli/package.nix
+++ b/pkgs/by-name/az/azure-cli/package.nix
@@ -26,14 +26,14 @@
 }:
 
 let
-  version = "2.83.0";
+  version = "2.84.0";
 
   src = fetchFromGitHub {
     name = "azure-cli-${version}-src";
     owner = "Azure";
     repo = "azure-cli";
     tag = "azure-cli-${version}";
-    hash = "sha256-ptmqcRbjLWMZ9i+rt0amfjpVC+VuE+L3Np2gPpF7Urg=";
+    hash = "sha256-1vt7b9f3enQ3xQzO9JhDETUOpOkW2xWB1qR5arm6xZM=";
   };
 
   # put packages that needs to be overridden in the py package scope
diff --git a/pkgs/by-name/az/azure-cli/python-packages.nix b/pkgs/by-name/az/azure-cli/python-packages.nix
index 332b41845524..01232e27aaad 100644
--- a/pkgs/by-name/az/azure-cli/python-packages.nix
+++ b/pkgs/by-name/az/azure-cli/python-packages.nix
@@ -89,6 +89,8 @@ let
             --ignore=azure/cli/core/tests/test_util.py \
             --ignore=azure/cli/core/tests/test_argcomplete.py \
             --ignore=azure/cli/core/tests/test_telemetry.py \
+            --ignore=azure/cli/core/tests/test_help.py \
+            --ignore=azure/cli/core/tests/test_command_table_integrity.py \
             -k 'not metadata_url and not test_send_raw_requests and not test_format_styled_text_legacy_powershell'
         '';
 
@@ -189,11 +191,6 @@ let
         overrideAzureMgmtPackage super.azure-mgmt-rdbms "10.2.0b17" "tar.gz"
           "sha256-1nnRkyr4Im79B7DDqGz/FOrPAToFaGhE+a7r5bZMuOQ=";
 
-      # ModuleNotFoundError: No module named 'azure.mgmt.redhatopenshift.v2023_11_22'
-      azure-mgmt-redhatopenshift =
-        overrideAzureMgmtPackage super.azure-mgmt-redhatopenshift "1.5.0" "tar.gz"
-          "sha256-Uft0KcOciKzJ+ic9n4nxkwNSBmKZam19jhEiqY9fJSc=";
-
       # azure.mgmt.resource will shadow the other azure.mgmt.resource.* packages unless we merge them together
       azure-mgmt-resource-all = py.pkgs.buildPythonPackage {
         pname = "azure-mgmt-resource-all";

From 009ec5d5ecc07bd144d0b2325e24a590729558c5 Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:45:28 +0100
Subject: [PATCH 33/74] azure-cli-extensions.elastic-san: 1.3.1b1 -> 1.3.2

---
 pkgs/by-name/az/azure-cli/extensions-generated.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/az/azure-cli/extensions-generated.json b/pkgs/by-name/az/azure-cli/extensions-generated.json
index 42acb67feb7d..b65c6188a763 100644
--- a/pkgs/by-name/az/azure-cli/extensions-generated.json
+++ b/pkgs/by-name/az/azure-cli/extensions-generated.json
@@ -449,9 +449,9 @@
   },
   "elastic-san": {
     "pname": "elastic-san",
-    "version": "1.3.1b1",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/elastic_san-1.3.1b1-py3-none-any.whl",
-    "hash": "sha256-L0ps/X+laOJO2aj3kqE7PVntTPxuY30BYeCmN/VWC44=",
+    "version": "1.3.2",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/elastic_san-1.3.2-py3-none-any.whl",
+    "hash": "sha256-SrOk7ueB2cG2K4ZRHYwSxPbjJvbGZ0sNT/OQfcKmgFA=",
     "description": "Microsoft Azure Command-Line Tools ElasticSan Extension"
   },
   "eventgrid": {

From ea380e6d4bc22ffb582ce6e44780ee4fbd868089 Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:45:30 +0100
Subject: [PATCH 34/74] azure-cli-extensions.azure-firewall: 2.0.1 -> 2.1.0

---
 pkgs/by-name/az/azure-cli/extensions-generated.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/az/azure-cli/extensions-generated.json b/pkgs/by-name/az/azure-cli/extensions-generated.json
index b65c6188a763..5b72c095f953 100644
--- a/pkgs/by-name/az/azure-cli/extensions-generated.json
+++ b/pkgs/by-name/az/azure-cli/extensions-generated.json
@@ -148,9 +148,9 @@
   },
   "azure-firewall": {
     "pname": "azure-firewall",
-    "version": "2.0.1",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/azure_firewall-2.0.1-py2.py3-none-any.whl",
-    "hash": "sha256-SLnSVacJ47P96ICUt33/6cRz+0YRY+FrkwhowtTMD68=",
+    "version": "2.1.0",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/azure_firewall-2.1.0-py2.py3-none-any.whl",
+    "hash": "sha256-b7ciHJ/BDta4xZXkzrOslTNqyEUH+fKxlQ0p5SwOmBw=",
     "description": "Manage Azure Firewall resources"
   },
   "azurelargeinstance": {

From 33f27e966b4243fa5036bf53694f14de3ac62040 Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:45:33 +0100
Subject: [PATCH 35/74] azure-cli-extensions.workload-orchestration: 5.0.0 ->
 5.1.0

---
 pkgs/by-name/az/azure-cli/extensions-generated.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/az/azure-cli/extensions-generated.json b/pkgs/by-name/az/azure-cli/extensions-generated.json
index 5b72c095f953..c50ec3638e3d 100644
--- a/pkgs/by-name/az/azure-cli/extensions-generated.json
+++ b/pkgs/by-name/az/azure-cli/extensions-generated.json
@@ -1142,9 +1142,9 @@
   },
   "workload-orchestration": {
     "pname": "workload-orchestration",
-    "version": "5.0.0",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/workload_orchestration-5.0.0-py3-none-any.whl",
-    "hash": "sha256-Hp8Y50FHwR7L+2MXTEW1QXLMZJa8eUqwQCi+B0FPooU=",
+    "version": "5.1.0",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/workload_orchestration-5.1.0-py3-none-any.whl",
+    "hash": "sha256-/9MGhiqQpEUPJ9AgVM0tZ/SQiRdVvOsXVgdnqAtfSMw=",
     "description": "Microsoft Azure Command-Line Tools WorkloadOperations Extension"
   },
   "workloads": {

From 6bed71f09b05f64e5ca218b9986eae577ac15324 Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:45:35 +0100
Subject: [PATCH 36/74] azure-cli-extensions.sftp: 1.0.0b1 -> 1.0.0b2

---
 pkgs/by-name/az/azure-cli/extensions-generated.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/az/azure-cli/extensions-generated.json b/pkgs/by-name/az/azure-cli/extensions-generated.json
index c50ec3638e3d..0cb5a74eccc2 100644
--- a/pkgs/by-name/az/azure-cli/extensions-generated.json
+++ b/pkgs/by-name/az/azure-cli/extensions-generated.json
@@ -967,9 +967,9 @@
   },
   "sftp": {
     "pname": "sftp",
-    "version": "1.0.0b1",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/sftp-1.0.0b1-py3-none-any.whl",
-    "hash": "sha256-cE8b2ZgoG9DO64ekT3FpcRuTAOYX94pzESYJ9lUe7LI=",
+    "version": "1.0.0b2",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/sftp-1.0.0b2-py3-none-any.whl",
+    "hash": "sha256-3ugWIeKK9U8vKgFMbQfMKXxbgW+zO9IB6lPYJFHZm/E=",
     "description": "Secure access to Azure Storage blob data via SFTP with SSH certificates"
   },
   "site": {

From 68e905fae99dbdf75f247b6513a36b4f29d67fb8 Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:45:37 +0100
Subject: [PATCH 37/74] azure-cli-extensions.quantum: 1.0.0b11 -> 1.0.0b12

---
 pkgs/by-name/az/azure-cli/extensions-generated.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/az/azure-cli/extensions-generated.json b/pkgs/by-name/az/azure-cli/extensions-generated.json
index 0cb5a74eccc2..9dd0551b0880 100644
--- a/pkgs/by-name/az/azure-cli/extensions-generated.json
+++ b/pkgs/by-name/az/azure-cli/extensions-generated.json
@@ -883,9 +883,9 @@
   },
   "quantum": {
     "pname": "quantum",
-    "version": "1.0.0b11",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/quantum-1.0.0b11-py3-none-any.whl",
-    "hash": "sha256-LcfF4Rmfr4L4R0n41g4RngDyfTeRZheZuNqGP4kI5Yk=",
+    "version": "1.0.0b12",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/quantum-1.0.0b12-py3-none-any.whl",
+    "hash": "sha256-9tjBvpu1F2/2JYKUD2IbxUckYofUH0rEnimkpRXF2wY=",
     "description": "Microsoft Azure Command-Line Tools Quantum Extension"
   },
   "qumulo": {

From 6cee9493aca089ef9a55f95be8b5bb82a748ae27 Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:45:39 +0100
Subject: [PATCH 38/74] azure-cli-extensions.fleet: 1.8.3 -> 1.9.0

---
 pkgs/by-name/az/azure-cli/extensions-generated.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/az/azure-cli/extensions-generated.json b/pkgs/by-name/az/azure-cli/extensions-generated.json
index 9dd0551b0880..36c2adbb5336 100644
--- a/pkgs/by-name/az/azure-cli/extensions-generated.json
+++ b/pkgs/by-name/az/azure-cli/extensions-generated.json
@@ -477,9 +477,9 @@
   },
   "fleet": {
     "pname": "fleet",
-    "version": "1.8.3",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/fleet-1.8.3-py3-none-any.whl",
-    "hash": "sha256-KY4lXsFf1Rxhcblyfxw904dWHxdWR17L864qiIpYYOQ=",
+    "version": "1.9.0",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/fleet-1.9.0-py3-none-any.whl",
+    "hash": "sha256-5CsWYP0r2UfUTekKDsqWBNonDOPaR5TrhxZDF7hAtXI=",
     "description": "Microsoft Azure Command-Line Tools Fleet Extension"
   },
   "fluid-relay": {

From 2f574640c668821f2bede40d4f190861dc44feb4 Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:45:41 +0100
Subject: [PATCH 39/74] azure-cli-extensions.healthbot: 1.0.0 -> 1.1.0

---
 pkgs/by-name/az/azure-cli/extensions-generated.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/az/azure-cli/extensions-generated.json b/pkgs/by-name/az/azure-cli/extensions-generated.json
index 36c2adbb5336..ca0f8421b9ac 100644
--- a/pkgs/by-name/az/azure-cli/extensions-generated.json
+++ b/pkgs/by-name/az/azure-cli/extensions-generated.json
@@ -547,9 +547,9 @@
   },
   "healthbot": {
     "pname": "healthbot",
-    "version": "1.0.0",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/healthbot-1.0.0-py3-none-any.whl",
-    "hash": "sha256-X6M+iVNShC9YBliy2Ynf5TVUDKo3ZTaqu1yvFn6v6Ew=",
+    "version": "1.1.0",
+    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/healthbot-1.1.0-py3-none-any.whl",
+    "hash": "sha256-AV0TETMADekkqTcPNFMg+4pt4RCMtPCnGb0pd/wr01A=",
     "description": "Microsoft Azure Command-Line Tools HealthbotClient Extension"
   },
   "healthcareapis": {

From 6b8eaa905d5f3b2afc12c87a9a38f7bc969f0944 Mon Sep 17 00:00:00 2001
From: Paul Meyer <katexochen0@gmail.com>
Date: Tue, 3 Mar 2026 16:45:43 +0100
Subject: [PATCH 40/74] azure-cli-extensions.redisenterprise: remove leftover
 in automated exts

Signed-off-by: Paul Meyer <katexochen0@gmail.com>
---
 pkgs/by-name/az/azure-cli/extensions-generated.json | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/pkgs/by-name/az/azure-cli/extensions-generated.json b/pkgs/by-name/az/azure-cli/extensions-generated.json
index ca0f8421b9ac..6fef1084ca99 100644
--- a/pkgs/by-name/az/azure-cli/extensions-generated.json
+++ b/pkgs/by-name/az/azure-cli/extensions-generated.json
@@ -902,13 +902,6 @@
     "hash": "sha256-i0w0dd8MNUTbzCjkh161sWPXK0Cv9CUKr9rZQYDD+ZU=",
     "description": "Microsoft Azure Command-Line Tools AzureQuotaExtensionAPI Extension"
   },
-  "redisenterprise": {
-    "pname": "redisenterprise",
-    "version": "1.3.0",
-    "url": "https://azcliprod.blob.core.windows.net/cli-extensions/redisenterprise-1.3.0-py3-none-any.whl",
-    "hash": "sha256-53kvBZJxKFcjFnGu6VzALidEx2MexVaoZDLW/4tsckY=",
-    "description": "Microsoft Azure Command-Line Tools RedisEnterprise Extension"
-  },
   "reservation": {
     "pname": "reservation",
     "version": "0.3.1",

From 2a4f991e79312bfb8199edc5b18670e854576f4c Mon Sep 17 00:00:00 2001
From: Sergei Trofimovich <slyich@gmail.com>
Date: Tue, 3 Mar 2026 21:25:31 +0000
Subject: [PATCH 41/74] libpeas2: 2.2.0 -> 2.2.1

Changes: https://gitlab.gnome.org/GNOME/libpeas/-/blob/2.2.1/NEWS?ref_type=tags
---
 pkgs/development/libraries/libpeas/2.x.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/libraries/libpeas/2.x.nix b/pkgs/development/libraries/libpeas/2.x.nix
index 5790cf67f534..982a4cdfd09a 100644
--- a/pkgs/development/libraries/libpeas/2.x.nix
+++ b/pkgs/development/libraries/libpeas/2.x.nix
@@ -24,7 +24,7 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "libpeas";
-  version = "2.2.0";
+  version = "2.2.1";
 
   outputs = [
     "out"
@@ -34,7 +34,7 @@ stdenv.mkDerivation rec {
 
   src = fetchurl {
     url = "mirror://gnome/sources/${pname}/${lib.versions.majorMinor version}/${pname}-${version}.tar.xz";
-    hash = "sha256-wohyM/CEpp+r/H+gFA1BBJGGPXBQr7KGd/mlU7JYCtk=";
+    hash = "sha256-WJ7KibQ3AG7fN1VHjfA3x0CiqEz6XSAtutYJXoKOJIg=";
   };
 
   patches = [

From ce4b8d3091b48230690638028d3fdbcf23ded913 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Tue, 3 Mar 2026 21:43:06 +0000
Subject: [PATCH 42/74] re-isearch: 2.20220925.4.0a-unstable-2026-02-06 ->
 2.20220925.4.0a-unstable-2026-03-03

---
 pkgs/by-name/re/re-isearch/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/re/re-isearch/package.nix b/pkgs/by-name/re/re-isearch/package.nix
index bd4b97adb99b..03b6ffbc4fe6 100644
--- a/pkgs/by-name/re/re-isearch/package.nix
+++ b/pkgs/by-name/re/re-isearch/package.nix
@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation {
   pname = "re-Isearch";
-  version = "2.20220925.4.0a-unstable-2026-02-06";
+  version = "2.20220925.4.0a-unstable-2026-03-03";
 
   src = fetchFromGitHub {
     owner = "re-Isearch";
     repo = "re-Isearch";
-    rev = "4295a8c6716d63d04738c5a6486914b51e3b6dcd";
-    hash = "sha256-rQoF4HTtdQQEj86g2g2MRJdwwlLNTUpunP9+f1IZOzg=";
+    rev = "54054aab10fce6ab0a3b0271034fcc85b2a4f99d";
+    hash = "sha256-+djhBlIHxcwWP80hydgkgLWuOnyHL9nVpQ7pqzUv8rI=";
   };
 
   patches = [

From 458044b6afc46ee446444c9f96a6d5af602f769f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Tue, 3 Mar 2026 22:53:17 +0100
Subject: [PATCH 43/74] level-zero: 1.28.0 -> 1.28.2

Diff: https://github.com/oneapi-src/level-zero/compare/v1.28.0...v1.28.2

Changelog: https://github.com/oneapi-src/level-zero/blob/v1.28.2/CHANGELOG.md
---
 pkgs/by-name/le/level-zero/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/le/level-zero/package.nix b/pkgs/by-name/le/level-zero/package.nix
index 02bb87061cea..4263a0d3aab4 100644
--- a/pkgs/by-name/le/level-zero/package.nix
+++ b/pkgs/by-name/le/level-zero/package.nix
@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "level-zero";
-  version = "1.28.0";
+  version = "1.28.2";
 
   src = fetchFromGitHub {
     owner = "oneapi-src";
     repo = "level-zero";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-zIVykKB53KyjvBMgYhPCXLaLag3yvQ7D9HsF3oGGm1w=";
+    hash = "sha256-I/MdWljshkEh7p/3exkC75x1hGgeFIlNySiIN+n19dA=";
   };
 
   nativeBuildInputs = [

From 54f870655d64491a59daaaf985ad5d6796794e17 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Tue, 3 Mar 2026 23:03:12 +0100
Subject: [PATCH 44/74] intel-graphics-compiler: 2.27.10 -> 2.28.4

Changelog: https://github.com/intel/intel-graphics-compiler/releases/tag/v2.28.4
---
 .../gcc15-llvm-header-fixes.patch                  | 12 ------------
 .../by-name/in/intel-graphics-compiler/package.nix | 14 +++++++-------
 2 files changed, 7 insertions(+), 19 deletions(-)

diff --git a/pkgs/by-name/in/intel-graphics-compiler/gcc15-llvm-header-fixes.patch b/pkgs/by-name/in/intel-graphics-compiler/gcc15-llvm-header-fixes.patch
index b60b995a726c..d0b0964f5748 100644
--- a/pkgs/by-name/in/intel-graphics-compiler/gcc15-llvm-header-fixes.patch
+++ b/pkgs/by-name/in/intel-graphics-compiler/gcc15-llvm-header-fixes.patch
@@ -1,15 +1,3 @@
-diff --git a/llvm-project/llvm/include/llvm/ADT/SmallVector.h b/llvm-project/llvm/include/llvm/ADT/SmallVector.h
-index 98dce89168..a52947e16e 100644
---- a/llvm-project/llvm/include/llvm/ADT/SmallVector.h
-+++ b/llvm-project/llvm/include/llvm/ADT/SmallVector.h
-@@ -19,6 +19,7 @@
- #include <algorithm>
- #include <cassert>
- #include <cstddef>
-+#include <cstdint>
- #include <cstdlib>
- #include <cstring>
- #include <functional>
 diff --git a/llvm-project/llvm/include/llvm/Support/Threading.h b/llvm-project/llvm/include/llvm/Support/Threading.h
 index ba6c531ab4..78aa5e7be5 100644
 --- a/llvm-project/llvm/include/llvm/Support/Threading.h
diff --git a/pkgs/by-name/in/intel-graphics-compiler/package.nix b/pkgs/by-name/in/intel-graphics-compiler/package.nix
index 8cb90a355d23..7d2d99bedc8c 100644
--- a/pkgs/by-name/in/intel-graphics-compiler/package.nix
+++ b/pkgs/by-name/in/intel-graphics-compiler/package.nix
@@ -19,7 +19,7 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "intel-graphics-compiler";
-  version = "2.27.10";
+  version = "2.28.4";
 
   # See the repository for expected versions:
   # <https://github.com/intel/intel-graphics-compiler/blob/v2.16.0/documentation/build_ubuntu.md#revision-table>
@@ -29,7 +29,7 @@ stdenv.mkDerivation rec {
       owner = "intel";
       repo = "intel-graphics-compiler";
       tag = "v${version}";
-      hash = "sha256-h/YlZatUn61M5/F4msJljZDWcQyivgCAi1HC9CXvTts=";
+      hash = "sha256-bct1ntvjK738QkoumqwsMJdV+ikpLVtW061637m4vIg=";
     })
     (fetchFromGitHub {
       name = "llvm-project";
@@ -42,21 +42,21 @@ stdenv.mkDerivation rec {
       name = "vc-intrinsics";
       owner = "intel";
       repo = "vc-intrinsics";
-      tag = "v0.24.2";
-      hash = "sha256-ypHFqgc96m+im7DCe5ZOGMGIhB7mtRYPhEmMSg2+pyc=";
+      tag = "v0.24.3";
+      hash = "sha256-VRws9wzBvNph1sTFjhmigM8ZDI6VMp8ZUJR4cZaK5uA=";
     })
     (fetchFromGitHub {
       name = "opencl-clang";
       owner = "intel";
       repo = "opencl-clang";
-      tag = "v16.0.7";
-      hash = "sha256-MaL4DRmIdnBA/DZZezNzbsjWh5mz99mOTUJoqcXE1/c=";
+      tag = "v16.0.9";
+      hash = "sha256-N6C9OY0ZV36KXdlPXQ+UW8AKdzg+0xMip9uPnsKAcH0=";
     })
     (fetchFromGitHub {
       name = "llvm-spirv";
       owner = "KhronosGroup";
       repo = "SPIRV-LLVM-Translator";
-      tag = "v16.0.20";
+      tag = "v16.0.22";
       hash = "sha256-3ymwHSNqCdMIgzPYIYUIHMjJHSxdcGK11DF8qPM6nMs=";
     })
   ];

From a8bce0c17070caccdb1612e0ecdb54d108c6fe3b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Tue, 3 Mar 2026 23:23:23 +0100
Subject: [PATCH 45/74] python313Packages.mss: make tests less flaky

---
 pkgs/development/python-modules/mss/default.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/python-modules/mss/default.nix b/pkgs/development/python-modules/mss/default.nix
index 3eea4f44c0fa..d208c095b5b6 100644
--- a/pkgs/development/python-modules/mss/default.nix
+++ b/pkgs/development/python-modules/mss/default.nix
@@ -17,6 +17,7 @@
   lsof,
   pillow,
   pytest-cov-stub,
+  pytest-rerunfailures,
   pytest,
   pyvirtualdisplay,
   xvfb-run,
@@ -48,6 +49,7 @@ buildPythonPackage rec {
     lsof
     pillow
     pytest-cov-stub
+    pytest-rerunfailures
     pytest
     pyvirtualdisplay
     xvfb-run
@@ -55,7 +57,7 @@ buildPythonPackage rec {
 
   checkPhase = ''
     runHook preCheck
-    xvfb-run pytest -k "not test_grab_with_tuple and not test_grab_with_tuple_percents and not test_resource_leaks"
+    xvfb-run pytest -v -k "not test_grab_with_tuple and not test_grab_with_tuple_percents and not test_resource_leaks"
     runHook postCheck
   '';
 

From 55b21e9fd6f1a2ef9dc984b917b599b77b36af43 Mon Sep 17 00:00:00 2001
From: Jamie Magee <jamie.magee@gmail.com>
Date: Tue, 3 Mar 2026 16:51:31 -0800
Subject: [PATCH 46/74] workflows: document write permissions

---
 .github/workflows/backport.yml            |  4 ++--
 .github/workflows/bot.yml                 |  4 ++--
 .github/workflows/check.yml               |  2 +-
 .github/workflows/comment.yml             |  2 +-
 .github/workflows/eval.yml                |  4 ++--
 .github/workflows/merge-group.yml         | 10 ++++------
 .github/workflows/pull-request-target.yml |  3 +--
 .github/workflows/review.yml              |  2 +-
 .github/workflows/test.yml                | 10 +++++-----
 9 files changed, 19 insertions(+), 22 deletions(-)

diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index 43d820ea0f66..3349b9ab88a1 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -11,8 +11,8 @@ on:
 
 permissions:
   contents: read
-  issues: write
-  pull-requests: write
+  issues: write # adding the 'has: port to stable' label
+  pull-requests: write # creating backport pull requests
 
 defaults:
   run:
diff --git a/.github/workflows/bot.yml b/.github/workflows/bot.yml
index 9de4fb194350..3ace94a957ef 100644
--- a/.github/workflows/bot.yml
+++ b/.github/workflows/bot.yml
@@ -30,8 +30,8 @@ concurrency:
 # This is used as fallback without app only.
 # This happens when testing in forks without setting up that app.
 permissions:
-  issues: write
-  pull-requests: write
+  issues: write # managing issue labels and comments
+  pull-requests: write # managing pull request labels and comments
 
 defaults:
   run:
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index a99236d2e7c4..292e47fbcf23 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -31,7 +31,7 @@ jobs:
   commits:
     if: inputs.baseBranch && inputs.headBranch
     permissions:
-      pull-requests: write
+      pull-requests: write # submitting PR reviews
     runs-on: ubuntu-slim
     timeout-minutes: 3
     steps:
diff --git a/.github/workflows/comment.yml b/.github/workflows/comment.yml
index b5439c586c6f..36897d8f1a77 100644
--- a/.github/workflows/comment.yml
+++ b/.github/workflows/comment.yml
@@ -7,7 +7,7 @@ on:
 # This is used as fallback without app only.
 # This happens when testing in forks without setting up that app.
 permissions:
-  pull-requests: write
+  pull-requests: write # adding reactions to comments
 
 defaults:
   run:
diff --git a/.github/workflows/eval.yml b/.github/workflows/eval.yml
index 2379e28e2589..de58f692f54e 100644
--- a/.github/workflows/eval.yml
+++ b/.github/workflows/eval.yml
@@ -248,8 +248,8 @@ jobs:
     needs: [eval]
     if: ${{ !cancelled() && !failure() }}
     permissions:
-      pull-requests: write
-      statuses: write
+      pull-requests: write # submitting 'wrong branch' reviews
+      statuses: write # creating 'Eval Summary' commit statuses
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
diff --git a/.github/workflows/merge-group.yml b/.github/workflows/merge-group.yml
index cfe1f7b391a4..895bd2aafa5d 100644
--- a/.github/workflows/merge-group.yml
+++ b/.github/workflows/merge-group.yml
@@ -65,8 +65,7 @@ jobs:
     needs: [prepare]
     uses: ./.github/workflows/check.yml
     permissions:
-      # cherry-picks; formality right now, but unused
-      pull-requests: write
+      pull-requests: write # cherry-picks: unused in merge queue but required for check workflow
     secrets:
       CACHIX_AUTH_TOKEN_GHA: ${{ secrets.CACHIX_AUTH_TOKEN_GHA }}
     with:
@@ -90,9 +89,8 @@ jobs:
     # The eval workflow requests these permissions so we must explicitly allow them,
     # even though they are unused when working with the merge queue.
     permissions:
-      # compare
-      pull-requests: write
-      statuses: write
+      pull-requests: write # compare: unused in merge queue but required by eval workflow
+      statuses: write # compare: unused in merge queue but required by eval workflow
     secrets:
       CACHIX_AUTH_TOKEN_GHA: ${{ secrets.CACHIX_AUTH_TOKEN_GHA }}
     with:
@@ -125,7 +123,7 @@ jobs:
       - build
     runs-on: ubuntu-slim
     permissions:
-      statuses: write
+      statuses: write # creating 'no PR failures' commit status
     steps:
       - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
diff --git a/.github/workflows/pull-request-target.yml b/.github/workflows/pull-request-target.yml
index d6949e06ef45..d62972e10e88 100644
--- a/.github/workflows/pull-request-target.yml
+++ b/.github/workflows/pull-request-target.yml
@@ -21,8 +21,7 @@ jobs:
   prepare:
     runs-on: ubuntu-slim
     permissions:
-      # wrong branch review comment
-      pull-requests: write
+      pull-requests: write # submitting 'wrong branch' reviews
     outputs:
       baseBranch: ${{ steps.prepare.outputs.base }}
       headBranch: ${{ steps.prepare.outputs.head }}
diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml
index 1d709c0dce6b..277029c825bf 100644
--- a/.github/workflows/review.yml
+++ b/.github/workflows/review.yml
@@ -9,7 +9,7 @@ on:
 # This is used as fallback without app only.
 # This happens when testing in forks without setting up that app.
 permissions:
-  pull-requests: write
+  pull-requests: write # minimizing dismissed reviews and adding reactions
 
 defaults:
   run:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 26c8c8736f93..cbcfc7bd5531 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -82,8 +82,8 @@ jobs:
     uses: ./.github/workflows/merge-group.yml
     # Those are actually only used on the merge_group event, but will throw an error if not set.
     permissions:
-      pull-requests: write
-      statuses: write
+      pull-requests: write # unused on pull_request, required by merge-group workflow
+      statuses: write # unused on pull_request, required by merge-group workflow
     with:
       artifact-prefix: mg-
       mergedSha: ${{ needs.prepare.outputs.mergedSha }}
@@ -96,9 +96,9 @@ jobs:
     uses: ./.github/workflows/pull-request-target.yml
     # Those are actually only used on the pull_request_target event, but will throw an error if not set.
     permissions:
-      issues: write
-      pull-requests: write
-      statuses: write
+      issues: write # unused on pull_request, required by bot workflow
+      pull-requests: write # unused on pull_request, required by PR workflow
+      statuses: write # unused on pull_request, required by PR workflow
     secrets:
       NIXPKGS_CI_APP_PRIVATE_KEY: ${{ secrets.NIXPKGS_CI_APP_PRIVATE_KEY }}
     with:

From 1d399bec06df543f16296c2a1a7d99a5705ab618 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 00:26:27 +0000
Subject: [PATCH 47/74] lycheeslicer: 7.6.1 -> 7.6.2

---
 pkgs/by-name/ly/lycheeslicer/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/ly/lycheeslicer/package.nix b/pkgs/by-name/ly/lycheeslicer/package.nix
index 6b1e6d5e868b..eaca6c1cbb64 100644
--- a/pkgs/by-name/ly/lycheeslicer/package.nix
+++ b/pkgs/by-name/ly/lycheeslicer/package.nix
@@ -9,11 +9,11 @@
 }:
 let
   pname = "lycheeslicer";
-  version = "7.6.1";
+  version = "7.6.2";
 
   src = fetchurl {
     url = "https://mango-lychee.nyc3.cdn.digitaloceanspaces.com/LycheeSlicer-${version}.AppImage";
-    hash = "sha256-649Lf6bh1Saee0NrHZ+wqoOUgpy4lxMD2DV7lh6ZNik=";
+    hash = "sha256-F76Bw6ydPu0pD8xzYmgqchVKmolhDuDmj8w4I/g21VA=";
   };
 
   desktopItem = makeDesktopItem {

From ad5b336a13f62ecf3eaac7eebd92ddb9b8efa575 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 02:39:20 +0000
Subject: [PATCH 48/74] plasticscm-client-gui-unwrapped: 11.0.16.9943 ->
 11.0.16.9973

---
 pkgs/by-name/pl/plasticscm-client-gui-unwrapped/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/pl/plasticscm-client-gui-unwrapped/package.nix b/pkgs/by-name/pl/plasticscm-client-gui-unwrapped/package.nix
index b9db0ac21e4e..5b885c126c5f 100644
--- a/pkgs/by-name/pl/plasticscm-client-gui-unwrapped/package.nix
+++ b/pkgs/by-name/pl/plasticscm-client-gui-unwrapped/package.nix
@@ -11,11 +11,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "plasticscm-client-gui-unwrapped";
-  version = "11.0.16.9943";
+  version = "11.0.16.9973";
 
   src = fetchurl {
     url = "https://www.plasticscm.com/plasticrepo/stable/debian/amd64/plasticscm-client-gui_${finalAttrs.version}_amd64.deb";
-    hash = "sha256-h3yMePj9064YSw5kIHSuTEwF5puDEaEKpylQdmzIXUE=";
+    hash = "sha256-NdX8XQCf3bRKbiRYnLRV89kC/kN7NUzeBqS5jlPhCLE=";
     nativeBuildInputs = [ dpkg ];
     downloadToTemp = true;
     recursiveHash = true;

From d8b6b056adbf643e38c28888cefa56294085d6cf Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 02:44:53 +0000
Subject: [PATCH 49/74] plasticscm-theme: 11.0.16.9943 -> 11.0.16.9973

---
 pkgs/by-name/pl/plasticscm-theme/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/pl/plasticscm-theme/package.nix b/pkgs/by-name/pl/plasticscm-theme/package.nix
index 2db0b0830059..a24a76b7f6cc 100644
--- a/pkgs/by-name/pl/plasticscm-theme/package.nix
+++ b/pkgs/by-name/pl/plasticscm-theme/package.nix
@@ -11,7 +11,7 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "plasticscm-theme";
-  version = "11.0.16.9943";
+  version = "11.0.16.9973";
 
   src = fetchurl {
     url = "https://www.plasticscm.com/plasticrepo/stable/debian/amd64/plasticscm-theme_${finalAttrs.version}_amd64.deb";

From a3a49e6a8da12bfe47ad7c1ded4e6f6aa98c2092 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 02:46:34 +0000
Subject: [PATCH 50/74] plasticscm-client-core-unwrapped: 11.0.16.9943 ->
 11.0.16.9973

---
 pkgs/by-name/pl/plasticscm-client-core-unwrapped/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/pl/plasticscm-client-core-unwrapped/package.nix b/pkgs/by-name/pl/plasticscm-client-core-unwrapped/package.nix
index 349c1c838afa..0c52ca22a0f5 100644
--- a/pkgs/by-name/pl/plasticscm-client-core-unwrapped/package.nix
+++ b/pkgs/by-name/pl/plasticscm-client-core-unwrapped/package.nix
@@ -12,11 +12,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "plasticscm-client-core-unwrapped";
-  version = "11.0.16.9943";
+  version = "11.0.16.9973";
 
   src = fetchurl {
     url = "https://www.plasticscm.com/plasticrepo/stable/debian/amd64/plasticscm-client-core_${finalAttrs.version}_amd64.deb";
-    hash = "sha256-8YQhrRxqRfyc3n2MfVGOchOlRpr2WuteOR40dIwMOF4=";
+    hash = "sha256-Pu9Q+lzgCeg3TZ6d+TvmJ3Z1Lr3UNJ20ByjovLpk+qw=";
     nativeBuildInputs = [ dpkg ];
     downloadToTemp = true;
     recursiveHash = true;

From 10a9d1b8ed40c5b5afd1366043d067c4bb38a9f8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Thu, 8 Jan 2026 03:45:34 +0100
Subject: [PATCH 51/74] libbluray: move comment to meta.longDescription

---
 pkgs/by-name/li/libbluray/package.nix | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/pkgs/by-name/li/libbluray/package.nix b/pkgs/by-name/li/libbluray/package.nix
index c81c0f3eb739..fac5602aa0e6 100644
--- a/pkgs/by-name/li/libbluray/package.nix
+++ b/pkgs/by-name/li/libbluray/package.nix
@@ -22,9 +22,6 @@
   libbluray-full, # Used for tests
 }:
 
-# Info on how to use:
-# https://wiki.archlinux.org/index.php/BluRay
-
 let
   jre = jre21_minimal.override {
     modules = [
@@ -93,6 +90,7 @@ stdenv.mkDerivation rec {
   meta = {
     homepage = "http://www.videolan.org/developers/libbluray.html";
     description = "Library to access Blu-Ray disks for video playback";
+    longDescription = "See <https://wiki.archlinux.org/title/Blu-ray> how to use";
     license = lib.licenses.lgpl21;
     maintainers = [ lib.maintainers.amarshall ];
     platforms = lib.platforms.unix;

From a9671ae0692d66a642c2b3f98c2c4d4e855c7141 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Wed, 3 Sep 2025 02:15:36 +0200
Subject: [PATCH 52/74] python3Packages.mkdocs-material-extensions: move to
 normal location

---
 .../default.nix}                                                | 0
 pkgs/top-level/python-packages.nix                              | 2 +-
 2 files changed, 1 insertion(+), 1 deletion(-)
 rename pkgs/development/python-modules/{mkdocs-material/mkdocs-material-extensions.nix => mkdocs-material-extensions/default.nix} (100%)

diff --git a/pkgs/development/python-modules/mkdocs-material/mkdocs-material-extensions.nix b/pkgs/development/python-modules/mkdocs-material-extensions/default.nix
similarity index 100%
rename from pkgs/development/python-modules/mkdocs-material/mkdocs-material-extensions.nix
rename to pkgs/development/python-modules/mkdocs-material-extensions/default.nix
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index e8cc43456a6b..b5938090b6a1 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -9946,7 +9946,7 @@ self: super: with self; {
   mkdocs-material = callPackage ../development/python-modules/mkdocs-material { };
 
   mkdocs-material-extensions =
-    callPackage ../development/python-modules/mkdocs-material/mkdocs-material-extensions.nix
+    callPackage ../development/python-modules/mkdocs-material-extensions
       { };
 
   mkdocs-mermaid2-plugin = callPackage ../development/python-modules/mkdocs-mermaid2-plugin { };

From 2e587eace02c113715cc5ccd9547acac4c874f33 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 04:38:48 +0000
Subject: [PATCH 53/74] terraform-providers.baidubce_baiducloud: 1.22.19 ->
 1.22.20

---
 .../networking/cluster/terraform-providers/providers.json     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index b5015e29fd76..fead5d0e4b99 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -101,11 +101,11 @@
     "vendorHash": "sha256-quoFrJbB1vjz+MdV+jnr7FPACHuUe5Gx9POLubD2IaM="
   },
   "baidubce_baiducloud": {
-    "hash": "sha256-UDcyYXo4K7tlr5appmzgZh1V+wX3WuaC6YEWXx5Pk8Y=",
+    "hash": "sha256-zCv7K1+lGPVhroEySEV9gKSHTIqIsYHtfYlrv6LBH3c=",
     "homepage": "https://registry.terraform.io/providers/baidubce/baiducloud",
     "owner": "baidubce",
     "repo": "terraform-provider-baiducloud",
-    "rev": "v1.22.19",
+    "rev": "v1.22.20",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },

From 4620023790de01f3dae1f922dd54835462c379df Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Wed, 4 Mar 2026 22:11:33 -0800
Subject: [PATCH 54/74] python3Packages.open-interpreter: mark broken

---
 pkgs/development/python-modules/open-interpreter/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/development/python-modules/open-interpreter/default.nix b/pkgs/development/python-modules/open-interpreter/default.nix
index 6ba57d82594f..b8dc9e30c2ae 100644
--- a/pkgs/development/python-modules/open-interpreter/default.nix
+++ b/pkgs/development/python-modules/open-interpreter/default.nix
@@ -112,6 +112,7 @@ buildPythonPackage rec {
   doCheck = false;
 
   meta = {
+    broken = true;
     description = "OpenAI's Code Interpreter in your terminal, running locally";
     homepage = "https://github.com/KillianLucas/open-interpreter";
     license = lib.licenses.mit;

From 8c7fa054ce2d92ad07d4c2c967d301c70a691bd9 Mon Sep 17 00:00:00 2001
From: Hythera <87016780+Hythera@users.noreply.github.com>
Date: Thu, 5 Mar 2026 07:56:40 +0100
Subject: [PATCH 55/74] signal-desktop: 8.0.0 -> 8.1.0

---
 pkgs/by-name/si/signal-desktop/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/si/signal-desktop/package.nix b/pkgs/by-name/si/signal-desktop/package.nix
index 6d15835e67c7..c31fc54d4929 100644
--- a/pkgs/by-name/si/signal-desktop/package.nix
+++ b/pkgs/by-name/si/signal-desktop/package.nix
@@ -55,13 +55,13 @@ let
     '';
   });
 
-  version = "8.0.0";
+  version = "8.1.0";
 
   src = fetchFromGitHub {
     owner = "signalapp";
     repo = "Signal-Desktop";
     tag = "v${version}";
-    hash = "sha256-7Z9VoqNYTrAdIAeXVijJofThYuMMcDTVykwdWrpOmX0=";
+    hash = "sha256-pxylCBDEHOxcJeo/117661UMHSIKS7NSVJhwU48hPiA=";
   };
 
   sticker-creator = stdenv.mkDerivation (finalAttrs: {
@@ -163,15 +163,15 @@ stdenv.mkDerivation (finalAttrs: {
     fetcherVersion = 3;
     hash =
       if withAppleEmojis then
-        "sha256-BsHBdN9pk3Fi6HRJuMmMD9QU/iie2m1jZy/zSsIO6Q8="
+        "sha256-XYLpn4yXEF0xBM2XkgeeGBCDQZepLvKwDJunbefq3XU="
       else
-        "sha256-3HLBKd2KzGWUuhIWCPx2teub9isYMHKYw0cgPVOueQI=";
+        "sha256-f0aOXmjw/RtQ70qQjwuGxRxhsFMk1jaqGr2Y1YOpMGg=";
   };
 
   env = {
     ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
     SIGNAL_ENV = "production";
-    SOURCE_DATE_EPOCH = 1772057792;
+    SOURCE_DATE_EPOCH = 1772664318;
   }
   // lib.optionalAttrs stdenv.hostPlatform.isDarwin {
     # Disable code signing during local macOS builds.

From 13fd917010c0c8e67092d88c7e46c1937fad0b17 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ila=C3=AF=20Deutel?= <root@ilai.dev>
Date: Mon, 23 Feb 2026 17:58:13 -0500
Subject: [PATCH 56/74] nano-syntax-highlighting: init at 2025.07.01

---
 .../na/nano-syntax-highlighting/package.nix   | 66 +++++++++++++++++++
 .../nano-syntax-highlighting/test-syntax.exp  | 42 ++++++++++++
 2 files changed, 108 insertions(+)
 create mode 100644 pkgs/by-name/na/nano-syntax-highlighting/package.nix
 create mode 100755 pkgs/by-name/na/nano-syntax-highlighting/test-syntax.exp

diff --git a/pkgs/by-name/na/nano-syntax-highlighting/package.nix b/pkgs/by-name/na/nano-syntax-highlighting/package.nix
new file mode 100644
index 000000000000..e832ad117dad
--- /dev/null
+++ b/pkgs/by-name/na/nano-syntax-highlighting/package.nix
@@ -0,0 +1,66 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  nix-update-script,
+  runCommand,
+  writeScriptBin,
+  expect,
+  nano,
+}:
+stdenv.mkDerivation (finalAttrs: rec {
+  pname = "nano-syntax-highlighting";
+  version = "2025.07.01";
+
+  src = fetchFromGitHub {
+    owner = "galenguyer";
+    repo = pname;
+    tag = version;
+    hash = "sha256-+ydaxjF0CzARxyJU9h1Iq2Yj5JgtAd59sf9yH+PyavY=";
+  };
+
+  dontBuild = true;
+
+  installPhase = ''
+    mkdir -p $out/share
+
+    install *.nanorc $out/share/
+  '';
+
+  passthru = {
+    tests.noSyntaxError =
+      let
+        expectScript = writeScriptBin "${pname}-test-syntax.exp" (builtins.readFile ./test-syntax.exp);
+      in
+      (runCommand "${pname}-test-noSyntaxError"
+        {
+          nativeBuildInputs = [
+            expect
+            nano
+          ];
+        }
+        ''
+          set -euo pipefail
+          # For each nanorc file and each syntax, execute text-syntax.exp
+          for nanorcPath in ${finalAttrs.finalPackage}/share/*.nanorc; do
+            nano --rcfile "$nanorcPath" --listsyntaxes \
+            | tail --lines +2 \
+            | xargs --max-args 1 expect -f ${expectScript}/bin/${pname}-test-syntax.exp "$nanorcPath"
+          done;
+          touch $out
+        ''
+      );
+
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
+    description = "Improved Nano Syntax Highlighting Files, fork of nanorc";
+    homepage = "https://github.com/galenguyer/nano-syntax-highlighting";
+    license = lib.licenses.gpl3Plus;
+    maintainers = with lib.maintainers; [
+      ilai-deutel
+    ];
+    platforms = lib.platforms.all;
+  };
+})
diff --git a/pkgs/by-name/na/nano-syntax-highlighting/test-syntax.exp b/pkgs/by-name/na/nano-syntax-highlighting/test-syntax.exp
new file mode 100755
index 000000000000..dfea82378a71
--- /dev/null
+++ b/pkgs/by-name/na/nano-syntax-highlighting/test-syntax.exp
@@ -0,0 +1,42 @@
+#! /usr/bin/env nix-shell
+#! nix-shell -p expect -p nano -i "expect -f"
+
+proc abort {error} {
+    puts stderr "\n\n\033\[31m$error\033\[39m"
+    exit 1
+}
+
+if {$argc != 2} {
+    abort [format "Usage: %s <nanorcPath> <syntaxName>" [file tail "$argv0"]]
+}
+lassign $argv nanorcPath syntaxName
+
+puts stderr "Testing $syntaxName ($nanorcPath)"
+
+set timeout 10
+# Ensure nano generates ANSI colors so that we can detect errors
+set env(TERM) xterm-256color
+spawn nano --rcfile "$nanorcPath" --syntax "$syntaxName"
+# Send Ctrl-X (exit)
+send "\030"
+lassign [wait] _ _ osError exitCode
+
+if {$osError == -1} {
+    abort "errno: $exitCode"
+} elseif {$exitCode != 0} {
+    abort "nano exited with status $exitCode"
+}
+
+expect {
+    # Check for errors printed to stderr after the nano buffer is closed
+    # Example: "Error in /nix/store/.../nano.nanorc on line 26: Color 'normal' takes no prefix"
+    -re {Error.*} {
+      abort $expect_out(0,string)
+    }
+
+    # Check for Nano status bar errors (red background: \033[41m)
+    # Example: "Unknown syntax name: Invalid"
+    -re {\e\[41m[\s\[]*([^\e]*?)[\s\]]*\e} {
+      abort $expect_out(1,string)
+    }
+}

From 924b69f514bbb69890e8e7efff54e340f8c033c1 Mon Sep 17 00:00:00 2001
From: eljamm <fedi.jamoussi@protonmail.ch>
Date: Thu, 5 Mar 2026 07:13:20 +0000
Subject: [PATCH 57/74] linux_xanmod: 6.18.15 -> 6.18.16

- Changelog: https://dl.xanmod.org/changelog/6.18/ChangeLog-6.18.16-xanmod1.gz
- Diff: https://gitlab.com/xanmod/linux/-/compare/6.18.15-xanmod1..6.18.16-xanmod1?from_project_id=51590166
---
 pkgs/os-specific/linux/kernel/xanmod-kernels.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
index 88eb1203c958..65163553e51a 100644
--- a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
+++ b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
@@ -15,8 +15,8 @@ let
   variants = {
     # ./update-xanmod.sh lts
     lts = {
-      version = "6.18.15";
-      hash = "sha256-RNlX3phlsdI2cg043bMjTdbekdt4lX4yC5HpNrcdca0=";
+      version = "6.18.16";
+      hash = "sha256-qBcYKjVEg2DnGk9ywmDUCVCryyPZYnR7d4Y3QbiEa/c=";
       isLTS = true;
     };
     # ./update-xanmod.sh main

From 3291b7b5c627b8873a1b278a77c40c6275ecdb3f Mon Sep 17 00:00:00 2001
From: eljamm <fedi.jamoussi@protonmail.ch>
Date: Thu, 5 Mar 2026 07:16:28 +0000
Subject: [PATCH 58/74] linux_xanmod_latest: 6.19.5 -> 6.19.6

- Changelog: https://dl.xanmod.org/changelog/6.19/ChangeLog-6.19.6-xanmod1.gz
- Diff: https://gitlab.com/xanmod/linux/-/compare/6.19.5-xanmod1..6.19.6-xanmod1?from_project_id=51590166
---
 pkgs/os-specific/linux/kernel/xanmod-kernels.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
index 65163553e51a..6e5d5d9d4df6 100644
--- a/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
+++ b/pkgs/os-specific/linux/kernel/xanmod-kernels.nix
@@ -21,8 +21,8 @@ let
     };
     # ./update-xanmod.sh main
     main = {
-      version = "6.19.5";
-      hash = "sha256-H378CcQOvkM9LJa7+ScZXFo59D6Asc2063r0EgL0ZCA=";
+      version = "6.19.6";
+      hash = "sha256-6b0N9Q8Z3d5pElXHZHJlb2lALCsd3vCWhXA9kBYhyLk=";
     };
   };
 

From a07e5bd33e2eb8c1918320741503affc00b880d6 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 08:16:06 +0000
Subject: [PATCH 59/74] crossmacro: 0.9.7 -> 0.9.8

---
 pkgs/by-name/cr/crossmacro/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/cr/crossmacro/package.nix b/pkgs/by-name/cr/crossmacro/package.nix
index 9281b58afda3..fde2705b7aa0 100644
--- a/pkgs/by-name/cr/crossmacro/package.nix
+++ b/pkgs/by-name/cr/crossmacro/package.nix
@@ -29,13 +29,13 @@
 
 buildDotnetModule rec {
   pname = "crossmacro";
-  version = "0.9.7";
+  version = "0.9.8";
 
   src = fetchFromGitHub {
     owner = "alper-han";
     repo = "CrossMacro";
     tag = "v${version}";
-    hash = "sha256-CRP3u3ChP587yHgoi49yPiozcPB6juVNZLVVknkqvKo=";
+    hash = "sha256-kca7MTv3KXygLuRoYHuOFJOMKVYny0f9mpWwWhzgqHg=";
   };
 
   projectFile = "src/CrossMacro.UI.Linux/CrossMacro.UI.Linux.csproj";

From 77660e0b8e3f788d087f9b84e9e3cdfbb1a4f647 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 08:20:39 +0000
Subject: [PATCH 60/74] crossmacro-daemon: 0.9.7 -> 0.9.8

---
 pkgs/by-name/cr/crossmacro-daemon/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/cr/crossmacro-daemon/package.nix b/pkgs/by-name/cr/crossmacro-daemon/package.nix
index c8414993b1e1..622758baa4d7 100644
--- a/pkgs/by-name/cr/crossmacro-daemon/package.nix
+++ b/pkgs/by-name/cr/crossmacro-daemon/package.nix
@@ -14,13 +14,13 @@
 
 buildDotnetModule rec {
   pname = "crossmacro-daemon";
-  version = "0.9.7";
+  version = "0.9.8";
 
   src = fetchFromGitHub {
     owner = "alper-han";
     repo = "CrossMacro";
     tag = "v${version}";
-    hash = "sha256-CRP3u3ChP587yHgoi49yPiozcPB6juVNZLVVknkqvKo=";
+    hash = "sha256-kca7MTv3KXygLuRoYHuOFJOMKVYny0f9mpWwWhzgqHg=";
   };
 
   projectFile = "src/CrossMacro.Daemon/CrossMacro.Daemon.csproj";

From ea364022927a6056b6a6c2d04e8edf0ef8a2e221 Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Wed, 4 Mar 2026 20:49:26 +0000
Subject: [PATCH 61/74] python3Packages.huggingface-hub: 1.4.1 -> 1.5.0

Diff: https://github.com/huggingface/huggingface_hub/compare/v1.4.1...v1.5.0

Changelog: https://github.com/huggingface/huggingface_hub/releases/tag/v1.5.0
---
 .../python-modules/huggingface-hub/default.nix        | 11 ++---------
 1 file changed, 2 insertions(+), 9 deletions(-)

diff --git a/pkgs/development/python-modules/huggingface-hub/default.nix b/pkgs/development/python-modules/huggingface-hub/default.nix
index ea110609e84d..f27ff8c7af56 100644
--- a/pkgs/development/python-modules/huggingface-hub/default.nix
+++ b/pkgs/development/python-modules/huggingface-hub/default.nix
@@ -13,7 +13,6 @@
   httpx,
   packaging,
   pyyaml,
-  shellingham,
   tqdm,
   typer,
   typing-extensions,
@@ -35,21 +34,16 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "huggingface-hub";
-  version = "1.4.1";
+  version = "1.5.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "huggingface";
     repo = "huggingface_hub";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-At3FN+dplQ3L9B4vDZrEvREdwgepUvzWC7yeU6L5XY8=";
+    hash = "sha256-XuqZvTu3DuncGpRWXipxtDLY2alY7QVm89ZmpgTdfVo=";
   };
 
-  postPatch = ''
-    substituteInPlace setup.py \
-      --replace-fail "typer-slim" "typer"
-  '';
-
   build-system = [ setuptools ];
 
   dependencies = [
@@ -59,7 +53,6 @@ buildPythonPackage (finalAttrs: {
     httpx
     packaging
     pyyaml
-    shellingham
     tqdm
     typer
     typing-extensions

From a2bf36e4d630c3b506cb2652d3b2830486db69dc Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Thu, 5 Mar 2026 12:53:19 +0300
Subject: [PATCH 62/74] kdePackages.krdp: explicitly track openssl^bin
 dependency

---
 pkgs/kde/plasma/krdp/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkgs/kde/plasma/krdp/default.nix b/pkgs/kde/plasma/krdp/default.nix
index 197f01162a8c..1f477f7f9aea 100644
--- a/pkgs/kde/plasma/krdp/default.nix
+++ b/pkgs/kde/plasma/krdp/default.nix
@@ -24,4 +24,10 @@ mkKdeDerivation {
     freerdp
     pam
   ];
+
+  # Hardcoded as QString, which is UTF-16 so Nix can't pick it up automatically
+  postFixup = ''
+    mkdir -p $out/nix-support
+    echo "${lib.getExe openssl}" > $out/nix-support/depends
+  '';
 }

From 7f77463600ab24a4e73aabfab8fee5a6f2b7b2e7 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 10:14:08 +0000
Subject: [PATCH 63/74] rusty-path-of-building: 0.2.10 -> 0.2.11

---
 pkgs/by-name/ru/rusty-path-of-building/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/ru/rusty-path-of-building/package.nix b/pkgs/by-name/ru/rusty-path-of-building/package.nix
index 4da250b7f62c..ab077ba4dffe 100644
--- a/pkgs/by-name/ru/rusty-path-of-building/package.nix
+++ b/pkgs/by-name/ru/rusty-path-of-building/package.nix
@@ -19,16 +19,16 @@
 }:
 rustPlatform.buildRustPackage rec {
   pname = "rusty-path-of-building";
-  version = "0.2.10";
+  version = "0.2.11";
 
   src = fetchFromGitHub {
     owner = "meehl";
     repo = "rusty-path-of-building";
     rev = "v${version}";
-    hash = "sha256-odiiYWoBfcnPNfXsxj0gt/ra6Z3zeBQdWRjF7BazffY=";
+    hash = "sha256-oDhapNQ5yiZFolI7ChDC7SjPkmkeUAutRmQt/AorStA=";
   };
 
-  cargoHash = "sha256-OX4L8EmgMJVT6sFZRdhPl36ZUcXq2JEFpb/PJml2YE8=";
+  cargoHash = "sha256-GEHsHxGAzD7UEte1XsoqOXLkFaquNUCMqTO5j+lVguA=";
 
   nativeBuildInputs = [
     pkg-config

From e9e4e359ac132ed3b6b38768c66f8d6bcbbd0a9f Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Wed, 4 Mar 2026 20:48:43 +0000
Subject: [PATCH 64/74] python3Packages.transformers: 5.2.0 -> 5.3.0

Diff: https://github.com/huggingface/transformers/compare/v5.2.0...v5.3.0

Changelog: https://github.com/huggingface/transformers/releases/tag/v5.3.0
---
 pkgs/development/python-modules/transformers/default.nix | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/pkgs/development/python-modules/transformers/default.nix b/pkgs/development/python-modules/transformers/default.nix
index e3f1050f8f45..96b532d2e57d 100644
--- a/pkgs/development/python-modules/transformers/default.nix
+++ b/pkgs/development/python-modules/transformers/default.nix
@@ -93,21 +93,16 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "transformers";
-  version = "5.2.0";
+  version = "5.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "huggingface";
     repo = "transformers";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-vus4Y+1QXUNqwBO1ZK0gWd+sJBPwrqWW7O2sn0EBvno=";
+    hash = "sha256-5FzsPIG4dFTR2WgcZbdmVwwwY9Dkqu5aprl5uIIalD0=";
   };
 
-  postPatch = ''
-    substituteInPlace setup.py \
-      --replace-fail "typer-slim" "typer"
-  '';
-
   build-system = [ setuptools ];
 
   dependencies = [

From 44e8baad9f365f5fb855d7a76cba1c0a5e338e81 Mon Sep 17 00:00:00 2001
From: Pierre Roux <pierre.roux@onera.fr>
Date: Thu, 5 Mar 2026 12:26:29 +0100
Subject: [PATCH 65/74] ocamlPackages.elpi: 3.4.5 -> 3.6.1

---
 pkgs/development/ocaml-modules/elpi/default.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/ocaml-modules/elpi/default.nix b/pkgs/development/ocaml-modules/elpi/default.nix
index 0a6729d8ad34..085a5c2fdf0a 100644
--- a/pkgs/development/ocaml-modules/elpi/default.nix
+++ b/pkgs/development/ocaml-modules/elpi/default.nix
@@ -18,7 +18,7 @@
   coqPackages,
   version ?
     if lib.versionAtLeast ocaml.version "4.13" then
-      "3.4.5"
+      "3.6.1"
     else if lib.versionAtLeast ocaml.version "4.08" then
       "1.20.0"
     else
@@ -34,6 +34,7 @@ in
 
 let
   fetched = coqPackages.metaFetch {
+    release."3.6.1".sha256 = "sha256-zoVgRqNAXeCgk3zGntVkkZxIiQrCU5+ONeI97BiT674=";
     release."3.4.5".sha256 = "sha256-cck6XqC98Z9lb3CYS8K/aB1WOckjAyXzZ14vX41nJvI=";
     release."3.4.4".sha256 = "sha256-SvNNAyBYIkSMv3rhx0wVu2JjHdGYUOqaFzZKGBMMebs=";
     release."3.4.3".sha256 = "sha256-2bzUzUO/Ps1uxHHIzQx0pULme9upYxBBggenxaQrd+I=";

From c9a2277e786d52dd323fba313c9d8a069faf5d14 Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 12:27:18 +0000
Subject: [PATCH 66/74] survex: 1.4.19 -> 1.4.20

---
 pkgs/by-name/su/survex/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/su/survex/package.nix b/pkgs/by-name/su/survex/package.nix
index d0bc1af7736b..c61bc65673f1 100644
--- a/pkgs/by-name/su/survex/package.nix
+++ b/pkgs/by-name/su/survex/package.nix
@@ -19,11 +19,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "survex";
-  version = "1.4.19";
+  version = "1.4.20";
 
   src = fetchurl {
     url = "https://survex.com/software/${finalAttrs.version}/survex-${finalAttrs.version}.tar.gz";
-    hash = "sha256-X8FZCZTJ7DkZeYnrzaLCukRhs/kTHwre9F1TTRlK2ro=";
+    hash = "sha256-mSq/O5nsjHqypTUg/P/dAeIMZKyi5QcCtiydkOhh4N0=";
   };
 
   nativeBuildInputs = [

From 28de4d86f2979e185605b2711e209a24850fd08c Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 12:28:55 +0000
Subject: [PATCH 67/74] ledger-live-desktop: 2.141.0 -> 2.143.0

---
 pkgs/by-name/le/ledger-live-desktop/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/le/ledger-live-desktop/package.nix b/pkgs/by-name/le/ledger-live-desktop/package.nix
index 7408f52b3567..61241ddb2933 100644
--- a/pkgs/by-name/le/ledger-live-desktop/package.nix
+++ b/pkgs/by-name/le/ledger-live-desktop/package.nix
@@ -8,11 +8,11 @@
 
 let
   pname = "ledger-live-desktop";
-  version = "2.141.0";
+  version = "2.143.0";
 
   src = fetchurl {
     url = "https://download.live.ledger.com/${pname}-${version}-linux-x86_64.AppImage";
-    hash = "sha256-G6mmTAs4Y4XE1GnXusJhJEg68EqTLpW8SaCmpidYR8M=";
+    hash = "sha256-SFIiXr83XV+FRSgbzOQ0/4rLUMu+FTlo3QxagmVXuJ4=";
   };
 
   appimageContents = appimageTools.extractType2 {

From 173ad253de9774218f83d9dcabb00450142c731a Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 12:51:42 +0000
Subject: [PATCH 68/74] zotero: 8.0.2 -> 8.0.3

---
 pkgs/by-name/zo/zotero/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/zo/zotero/package.nix b/pkgs/by-name/zo/zotero/package.nix
index 72ea4bb58d63..2916b868ea11 100644
--- a/pkgs/by-name/zo/zotero/package.nix
+++ b/pkgs/by-name/zo/zotero/package.nix
@@ -26,13 +26,13 @@ let
   nodejs = nodejs_22;
 
   pname = "zotero";
-  version = "8.0.2";
+  version = "8.0.3";
 
   src = fetchFromGitHub {
     owner = "zotero";
     repo = "zotero";
     tag = version;
-    hash = "sha256-zGcTZjrbFYbE4qJH5g3betnSLCdxYU2nZBOU55HunYU=";
+    hash = "sha256-I6s6m8CG1b1BXQK2qIdOqmsNyxzwj3fAfFFuHK7t6ec=";
     fetchSubmodules = true;
   };
 

From bdecdaf184acdbb4e7a0b34f691a660009f01111 Mon Sep 17 00:00:00 2001
From: Lisanna Dettwyler <lisanna.dettwyler@gmail.com>
Date: Thu, 5 Mar 2026 08:10:12 -0500
Subject: [PATCH 69/74] Revert "dash: use https for sources"

This reverts commit d888dcca1eca0ffd568965a4f642592d1d335bff.
---
 pkgs/by-name/da/dash/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/da/dash/package.nix b/pkgs/by-name/da/dash/package.nix
index 1056de81abe9..030968dbc904 100644
--- a/pkgs/by-name/da/dash/package.nix
+++ b/pkgs/by-name/da/dash/package.nix
@@ -18,7 +18,7 @@ stdenv.mkDerivation (finalAttrs: {
   version = "0.5.13.1";
 
   src = fetchurl {
-    url = "https://gondor.apana.org.au/~herbert/dash/files/dash-${finalAttrs.version}.tar.gz";
+    url = "http://gondor.apana.org.au/~herbert/dash/files/dash-${finalAttrs.version}.tar.gz";
     hash = "sha256-2ScbzgnBJ9mGbiXAEVgt3HWrmIlYoEvE2FU6O48w43A=";
   };
 

From a4c3bce35b7f235f09a82e95b2f5fbad67e282aa Mon Sep 17 00:00:00 2001
From: liberodark <liberodark@gmail.com>
Date: Tue, 15 Jul 2025 17:54:31 +0200
Subject: [PATCH 70/74] ldap-manager: init at 1.1.4

---
 pkgs/by-name/ld/ldap-manager/package.nix | 120 +++++++++++++++++++++++
 1 file changed, 120 insertions(+)
 create mode 100644 pkgs/by-name/ld/ldap-manager/package.nix

diff --git a/pkgs/by-name/ld/ldap-manager/package.nix b/pkgs/by-name/ld/ldap-manager/package.nix
new file mode 100644
index 000000000000..f79f1b6a6afd
--- /dev/null
+++ b/pkgs/by-name/ld/ldap-manager/package.nix
@@ -0,0 +1,120 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  fetchpatch,
+  stdenvNoCC,
+  nodejs,
+  pnpm_10,
+  templ,
+  pnpmConfigHook,
+  fetchPnpmDeps,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+let
+  version = "1.1.4";
+
+  src = fetchFromGitHub {
+    owner = "netresearch";
+    repo = "ldap-manager";
+    tag = "v${version}";
+    hash = "sha256-G4UUgjTbRmVmbLvSv95kwhqnTUCygW8plkdYFGcHBqE=";
+  };
+
+  frontend = stdenvNoCC.mkDerivation {
+    pname = "ldap-manager-frontend";
+    inherit version src;
+
+    nativeBuildInputs = [
+      nodejs
+      pnpmConfigHook
+      pnpm_10
+    ];
+
+    pnpmDeps = fetchPnpmDeps {
+      pname = "ldap-manager";
+      inherit version src;
+      pnpm = pnpm_10;
+      fetcherVersion = 3;
+      hash = "sha256-XFdKb43NxslB60GEDIBbKFYRClq0SeUqPwA81SAZaug=";
+    };
+
+    buildPhase = ''
+      runHook preBuild
+
+      pnpm css:build
+
+      runHook postBuild
+    '';
+
+    installPhase = ''
+      runHook preInstall
+
+      mkdir -p $out
+      cp -r internal/web/static $out/static
+
+      runHook postInstall
+    '';
+  };
+in
+
+buildGoModule (finalAttrs: {
+  pname = "ldap-manager";
+  inherit version src;
+
+  vendorHash = "sha256-ekgnjhO9GAml/A8pf9Hj6lseYJkvvf87f7tiwWixyKU=";
+
+  nativeBuildInputs = [
+    templ
+  ];
+
+  patches = [
+    # Add --version support
+    # https://github.com/netresearch/ldap-manager/pull/462
+    (fetchpatch {
+      url = "https://github.com/netresearch/ldap-manager/pull/462.patch";
+      hash = "sha256-OykLep7uGZ79/lqOC4KNnSThCqQsmDo6vDqaoWVX3XI=";
+    })
+  ];
+
+  excludedPackages = [
+    "internal/e2e"
+    "internal/integration"
+  ];
+
+  preBuild = ''
+    cp -r ${frontend}/static/* internal/web/static/
+    templ generate
+  '';
+
+  ldflags = [
+    "-s"
+    "-X github.com/netresearch/ldap-manager/internal/version.Version=${finalAttrs.version}"
+    "-X github.com/netresearch/ldap-manager/internal/version.BuildTimestamp=1970-01-01T00:00:00"
+  ];
+
+  postInstall = ''
+    mv $out/bin/ldap-manager $out/bin/ldap-passwd
+  '';
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+
+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
+    description = "Web frontend that allows users to administrate their LDAP users";
+    homepage = "https://github.com/netresearch/ldap-manager";
+    changelog = "https://github.com/netresearch/ldap-manager/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ liberodark ];
+    platforms = lib.platforms.linux;
+    mainProgram = "ldap-passwd";
+  };
+})

From d25224ad482cfe9384f28e181ab2f208de478068 Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Thu, 5 Mar 2026 16:37:03 +0300
Subject: [PATCH 71/74] kdePackages: Gear 25.12.2 -> 25.12.3

---
 pkgs/kde/generated/sources/gear.json | 1494 +++++++++++++-------------
 1 file changed, 747 insertions(+), 747 deletions(-)

diff --git a/pkgs/kde/generated/sources/gear.json b/pkgs/kde/generated/sources/gear.json
index 5971f693fc73..234010e24d70 100644
--- a/pkgs/kde/generated/sources/gear.json
+++ b/pkgs/kde/generated/sources/gear.json
@@ -1,1247 +1,1247 @@
 {
   "accessibility-inspector": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/accessibility-inspector-25.12.2.tar.xz",
-    "hash": "sha256-vDFFF92roXI8NhTfZNisOIlDb18ctRE/b3yNjtaa+ls="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/accessibility-inspector-25.12.3.tar.xz",
+    "hash": "sha256-DWvuzjQtJhD09cT4Q5ZIEtCFji6dEd6X35porUsnhJA="
   },
   "akonadi": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/akonadi-25.12.2.tar.xz",
-    "hash": "sha256-Qa0GJBtieCRbw4VKGJ4JHdETBF1aFEkCXQOlRN5MO9M="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/akonadi-25.12.3.tar.xz",
+    "hash": "sha256-aITKYhlUfwD01qbca3h9CVwKkl+jHMjnutFUmRpwBio="
   },
   "akonadi-calendar": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/akonadi-calendar-25.12.2.tar.xz",
-    "hash": "sha256-7FpUQNmosgD1AY4jtSxDKfpAGtNUCIEr5KD0tF+3enU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/akonadi-calendar-25.12.3.tar.xz",
+    "hash": "sha256-rGBtIhC6WBFnsPF7yB3GDtTA3mba+a3NVfziXHPGABQ="
   },
   "akonadi-calendar-tools": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/akonadi-calendar-tools-25.12.2.tar.xz",
-    "hash": "sha256-9qkqGoHjkwIMxEp7ag52NG3f9t7esr/0Arg6aSFtwJ4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/akonadi-calendar-tools-25.12.3.tar.xz",
+    "hash": "sha256-NBWom/w4fi3kow9ugPEG2MSmqRAT5XWbUWfg0RFCr1A="
   },
   "akonadi-contacts": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/akonadi-contacts-25.12.2.tar.xz",
-    "hash": "sha256-+k1rlRQ0ePfUSJfGjDPuDwMEJvJdhWcEW5BMKgLrNoY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/akonadi-contacts-25.12.3.tar.xz",
+    "hash": "sha256-V1u0Gaa/3iuz6s7aljaHhJL4YB/ofHZ3IfnOpcJQiY8="
   },
   "akonadi-import-wizard": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/akonadi-import-wizard-25.12.2.tar.xz",
-    "hash": "sha256-3VmIl9m4+SUGQyA6ByM05/OcwlQhZdc8X6lOegmQOrs="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/akonadi-import-wizard-25.12.3.tar.xz",
+    "hash": "sha256-IdEsaziwTqGTIK/peQeYappDKpz2z/M6/gFdwapkBLY="
   },
   "akonadi-mime": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/akonadi-mime-25.12.2.tar.xz",
-    "hash": "sha256-rXRWzM2tllvHWGE28/EiC4OvB0azBaGIC+tXFMv2o4k="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/akonadi-mime-25.12.3.tar.xz",
+    "hash": "sha256-FeTH/1H6Pz2Tc7P4/J+4ep3d2yYBAxYeCMJJzo2/v6A="
   },
   "akonadi-search": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/akonadi-search-25.12.2.tar.xz",
-    "hash": "sha256-gygJT3Je1GA+Iwm/OB0aQHuqOAMuFX8udCHzxT4uIc4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/akonadi-search-25.12.3.tar.xz",
+    "hash": "sha256-deymw4q521iCpqcq8PL+D5bZSGQZi0pM+J13SAcSHQk="
   },
   "akonadiconsole": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/akonadiconsole-25.12.2.tar.xz",
-    "hash": "sha256-tb74BvUl7Nz03GFoVcF5yAIatONskkOV48y9z7aPB9U="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/akonadiconsole-25.12.3.tar.xz",
+    "hash": "sha256-Hv/bYjdbZkNd6Ldc/hQp7tpfrMVG2bGS6Kiv/uoha7o="
   },
   "akregator": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/akregator-25.12.2.tar.xz",
-    "hash": "sha256-rr2x6ZTWHqRH4jiA64N6SqDfyhzAXve8IjxAYMvXb9g="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/akregator-25.12.3.tar.xz",
+    "hash": "sha256-sVQR6KZ8iTTOswwbADmUJNSkJzaY+FYK7052GSHBOeM="
   },
   "alligator": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/alligator-25.12.2.tar.xz",
-    "hash": "sha256-Qx+6Yh6siGJ0lTmKVnsPVZB6O9BzCdK8M5ydIFPUvag="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/alligator-25.12.3.tar.xz",
+    "hash": "sha256-3DuC/XVLVc7vAELtYjLztL5zTaynCS7DVC/MAlXCdps="
   },
   "analitza": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/analitza-25.12.2.tar.xz",
-    "hash": "sha256-WRiYaSetaCD5uqU7TZNblFDdr1edAV+l1Em58+9wxa4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/analitza-25.12.3.tar.xz",
+    "hash": "sha256-TwvAERbWGVPZdZ+R+UPrnaZ08fBIpFPVUDX0RZw7/bc="
   },
   "angelfish": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/angelfish-25.12.2.tar.xz",
-    "hash": "sha256-2rvqaWetdhSvyfkoEb5RxwhWSvRmV+j9Wge6dSyPeF4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/angelfish-25.12.3.tar.xz",
+    "hash": "sha256-NEE4dpFYcU1Fx78mJcUXsSav03UWbEesLKoR0Ac1IyU="
   },
   "arianna": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/arianna-25.12.2.tar.xz",
-    "hash": "sha256-XtxLfsVW0bZA0UXLfJU54y7K3QFoNrxbWP3WaSsYLe8="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/arianna-25.12.3.tar.xz",
+    "hash": "sha256-AzabhvJZJWMA8oC42IOyW9AuUM+dxFCWskltYwL+gwg="
   },
   "ark": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ark-25.12.2.tar.xz",
-    "hash": "sha256-q9c1CRTGWnY8rFE81nn2NVVbYYwd8YOzMRNPezIppHg="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ark-25.12.3.tar.xz",
+    "hash": "sha256-gfJ+8I4hbzztzhCisuLHS6J3NSGdjxScnROZ91ZeAos="
   },
   "artikulate": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/artikulate-25.12.2.tar.xz",
-    "hash": "sha256-aAYvrQOKh2jXgfh+Sh4wupl8eHcN0pcTS4CSpgFeViA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/artikulate-25.12.3.tar.xz",
+    "hash": "sha256-2DfUdwdXeasqwFAeLRqAaadh/Bz8Q6aOxbvF2BwMnrw="
   },
   "audex": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/audex-25.12.2.tar.xz",
-    "hash": "sha256-gOw9SPUrxEdQ61ZtJ+7bsMmZd5Ec+SnOH426UuhPQiU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/audex-25.12.3.tar.xz",
+    "hash": "sha256-7Mei692nfMtDlfgC9tumaLK6p1uhkNOs53jty0beId8="
   },
   "audiocd-kio": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/audiocd-kio-25.12.2.tar.xz",
-    "hash": "sha256-GbBdrZTeW+TqX53/c210xY7MvektT3xiScCdkjOeVJA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/audiocd-kio-25.12.3.tar.xz",
+    "hash": "sha256-fFqf+OxwF9PHYRB/kQtsdVEdS+6f4WhzK3cAb1tE//E="
   },
   "audiotube": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/audiotube-25.12.2.tar.xz",
-    "hash": "sha256-ESuz+0KZIgZf8vK8jfNLRIVucmDaHQ59PIa0s67wXbU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/audiotube-25.12.3.tar.xz",
+    "hash": "sha256-nnf9STD3luNS2+KoOdzYy7YBYFywJkl1laR2fnEX4xg="
   },
   "baloo-widgets": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/baloo-widgets-25.12.2.tar.xz",
-    "hash": "sha256-YGrWJG+r/ZuRotRYx1jDIpc8Rr830VobLaCFaMPSqyM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/baloo-widgets-25.12.3.tar.xz",
+    "hash": "sha256-CwP8Ct/tpG3utT+14iu5EIcV68HY9bGcpOXCIWMyxxE="
   },
   "blinken": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/blinken-25.12.2.tar.xz",
-    "hash": "sha256-uOyaqXTiyMy9ManFul/Wdsd+txzj3+QOXmKX7jJt9ao="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/blinken-25.12.3.tar.xz",
+    "hash": "sha256-t0Sq2vw6+qEOYCxXEiw1ChIoCqFYwVWfklpjmkOafjc="
   },
   "bomber": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/bomber-25.12.2.tar.xz",
-    "hash": "sha256-pPjVdOlLUDjsGdVAfo9EvAscaY0DNFiwMUiscR/9XyU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/bomber-25.12.3.tar.xz",
+    "hash": "sha256-UVDTA4xtCUU9J5IhlHaJS3GdUaG47W5e79wghvfjk3A="
   },
   "bovo": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/bovo-25.12.2.tar.xz",
-    "hash": "sha256-Kx2TIJHpchBVOKqXW/Lm93l7tYrP6UxwvsPQ7ZHtIhY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/bovo-25.12.3.tar.xz",
+    "hash": "sha256-tas4FYUYNTNgzpXeAXI206I1r+SZ/p/ZWmkq/q2ArhU="
   },
   "calendarsupport": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/calendarsupport-25.12.2.tar.xz",
-    "hash": "sha256-yohpWTbmTQGsvzRHa3IV8XlqNmuWzEOJCj4+GjMguS0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/calendarsupport-25.12.3.tar.xz",
+    "hash": "sha256-RVeFcSoy8NunlHoxTrmQZdkCrGxDKUfp5pmkTKGMcKE="
   },
   "calindori": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/calindori-25.12.2.tar.xz",
-    "hash": "sha256-ZEhsE2R8NeYWLqZCxur4ucxRbL/c4P0d7fTtatUjPh0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/calindori-25.12.3.tar.xz",
+    "hash": "sha256-MueM6rv1pWm6PcosuoSAC4Sv0v8qZMR33+6xyzZu5+Y="
   },
   "calligra": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/calligra-25.12.2.tar.xz",
-    "hash": "sha256-8poYvdlsPQCagFbpxgEQxNZc7TCnHXzZduOghJtAq7A="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/calligra-25.12.3.tar.xz",
+    "hash": "sha256-mGSHM/wAUssgrKAKwQ+9RlZUlCK8UP33nRtfXvxevsE="
   },
   "cantor": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/cantor-25.12.2.tar.xz",
-    "hash": "sha256-1yFSUT71/Nk8Ug/y3B1Lbey93x576Yy4EbRltXlyuCM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/cantor-25.12.3.tar.xz",
+    "hash": "sha256-CIc1A7JOd6Lw0zQyfWOfuIynGkpy9qkkU8DUf0PKrks="
   },
   "colord-kde": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/colord-kde-25.12.2.tar.xz",
-    "hash": "sha256-b8JCv/eK0MVn98GCzC693PUXvyXvObJ+EeOTcEMM//8="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/colord-kde-25.12.3.tar.xz",
+    "hash": "sha256-qc7upz76LJ0R3my/gaQsTWJ6upl5DBtIct7Khz0pn0c="
   },
   "dolphin": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/dolphin-25.12.2.tar.xz",
-    "hash": "sha256-kcgj3k0cbI+uXdo9TlzAO2usiX/goHxXGE3/Z1UZxjU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/dolphin-25.12.3.tar.xz",
+    "hash": "sha256-mWHefMB22dfVmLt/U6/evPuiBWcJMjH0K6cuAx4Imjs="
   },
   "dolphin-plugins": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/dolphin-plugins-25.12.2.tar.xz",
-    "hash": "sha256-OsRO6a1klbLlZhLM0qGUCwVYRoXtM8ukkMSE9eX5pqY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/dolphin-plugins-25.12.3.tar.xz",
+    "hash": "sha256-pzjU+fEUgoP/BVL/xaRAyrxfIWqiRzwi5plZOzsBp8A="
   },
   "dragon": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/dragon-25.12.2.tar.xz",
-    "hash": "sha256-BVh3GkulROthWb1dEw6OYES6spVrQX9n9mGCQvO9pDs="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/dragon-25.12.3.tar.xz",
+    "hash": "sha256-OvT370uEirbumkFpchxsWdbPGazYdmGdZHABqG165M4="
   },
   "elisa": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/elisa-25.12.2.tar.xz",
-    "hash": "sha256-5kuS1iICtaXSu7fQSKBqxjP7/iHMivnuRvGZHpfmdLc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/elisa-25.12.3.tar.xz",
+    "hash": "sha256-7lMJcPEb/aSKVWlQXPyH62zK0hNdYiZCPdQsDDun/Uo="
   },
   "eventviews": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/eventviews-25.12.2.tar.xz",
-    "hash": "sha256-DkRj49ERfsD+9hA2E6mIhFNjFXra7FRjpxUdMzdSBu4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/eventviews-25.12.3.tar.xz",
+    "hash": "sha256-wud29V5IWzRtJWqfIf0kSvK3XhjEieyBHjNAUMzLymo="
   },
   "falkon": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/falkon-25.12.2.tar.xz",
-    "hash": "sha256-/IT9lBtWP8wV9IJ8wqVySbVJz2oHPfGSXoW9D87eykw="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/falkon-25.12.3.tar.xz",
+    "hash": "sha256-JfkJVzNQWP/4U2tRETXjbZbnTEn6tFaQvom5lAFXd7U="
   },
   "ffmpegthumbs": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ffmpegthumbs-25.12.2.tar.xz",
-    "hash": "sha256-GAWYCbqo0lJbIJiPkXbQEK6HWHA5F8bK/YGZvpZbxEY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ffmpegthumbs-25.12.3.tar.xz",
+    "hash": "sha256-7rOKzGWpVcFlMrg6ILygj84+SEZ027DMrsrkQnfvjeg="
   },
   "filelight": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/filelight-25.12.2.tar.xz",
-    "hash": "sha256-6cC6MTbK9OBI3crcHmD8z/1FWHbonnU2lL8MkL8vTuA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/filelight-25.12.3.tar.xz",
+    "hash": "sha256-kUh28W4KB9pMhPusZrJgpbA+zr61XC/zdDeB/lA509w="
   },
   "francis": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/francis-25.12.2.tar.xz",
-    "hash": "sha256-Os/3CouGhHOGJ/LcIEmBVuwpBkIt/8gIxRTevgaJRPg="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/francis-25.12.3.tar.xz",
+    "hash": "sha256-CJLJHqifd9NIDvcl4ttrJwzxMwzvTStz+ItYlNVZ6bk="
   },
   "ghostwriter": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ghostwriter-25.12.2.tar.xz",
-    "hash": "sha256-Nl/ep2aRUvIkJx7eaMfFD1siDM4m5DEEgv7X6MQg3pU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ghostwriter-25.12.3.tar.xz",
+    "hash": "sha256-twEnxCDh2Pcjec7kxwyAkQS1gfY8nafIP/NESXk015Y="
   },
   "granatier": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/granatier-25.12.2.tar.xz",
-    "hash": "sha256-7Cl5Jc9E5e1HRAyuXhBAXQzLC11HM3LQ+jmd155aShA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/granatier-25.12.3.tar.xz",
+    "hash": "sha256-xbiBTtSsrT6E7c3fqpx/3DgDR+UOc4yRFt5CvgcUXJU="
   },
   "grantlee-editor": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/grantlee-editor-25.12.2.tar.xz",
-    "hash": "sha256-6IIIdkXbmLrVSr0sj4vgdb7oeLJQUYhPEYbyyLIPYmo="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/grantlee-editor-25.12.3.tar.xz",
+    "hash": "sha256-MFWPNJN3c7r52P/kfowC2bAACHNY/npt34krhRjDVAQ="
   },
   "grantleetheme": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/grantleetheme-25.12.2.tar.xz",
-    "hash": "sha256-qUaWId1ix7vO7bOQ4Z9HTA8manVF1Toct2N/Y8CMZCc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/grantleetheme-25.12.3.tar.xz",
+    "hash": "sha256-/wvyn5cncQv5DLKIcUBunHpZAGx4gcBPio8sY9n2QzA="
   },
   "gwenview": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/gwenview-25.12.2.tar.xz",
-    "hash": "sha256-DmPXBUFo6azzZpYVgtD1Eh4a9rxYxYuaIgZapl3mg/s="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/gwenview-25.12.3.tar.xz",
+    "hash": "sha256-BuoypR2Onv68Sk5j6z74sjtopa9as4BFp+KDek/Rk7Q="
   },
   "incidenceeditor": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/incidenceeditor-25.12.2.tar.xz",
-    "hash": "sha256-6gsX9205OvCDYfVcV/HuyGb1aoUY+vHg4zeVV8FcyMM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/incidenceeditor-25.12.3.tar.xz",
+    "hash": "sha256-xKscC0Tmi+TDwofCpbC0Gqr2unRiAmlBAatKUPXYl3o="
   },
   "isoimagewriter": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/isoimagewriter-25.12.2.tar.xz",
-    "hash": "sha256-p6H4PEgfWCnHbatEcoR3jvSSV4Z0+SSnJ09KME9pTN4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/isoimagewriter-25.12.3.tar.xz",
+    "hash": "sha256-xTk1OTzAgGZc5ei9edPOLuzkq62e/S6vohrnrEOZ6Qk="
   },
   "itinerary": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/itinerary-25.12.2.tar.xz",
-    "hash": "sha256-uAPHoL2+NXWWFXKlyTEPirBvOT+nlEgKI2uVQsw8Mrw="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/itinerary-25.12.3.tar.xz",
+    "hash": "sha256-TOticUY38CyA39zHmV8gX2iTC8OO1eUD7y4pogAW9ao="
   },
   "juk": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/juk-25.12.2.tar.xz",
-    "hash": "sha256-DbBS4Xlq4W2zq1HLopc7kaiKguCneDvgx/7QPP0+xac="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/juk-25.12.3.tar.xz",
+    "hash": "sha256-daEMhwf4P9duCMlghyO1GB2fgo19UOIXY9H9JWI/3QQ="
   },
   "k3b": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/k3b-25.12.2.tar.xz",
-    "hash": "sha256-Ub2B6ZhmegfBJQMMhltr3I/DFWvGsDlFOYxfEIMQljQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/k3b-25.12.3.tar.xz",
+    "hash": "sha256-UXkhRskytYF0xHXG5AtHt9/WzM6FNGsx9xHbPDJZK+g="
   },
   "kaccounts-integration": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kaccounts-integration-25.12.2.tar.xz",
-    "hash": "sha256-bzs9W2MK0RUEJZgtEmZxgHXEGVgLsPgogkUko4DIWqU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kaccounts-integration-25.12.3.tar.xz",
+    "hash": "sha256-ccIK5coUWfcyzDySJIiFstHYTiUfLRsPRisArdqPw7Y="
   },
   "kaccounts-providers": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kaccounts-providers-25.12.2.tar.xz",
-    "hash": "sha256-8s8FbWJEx35yclbrEbqy/nM8x/QdwuqYbUvu82csP8w="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kaccounts-providers-25.12.3.tar.xz",
+    "hash": "sha256-DOZFXmAcEirRF504CKEtRMXTY3fPDOVVZSDQ+O7j5rw="
   },
   "kaddressbook": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kaddressbook-25.12.2.tar.xz",
-    "hash": "sha256-Wz55B2rbFXNwy9O7oBacg4I5sVxpH2rsRImbgf3o8KI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kaddressbook-25.12.3.tar.xz",
+    "hash": "sha256-XD53qmg+/5qWpRF3aOixgo8XHa3hoDVEO9o3ocWry9Q="
   },
   "kajongg": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kajongg-25.12.2.tar.xz",
-    "hash": "sha256-BfpnRVxiawH9MnEUU4AJ+su9OB9jfncUTnuBwoV4njE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kajongg-25.12.3.tar.xz",
+    "hash": "sha256-sk67ww5o9f1S0YDNLMJzTUgbPXk/CE3Wv8ShmsMmS5k="
   },
   "kalarm": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kalarm-25.12.2.tar.xz",
-    "hash": "sha256-RV8umYeQhRv7m/UvA0nH/mzmfDgCiXj6tSKvf+3LDj0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kalarm-25.12.3.tar.xz",
+    "hash": "sha256-K6IU+SFvV7l4mRYq656ntyI+2y99unuknoybCxD3J2I="
   },
   "kalgebra": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kalgebra-25.12.2.tar.xz",
-    "hash": "sha256-aVpowavQ9J7j+9d3cY0NQRJAe1uZqLeHlt8znyqkCEA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kalgebra-25.12.3.tar.xz",
+    "hash": "sha256-da1avJccUJeP6I8VfD81835gR+pcnWJsm3Sz/QuikBU="
   },
   "kalk": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kalk-25.12.2.tar.xz",
-    "hash": "sha256-M2rLcX3etNY3E5CW0Ji1Gc34l7PgchM+sBPdaBLwvh0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kalk-25.12.3.tar.xz",
+    "hash": "sha256-fMrA6QCw2mO82VYFeYOmRv329CEAXOUIx187p33JWcI="
   },
   "kalm": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kalm-25.12.2.tar.xz",
-    "hash": "sha256-WuQ92vTxv4xwKcrHfV5CzBFF8roOpITXjFGEa9Qbepc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kalm-25.12.3.tar.xz",
+    "hash": "sha256-xmTk+WQZcS30DNha5xqe6ztdv7sWHJpbGO6bOMQy5kM="
   },
   "kalzium": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kalzium-25.12.2.tar.xz",
-    "hash": "sha256-sU2xAoD9QlOJD2LcuqovM52WYAvNOLnB0rSjATdgqY0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kalzium-25.12.3.tar.xz",
+    "hash": "sha256-WdjVE49185ed9ioYpPye0SwdKt/rRVre2Ms6zUGu6cs="
   },
   "kamera": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kamera-25.12.2.tar.xz",
-    "hash": "sha256-v5fUr1/cEV5n5pom/RoFqZ96hN8qi30YRROFqro9fDk="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kamera-25.12.3.tar.xz",
+    "hash": "sha256-/e/0YRou54tLQxUiViMtwjIIxyvsSZOMD3QnQv+ZgGM="
   },
   "kamoso": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kamoso-25.12.2.tar.xz",
-    "hash": "sha256-o8gO3zFfz9DvSa0YCEECAvgIPKk184du66A2gcLAY6c="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kamoso-25.12.3.tar.xz",
+    "hash": "sha256-eBqmaZeaAyaZT5D3HowqOR2J7C4f7wZhRnc1d/6OuGQ="
   },
   "kanagram": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kanagram-25.12.2.tar.xz",
-    "hash": "sha256-WyHR6evzQhQJYV62rxe4vr41Ug6sSjckCCCNOh+AKwU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kanagram-25.12.3.tar.xz",
+    "hash": "sha256-p9/Kp1kwWM3jNLxdFaKe1jVnVj/KJasdPiPvYvNU7VY="
   },
   "kapman": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kapman-25.12.2.tar.xz",
-    "hash": "sha256-vl8v870DPHAM+M7w4vcbRziZbE1TaoiqoO49f0/n2tw="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kapman-25.12.3.tar.xz",
+    "hash": "sha256-cFmxNB1P8UI4jtUC+QMlYmJyLC++T3PBsojk1xPI0mE="
   },
   "kapptemplate": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kapptemplate-25.12.2.tar.xz",
-    "hash": "sha256-f1p5IuG65thFk0CfN+2SeMU3LqYYq9gitqWNRPMe1u4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kapptemplate-25.12.3.tar.xz",
+    "hash": "sha256-rPipeGAERcFxGd5w5QmqVDkfoKvklIVqEmmzH9qG/BQ="
   },
   "kasts": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kasts-25.12.2.tar.xz",
-    "hash": "sha256-N0qFqu3+M6O5vYgLD69UHaFafFI4xJES7jRClbP5PCE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kasts-25.12.3.tar.xz",
+    "hash": "sha256-tdGVEqWIehp2PrnelTDdf4YdZnYxzXioSnmlDkEMANA="
   },
   "kate": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kate-25.12.2.tar.xz",
-    "hash": "sha256-CE19dccDJkOPSjT+yzV22ZaICGUMGFLERyZHL5JnBio="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kate-25.12.3.tar.xz",
+    "hash": "sha256-12HZdsGZIoQ2FyEdkGne0I1utDiR4o5W65OFtibOkKs="
   },
   "katomic": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/katomic-25.12.2.tar.xz",
-    "hash": "sha256-TxomswuXgF7P/VnJa8kAwxcVt7MWDlKu+wkpYyM5ooE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/katomic-25.12.3.tar.xz",
+    "hash": "sha256-svsb83nDRfh1Tn4oTmXIrBdAmftjpRMBNNFk6SKvYk8="
   },
   "kbackup": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kbackup-25.12.2.tar.xz",
-    "hash": "sha256-GZoaQJs3fBkDlYRvZY1HEeIwKUF+ej8CEq9zLBcKi80="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kbackup-25.12.3.tar.xz",
+    "hash": "sha256-AMDOfv2/242zOP54gC7omXGZ8wXGHDel9YqlmGyylA0="
   },
   "kblackbox": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kblackbox-25.12.2.tar.xz",
-    "hash": "sha256-CSBE0YI5gsQeHQktRC3uAbjabPioV1KKcl7yNO8i7yE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kblackbox-25.12.3.tar.xz",
+    "hash": "sha256-FD4OReSPo94WlSxgy7Q26DhsdrSKVEWvYeNt2O7atKg="
   },
   "kblocks": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kblocks-25.12.2.tar.xz",
-    "hash": "sha256-vEK19C3/bKnuuE3hYu9dxN8bzyxKJqUa+FGenAE1RAc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kblocks-25.12.3.tar.xz",
+    "hash": "sha256-I/+sPDv82AZN+eJIfMoDr2hc1C7GuEA9JrqLrrFPakc="
   },
   "kbounce": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kbounce-25.12.2.tar.xz",
-    "hash": "sha256-1dQza362LZSWpDGYP8Oc4rEufiEGb1/Hwoz9o0NNOyA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kbounce-25.12.3.tar.xz",
+    "hash": "sha256-bUyeq8jMOcNAIHbf0MWmVmoTCoGCTbEGpE2kM+5srgg="
   },
   "kbreakout": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kbreakout-25.12.2.tar.xz",
-    "hash": "sha256-1dTHRsUFW7d9a6Y6VR6eWF2onn34VuQbHfkjeZBKycc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kbreakout-25.12.3.tar.xz",
+    "hash": "sha256-3JNG55PVIegwJFsL4znSjun751dj4ZGFZQcLszVTQCk="
   },
   "kbruch": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kbruch-25.12.2.tar.xz",
-    "hash": "sha256-hb84PToFLtjL6BWLpXAW2Pi8lWYNAVCLjuaKq4Kzn8k="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kbruch-25.12.3.tar.xz",
+    "hash": "sha256-LJwMR3QQjY3FjKTxQWjLnlM3fj/S/3h8joHZ3TF5tP4="
   },
   "kcachegrind": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kcachegrind-25.12.2.tar.xz",
-    "hash": "sha256-Rug3s60S+dvqaO7QQCGc5+ZqxYtH/ClDChpPk9dZGwc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kcachegrind-25.12.3.tar.xz",
+    "hash": "sha256-6WrMDWiLEpQOzIiWq4n/0Vi99ZX8aa1tSjgOKOLo79I="
   },
   "kcalc": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kcalc-25.12.2.tar.xz",
-    "hash": "sha256-qzY1WAI/rBfNfr4u4t53ThrnojkNHykafHMW7A3xoXQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kcalc-25.12.3.tar.xz",
+    "hash": "sha256-wjgsIy4GdEsrgquWeX9Z0w/U/iObKqDAf750JM8Qqvo="
   },
   "kcalutils": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kcalutils-25.12.2.tar.xz",
-    "hash": "sha256-/qTqUKP86WfyataK/w+lg+1VLmL6BRLD1IkVl+p8vnE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kcalutils-25.12.3.tar.xz",
+    "hash": "sha256-jVTf70O3kpydm1K6K2I0+UU3kj5P+UmEYRv3SJUCojQ="
   },
   "kcharselect": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kcharselect-25.12.2.tar.xz",
-    "hash": "sha256-rzx8lMnHn1faj6RIPoWgPw9ABYvo41hnoMwoByzLzsg="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kcharselect-25.12.3.tar.xz",
+    "hash": "sha256-kN9VQ1Ftxy2D7f95+b3Kl2MGHQ3DsL0+tylcqRL87N4="
   },
   "kclock": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kclock-25.12.2.tar.xz",
-    "hash": "sha256-c12mdnLHyG8gILPfxPXKuQUZ4ZPe3WTj6p/1Lvx5zI4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kclock-25.12.3.tar.xz",
+    "hash": "sha256-jLSx1QKtBKvwTl127UdqYH3aiF0oK/w2fSGFiPuPPkU="
   },
   "kcolorchooser": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kcolorchooser-25.12.2.tar.xz",
-    "hash": "sha256-8i4SQXfTZaKlrHDkk10fp8QsPey5tLwUvcaeG9g6tCE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kcolorchooser-25.12.3.tar.xz",
+    "hash": "sha256-CItERxsP7ID7UJnGm8c3tnpOaKCKPVL5AYIUF979yGU="
   },
   "kcron": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kcron-25.12.2.tar.xz",
-    "hash": "sha256-h6bHQtYGGWj7B3IzOlw9R6A9ZdrSO35SJIKcuoOjSfI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kcron-25.12.3.tar.xz",
+    "hash": "sha256-Cz6b2vOp8nZu+3AH3/m7EnjUdT6qBeyhOPJCMaxIXeI="
   },
   "kde-dev-scripts": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kde-dev-scripts-25.12.2.tar.xz",
-    "hash": "sha256-ChFwrx0g0E3zAONgOQtKzoFWW2+eY99XN+L9VoOm7rk="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kde-dev-scripts-25.12.3.tar.xz",
+    "hash": "sha256-R7DSdELdJqppkmv74kMWt8YflOcRqNMWyR9RMouiAmQ="
   },
   "kde-dev-utils": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kde-dev-utils-25.12.2.tar.xz",
-    "hash": "sha256-TQo7andHu6uTbUjHUVXqpdYllHi9hOJay8q2lFLsv2M="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kde-dev-utils-25.12.3.tar.xz",
+    "hash": "sha256-WY/f1bmB9Hprxk1xvOHIE2fg9xIVQEiszxDQC0ObW5w="
   },
   "kde-inotify-survey": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kde-inotify-survey-25.12.2.tar.xz",
-    "hash": "sha256-g4OVHo0SInXsPUenoqZVygcA+cqSuBibdDtOQumoDsc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kde-inotify-survey-25.12.3.tar.xz",
+    "hash": "sha256-BcAgTdwWbfBKW9OW9a8ECMAwX9NKf/g2GehshwlskOM="
   },
   "kdebugsettings": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdebugsettings-25.12.2.tar.xz",
-    "hash": "sha256-akh58pkuZ/681E2/wLdm3b8ib4yShiEJwqzIfqBP52k="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdebugsettings-25.12.3.tar.xz",
+    "hash": "sha256-wqJY+c47Ru7Vq4h4aErF/c9hEoXFi1l5BC0VL8DQrb4="
   },
   "kdeconnect-kde": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdeconnect-kde-25.12.2.tar.xz",
-    "hash": "sha256-0FBLvDVy9+ExmDeG7ducWAmG5eRrtEuUpt93qHd+TvI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdeconnect-kde-25.12.3.tar.xz",
+    "hash": "sha256-okLJaLf4OvIeAhE85XKLn8qYJYtuj256M9XWw8yeabs="
   },
   "kdeedu-data": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdeedu-data-25.12.2.tar.xz",
-    "hash": "sha256-yeynRqeiaQUClV10NC/9oi7QTf7Wfq3qjwVzCILDt94="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdeedu-data-25.12.3.tar.xz",
+    "hash": "sha256-zjIUj0Gid2oCpZMDW6XD31c7f6ASOoE0uSVcneOyfwQ="
   },
   "kdegraphics-mobipocket": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdegraphics-mobipocket-25.12.2.tar.xz",
-    "hash": "sha256-8PWqLsRCyMEiWpCqQaGbx1TKtIvu44AiG6SZM2eAOsQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdegraphics-mobipocket-25.12.3.tar.xz",
+    "hash": "sha256-++bAoqFcEk+o9gUuxEMp094oUAGPTCXtvvjBY2JrHlY="
   },
   "kdegraphics-thumbnailers": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdegraphics-thumbnailers-25.12.2.tar.xz",
-    "hash": "sha256-H+q55a0aotirzt16M7U3ZEvxw/NCf/1qVci4M2j4btM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdegraphics-thumbnailers-25.12.3.tar.xz",
+    "hash": "sha256-BeueJowWHSXGiZ8a/9uZrK+OxQahEIP+qAfjNaXeGPk="
   },
   "kdenetwork-filesharing": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdenetwork-filesharing-25.12.2.tar.xz",
-    "hash": "sha256-aaT3dF1IprDOoZxNmHFJ5OVDxGtuqhXT0Zx4V+TwrnA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdenetwork-filesharing-25.12.3.tar.xz",
+    "hash": "sha256-Jp3kf8zybOHJiaS2bUMsQwaRPRqBQZnF/85TPGcwVpY="
   },
   "kdenlive": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdenlive-25.12.2.tar.xz",
-    "hash": "sha256-Wh8sFZc0py7Iv5MwgywlF1p/A3sbHRx7f6uWAlC/gVQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdenlive-25.12.3.tar.xz",
+    "hash": "sha256-Eu8HXG33NjeUjNznclu4OAzNFksVgVfUleaCGATOSn8="
   },
   "kdepim-addons": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdepim-addons-25.12.2.tar.xz",
-    "hash": "sha256-L9F1DInPVNlKtO505wSAwtjCRaAUkmN6SAdA6EzCjQY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdepim-addons-25.12.3.tar.xz",
+    "hash": "sha256-Duv4pq7jl7U84TZe1qJ69fejSIZcV1unrA+IeH9/qXk="
   },
   "kdepim-runtime": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdepim-runtime-25.12.2.tar.xz",
-    "hash": "sha256-jcyV0LgIP1Vm1d7KAIBGRL5c8dRsR3KDjKTxL1pFYuU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdepim-runtime-25.12.3.tar.xz",
+    "hash": "sha256-nANHccxm7VEDrPUnb9Kl+fQ7UDOT43eSCMT5fE0nRok="
   },
   "kdesdk-kio": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdesdk-kio-25.12.2.tar.xz",
-    "hash": "sha256-qmntgQyR6JddglanWFLeGl+XU42AmSyEyRUvIUIzQ30="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdesdk-kio-25.12.3.tar.xz",
+    "hash": "sha256-lgX6FtIVGVq8oaRJ63PIVNY0ZSn1gjC6ox4jGs1JtNY="
   },
   "kdesdk-thumbnailers": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdesdk-thumbnailers-25.12.2.tar.xz",
-    "hash": "sha256-f/flgMoa687MLF75vy4VE1r43xYVZyxxM10MDsTMeZ0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdesdk-thumbnailers-25.12.3.tar.xz",
+    "hash": "sha256-f4GfGt9WUxoDdmlhpUn7vj2bml/ffD8zSiznZ4lQZnY="
   },
   "kdev-php": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdev-php-25.12.2.tar.xz",
-    "hash": "sha256-pYxet14tBMfbp1Vx6Z5sKmM3idAijSFbYFGIeVhxbx4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdev-php-25.12.3.tar.xz",
+    "hash": "sha256-sBHg5aktSFPFe5fda4y5QHvN0bxUqeNOIZ0UzicltW0="
   },
   "kdev-python": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdev-python-25.12.2.tar.xz",
-    "hash": "sha256-y6oEM3tUi5QRRr5TiU2RxO+QpUvNW0lmQbn2aoyJhZs="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdev-python-25.12.3.tar.xz",
+    "hash": "sha256-Ercf/307DXgMf0ROI26HNvZ+0rAGaKezPUcqrXWemE8="
   },
   "kdevelop": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdevelop-25.12.2.tar.xz",
-    "hash": "sha256-ZGT/LycfOTrOS6faTyP770izWZmLEtlIb10Z5WQ3pmk="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdevelop-25.12.3.tar.xz",
+    "hash": "sha256-tuj2oCs6uEOyIS7aE6re4/XXA53AuQwgcP7FbjN9/NU="
   },
   "kdf": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdf-25.12.2.tar.xz",
-    "hash": "sha256-O94n3gC9GIx9L3NI0NfmIo7NTc0QRJgWMJLSpz6EEvA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdf-25.12.3.tar.xz",
+    "hash": "sha256-u+pn4Z0yNnJM/BBn9BT5vPUDZPG0/RjpR4ZAKIRIsVQ="
   },
   "kdialog": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdialog-25.12.2.tar.xz",
-    "hash": "sha256-HFLJ+ReEo17bGEWJ++A1DUjZPTgyD9tYtNvqgZuoAoQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdialog-25.12.3.tar.xz",
+    "hash": "sha256-/uWj1SOUkWp63KdurqRxzdUTew0nsu8pNs8QCYEQXqE="
   },
   "kdiamond": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kdiamond-25.12.2.tar.xz",
-    "hash": "sha256-4RkXBTyCIiZ2LcUUYtIzydMOrOOcTiuWBqMGPLmvR8I="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kdiamond-25.12.3.tar.xz",
+    "hash": "sha256-jFRrATwXMgDgj5U9p079N0Mk/6Fass8KIs5wegKLUSE="
   },
   "keditbookmarks": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/keditbookmarks-25.12.2.tar.xz",
-    "hash": "sha256-huM4R2jDfzKCiaMbv0y4+hlKWt/vq/tHULUXCpAtqBI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/keditbookmarks-25.12.3.tar.xz",
+    "hash": "sha256-G5au+8san9dTBJOK8oIVaIr8Q9gG7sfUU94HhyHdHC4="
   },
   "keysmith": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/keysmith-25.12.2.tar.xz",
-    "hash": "sha256-H0wDwIDWMtwwug7leeYTcG6Of9FQpI3SFx0Gp8GrGjc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/keysmith-25.12.3.tar.xz",
+    "hash": "sha256-4bzVd8q+wCNa4IppOpT3GuXeDfInH+vGTwTryDGdotQ="
   },
   "kfind": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kfind-25.12.2.tar.xz",
-    "hash": "sha256-arRgf8LJ47PAT6SivmYHTWUVXC+/HEdxcGiIOZX7O6k="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kfind-25.12.3.tar.xz",
+    "hash": "sha256-sFPrVRcG3hjUajuWhn8svMpCNG/lRIs9xsjUvAfHKsE="
   },
   "kfourinline": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kfourinline-25.12.2.tar.xz",
-    "hash": "sha256-d/PCK6IC3cZlz2y+wiUJ57LBu68zISoI9qvVkVhzMCY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kfourinline-25.12.3.tar.xz",
+    "hash": "sha256-EExz6MmLEH8knx56gcraJWPPG3SP/ZGQMzcFFD2Vs94="
   },
   "kgeography": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kgeography-25.12.2.tar.xz",
-    "hash": "sha256-O0XMzSQCECBm1+8WLMeqydfAYymMw/QZwN0x/vrbSQw="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kgeography-25.12.3.tar.xz",
+    "hash": "sha256-qa2F7UOIHPA08k4UCx/t6zKzpvXwjl1sCB/7OqFe4Cw="
   },
   "kget": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kget-25.12.2.tar.xz",
-    "hash": "sha256-AsOrdYOlgg/M0szZvf35n2vGUVKDhL/UErPA1G1+imA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kget-25.12.3.tar.xz",
+    "hash": "sha256-qChzp9/8UoJcEsBD6Ts74TJhdsJ26YxzXVgx/46hsLs="
   },
   "kgoldrunner": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kgoldrunner-25.12.2.tar.xz",
-    "hash": "sha256-tRvWm/DK8MMYazh0F1rK1d8GZDR5i3cfFxguenJHC7w="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kgoldrunner-25.12.3.tar.xz",
+    "hash": "sha256-hRyp1ulTmXN8d8NnAVq4Rl4zm07ABJG2ZeztzSh9U3w="
   },
   "kgpg": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kgpg-25.12.2.tar.xz",
-    "hash": "sha256-dHDCMZP3sEiQ+Wc5rsfxdyxd38FyKtNqAh3gBqaIxtQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kgpg-25.12.3.tar.xz",
+    "hash": "sha256-uopAVqETi3dxeO8wUQeTsgqNwvYOre4KrDCYkjiSj4o="
   },
   "kgraphviewer": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kgraphviewer-25.12.2.tar.xz",
-    "hash": "sha256-tJ85muqv5ZXVPICvIInhMT0QcAmZprTgDSwCKtr/roY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kgraphviewer-25.12.3.tar.xz",
+    "hash": "sha256-Y02S+b7bCeXkkefIzrHEpmB8y474f4yLHIqfUuP4wMY="
   },
   "khangman": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/khangman-25.12.2.tar.xz",
-    "hash": "sha256-yyqyvm72niar/GLWzIn7+ooI1Ue0D/NFyIhbJjATt3E="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/khangman-25.12.3.tar.xz",
+    "hash": "sha256-nXYlSz++/3ARPVBwCtHBSkMTrOSrAw+wAX2IW2eZlrE="
   },
   "khealthcertificate": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/khealthcertificate-25.12.2.tar.xz",
-    "hash": "sha256-XwZtE+YUIma3CGPHTtB2Fwk5a3OFhMkNBJ/nyzOLxV4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/khealthcertificate-25.12.3.tar.xz",
+    "hash": "sha256-3ct31YMgcKtfB7v8FfQEsDDmfgb2DRuzvozor19BP90="
   },
   "khelpcenter": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/khelpcenter-25.12.2.tar.xz",
-    "hash": "sha256-xBpUdzwhklFdRke90XACQmpLz2rHQFyCx5FwywTh2mw="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/khelpcenter-25.12.3.tar.xz",
+    "hash": "sha256-U/T9N87T6IKxl2AEOd9DEFzRgZcST8+wHkfRuM5oscE="
   },
   "kidentitymanagement": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kidentitymanagement-25.12.2.tar.xz",
-    "hash": "sha256-MFzQGjYM5gOGyuXADWQ2iq8xWaT9pUhW3wcsLWwDzbA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kidentitymanagement-25.12.3.tar.xz",
+    "hash": "sha256-GLJMI71v215hewzXx7LOHab/tWbjCceWF2aRxjPUnoc="
   },
   "kig": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kig-25.12.2.tar.xz",
-    "hash": "sha256-zF1iJKa1BMTp3GMhstfd6b2JcAdSUjrq9mX4PVT0Dt0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kig-25.12.3.tar.xz",
+    "hash": "sha256-oYFZj2qZDBlMWOI4toB8rlSRvcR9NaF2S5XTm7yi1u4="
   },
   "kigo": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kigo-25.12.2.tar.xz",
-    "hash": "sha256-UJpLdGhJEePksyRgn+/pmlpByGYNthfDYAbPeh2D018="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kigo-25.12.3.tar.xz",
+    "hash": "sha256-ygDAGmNtCmNt0Rkm3WqKAYsgGMOHe0Re7DzBYXt/Cmk="
   },
   "killbots": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/killbots-25.12.2.tar.xz",
-    "hash": "sha256-IQYJH8grwuC4jLuHUTdDZYj1mdLDfvY5lZ1xOlMQZtg="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/killbots-25.12.3.tar.xz",
+    "hash": "sha256-AmNtfxeKPbp2pFkgFlswZmZjF1PdN3L0001+RuzVC1c="
   },
   "kimagemapeditor": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kimagemapeditor-25.12.2.tar.xz",
-    "hash": "sha256-6xCnLeQLBM0A96t8dSWxK+3i275IXwoso+wzlXBllk8="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kimagemapeditor-25.12.3.tar.xz",
+    "hash": "sha256-MTeGKJoxMkt5vZTpTCpZtRsyXt1vP2PWnIRwnKOt32Y="
   },
   "kimap": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kimap-25.12.2.tar.xz",
-    "hash": "sha256-Hlehg1AWeMERsCdKcL9CVV97I+HVmJox9CRUPwFuR4s="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kimap-25.12.3.tar.xz",
+    "hash": "sha256-ljAxaPK/l5BeaL+8k/fvupqTqTMeylMpRVfT7z9WZ4o="
   },
   "kio-admin": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kio-admin-25.12.2.tar.xz",
-    "hash": "sha256-7tAlcEYfIxRaoUUKzubQKBIjwicXO8lVQfXsYYt/m0Y="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kio-admin-25.12.3.tar.xz",
+    "hash": "sha256-uF0MY9XcAyBJ4rxS3bITIuz1luGrR6dkzKKPRX5NruA="
   },
   "kio-extras": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kio-extras-25.12.2.tar.xz",
-    "hash": "sha256-cm/B602JFzTr7tWCAQ3QoGQj/OpSdfHgbjGCoDAFayo="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kio-extras-25.12.3.tar.xz",
+    "hash": "sha256-sWHjYzIPls/7oBleQEWogEn8PFuTJyUy3OWrbOiGkWo="
   },
   "kio-gdrive": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kio-gdrive-25.12.2.tar.xz",
-    "hash": "sha256-Om3p+wLZSPV/j8UQmthUFW/iYWTmxyuNkSzVumRlrRU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kio-gdrive-25.12.3.tar.xz",
+    "hash": "sha256-0QNfpavA6cRu/OWShjwUfIbDxBvbvvAvOPW4AbN4ldI="
   },
   "kio-zeroconf": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kio-zeroconf-25.12.2.tar.xz",
-    "hash": "sha256-uyy8EajGxWMnXrVho4CTFf2mVoDQjihYQ/1l2An9UBc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kio-zeroconf-25.12.3.tar.xz",
+    "hash": "sha256-CyE3nXHrxBz0VNVoSf6vWxnoUdeWz/uw4tnUs2KGClo="
   },
   "kirigami-gallery": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kirigami-gallery-25.12.2.tar.xz",
-    "hash": "sha256-AG0YpvlzZ8FMEcNvw03XxB+dYdEQ5HpzZ+jA/+hapOc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kirigami-gallery-25.12.3.tar.xz",
+    "hash": "sha256-nNSdvMT7q5Jp/gzctJwW7LsMdtzgLSBDgPzeuftgsqI="
   },
   "kiriki": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kiriki-25.12.2.tar.xz",
-    "hash": "sha256-Jj5TyFjcU9+VcPZrNQaHTeyEU8hClWRz8H1TKiqRQoQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kiriki-25.12.3.tar.xz",
+    "hash": "sha256-xddoMTuqMyWpvGS2qKnXB1hhwFK8ciNb+apslhWM4Wo="
   },
   "kiten": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kiten-25.12.2.tar.xz",
-    "hash": "sha256-fvgyepn35wb1UePmi/TMnaNuVxWvJw5OiVfkYcFCGrA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kiten-25.12.3.tar.xz",
+    "hash": "sha256-Kh6c3Hf8Y9e32EUVPeoJnViWXc8NmKuCHeE9vP/FwMs="
   },
   "kitinerary": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kitinerary-25.12.2.tar.xz",
-    "hash": "sha256-b1B0/41P0GQKfQ836cFLO7AxbxIWJcfVBRPacG1DkEY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kitinerary-25.12.3.tar.xz",
+    "hash": "sha256-3YN0vi5MSIkC9sC0uf0SrX+AjeI7ffRWHvMLP3m0TRM="
   },
   "kjournald": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kjournald-25.12.2.tar.xz",
-    "hash": "sha256-k3dDIkDG6JzBTrmI13EZsaMAKwAWxlQS2YCH0VeS2wM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kjournald-25.12.3.tar.xz",
+    "hash": "sha256-JGrDUjGNP+uswrZP8GOJgpluyRUkq8s9Gcl1cZm/1eQ="
   },
   "kjumpingcube": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kjumpingcube-25.12.2.tar.xz",
-    "hash": "sha256-QInqNNqDpppIDF1nZMhYmATdmbjWFV74DIZX//YBPV4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kjumpingcube-25.12.3.tar.xz",
+    "hash": "sha256-UZ9oVw+gFSRwZFysqEbIiKNI3Sve/eHAdxW6kd3LFJA="
   },
   "kldap": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kldap-25.12.2.tar.xz",
-    "hash": "sha256-yhPQ7J4ctNGdZUufVSUf9bNvzGScqzrdjEbM4Xh/qAo="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kldap-25.12.3.tar.xz",
+    "hash": "sha256-SWyrreSDyq6hn3fPpjBHw8Ci7k38m/4ugQ3P/MCK8VU="
   },
   "kleopatra": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kleopatra-25.12.2.tar.xz",
-    "hash": "sha256-ub7Yn+QAtHzCUJAOMLLEgBpgy18Z0ZvoLeOg8Jz2X5M="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kleopatra-25.12.3.tar.xz",
+    "hash": "sha256-LV8CcT4HWUqOjGkzMXdtlX6RQTzkishcJAvpH9Zw2as="
   },
   "klettres": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/klettres-25.12.2.tar.xz",
-    "hash": "sha256-g1QlB1M5SGeTz+T46yEIMNPZV0KeQdixwg8KLvFrbno="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/klettres-25.12.3.tar.xz",
+    "hash": "sha256-HhZNgSl3hQNoeXClXwH73OA6MWQrdn9tYVe/lG+gtcw="
   },
   "klickety": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/klickety-25.12.2.tar.xz",
-    "hash": "sha256-cZ75UY7UmuJGENn3D4uqp2/47vzXrvYpF0/vut9S2IU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/klickety-25.12.3.tar.xz",
+    "hash": "sha256-yfWWce8fAm+XgGmeThVy7gOElMrrv3PKsF7gvxVzb6o="
   },
   "klines": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/klines-25.12.2.tar.xz",
-    "hash": "sha256-/9UZarywZlEzuNB8qC1pxjAP+BXat1ZKzn33alU+gQM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/klines-25.12.3.tar.xz",
+    "hash": "sha256-XkL4dHRFLRKPgJFxX2sFgq+kXafdcmawvCAQj4YNDJk="
   },
   "kmag": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmag-25.12.2.tar.xz",
-    "hash": "sha256-BjuiQECdpvP/cm3IWcxGofoACLhwOnUPmNAXY++4jPA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmag-25.12.3.tar.xz",
+    "hash": "sha256-+tK1MWK/DNG7dR/PbWyIsc0vj/Q8cldlfusIAmRiJ6w="
   },
   "kmahjongg": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmahjongg-25.12.2.tar.xz",
-    "hash": "sha256-zZ/Uix7+fCFGiOyrHV3s7tle+QqdoZOMdffZgyo9FPE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmahjongg-25.12.3.tar.xz",
+    "hash": "sha256-dpeY0uA7mo3kZ1uLz5MqngxjIp1HEucwdPxL6nXyeT4="
   },
   "kmail": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmail-25.12.2.tar.xz",
-    "hash": "sha256-4Srj0/P+pxeo4bbxWF3lSn3d5t9cLdg1phKJIelNW3Q="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmail-25.12.3.tar.xz",
+    "hash": "sha256-4e2YCUXqNCgQDgG1/Mu06YsQnB2FAzQMI7lyONNoIcE="
   },
   "kmail-account-wizard": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmail-account-wizard-25.12.2.tar.xz",
-    "hash": "sha256-06Jb1aNhj5Lr+LzzZmOZz7n3FdZyQmUAD0Y4GN0Kma0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmail-account-wizard-25.12.3.tar.xz",
+    "hash": "sha256-CkEmjmsVNwDEyBXaG6pAY376YZQ/Tjh/Zs9Vmdjo1QI="
   },
   "kmailtransport": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmailtransport-25.12.2.tar.xz",
-    "hash": "sha256-+FQ3kBIAmvdLu5XXai+QPN27plSixjU1lTu6nhps6rw="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmailtransport-25.12.3.tar.xz",
+    "hash": "sha256-8MAzFkN/gfFaF+8x/oKITYFtK6zhNKCqRdyLsHQetQE="
   },
   "kmbox": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmbox-25.12.2.tar.xz",
-    "hash": "sha256-wXXUzz7OjP2GpnafSDWdxVNjlzoi0M5cDrr03lM84y4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmbox-25.12.3.tar.xz",
+    "hash": "sha256-CI6IuFaGN02oVSFTUeDlJIRkkhyLVGUx2RuNzvlS/5M="
   },
   "kmime": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmime-25.12.2.tar.xz",
-    "hash": "sha256-jYEWettnVY5wf3xx9xDV8LGonWtUMBpKxRUY0YQbr2I="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmime-25.12.3.tar.xz",
+    "hash": "sha256-/OPGA8rD/smj8OEBxJeFwyrOB7j2C1Jzm2ONMp9Dgm0="
   },
   "kmines": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmines-25.12.2.tar.xz",
-    "hash": "sha256-8SsH3ISdHJDUNpuaCY66LaCU8Rr3BZzp61SgQCHFkag="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmines-25.12.3.tar.xz",
+    "hash": "sha256-S7b+jrel9dSqXVYEJY3JB6ukkcqcZwZncaVRkOwddRo="
   },
   "kmix": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmix-25.12.2.tar.xz",
-    "hash": "sha256-xwEusx6xm8TIqeNEQTpKTC7Dch/csWyKQDC5dxqw2S8="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmix-25.12.3.tar.xz",
+    "hash": "sha256-4xC5q9ppGiN2dXmzXPRotj3Mt6A+1HzdY+LMu1gY/BA="
   },
   "kmousetool": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmousetool-25.12.2.tar.xz",
-    "hash": "sha256-U53DGVzmV00dhWM8CAeO5dbA1waZSJPQZmXppq1fcTo="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmousetool-25.12.3.tar.xz",
+    "hash": "sha256-Pq+9LDiit2eWOCTwgbjSL1U4GxtR/tOhekTk3BwFpt4="
   },
   "kmouth": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmouth-25.12.2.tar.xz",
-    "hash": "sha256-WzMqJcpv+72jrmH18GTCBpG1MFwDbY9xHWLDeApGn8I="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmouth-25.12.3.tar.xz",
+    "hash": "sha256-DxbjcaqoO+nm8Sj7nrqIWuWvRV9l0nYXOM+AiWF8BTg="
   },
   "kmplot": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kmplot-25.12.2.tar.xz",
-    "hash": "sha256-USja7+ghW8KF12Mu+5TuzedjtgRUXFoHkxUjW6Pl6j8="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kmplot-25.12.3.tar.xz",
+    "hash": "sha256-TZv4vGVM4eS0d+FW5dTBoRc3TiIgOYx+e6qBjiFOsEM="
   },
   "knavalbattle": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/knavalbattle-25.12.2.tar.xz",
-    "hash": "sha256-JFj5Y8ge8P49LjbCfQ/gO9SRauWROWAvGU+ikHoz6rM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/knavalbattle-25.12.3.tar.xz",
+    "hash": "sha256-ODZEb2x5fujmZIdzg6ofe9AB4pOLEHqb6oLn2flteOU="
   },
   "knetwalk": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/knetwalk-25.12.2.tar.xz",
-    "hash": "sha256-Vc+sV1Poub2Ga7YR54FAXxe5wXWRiobazORGwbphuvo="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/knetwalk-25.12.3.tar.xz",
+    "hash": "sha256-UMaT9tHhd4sk0jX0MiMU+AvstARMOOccWZnvs1YJbuI="
   },
   "knights": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/knights-25.12.2.tar.xz",
-    "hash": "sha256-d5Ll7Kgm6PtiKaYiktG2CQKMXTvGEOIQVQDX/th7dG8="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/knights-25.12.3.tar.xz",
+    "hash": "sha256-pM5CI19HvVqQyHyftRxD3kC9Mlx7oEZjSjZJm70W3/M="
   },
   "koko": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/koko-25.12.2.tar.xz",
-    "hash": "sha256-zyCldwrbwnEU55X6DF5PeCCYq4LNCXOCSGw57cUJJ+A="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/koko-25.12.3.tar.xz",
+    "hash": "sha256-jTaFLcGVG0Sz+ag+wIDsMaxWg0vjhN7Eb2fbkBkIe5w="
   },
   "kolf": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kolf-25.12.2.tar.xz",
-    "hash": "sha256-4+mwgH/TFgc4ldUlQHwX8c1iSxUl9kJSPjBsJyaACUI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kolf-25.12.3.tar.xz",
+    "hash": "sha256-bZNZuv0DUCdRbpxQ9krCXScY+0qBFB9GnYDHRU3Ileg="
   },
   "kollision": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kollision-25.12.2.tar.xz",
-    "hash": "sha256-IyUUFt9XXYz9XjP/hjux48yqsaloqQVPo10tBFh5hhI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kollision-25.12.3.tar.xz",
+    "hash": "sha256-KYoKlAI19PpZLZI3P/sd2WecW/pEkQ57z+AUYD25Drs="
   },
   "kolourpaint": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kolourpaint-25.12.2.tar.xz",
-    "hash": "sha256-UmtjCvd5enn97A66eUgjbtKXXi06ZvU6ks+meH1az4Y="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kolourpaint-25.12.3.tar.xz",
+    "hash": "sha256-7L1It6E+tGutY7Cv5jjGyH8bZht5dAMgkCyJCGFUNWg="
   },
   "kompare": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kompare-25.12.2.tar.xz",
-    "hash": "sha256-ryLhedXFlbZu0yvppJ5GVv7rWvhfJqOogqg50RH7y4k="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kompare-25.12.3.tar.xz",
+    "hash": "sha256-l7ASMKoGun47//XiwqxMxDuH7RjkrpiFHV+0oTFNw1M="
   },
   "kongress": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kongress-25.12.2.tar.xz",
-    "hash": "sha256-ZE2fRZh6mhQShqfQ6/RkDRlYEfB+Ssj7Oys5OFgQwDY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kongress-25.12.3.tar.xz",
+    "hash": "sha256-SI8G3DJwIE7hbeL9TGcNAA8Z0ny7uuHB7lQGxNy8dYc="
   },
   "konqueror": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/konqueror-25.12.2.tar.xz",
-    "hash": "sha256-6M5/u+qy6Y7ZhFYzxMEw0AuRmgdYg6fZj/t7XNQqNZY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/konqueror-25.12.3.tar.xz",
+    "hash": "sha256-jzg76tqFe1IqWbklmuHx+DVUxdJdPDmjn7bxcuwPiJ0="
   },
   "konquest": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/konquest-25.12.2.tar.xz",
-    "hash": "sha256-84NiHsBjkx2bGfyFowtDOSkmFRA9xzxgp3Q42VMqWCk="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/konquest-25.12.3.tar.xz",
+    "hash": "sha256-k6kedbk689Uo3tZjJ8u6E323FQsLcc+7xFW8WZYpdbc="
   },
   "konsole": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/konsole-25.12.2.tar.xz",
-    "hash": "sha256-giAGmEQFG1hMVTt+faTDwexm+aefLzhrqhqbkUNvUEY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/konsole-25.12.3.tar.xz",
+    "hash": "sha256-w+E75Vy+VT69a6XwT5GUx5pLoV0e2PPRUax6+uAW8jI="
   },
   "kontact": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kontact-25.12.2.tar.xz",
-    "hash": "sha256-GAQL5uGsU+dB5ej+5LCMVzgOCI4WYf1oODO3+xpNM1E="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kontact-25.12.3.tar.xz",
+    "hash": "sha256-QSTIc9JqkEczKu6sgAKlYZoUVfGSgFOPGR779u3u9gQ="
   },
   "kontactinterface": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kontactinterface-25.12.2.tar.xz",
-    "hash": "sha256-aHMabTqCyF04IOuK+Uyd2E9asCgXZ61/NQYzb9Qu9GM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kontactinterface-25.12.3.tar.xz",
+    "hash": "sha256-Xjm5cCEpOBE0amWZJrvogw1A/oNJ1ct/notjoYDXh5A="
   },
   "kontrast": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kontrast-25.12.2.tar.xz",
-    "hash": "sha256-UScdyOo7/n9UzVJisK4cTypFi1kG8G9A9pkfdO944Tc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kontrast-25.12.3.tar.xz",
+    "hash": "sha256-DHQAULzk7ocNsKoisn3+uiaOyV5I1XQHylM7btpvkQg="
   },
   "konversation": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/konversation-25.12.2.tar.xz",
-    "hash": "sha256-/n+OTkvi6A0fNnxDOesieFLmn1M9LUFF2dIAXA1wIfI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/konversation-25.12.3.tar.xz",
+    "hash": "sha256-uFm89Sf+wdT7spoLpNHhhDDO9YhxmUYXiBiV54Z/tvc="
   },
   "kopeninghours": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kopeninghours-25.12.2.tar.xz",
-    "hash": "sha256-zQEX0LqkzfZsXHTUMYtux3fKNgijc1myUeQCt7UML+o="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kopeninghours-25.12.3.tar.xz",
+    "hash": "sha256-Z0990Whnnuy8hdfmgFKgqXn0JDpDKVimmLpbvYIXhYk="
   },
   "korganizer": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/korganizer-25.12.2.tar.xz",
-    "hash": "sha256-sEuAyCgDKBtTXbkBprBPSfPTNRnjhNmsVoYI1xVAOOU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/korganizer-25.12.3.tar.xz",
+    "hash": "sha256-m7g38aH5rtvzXzJUpSbMb1x1kbTCfmSYF9trVjrWmMM="
   },
   "kosmindoormap": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kosmindoormap-25.12.2.tar.xz",
-    "hash": "sha256-GIXD/e35DQ3VVBGwKJCW5HrW8qlcOH7oewFG1rztu3c="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kosmindoormap-25.12.3.tar.xz",
+    "hash": "sha256-HaZMmcKfvT9yJzKhTUSrZ0F+Zs7I3hefpbLsZ2qmMxs="
   },
   "kpat": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kpat-25.12.2.tar.xz",
-    "hash": "sha256-ZAqVPSJjmwgFR6Ue4C59N6nQHHOBwt130gURkJRhKVM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kpat-25.12.3.tar.xz",
+    "hash": "sha256-Z+X+/SR+3J06Is6qP8nVwMctSdDAXwKrSPL3u6DEuZc="
   },
   "kpimtextedit": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kpimtextedit-25.12.2.tar.xz",
-    "hash": "sha256-fv7TuSMi8u19qAwV7sa4OGYtjEyeTdbJCb/M8WCaHlQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kpimtextedit-25.12.3.tar.xz",
+    "hash": "sha256-EA9d1wOt6piPY/KXUDSg7/PU59VdCIAJsCAx3A5HucU="
   },
   "kpkpass": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kpkpass-25.12.2.tar.xz",
-    "hash": "sha256-8ElREr4aYYMfrRanXDNm+LKF32DCkzoFpBSQHIHRjB0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kpkpass-25.12.3.tar.xz",
+    "hash": "sha256-+Ra9w3wRdAzFJ+52oTJtNFftm/FT1gnNtep7tYGIXfk="
   },
   "kpmcore": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kpmcore-25.12.2.tar.xz",
-    "hash": "sha256-MiD+SzCVst9tI4H4rfPdL1CvCF6/O9+N7pf3w9t7STM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kpmcore-25.12.3.tar.xz",
+    "hash": "sha256-Lm/0RkSLZkDnKQeEUZ4ZrTJtVvk/joPKzRHQMxl/PmI="
   },
   "kpublictransport": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kpublictransport-25.12.2.tar.xz",
-    "hash": "sha256-FDgonUI89wBZyOcpOdilGgwFTwRuKL8woGCVnT3e9Ds="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kpublictransport-25.12.3.tar.xz",
+    "hash": "sha256-WBem1B1IUyLnmu+NyrUrLdAbhvXfIyepEEgJrdsMROc="
   },
   "kqtquickcharts": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kqtquickcharts-25.12.2.tar.xz",
-    "hash": "sha256-vHpYaMlzCRR8/6ZlYGBDr492xxtAAERvQdf17VwQRHw="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kqtquickcharts-25.12.3.tar.xz",
+    "hash": "sha256-bFkEiGmO/KNdDbk7GwMmTMXaHnxybRn2InIlWnRp3Es="
   },
   "krdc": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/krdc-25.12.2.tar.xz",
-    "hash": "sha256-UiWW+OZ4inIFbmYnCItKPfHFhuWcmKQaO35G98BkTBk="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/krdc-25.12.3.tar.xz",
+    "hash": "sha256-GZdGPNZM+4igFdK2Zct9XUUej1QoWvBH0Y8b2DikzSc="
   },
   "krecorder": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/krecorder-25.12.2.tar.xz",
-    "hash": "sha256-9Xm5+fZhFXxFBZBWiYupCNKXAyoE4pWFFYZOZ4VcX10="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/krecorder-25.12.3.tar.xz",
+    "hash": "sha256-OZblI11uYb/isiHCX/sOg2t67Hr9EnY/Ti52VdBzP7E="
   },
   "kreversi": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kreversi-25.12.2.tar.xz",
-    "hash": "sha256-mt/JU6hY85uTNbHgCvTCEU5uZCIhKkDRahgTFoosgHQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kreversi-25.12.3.tar.xz",
+    "hash": "sha256-Lbsemw5q7RYypkmedTlvPqyaDBAw6BdfG3GvGb34doc="
   },
   "krfb": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/krfb-25.12.2.tar.xz",
-    "hash": "sha256-vMhtM2Z/ZF8x4cJcZg2mER6Krg9QUnueGwxAoEMBcCU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/krfb-25.12.3.tar.xz",
+    "hash": "sha256-PdRqOg5towCKEUBzM0U7XndjBX5zkCXTUlEGMB7TjEo="
   },
   "kruler": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kruler-25.12.2.tar.xz",
-    "hash": "sha256-DAcufWh0Xnt6xj30advfXrYjoYal2+Vm65mQfx5ptjw="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kruler-25.12.3.tar.xz",
+    "hash": "sha256-whG+wJpxvaVbGrhiI3KWA+x8MgYpZGa8iumNy3bLcIQ="
   },
   "ksanecore": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ksanecore-25.12.2.tar.xz",
-    "hash": "sha256-hHzAFRG8KJhngeNsZvdfV+zX420vpCt7gLdN/g7eugk="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ksanecore-25.12.3.tar.xz",
+    "hash": "sha256-YEdrXnrXZBQs9prx+Cfp96+Ig+rjy9P6ptGkLWNe4oI="
   },
   "kshisen": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kshisen-25.12.2.tar.xz",
-    "hash": "sha256-Oz4hmr/zRGVpRbln95j5oFmKiOv8RVcCu45+qnkV140="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kshisen-25.12.3.tar.xz",
+    "hash": "sha256-64SkCoPXwjkvAQDpHKFFR6t+wu6+FfAqCM5KYDWONik="
   },
   "ksirk": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ksirk-25.12.2.tar.xz",
-    "hash": "sha256-hs/4qQzYJvBSGyc5o/IhWOGnNl9frens4py6Busf5dM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ksirk-25.12.3.tar.xz",
+    "hash": "sha256-nDrU/r4akrvsWtbidw3JaLgQ/a/NCOMAxvip/NUQvKM="
   },
   "ksmtp": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ksmtp-25.12.2.tar.xz",
-    "hash": "sha256-MxwjcQnWPDChYpOEHN+tJjoL3Mtg92eDEHim/+ZInkE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ksmtp-25.12.3.tar.xz",
+    "hash": "sha256-pKdt46JHHYgowIbqBGM6PeLZuhNbgMXA7efrKFrEWp4="
   },
   "ksnakeduel": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ksnakeduel-25.12.2.tar.xz",
-    "hash": "sha256-/zo+ueSieHQif3acnSK6Z6uSXi429LQrJ9rSAB5oOLA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ksnakeduel-25.12.3.tar.xz",
+    "hash": "sha256-+leJVVZTU4igEfWWqBb4VlhQxOxf+dleoRq/gTwqH7E="
   },
   "kspaceduel": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kspaceduel-25.12.2.tar.xz",
-    "hash": "sha256-t0fvueYHbKYCSNPUziMCNl54cE2Ci6pb8SEE6MRKIws="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kspaceduel-25.12.3.tar.xz",
+    "hash": "sha256-oxnypV39P7W4fWgxK9JonviS6aoEVjReWsZhMMvyopE="
   },
   "ksquares": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ksquares-25.12.2.tar.xz",
-    "hash": "sha256-g6vIYe5cKTwvr+E6wGeOZV5zHGeVpW9YRL0nILFZ0Q8="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ksquares-25.12.3.tar.xz",
+    "hash": "sha256-DF8v3yyuWx62ppP00ZwiwCV0Zwfp6WT6I6X8TnpRCjE="
   },
   "ksudoku": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ksudoku-25.12.2.tar.xz",
-    "hash": "sha256-+z5NdVDOXndJwDHmdYX/Xg8n9JfuNYRX2uOPbpc/Tuc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ksudoku-25.12.3.tar.xz",
+    "hash": "sha256-m7z6k1PxBjULTp2XgtS5POU1MQb/l/xakpKSyLqaT/M="
   },
   "ksystemlog": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ksystemlog-25.12.2.tar.xz",
-    "hash": "sha256-K41VW9pdqV6j5mWv9l2cSu6W7fwQUHf7XnWLTOhQbNc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ksystemlog-25.12.3.tar.xz",
+    "hash": "sha256-cNeuNosVItys7RMN0/pJ5VKnlMgMgZyScAywd2q104U="
   },
   "kteatime": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kteatime-25.12.2.tar.xz",
-    "hash": "sha256-slwyVjYzsKEf3YM9IQXCtqPtEcIwgu2ERsLvHhMGIc0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kteatime-25.12.3.tar.xz",
+    "hash": "sha256-qD4cj8ej8AnCzNsKEQawmK6vnVs8LiZY4s4vjmoMcM0="
   },
   "ktimer": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ktimer-25.12.2.tar.xz",
-    "hash": "sha256-YdCnGubkKQphG1YJv5bEhpd8P3kk+2E3M46aVwSaU0E="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ktimer-25.12.3.tar.xz",
+    "hash": "sha256-/nPN646YToH8PbLCxPl7xBkJO5VEpvPoJPpYvZvlI1w="
   },
   "ktnef": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ktnef-25.12.2.tar.xz",
-    "hash": "sha256-pubs8xoMqSTjBBpAkdFEshX+J/MfivV6y6r6x4MU4Ts="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ktnef-25.12.3.tar.xz",
+    "hash": "sha256-8xqQCMYrOAphVEdmn9lrZaolBiuk0xTeQqrbJn0ex0c="
   },
   "ktorrent": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ktorrent-25.12.2.tar.xz",
-    "hash": "sha256-O1NKWPrLGiWahydaqOwxKVfNiG/8wj/UrAjgIuh8Ua4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ktorrent-25.12.3.tar.xz",
+    "hash": "sha256-167vb9eS7P/AqDbCl4z7h1QiPXJdsaEjl9/Ml4e+mNI="
   },
   "ktouch": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ktouch-25.12.2.tar.xz",
-    "hash": "sha256-nqXktJDzqF/QVCzEPCd6HuAyPxYWuN3f9RR/tNuZXEU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ktouch-25.12.3.tar.xz",
+    "hash": "sha256-iO1e8MSSMhvmySa8OvO1c8Sn0vugtlVota1QtApIx5A="
   },
   "ktrip": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ktrip-25.12.2.tar.xz",
-    "hash": "sha256-r4wC8JSGXi55SQsrMVGIZh8ODoxkE6iilUUvem6TgNA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ktrip-25.12.3.tar.xz",
+    "hash": "sha256-ZtrQjrrgnK/8wlnIe2B2IFsrvwspvvOqPGWcC7uV5Rw="
   },
   "ktuberling": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/ktuberling-25.12.2.tar.xz",
-    "hash": "sha256-5Hzo8QwSEXzqKL9PapKWLfjvlxUxD5DCUNOW3uX5Uik="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/ktuberling-25.12.3.tar.xz",
+    "hash": "sha256-DSlio3xRtzF8nFzytJx5d8Pd/H5ZhVbrzRfgbERYfFM="
   },
   "kturtle": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kturtle-25.12.2.tar.xz",
-    "hash": "sha256-3lAYxxmxnAKjXhwqSI5mc7u7PWOs9dl9wGmQU0SnKDc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kturtle-25.12.3.tar.xz",
+    "hash": "sha256-dSAVKFatC42sfSIS3Iu7TU/cKBIF2cDMDeJ9Nt5uNtw="
   },
   "kubrick": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kubrick-25.12.2.tar.xz",
-    "hash": "sha256-GEPliDWdeOpVj+SwYgH9SDnkvH3WE7js02fhawtj8ms="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kubrick-25.12.3.tar.xz",
+    "hash": "sha256-FW7+LNLg49xeMeyvn8xCKXOhPS133V980qsPLlZRhDw="
   },
   "kunifiedpush": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kunifiedpush-25.12.2.tar.xz",
-    "hash": "sha256-4RHdU8ene/wy81g3W5ZJ7UGNnFrNnES5XsWgfJwgeLk="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kunifiedpush-25.12.3.tar.xz",
+    "hash": "sha256-Pr1u84+vsKvT7ENMz3lGhFPqU4l/adzPGCJt1fEiwik="
   },
   "kwalletmanager": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kwalletmanager-25.12.2.tar.xz",
-    "hash": "sha256-1KlmboRzK4dvKs1BuR9BWQxbCH+vEpDgC/FTvSMgcVE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kwalletmanager-25.12.3.tar.xz",
+    "hash": "sha256-t0rfqXf1w6qunLTiJcMKz7GZkkaCDGxIXUU2fx2grYk="
   },
   "kwave": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kwave-25.12.2.tar.xz",
-    "hash": "sha256-/mcF2q8hTBCfGRtFBQ2GMfMR5EL6mSb3ub9azgvb9LA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kwave-25.12.3.tar.xz",
+    "hash": "sha256-1Y/n3OrOqhggaBZVj2tkBmcHOWbyN/uhSr0Xe73Nnc0="
   },
   "kweather": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kweather-25.12.2.tar.xz",
-    "hash": "sha256-2v7ccWlq1Ca0B3DFHt36luRQfrhORfSSAp9V+OVnLn8="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kweather-25.12.3.tar.xz",
+    "hash": "sha256-cAQNQwvAlzrqrTjxOR58BnU600ie0bYt2ybUF0VJWJQ="
   },
   "kweathercore": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kweathercore-25.12.2.tar.xz",
-    "hash": "sha256-VquZjbsEHQcfip30I3zH5dHm5XvJpzRBRHtpD578kRM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kweathercore-25.12.3.tar.xz",
+    "hash": "sha256-g82klTrHrD80c84FPj0Ts2xX3A4Zi8F2Zj/dMLpLCUU="
   },
   "kwordquiz": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/kwordquiz-25.12.2.tar.xz",
-    "hash": "sha256-4npaogSbw3xtn1oBHZQD6fIVHz7mEENqwu8/Hb8fK8M="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/kwordquiz-25.12.3.tar.xz",
+    "hash": "sha256-+5g4PAuSElOk5MBsFrlgGaDWKbQT5kUdtk1piJ9Sz1I="
   },
   "libgravatar": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libgravatar-25.12.2.tar.xz",
-    "hash": "sha256-CG86MmlUQrSaJxbao1R1JjDirAVfmBCYikI75Rul0Dc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libgravatar-25.12.3.tar.xz",
+    "hash": "sha256-OnOIrRXw2jVW42vgua5gSz5bGmuxQkIgEidnvA08iKY="
   },
   "libkcddb": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkcddb-25.12.2.tar.xz",
-    "hash": "sha256-YsKBXU79NpWpWT1TU+Xbru78bFJnsWWuy1giBHC6IRA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkcddb-25.12.3.tar.xz",
+    "hash": "sha256-5EhgY0hRcwBJathjRL193l1qZ/EqJH6MPLqn5hpnznM="
   },
   "libkcompactdisc": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkcompactdisc-25.12.2.tar.xz",
-    "hash": "sha256-AuW7UzCi3Z+64Nuh4chTanjcH4i6J1bouW+SgVbTwYA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkcompactdisc-25.12.3.tar.xz",
+    "hash": "sha256-D0xrn0Gjzw0UUSBMWKv1wwPsZnHx0VmJzQ2Nkrue5Wc="
   },
   "libkdcraw": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkdcraw-25.12.2.tar.xz",
-    "hash": "sha256-8vb81h2PDwzCVvexY7vJmGr1VZ8BDkPcvAqD684kN5c="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkdcraw-25.12.3.tar.xz",
+    "hash": "sha256-I7Ig8Uu6ohhYtvjhgWlJk4mDW2aT5zqHf44NeI9Ema8="
   },
   "libkdegames": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkdegames-25.12.2.tar.xz",
-    "hash": "sha256-sliTO1KYeu/YEz7c3qNzp/ffKYMISmQtd2OiCGL9jHI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkdegames-25.12.3.tar.xz",
+    "hash": "sha256-ZGBaWLCHpX3FBNjn+k1je01Z+5G6G07WD5b8eFaPFBw="
   },
   "libkdepim": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkdepim-25.12.2.tar.xz",
-    "hash": "sha256-euX0JXCRTyF+Lgc6hluDld2IgY/Ojg5s0Bt1txRU248="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkdepim-25.12.3.tar.xz",
+    "hash": "sha256-Wy/8Y/MP/fUTBhtjTbPfYBmrSq1WscEfUNrewIG4z0M="
   },
   "libkeduvocdocument": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkeduvocdocument-25.12.2.tar.xz",
-    "hash": "sha256-yIYxGIpbd7Gda5iH8tnWonRaMzmqdtNVVbyRuPQ2axw="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkeduvocdocument-25.12.3.tar.xz",
+    "hash": "sha256-kqaAElx1u51BnTYzW9znhRD/dNO4krNXNymhnK4YdS0="
   },
   "libkexiv2": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkexiv2-25.12.2.tar.xz",
-    "hash": "sha256-uNkU0Dypa04tOhcHr0JJgKfwaFsQkiCyXvt27X53eLY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkexiv2-25.12.3.tar.xz",
+    "hash": "sha256-jtbeRs3QhKg03Q8gSdZJCXeo7txQouWfcV+xzs9mU+w="
   },
   "libkgapi": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkgapi-25.12.2.tar.xz",
-    "hash": "sha256-QghsP1zsMb48N5tDroDjK+spBVFZ0WcOAK1/CJJjLBw="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkgapi-25.12.3.tar.xz",
+    "hash": "sha256-PY9t1uDUJ0ECy/fD3/Z9jO8HTiX780u45QX9OCc2VrE="
   },
   "libkleo": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkleo-25.12.2.tar.xz",
-    "hash": "sha256-awVSFLp8XG2nVFS58vDPkCE1Ebc8wYpHlk/1U0B2l/c="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkleo-25.12.3.tar.xz",
+    "hash": "sha256-X6uAe0RTBc3HkKmpyTgE6AnIl5GVdkJvPqjNVDpZ3iw="
   },
   "libkmahjongg": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkmahjongg-25.12.2.tar.xz",
-    "hash": "sha256-oetVPDi/LCNnd+HvYOVG/oOrPsPePBaQYqENm4AdzgQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkmahjongg-25.12.3.tar.xz",
+    "hash": "sha256-rF/rH0nbDuR6ybHmB6xuxFgjFq7XYdnwtGJevSW9l6s="
   },
   "libkomparediff2": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libkomparediff2-25.12.2.tar.xz",
-    "hash": "sha256-LT30DUuWoAzhndUXmzZEfm7BN9uGVtXrl5wHf8GctkM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libkomparediff2-25.12.3.tar.xz",
+    "hash": "sha256-uGTpD3fIuuc9MZG0pV4aQEQRhMIlHGimZPiQANYkcqw="
   },
   "libksane": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libksane-25.12.2.tar.xz",
-    "hash": "sha256-gOHtVkk15cdBSXrZEA3PqRreDVIpbPTw98TQgD+QWMg="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libksane-25.12.3.tar.xz",
+    "hash": "sha256-ym5+d28vaTK2i7SL9Y8MTDAEU+0jOy9cWnYdPYV6mAU="
   },
   "libksieve": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libksieve-25.12.2.tar.xz",
-    "hash": "sha256-5borsdehbMn0XFCCKT/oS9GsI+dY2kJlrupl/wxosnk="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libksieve-25.12.3.tar.xz",
+    "hash": "sha256-Tf3mDfpg8sbEwSNazDL4vW4rvmXkGc2ucd0m/qWZPg0="
   },
   "libktorrent": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/libktorrent-25.12.2.tar.xz",
-    "hash": "sha256-Ma3muI0wu99wYtdtzsHqQfsoh96ak/AXUkgZnhMynDc="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/libktorrent-25.12.3.tar.xz",
+    "hash": "sha256-5GLLqJnU0SKSOqTQxu/TlevE7562iOa3pAUjTabIwwI="
   },
   "lokalize": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/lokalize-25.12.2.tar.xz",
-    "hash": "sha256-yiI6HjlMPjD/NjPvIP6i1jpaIGAAgyjzjpQmF/Frbs4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/lokalize-25.12.3.tar.xz",
+    "hash": "sha256-9ixcERbQ+ox8PSSxtkIGC8Og/dxqplIY83UwPeQZHo4="
   },
   "lskat": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/lskat-25.12.2.tar.xz",
-    "hash": "sha256-tphOCBj6BxxUqqnm98tgEW9vAlBfmNxwcYP2fcCnxF4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/lskat-25.12.3.tar.xz",
+    "hash": "sha256-IRGI3OtdhNOa9wzWbUPsJpCINNHrxoLAkCSS/ZSBz88="
   },
   "mailcommon": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/mailcommon-25.12.2.tar.xz",
-    "hash": "sha256-nvzXKI8rZX3xT4MP+Bq80FEchGWBecgafU3B/6N+CsA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/mailcommon-25.12.3.tar.xz",
+    "hash": "sha256-isZX+AULlotZLl7CTHEjqfM7wnA8PEYcSodTG18V2lk="
   },
   "mailimporter": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/mailimporter-25.12.2.tar.xz",
-    "hash": "sha256-wsYkNR7rAmSywgy/9o8RwCAvpfI+DZX7nsdglGvENkU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/mailimporter-25.12.3.tar.xz",
+    "hash": "sha256-65neaNj1/r49nu+Oank/m99i9UrQFvq+ePVk2Q56LbQ="
   },
   "marble": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/marble-25.12.2.tar.xz",
-    "hash": "sha256-OeKQiiHgv/oltgbmMykCLFvrf9Ce7PvWHamt+QUZCh0="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/marble-25.12.3.tar.xz",
+    "hash": "sha256-b0ROcPYa4+S3osnMB76niKeVJjaTJ4rGN9ivyGoMPdQ="
   },
   "markdownpart": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/markdownpart-25.12.2.tar.xz",
-    "hash": "sha256-02EDfE/XEFNY53kdZlYAVAddjLBLj7SPEXPHLFPreHk="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/markdownpart-25.12.3.tar.xz",
+    "hash": "sha256-0EzcPAnCvhAqcZnXPdJMfzzXCfla9+UYBPJmhmNCLP0="
   },
   "massif-visualizer": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/massif-visualizer-25.12.2.tar.xz",
-    "hash": "sha256-TEojX+9tKVOoHuvk64d8sjgmrkpnzhnNoeTQ7GHbvyE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/massif-visualizer-25.12.3.tar.xz",
+    "hash": "sha256-BRgB7j2XBLslQzLnoxfCKKUQpbg/8DBJNwERSLAhIxE="
   },
   "mbox-importer": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/mbox-importer-25.12.2.tar.xz",
-    "hash": "sha256-lc1Va4roEtrfgNdSBN8l3YYD49TvP9cCKlMi9vxrgpI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/mbox-importer-25.12.3.tar.xz",
+    "hash": "sha256-YoI44CiuqipjlaeESav+Q0TWn8/3x/S3CZSpj8GUvpU="
   },
   "merkuro": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/merkuro-25.12.2.tar.xz",
-    "hash": "sha256-yEdFp9g1EIA+r6adJ6AhKYl3HJn1cfyDvPcX11G8U54="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/merkuro-25.12.3.tar.xz",
+    "hash": "sha256-9WFp24XLYAuipJsyv1PRfq3RN+EW0Z9Lae8qXqssi64="
   },
   "messagelib": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/messagelib-25.12.2.tar.xz",
-    "hash": "sha256-F5VofajQHcFf8/z6mKal2e2pHa/0TXnvNd0iVEyoEp4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/messagelib-25.12.3.tar.xz",
+    "hash": "sha256-0tno4ettBT2CJU+JYlQ86Bzj1EtYPQFfkcjhWtKE1ro="
   },
   "mimetreeparser": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/mimetreeparser-25.12.2.tar.xz",
-    "hash": "sha256-vdRvER+nB7LC8r1mIa9DbQop68yLmK5aT6ywIhYc2R4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/mimetreeparser-25.12.3.tar.xz",
+    "hash": "sha256-6DuWeCY0yNfdpEP/wAXR0pkWIOz7JwxL8Wpn1dPpSfU="
   },
   "minuet": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/minuet-25.12.2.tar.xz",
-    "hash": "sha256-DuoicfgjO+tma+N5ySSTekXPo5eD9jPrVxgwQgLCk58="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/minuet-25.12.3.tar.xz",
+    "hash": "sha256-4MnIUt+Ar7FzgIfv5gVdhAL/+eaWQi8YbQ/sIEs80NM="
   },
   "neochat": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/neochat-25.12.2.tar.xz",
-    "hash": "sha256-6XyJw5Yo63eXcTW0L3dDU8DAX3R1n9O37tF/BCxPtiY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/neochat-25.12.3.tar.xz",
+    "hash": "sha256-WPeljVd0Zid+2WvnyhBIHFJkUkFACvr9SbqNxGEgptk="
   },
   "okular": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/okular-25.12.2.tar.xz",
-    "hash": "sha256-nISoD+Kj3QmQtWQykSJEtvV2GhpqvaRS89pufmqIk38="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/okular-25.12.3.tar.xz",
+    "hash": "sha256-nVCacCqgDILAdeWmDtIk/PiEu82YPl6YjSUg/y+4YnY="
   },
   "palapeli": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/palapeli-25.12.2.tar.xz",
-    "hash": "sha256-4p7LqCkk0kKvCxWSpUWnIlXvIFPYaNHN6UXT1tMUZRg="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/palapeli-25.12.3.tar.xz",
+    "hash": "sha256-Wo9c1q6PqPKdraOAhBelHDVeTjB3sQYxUjJNlAbNJeU="
   },
   "parley": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/parley-25.12.2.tar.xz",
-    "hash": "sha256-6qG3fUW9Fy+zQxAF6xQCpVhmgcQLQ96L1CIrlNRcb6A="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/parley-25.12.3.tar.xz",
+    "hash": "sha256-qNXjUHClNfkK+ej6qan5M7euGtPQS/uOvQPcQqwu3gw="
   },
   "partitionmanager": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/partitionmanager-25.12.2.tar.xz",
-    "hash": "sha256-9Xv6KxkEqQBJwViedvyijuiToBM6tG3cDfsANH7FQgA="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/partitionmanager-25.12.3.tar.xz",
+    "hash": "sha256-fA/K1Cnj6V/PXJHQQ3NwkOJwHPXQ/hld7smoCHtNXpk="
   },
   "picmi": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/picmi-25.12.2.tar.xz",
-    "hash": "sha256-eyZNbftvTvqTAyrgnYdjHDIGKyBxiH4/Ny8jkxWK72w="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/picmi-25.12.3.tar.xz",
+    "hash": "sha256-Ct4tyHpo/QkcVQsOlx8CwWQtT3AoGeMwLSrmqrnGt7U="
   },
   "pim-data-exporter": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/pim-data-exporter-25.12.2.tar.xz",
-    "hash": "sha256-GJIYWRljhzBW9zNcKfTz+1wOvoK/RDCnzgkjkrqijKo="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/pim-data-exporter-25.12.3.tar.xz",
+    "hash": "sha256-0efH/+uMEznSIU57Nopauz22+DYRX+xM7bj8PBgZOvQ="
   },
   "pim-sieve-editor": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/pim-sieve-editor-25.12.2.tar.xz",
-    "hash": "sha256-yL/sSCQh0wqnsEPeeHpp4av7ApsMjkAQX9iY5E68DQE="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/pim-sieve-editor-25.12.3.tar.xz",
+    "hash": "sha256-6uf2h/dpULjkkEIHRwdgh78/sE2hXfawS2Y1hrJVD4E="
   },
   "pimcommon": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/pimcommon-25.12.2.tar.xz",
-    "hash": "sha256-faMkcQ6mB3+iR+wE22ZsFyNSug5h8d+aoHq3EJrFKQs="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/pimcommon-25.12.3.tar.xz",
+    "hash": "sha256-ZJbikylOI8bbihnkd0MTQmvNyEeN77IUHsT2ZT+fSy8="
   },
   "plasmatube": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/plasmatube-25.12.2.tar.xz",
-    "hash": "sha256-/qMtgvI7rL1uWIBfiiQjGQWUnbcA9W1EVP6D3xmOhsk="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/plasmatube-25.12.3.tar.xz",
+    "hash": "sha256-xf4oIUgYGGXapUI+51lRlLHL+gFo7HIv3Kyeu2fMUqQ="
   },
   "poxml": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/poxml-25.12.2.tar.xz",
-    "hash": "sha256-u4uXoYId6zYf7LCp/369++MzD8v5Ul4nDkgSt2dT6DQ="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/poxml-25.12.3.tar.xz",
+    "hash": "sha256-9AlXEkt4p92VQBa/+iOMnvK7FqMKCeNfhcyjXTBTVHw="
   },
   "qmlkonsole": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/qmlkonsole-25.12.2.tar.xz",
-    "hash": "sha256-tiCcCtnGC9abvoMaChkerYvICZDk/CsYIATFBRBXg8U="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/qmlkonsole-25.12.3.tar.xz",
+    "hash": "sha256-Z3scgzBHfDtDyqgjVyrPGcmBj00nDTnP6wqDuWgD/Jo="
   },
   "qrca": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/qrca-25.12.2.tar.xz",
-    "hash": "sha256-R3yLg5Fajlbi/nweqJLNsNkoPW6QUQMMx7qb1T/wc7w="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/qrca-25.12.3.tar.xz",
+    "hash": "sha256-60iHiiC/SsaylBJ9nIas/8vZMSxjhY3Wi4eE1VFz/cw="
   },
   "rocs": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/rocs-25.12.2.tar.xz",
-    "hash": "sha256-IP+D0N2IHErRZwdrneeXb4VgfSwF65FOspO7dSx4VaY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/rocs-25.12.3.tar.xz",
+    "hash": "sha256-OdKzzpqRhQQqZ9p1X7Zp65LJ9bdhjZmkKHnVlRrccx8="
   },
   "signon-kwallet-extension": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/signon-kwallet-extension-25.12.2.tar.xz",
-    "hash": "sha256-EsoOdc6MdlaSD5R2eW7jKoWHhe1rQhCK4F9V6JU8Xoo="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/signon-kwallet-extension-25.12.3.tar.xz",
+    "hash": "sha256-T8dWaJO/jdDW4jbVLhMxnICWQrfoX2aAvPutR4iKSDY="
   },
   "skanlite": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/skanlite-25.12.2.tar.xz",
-    "hash": "sha256-hsNZlaXIVQ3WEvN5Nhuu4G5PshjT14jMQM6tGu66ZAY="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/skanlite-25.12.3.tar.xz",
+    "hash": "sha256-4w38NgFUUpH8PYE86q/O6R0LhQ3LVGiL5JoPQxd5UB8="
   },
   "skanpage": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/skanpage-25.12.2.tar.xz",
-    "hash": "sha256-eZLj8HVkukRwCybO/gPwV/zZl2vR5kHasTUfUV+0kYI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/skanpage-25.12.3.tar.xz",
+    "hash": "sha256-ITO3g7r7Ln2Mroc7ZI8Qvy1u3XuqMdNPzGxLDWUHoT0="
   },
   "skladnik": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/skladnik-25.12.2.tar.xz",
-    "hash": "sha256-O91Ht2CJZqHuUcskrqB7odPh61gs5uuODc8O61nkSko="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/skladnik-25.12.3.tar.xz",
+    "hash": "sha256-7UGz7O1WjIKh9tG9tujFx9vnJktxjaUG6M1S5SubF1o="
   },
   "step": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/step-25.12.2.tar.xz",
-    "hash": "sha256-ja/aO8QUGb6DiYWGoEY8IqTzIm13rqgW38oUbrooIB4="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/step-25.12.3.tar.xz",
+    "hash": "sha256-Tnex2LPvWGzRf+I/6pRPotiONosp4d4u0tk8msQf3mE="
   },
   "svgpart": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/svgpart-25.12.2.tar.xz",
-    "hash": "sha256-57tSszNObh4R445U7aRRHRNXso3W2T3UdfqQufIjafU="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/svgpart-25.12.3.tar.xz",
+    "hash": "sha256-Cd9iUsAzUni5WzQdYKfp8J68msYTEDwvSX5/uprpRxg="
   },
   "sweeper": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/sweeper-25.12.2.tar.xz",
-    "hash": "sha256-40F8x0yi6T3OX7+nir7K+3wjtSoeQzZjvWaxEHv/H4w="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/sweeper-25.12.3.tar.xz",
+    "hash": "sha256-GK2dukPLUkRYrR84CXIS/a9dAePV1xkxs0ECakjT3NA="
   },
   "telly-skout": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/telly-skout-25.12.2.tar.xz",
-    "hash": "sha256-OYamX/wTOm+3mg5ErGZWI6ZS3dDrzJgZMgRkVP6bRGI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/telly-skout-25.12.3.tar.xz",
+    "hash": "sha256-ONU4OkboyRpj1CVIcj3OZpB0CCrmPeyGwFQ2CTpA7RQ="
   },
   "tokodon": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/tokodon-25.12.2.tar.xz",
-    "hash": "sha256-yEsKvJ3zMwYKC0Sl7tktoiCGnZ43r2gAFdZUNUK/564="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/tokodon-25.12.3.tar.xz",
+    "hash": "sha256-9Rl+ZcjXlp+T3spgGsPYRJPeItPSRAvVDFGTryLe+yg="
   },
   "umbrello": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/umbrello-25.12.2.tar.xz",
-    "hash": "sha256-eiAZaQgZum6KE/dV31RPC4BRaaADWmOua9x9xfL1WcI="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/umbrello-25.12.3.tar.xz",
+    "hash": "sha256-RXFFOd90C63LvXy6Y6hDZ4b/he8HGvjl0E9JcefWLcs="
   },
   "yakuake": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/yakuake-25.12.2.tar.xz",
-    "hash": "sha256-wkl4kczC9Z8qHHP8TosZOla0H/gr+HuquvGqhoRkj7I="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/yakuake-25.12.3.tar.xz",
+    "hash": "sha256-NiydN2xP9FHUJ3f4+PnyHyBCzssRfxtc8tp3sQpDyd8="
   },
   "zanshin": {
-    "version": "25.12.2",
-    "url": "mirror://kde/stable/release-service/25.12.2/src/zanshin-25.12.2.tar.xz",
-    "hash": "sha256-Du1rRSa0/eWkJhJ0CCbD6k5TscHosTse6M20NdxfiqM="
+    "version": "25.12.3",
+    "url": "mirror://kde/stable/release-service/25.12.3/src/zanshin-25.12.3.tar.xz",
+    "hash": "sha256-TfOH2gELGHX3MFKEljTfA77UU7YtCgHoEx03ulhly9I="
   }
 }
\ No newline at end of file

From 823965b94b09199ea32c7b95bbd25aca8cadc99f Mon Sep 17 00:00:00 2001
From: "R. Ryantm" <ryantm-bot@ryantm.com>
Date: Thu, 5 Mar 2026 14:05:49 +0000
Subject: [PATCH 72/74] nmrpflash: 0.9.26 -> 0.9.27

---
 pkgs/by-name/nm/nmrpflash/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/nm/nmrpflash/package.nix b/pkgs/by-name/nm/nmrpflash/package.nix
index b365c5737a7a..c4a9ecf5e62a 100644
--- a/pkgs/by-name/nm/nmrpflash/package.nix
+++ b/pkgs/by-name/nm/nmrpflash/package.nix
@@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "nmrpflash";
-  version = "0.9.26";
+  version = "0.9.27";
 
   src = fetchFromGitHub {
     owner = "jclehner";
     repo = "nmrpflash";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-I+6bZtiwR1DbZ8ykIBVBqo1LdQftUaU301aMh01StqU=";
+    hash = "sha256-YkkDvr/wgUFpJ8kp15hlU9iHdfefxQCbyrpT2jAjJro=";
   };
 
   nativeBuildInputs = [ pkg-config ];

From 6ae481a26c0bedf56d8dd87389dbd3d06dcf1040 Mon Sep 17 00:00:00 2001
From: Jost Alemann <alemann@posteo.com>
Date: Thu, 5 Mar 2026 15:05:54 +0100
Subject: [PATCH 73/74] freetube: 0.23.13 -> 0.23.14

Changelog:
https://github.com/FreeTubeApp/FreeTube/releases/tag/v0.23.14-beta
Diff:
https://github.com/FreeTubeApp/FreeTube/compare/v0.23.13-beta...v0.23.14-beta
---
 pkgs/by-name/fr/freetube/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fr/freetube/package.nix b/pkgs/by-name/fr/freetube/package.nix
index 539e54b68cb3..c26745c64de5 100644
--- a/pkgs/by-name/fr/freetube/package.nix
+++ b/pkgs/by-name/fr/freetube/package.nix
@@ -20,13 +20,13 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "freetube";
-  version = "0.23.13";
+  version = "0.23.14";
 
   src = fetchFromGitHub {
     owner = "FreeTubeApp";
     repo = "FreeTube";
     tag = "v${finalAttrs.version}-beta";
-    hash = "sha256-vnqrl/2hxL0RQbLHkgRntyTRSWmhMM7hOi31r4pKCgs=";
+    hash = "sha256-9CO5/EcFPO50awY1QNutbAqDG2rhOv3DYk97/9YNVWI=";
   };
 
   # Darwin requires writable Electron dist

From 0e4eca42b19fc152507e1b8cc7f28a4cbfc7cb69 Mon Sep 17 00:00:00 2001
From: isabel <isabel@isabelroses.com>
Date: Thu, 5 Mar 2026 15:43:07 +0000
Subject: [PATCH 74/74] atproto-goat: add isabelroses as maintainer

---
 pkgs/by-name/at/atproto-goat/package.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/at/atproto-goat/package.nix b/pkgs/by-name/at/atproto-goat/package.nix
index f2f8e3aedef1..097285e161b2 100644
--- a/pkgs/by-name/at/atproto-goat/package.nix
+++ b/pkgs/by-name/at/atproto-goat/package.nix
@@ -33,7 +33,10 @@ buildGoModule (finalAttrs: {
       mit
       asl20
     ];
-    maintainers = with lib.maintainers; [ pyrox0 ];
+    maintainers = with lib.maintainers; [
+      pyrox0
+      isabelroses
+    ];
     mainProgram = "goat";
   };
 })