diff --git a/ci/OWNERS b/ci/OWNERS
index 052135bf6a68..34a8f652f16e 100644
--- a/ci/OWNERS
+++ b/ci/OWNERS
@@ -26,10 +26,10 @@
 
 # Libraries
 /lib                        @infinisil @hsjobeki
-/lib/generators.nix         @infinisil @hsjobeki @Profpatsch
-/lib/cli.nix                @infinisil @hsjobeki @Profpatsch
-/lib/debug.nix              @infinisil @hsjobeki @Profpatsch
-/lib/asserts.nix            @infinisil @hsjobeki @Profpatsch
+/lib/generators.nix         @infinisil @hsjobeki
+/lib/cli.nix                @infinisil @hsjobeki
+/lib/debug.nix              @infinisil @hsjobeki
+/lib/asserts.nix            @infinisil @hsjobeki
 /lib/path/*                 @infinisil @hsjobeki
 /lib/fileset                @infinisil @hsjobeki
 /maintainers/github-teams.json @infinisil
@@ -75,7 +75,7 @@
 /pkgs/pkgs-lib                                   @Stunkymonkey @h7x4
 
 # Nixpkgs build-support
-/pkgs/build-support/writers @lassulus @Profpatsch
+/pkgs/build-support/writers @lassulus
 
 # Nixpkgs make-disk-image
 /doc/build-helpers/images/makediskimage.section.md  @raitobezarius
@@ -335,8 +335,8 @@ pkgs/development/python-modules/buildcatrust/ @ajs124 @lukegb @mweinelt
 /pkgs/build-support/dlang @jtbx @TomaSajt
 
 # Dhall
-/pkgs/development/dhall-modules      @Gabriella439 @Profpatsch
-/pkgs/development/interpreters/dhall @Gabriella439 @Profpatsch
+/pkgs/development/dhall-modules      @Gabriella439
+/pkgs/development/interpreters/dhall @Gabriella439
 
 # Agda
 /pkgs/build-support/agda                  @NixOS/agda
@@ -349,9 +349,6 @@ pkgs/development/python-modules/buildcatrust/ @ajs124 @lukegb @mweinelt
 /pkgs/development/idris-modules @Infinisil
 /pkgs/development/compilers/idris2 @mattpolzin
 
-# Bazel
-/pkgs/by-name/ba/bazel_7 @Profpatsch
-
 # NixOS modules for e-mail and dns services
 /nixos/modules/services/mail/mailman.nix    @peti
 /nixos/modules/services/mail/postfix.nix    @peti
diff --git a/doc/release-notes/rl-2605.section.md b/doc/release-notes/rl-2605.section.md
index ed1f18a3c3bb..b7aa319a57e6 100644
--- a/doc/release-notes/rl-2605.section.md
+++ b/doc/release-notes/rl-2605.section.md
@@ -264,6 +264,8 @@
 
 - Added `dell-bios-fan-control` package and service.
 
+- Added `lovr` package, a LUA-based game engine for VR and XR applications.
+
 - `openrgb` was updated to 1.0rc2, which now uses Plugin API version 4.
   Some existing OpenRGB plugins may be incompatible or require updates.
 
diff --git a/lib/modules.nix b/lib/modules.nix
index ff286ad7c4b2..9dfcc6086f41 100644
--- a/lib/modules.nix
+++ b/lib/modules.nix
@@ -1322,13 +1322,24 @@ let
     : 1\. Function argument
   */
   pushDownProperties =
+    let
+      mapAttrsIfAttrs =
+        f: val:
+        if isAttrs val then
+          mapAttrs f val
+        else
+          # This does not actually work, since arriving here means we have e.g.
+          # (lib.mkIf cond nonAttrs), while an attrset is expected. However,
+          # avoiding the mapAttrs call here gives better errors later.
+          val;
+    in
     cfg:
     if cfg._type or "" == "merge" then
       concatMap pushDownProperties cfg.contents
     else if cfg._type or "" == "if" then
-      map (mapAttrs (n: v: mkIf cfg.condition v)) (pushDownProperties cfg.content)
+      map (mapAttrsIfAttrs (n: v: mkIf cfg.condition v)) (pushDownProperties cfg.content)
     else if cfg._type or "" == "override" then
-      map (mapAttrs (n: v: mkOverride cfg.priority v)) (pushDownProperties cfg.content)
+      map (mapAttrsIfAttrs (n: v: mkOverride cfg.priority v)) (pushDownProperties cfg.content)
     # FIXME: handle mkOrder?
     else
       [ cfg ];
diff --git a/lib/tests/modules.sh b/lib/tests/modules.sh
index bc89d4c20851..efa2d2034090 100755
--- a/lib/tests/modules.sh
+++ b/lib/tests/modules.sh
@@ -171,6 +171,8 @@ checkConfigError() {
 # Shorthand meta attribute does not duplicate the config
 checkConfigOutput '^"one two"$' config.result ./shorthand-meta.nix
 
+checkConfigError "In module .*test-push-down-non-attrs.nix., you're trying to define a value of type \`bool'\n\s*rather than an attribute set for the option" config ./test-push-down-non-attrs.nix
+
 checkConfigOutput '^true$' config.result ./test-mergeAttrDefinitionsWithPrio.nix
 
 # Check that a module argument is passed, also when a default is available
diff --git a/lib/tests/modules/test-push-down-non-attrs.nix b/lib/tests/modules/test-push-down-non-attrs.nix
new file mode 100644
index 000000000000..ce9222ca3cfd
--- /dev/null
+++ b/lib/tests/modules/test-push-down-non-attrs.nix
@@ -0,0 +1,5 @@
+{ lib, ... }:
+
+{
+  config = lib.mkIf true true;
+}
diff --git a/maintainers/github-teams.json b/maintainers/github-teams.json
index 5d8e778e85b3..7cbe9c27dd07 100644
--- a/maintainers/github-teams.json
+++ b/maintainers/github-teams.json
@@ -41,7 +41,6 @@
     "description": "Maintenance of https://bazel.build/ and related packages",
     "id": 5468470,
     "maintainers": {
-      "Profpatsch": 3153638
     },
     "members": {
       "aherrmann": 732652,
diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 4df7a735a85f..bc07f4e0adf9 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -3882,6 +3882,12 @@
     github = "brancz";
     githubId = 4546722;
   };
+  brandonchinn178 = {
+    email = "brandonchinn178@gmail.com";
+    name = "Brandon Chinn";
+    github = "brandonchinn178";
+    githubId = 6827922;
+  };
   brantes = {
     name = "Pedro Brantes";
     email = "contact@brantes.simplelogin.com";
@@ -9881,12 +9887,6 @@
     name = "Maximilian Siling";
     keys = [ { fingerprint = "0BAF 2D87 CB43 746F 6237  2D78 DE60 31AB A0BB 269A"; } ];
   };
-  Golo300 = {
-    email = "lanzingertm@gmail.com";
-    github = "Golo300";
-    githubId = 58785758;
-    name = "Tim Lanzinger";
-  };
   gonsolo = {
     email = "gonsolo@gmail.com";
     github = "gonsolo";
diff --git a/nixos/modules/security/polkit.nix b/nixos/modules/security/polkit.nix
index ca0a88246528..d4a99ba8a7b6 100644
--- a/nixos/modules/security/polkit.nix
+++ b/nixos/modules/security/polkit.nix
@@ -80,6 +80,28 @@ in
 
     systemd.sockets."polkit-agent-helper".wantedBy = [ "sockets.target" ];
 
+    systemd.services."polkit-agent-helper@".serviceConfig = lib.mkMerge [
+      # The upstream unit inherits stderr to the polkit agent, which causes
+      # agent processes to misinterpret diagnostic output from PAM modules
+      # as protocol errors, resulting in tight re-execution loops.
+      { StandardError = "journal"; }
+
+      # The upstream unit uses PrivateDevices=yes and ProtectHome=yes,
+      # which prevents PAM modules from accessing hardware (e.g. FIDO
+      # tokens via /dev/hidraw*) or reading key files from home directories.
+      (lib.mkIf config.security.pam.u2f.enable {
+        # Override upstream PrivateDevices=yes to allow access to /dev/hidraw*
+        PrivateDevices = false;
+        DeviceAllow = [
+          "/dev/urandom r"
+          "char-hidraw rw"
+        ];
+        # Override upstream ProtectHome=yes so pam_u2f can read
+        # ~/.config/Yubico/u2f_keys (the default key file location)
+        ProtectHome = "read-only";
+      })
+    ];
+
     # The polkit daemon reads action/rule files
     environment.pathsToLink = [ "/share/polkit-1" ];
 
diff --git a/nixos/modules/services/search/nominatim.nix b/nixos/modules/services/search/nominatim.nix
index 39cf047a98a9..419b09ed5e70 100644
--- a/nixos/modules/services/search/nominatim.nix
+++ b/nixos/modules/services/search/nominatim.nix
@@ -257,6 +257,7 @@ in
               cfg.package
               falcon
               uvicorn
+              nominatim-api
             ];
           NOMINATIM_DATABASE_DSN = nominatimApiDsn;
           NOMINATIM_DATABASE_WEBUSER = cfg.database.apiUser;
diff --git a/nixos/modules/services/web-apps/nextcloud.nix b/nixos/modules/services/web-apps/nextcloud.nix
index d069480f3d70..a35f32f594ef 100644
--- a/nixos/modules/services/web-apps/nextcloud.nix
+++ b/nixos/modules/services/web-apps/nextcloud.nix
@@ -157,6 +157,7 @@ let
             --uid=nextcloud \
             --same-dir \
             --pty \
+            --pipe \
             --wait \
             --collect \
             --service-type=exec \
diff --git a/nixos/modules/system/boot/networkd.nix b/nixos/modules/system/boot/networkd.nix
index 413429f582de..60844d6b9bf8 100644
--- a/nixos/modules/system/boot/networkd.nix
+++ b/nixos/modules/system/boot/networkd.nix
@@ -84,6 +84,7 @@ let
           "Duplex"
           "AutoNegotiation"
           "WakeOnLan"
+          "WakeOnLanPassword"
           "Port"
           "Advertise"
           "ReceiveChecksumOffload"
@@ -91,14 +92,57 @@ let
           "TCPSegmentationOffload"
           "TCP6SegmentationOffload"
           "GenericSegmentationOffload"
+          "PartialGenericSegmentationOffload"
           "GenericReceiveOffload"
+          "GenericReceiveOffloadHardware"
           "LargeReceiveOffload"
+          "ReceivePacketSteeringCPUMask"
+          "ReceiveVLANCTAGHardwareAcceleration"
+          "TransmitVLANCTAGHardwareAcceleration"
+          "ReceiveVLANCTAGFilter"
+          "NTupleFilter"
+          "ReceiveFCS"
+          "ReceiveAll"
           "RxChannels"
           "TxChannels"
           "OtherChannels"
           "CombinedChannels"
+          "Property"
+          "ImportProperty"
+          "UnsetProperty"
           "RxBufferSize"
+          "RxMiniBufferSize"
+          "RxJumboBufferSize"
           "TxBufferSize"
+          "RxFlowControl"
+          "TxFlowControl"
+          "AutoNegotiationFlowControl"
+          "GenericSegmentOffloadMaxBytes"
+          "GenericSegmentOffloadMaxSegments"
+          "UseAdaptiveRxCoalesce"
+          "UseAdaptiveTxCoalesce"
+          "RxCoalesceSec"
+          "RxCoalesceIrqSec"
+          "RxCoalesceLowSec"
+          "RxCoalesceHighSec"
+          "TxCoalesceSec"
+          "TxCoalesceIrqSec"
+          "TxCoalesceLowSec"
+          "TxCoalesceHighSec"
+          "RxMaxCoalescedFrames"
+          "RxMaxCoalescedIrqFrames"
+          "RxMaxCoalescedLowFrames"
+          "RxMaxCoalescedHighFrames"
+          "TxMaxCoalescedFrames"
+          "TxMaxCoalescedIrqFrames"
+          "TxMaxCoalescedLowFrames"
+          "TxMaxCoalescedHighFrames"
+          "CoalescePacketRateLow"
+          "CoalescePacketRateHigh"
+          "CoalescePacketRateSampleIntervalSec"
+          "StatisticsBlockCoalesceSec"
+          "MDI"
+          "SR-IOVVirtualFunctions"
           "ReceiveQueues"
           "TransmitQueues"
           "TransmitQueueLength"
@@ -155,8 +199,8 @@ let
         (assertRange "CombinedChannels" 1 4294967295)
         (assertInt "RxBufferSize")
         (assertInt "TxBufferSize")
-        (assertRange "ReceiveQueues" 1 4096)
-        (assertRange "TransmitQueues" 1 4096)
+        (assertRange "ReceiveQueues" 1 16384)
+        (assertRange "TransmitQueues" 1 16384)
         (assertRange "TransmitQueueLength" 1 4294967294)
       ];
     };
diff --git a/nixos/modules/virtualisation/amazon-image.nix b/nixos/modules/virtualisation/amazon-image.nix
index 1330995524c7..a66687e3b36e 100644
--- a/nixos/modules/virtualisation/amazon-image.nix
+++ b/nixos/modules/virtualisation/amazon-image.nix
@@ -57,7 +57,6 @@ in
     boot.extraModulePackages = [
       config.boot.kernelPackages.ena
     ];
-    boot.initrd.kernelModules = [ "xen-blkfront" ];
     boot.initrd.availableKernelModules = [ "nvme" ];
     boot.kernelParams =
       let
diff --git a/nixos/release-combined.nix b/nixos/release-combined.nix
index d299ead82a1b..2289d9156d0d 100644
--- a/nixos/release-combined.nix
+++ b/nixos/release-combined.nix
@@ -87,6 +87,7 @@ rec {
         (onFullSupported "nixos.tests.containers-ip")
         (onSystems [ "x86_64-linux" ] "nixos.tests.docker")
         (onFullSupported "nixos.tests.env")
+        (onSystems [ "x86_64-linux" "aarch64-linux" ] "nixos.tests.ec2-userdata")
 
         # Way too many manual retries required on Hydra.
         #  Apparently it's hard to track down the cause.
diff --git a/nixos/tests/all-tests.nix b/nixos/tests/all-tests.nix
index 1eed27e00a54..779cefa572c2 100644
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@@ -489,9 +489,8 @@ in
   early-mount-options = runTest ./early-mount-options.nix;
   earlyoom = runTestOn [ "x86_64-linux" ] ./earlyoom.nix;
   easytier = runTest ./easytier.nix;
-  ec2-config = (handleTestOn [ "x86_64-linux" ] ./ec2.nix { }).boot-ec2-config or { };
   ec2-image = runTest ./ec2-image.nix;
-  ec2-nixops = (handleTestOn [ "x86_64-linux" ] ./ec2.nix { }).boot-ec2-nixops or { };
+  ec2-userdata = (handleTestOn [ "x86_64-linux" ] ./ec2.nix { }).ec2-userdata or { };
   echoip = runTest ./echoip.nix;
   ejabberd = runTest ./xmpp/ejabberd.nix;
   elk = handleTestOn [ "x86_64-linux" ] ./elk.nix { };
@@ -1221,6 +1220,7 @@ in
   pam-oath-login = runTest ./pam/pam-oath-login.nix;
   pam-pgsql = runTest ./pam/pam-pgsql.nix;
   pam-u2f = runTest ./pam/pam-u2f.nix;
+  pam-u2f-polkit = runTest ./pam/pam-u2f-polkit.nix;
   pam-ussh = runTest ./pam/pam-ussh.nix;
   pam-zfs-key = runTest ./pam/zfs-key.nix;
   pangolin = runTest ./pangolin.nix;
diff --git a/nixos/tests/ec2.nix b/nixos/tests/ec2.nix
index ae9a79db5403..c8c26be813cd 100644
--- a/nixos/tests/ec2.nix
+++ b/nixos/tests/ec2.nix
@@ -18,12 +18,6 @@ let
         ../modules/testing/test-instrumentation.nix
         ../modules/profiles/qemu-guest.nix
         {
-          # Hack to make the partition resizing work in QEMU.
-          boot.initrd.postDeviceCommands = mkBefore ''
-            ln -s vda /dev/xvda
-            ln -s vda1 /dev/xvda1
-          '';
-
           amazonImage.format = "qcow2";
 
           # In a NixOS test the serial console is occupied by the "backdoor"
@@ -31,30 +25,6 @@ let
           # the configuration in virtualisation/amazon-image.nix.
           systemd.services."serial-getty@ttyS0".enable = mkForce false;
 
-          # Needed by nixos-rebuild due to the lack of network
-          # access. Determined by trial and error.
-          system.extraDependencies = with pkgs; [
-            # Needed for a nixos-rebuild.
-            busybox
-            cloud-utils
-            desktop-file-utils
-            libxslt.bin
-            mkinitcpio-nfs-utils
-            stdenv
-            stdenvNoCC
-            texinfo
-            unionfs-fuse
-            lndir
-
-            # These are used in the configure-from-userdata tests
-            # for EC2. Httpd and valgrind are requested by the
-            # configuration.
-            apacheHttpd
-            apacheHttpd.doc
-            apacheHttpd.man
-            valgrind.doc
-          ];
-
           nixpkgs.pkgs = pkgs;
         }
       ];
@@ -68,8 +38,8 @@ let
 
 in
 {
-  boot-ec2-nixops = makeEc2Test {
-    name = "nixops-userdata";
+  ec2-userdata = makeEc2Test {
+    name = "ec2-userdata";
     meta.timeout = 600;
     inherit image;
     sshPublicKey = snakeOilPublicKey; # That's right folks! My user's key is also the host key!
@@ -116,49 +86,4 @@ in
       machine.wait_for_file("/etc/ec2-metadata/user-data")
     '';
   };
-
-  boot-ec2-config = makeEc2Test {
-    name = "config-userdata";
-    meta.broken = true; # amazon-init wants to download from the internet while building the system
-    inherit image;
-    sshPublicKey = snakeOilPublicKey;
-
-    # ### https://channels.nixos.org/nixos-unstable nixos
-    userData = ''
-      { pkgs, ... }:
-
-      {
-        imports = [
-          <nixpkgs/nixos/modules/virtualisation/amazon-image.nix>
-          <nixpkgs/nixos/modules/testing/test-instrumentation.nix>
-          <nixpkgs/nixos/modules/profiles/qemu-guest.nix>
-        ];
-        environment.etc.testFile = {
-          text = "whoa";
-        };
-
-        networking.hostName = "ec2-test-vm"; # required by services.httpd
-
-        services.httpd = {
-          enable = true;
-          adminAddr = "test@example.org";
-          virtualHosts.localhost.documentRoot = "''${pkgs.valgrind.doc}/share/doc/valgrind/html";
-        };
-        networking.firewall.allowedTCPPorts = [ 80 ];
-      }
-    '';
-    script = ''
-      machine.start()
-
-      # amazon-init must succeed. if it fails, make the test fail
-      # immediately instead of timing out in wait_for_file.
-      machine.wait_for_unit("amazon-init.service")
-
-      machine.wait_for_file("/etc/testFile")
-      assert "whoa" in machine.succeed("cat /etc/testFile")
-
-      machine.wait_for_unit("httpd.service")
-      assert "Valgrind" in machine.succeed("curl http://localhost")
-    '';
-  };
 }
diff --git a/nixos/tests/pam/pam-u2f-polkit.nix b/nixos/tests/pam/pam-u2f-polkit.nix
new file mode 100644
index 000000000000..0db4d0b1b578
--- /dev/null
+++ b/nixos/tests/pam/pam-u2f-polkit.nix
@@ -0,0 +1,90 @@
+{ hostPkgs, ... }:
+
+{
+  name = "pam-u2f-polkit";
+
+  qemu.package = hostPkgs.qemu_test.override { u2fEmuSupport = true; };
+
+  nodes.machine =
+    { pkgs, ... }:
+    {
+      virtualisation.qemu.options = [
+        "-usb"
+        "-device u2f-emulated"
+      ];
+
+      security.polkit.enable = true;
+      security.pam.u2f.enable = true;
+
+      environment.systemPackages = with pkgs; [
+        libfido2
+        pam_u2f
+      ];
+    };
+
+  testScript = ''
+    machine.wait_for_unit("multi-user.target")
+
+    # The upstream polkit-agent-helper@.service has PrivateDevices=yes and
+    # DevicePolicy=strict with only /dev/null allowed. This blocks hidraw.
+    # Verify that: run a command under the upstream defaults and show it fails.
+    machine.fail(
+        "systemd-run --wait --pipe "
+        "--property=PrivateDevices=yes "
+        "--property=DevicePolicy=strict "
+        "--property='DeviceAllow=/dev/null rw' "
+        "test -c /dev/hidraw0"
+    )
+
+    # The PR overrides PrivateDevices=no and adds DeviceAllow for hidraw.
+    # Verify that the actual polkit-agent-helper@ unit got these overrides.
+    props = machine.succeed("systemctl show polkit-agent-helper@dummy.service")
+    assert "PrivateDevices=no" in props, f"Expected PrivateDevices=no, got: {props}"
+    assert "ProtectHome=read-only" in props, f"Expected ProtectHome=read-only, got: {props}"
+
+    # Run fido2-token under the same constraints as the fixed service.
+    # This proves the device is not just visible but actually usable
+    # inside the polkit-agent-helper@ sandbox.
+    machine.succeed(
+        "systemd-run --wait --pipe "
+        "--property=PrivateDevices=no "
+        "--property=DevicePolicy=strict "
+        "--property='DeviceAllow=/dev/null rw' "
+        "--property='DeviceAllow=/dev/urandom r' "
+        "--property='DeviceAllow=char-hidraw rw' "
+        "--property=ProtectHome=read-only "
+        "--property=PrivateNetwork=yes "
+        "--property=ProtectSystem=strict "
+        "--property=ProtectKernelModules=yes "
+        "--property=ProtectKernelLogs=yes "
+        "--property=ProtectKernelTunables=yes "
+        "--property=ProtectControlGroups=yes "
+        "--property=ProtectClock=yes "
+        "--property=ProtectHostname=yes "
+        "--property=LockPersonality=yes "
+        "--property=MemoryDenyWriteExecute=yes "
+        "--property=NoNewPrivileges=yes "
+        "--property=PrivateTmp=yes "
+        "--property=RemoveIPC=yes "
+        "--property='RestrictAddressFamilies=AF_UNIX' "
+        "--property=RestrictNamespaces=yes "
+        "--property=RestrictRealtime=yes "
+        "--property=RestrictSUIDSGID=yes "
+        "--property=SystemCallArchitectures=native "
+        "fido2-token -I /dev/hidraw0"
+    )
+
+    # Also verify that pamu2fcfg can register a credential inside the sandbox
+    # (needs hidraw + urandom access)
+    machine.succeed(
+        "systemd-run --wait --pipe "
+        "--property=PrivateDevices=no "
+        "--property=DevicePolicy=strict "
+        "--property='DeviceAllow=/dev/null rw' "
+        "--property='DeviceAllow=/dev/urandom r' "
+        "--property='DeviceAllow=char-hidraw rw' "
+        "--property=ProtectHome=read-only "
+        "pamu2fcfg"
+    )
+  '';
+}
diff --git a/nixos/tests/pam/pam-u2f.nix b/nixos/tests/pam/pam-u2f.nix
index 17b9e19e4cc5..65a3ce7c459f 100644
--- a/nixos/tests/pam/pam-u2f.nix
+++ b/nixos/tests/pam/pam-u2f.nix
@@ -1,29 +1,70 @@
-{ ... }:
+{ hostPkgs, ... }:
 
 {
   name = "pam-u2f";
 
+  qemu.package = hostPkgs.qemu_test.override { u2fEmuSupport = true; };
+
   nodes.machine =
-    { ... }:
+    { pkgs, ... }:
     {
+      virtualisation.qemu.options = [
+        "-usb"
+        "-device u2f-emulated"
+      ];
+
       security.pam.u2f = {
         enable = true;
-        control = "required";
+        control = "sufficient";
         settings = {
-          cue = true;
           debug = true;
-          interactive = true;
-          origin = "nixos-test";
-          # Freeform option
-          userpresence = 1;
+          origin = "pam://nixos-test";
         };
       };
+
+      users.users.alice = {
+        isNormalUser = true;
+        uid = 1000;
+      };
+
+      environment.systemPackages = with pkgs; [
+        libfido2
+        pam_u2f
+      ];
+
+      # Allow non-root users to access the virtual U2F device
+      services.udev.extraRules = ''
+        KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0666"
+      '';
     };
 
   testScript = ''
     machine.wait_for_unit("multi-user.target")
+    machine.wait_until_succeeds("pgrep -f 'agetty.*tty1'")
+
+    # The virtual U2F device should be recognized
+    machine.succeed("fido2-token -L | grep -q hidraw")
+
+    # Register a U2F credential for alice
+    machine.succeed("mkdir -p /home/alice/.config/Yubico")
     machine.succeed(
-        'egrep "auth required .*/lib/security/pam_u2f.so.*cue.*debug.*interactive.*origin=nixos-test.*userpresence=1" /etc/pam.d/ -R'
+        "pamu2fcfg -u alice -o pam://nixos-test"
+        " > /home/alice/.config/Yubico/u2f_keys"
     )
+    machine.succeed("chown -R alice:users /home/alice/.config")
+
+    # Log in as alice on tty2. With control=sufficient, pam_u2f runs
+    # before pam_unix. The emulated device auto-approves user presence,
+    # so alice is authenticated by her U2F key — no password needed.
+    machine.send_key("alt-f2")
+    machine.wait_until_succeeds("[ $(fgconsole) = 2 ]")
+    machine.wait_for_unit("getty@tty2.service")
+    machine.wait_until_tty_matches("2", "login: ")
+    machine.send_chars("alice\n")
+
+    # alice should get a shell without being asked for a password
+    machine.wait_until_succeeds("pgrep -u alice bash")
+    machine.send_chars("touch /tmp/u2f-login-success\n")
+    machine.wait_for_file("/tmp/u2f-login-success")
   '';
 }
diff --git a/nixos/tests/web-apps/pdfding/basic.nix b/nixos/tests/web-apps/pdfding/basic.nix
index d2a1df8a5d7e..7b2d5154a7bb 100644
--- a/nixos/tests/web-apps/pdfding/basic.nix
+++ b/nixos/tests/web-apps/pdfding/basic.nix
@@ -56,6 +56,7 @@
 
       # create admin
       machine.wait_for_unit("multi-user.target")
+      machine.wait_for_open_port(${toString port})
       machine.succeed("DJANGO_SUPERUSER_PASSWORD=admin pdfding-manage createsuperuser --no-input --username admin --email admin@localhost")
 
       cookie_jar = "/tmp/cookies.txt"
diff --git a/nixos/tests/web-apps/pdfding/postgres.nix b/nixos/tests/web-apps/pdfding/postgres.nix
index 0fb9c174dc1a..f7fa5d3c267f 100644
--- a/nixos/tests/web-apps/pdfding/postgres.nix
+++ b/nixos/tests/web-apps/pdfding/postgres.nix
@@ -32,6 +32,7 @@
   testScript =
     { nodes, ... }:
     let
+      inherit (nodes.machine.services.pdfding) port;
       stateDir = "/var/lib/pdfding";
     in
     # py
@@ -41,6 +42,7 @@
 
       # create admin
       machine.wait_for_unit("multi-user.target")
+      machine.wait_for_open_port(${toString port})
 
       machine.succeed("DJANGO_SUPERUSER_PASSWORD=admin pdfding-manage createsuperuser --no-input --username admin --email admin@localhost")
 
@@ -74,7 +76,7 @@
   interactive.nodes.machine =
     { config, ... }:
     let
-      port = config.services.pdfding.port;
+      inherit (config.services.pdfding) port;
     in
     {
       # not needed, only for manual interactive debugging
diff --git a/nixos/tests/web-apps/pdfding/s3-backups.nix b/nixos/tests/web-apps/pdfding/s3-backups.nix
index 1339ab555114..4a56ec8738ad 100644
--- a/nixos/tests/web-apps/pdfding/s3-backups.nix
+++ b/nixos/tests/web-apps/pdfding/s3-backups.nix
@@ -109,6 +109,7 @@ in
 
       # create admin
       machine.wait_for_unit("multi-user.target")
+      machine.wait_for_open_port(${toString port})
       machine.succeed("DJANGO_SUPERUSER_PASSWORD=admin pdfding-manage createsuperuser --no-input --username admin --email admin@localhost")
 
       # login
diff --git a/pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix b/pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix
index 2b2bc7dea170..9f0fdede4b0f 100644
--- a/pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix
@@ -8,8 +8,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "claude-code";
     publisher = "anthropic";
-    version = "2.1.88";
-    hash = "sha256-iFH8siufDTje1zihRMqb/5CCYo5YHHdCZcuk8Hrj4Uk=";
+    version = "2.1.89";
+    hash = "sha256-9GASgI7ifhxAj4L6Xf1MGyGsiFcC5NZb2ICCjLUf5Qw=";
   };
 
   postInstall = ''
diff --git a/pkgs/applications/editors/vscode/extensions/chrischinchilla.vscode-pandoc/default.nix b/pkgs/applications/editors/vscode/extensions/chrischinchilla.vscode-pandoc/default.nix
index bd66b98c6d81..2ec2d06cb010 100644
--- a/pkgs/applications/editors/vscode/extensions/chrischinchilla.vscode-pandoc/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/chrischinchilla.vscode-pandoc/default.nix
@@ -10,8 +10,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     name = "vscode-pandoc";
     publisher = "chrischinchilla";
-    version = "0.7.1";
-    hash = "sha256-sGZ0o3lyGs1N8v1gYcdsFYYQwNeMChW881EXe6NoBgU=";
+    version = "0.7.2";
+    hash = "sha256-Vq9VayQVhlz97Ml0nfBCwlF41V+TqA46jHHW7TMJLeI=";
   };
   nativeBuildInputs = [
     jq
diff --git a/pkgs/applications/editors/vscode/extensions/default.nix b/pkgs/applications/editors/vscode/extensions/default.nix
index f276c599a366..fb410074b8da 100644
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@@ -1007,8 +1007,8 @@ let
         mktplcRef = {
           name = "coder-remote";
           publisher = "coder";
-          version = "1.13.2";
-          hash = "sha256-Dw8eJPpbeMz2taELHI0eYwO67SngCFel8wL/ZCGXQoM=";
+          version = "1.14.3";
+          hash = "sha256-W4VciZMvVtRcCibJP5UGTlHCrdF/AF167xlLvZs5BB4=";
         };
         meta = {
           description = "Extension for Visual Studio Code to open any Coder workspace in VS Code with a single click";
@@ -1955,8 +1955,8 @@ let
         mktplcRef = {
           publisher = "github";
           name = "vscode-pull-request-github";
-          version = "0.132.1";
-          hash = "sha256-iWDKJVgVhpycTNE044DSOf/uN0ZG4s2/JdpwBkka8sQ=";
+          version = "0.132.2";
+          hash = "sha256-1wBo1PaSZ0xNRIgdGAPQ7Jm4ywx4qc4kflZxHVAt2EA=";
         };
         meta = {
           license = lib.licenses.mit;
@@ -3828,8 +3828,8 @@ let
         mktplcRef = {
           name = "ansible";
           publisher = "redhat";
-          version = "26.3.0";
-          hash = "sha256-c6NcQsJe2sjJH/nBhStHYWKNSfJtU3CLHpv+2qPlyqM=";
+          version = "26.3.5";
+          hash = "sha256-IKSozGy4S04pSsbhpXVgsqQvJNzaxVkoSrLwhFb4Ag4=";
         };
         meta = {
           description = "Ansible language support";
diff --git a/pkgs/applications/editors/vscode/extensions/github.copilot-chat/default.nix b/pkgs/applications/editors/vscode/extensions/github.copilot-chat/default.nix
index a820902cbb68..053a2a0973ff 100644
--- a/pkgs/applications/editors/vscode/extensions/github.copilot-chat/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/github.copilot-chat/default.nix
@@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
   mktplcRef = {
     publisher = "github";
     name = "copilot-chat";
-    version = "0.40.1";
-    hash = "sha256-wVxryUaW53xU4zZKU4t1pZaAB7BFIOkkcng91JnCLOk=";
+    version = "0.42.0";
+    hash = "sha256-iKDRDqQ8qJe2c4SQJBiJLCEtmVmcci6753+I7uH7YVk=";
   };
 
   meta = {
diff --git a/pkgs/applications/editors/vscode/extensions/visualjj.visualjj/default.nix b/pkgs/applications/editors/vscode/extensions/visualjj.visualjj/default.nix
index ddc4582f2c55..3ee8803d64f4 100644
--- a/pkgs/applications/editors/vscode/extensions/visualjj.visualjj/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/visualjj.visualjj/default.nix
@@ -11,26 +11,26 @@ vscode-utils.buildVscodeMarketplaceExtension {
       sources = {
         "x86_64-linux" = {
           arch = "linux-x64";
-          hash = "sha256-20YQYsNYvWDhFS8ZRtK9dtLtZ6wt1xGSsZjTNoXRr7g=";
+          hash = "sha256-4w/A3C9WWfKbZF3LnaLR9aZ78hvU+lrEXS8nnMbgzeA=";
         };
         "x86_64-darwin" = {
           arch = "darwin-x64";
-          hash = "sha256-+h+2JMl1UMUM1fcB8ddo7R2RuaQdjjWcd74APwWw/uc=";
+          hash = "sha256-+2+geG0UcCf7L+SbgKGjMkmctH+3q7nLsZFsb/BrhF0=";
         };
         "aarch64-linux" = {
           arch = "linux-arm64";
-          hash = "sha256-rwk+bkHfCRtYEWpMi9/BABvT+LkpWi8ezAE4TK7ttkg=";
+          hash = "sha256-QUopKDFQxWinvtkCkmRSCG2TpopGRRD8dXyfC3iww6Y=";
         };
         "aarch64-darwin" = {
           arch = "darwin-arm64";
-          hash = "sha256-IbfqAZyAwS/01Mlniw+xOMktk4wQNXWTK5oyBX9g2sI=";
+          hash = "sha256-7ZglgfAbjdCS8R9MhX8qB7P4aCVDy76qFmQ7klzGbjg=";
         };
       };
     in
     {
       name = "visualjj";
       publisher = "visualjj";
-      version = "0.26.0";
+      version = "0.27.0";
     }
     // sources.${stdenvNoCC.hostPlatform.system}
       or (throw "Unsupported system ${stdenvNoCC.hostPlatform.system}");
diff --git a/pkgs/applications/emulators/libretro/cores/fbalpha2012.nix b/pkgs/applications/emulators/libretro/cores/fbalpha2012.nix
index ad971694f375..bb599efa6dc2 100644
--- a/pkgs/applications/emulators/libretro/cores/fbalpha2012.nix
+++ b/pkgs/applications/emulators/libretro/cores/fbalpha2012.nix
@@ -7,13 +7,13 @@
 }:
 mkLibretroCore rec {
   core = "fbalpha2012";
-  version = "0-unstable-2025-12-12";
+  version = "0-unstable-2026-03-31";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "fbalpha2012";
-    rev = "c547d8cf3f7748f4094cee658a5d31ec1b79ece4";
-    hash = "sha256-owy8IuJ/dAEbUH7hGCR3oLiI4tYuwsNfRYRl6LmyYfc=";
+    rev = "15af60bf24e3dc2267a38e3c8532450ebec86317";
+    hash = "sha256-7QfDk/j7akaORSekdx96mcDgsFp+kAq1/Cxtu3uPe4A=";
   };
 
   sourceRoot = "${src.name}/svn-current/trunk";
diff --git a/pkgs/applications/emulators/libretro/cores/fmsx.nix b/pkgs/applications/emulators/libretro/cores/fmsx.nix
index dc072c5108a3..cb3bb1e20f95 100644
--- a/pkgs/applications/emulators/libretro/cores/fmsx.nix
+++ b/pkgs/applications/emulators/libretro/cores/fmsx.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "fmsx";
-  version = "0-unstable-2025-07-31";
+  version = "0-unstable-2026-03-31";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "fmsx-libretro";
-    rev = "fbe4dfc4c3e3f7eb27089def3d663a905b181845";
-    hash = "sha256-1hZQO16SDB8n1wdTP67Kpns3izg/nPGl5M7wjFDBjGc=";
+    rev = "6b807c588d63677770f7f2ed8b94ca0e9da256ce";
+    hash = "sha256-vA9ODUtmmrDPbZjmRJ9IIFELLTD8g8aHmQdo/B/d1fQ=";
   };
 
   makefile = "Makefile";
diff --git a/pkgs/applications/emulators/libretro/cores/mame2010.nix b/pkgs/applications/emulators/libretro/cores/mame2010.nix
index 52fa54a76408..cd8ecd4c09f4 100644
--- a/pkgs/applications/emulators/libretro/cores/mame2010.nix
+++ b/pkgs/applications/emulators/libretro/cores/mame2010.nix
@@ -6,13 +6,13 @@
 }:
 mkLibretroCore {
   core = "mame2010";
-  version = "0-unstable-2024-10-23";
+  version = "0-unstable-2026-03-31";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "mame2010-libretro";
-    rev = "c5b413b71e0a290c57fc351562cd47ba75bac105";
-    hash = "sha256-p+uEhxjr/07YJxInhW7oJDr8KurD36JxnSfJo17FOxM=";
+    rev = "29095383c0281100fee2ee09f1438d8ae990c510";
+    hash = "sha256-syp/hoo0xZEs3poQZU1Ow4qLHRCF+31u5GrYw8aKiv4=";
   };
 
   makefile = "Makefile";
diff --git a/pkgs/applications/emulators/libretro/cores/mesen.nix b/pkgs/applications/emulators/libretro/cores/mesen.nix
index 13e0bab8a8ed..08f5bb4142eb 100644
--- a/pkgs/applications/emulators/libretro/cores/mesen.nix
+++ b/pkgs/applications/emulators/libretro/cores/mesen.nix
@@ -5,13 +5,13 @@
 }:
 mkLibretroCore {
   core = "mesen";
-  version = "0-unstable-2024-10-21";
+  version = "0-unstable-2026-03-31";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "mesen";
-    rev = "791c5e8153ee6e29691d45b5df2cf1151ff416f9";
-    hash = "sha256-PEEGJsyT+D/JwBxH2H9OY2MwaGt1i+1kmDZUT6zROic=";
+    rev = "4df4d3681e89321cd4e571ee5cacfdef91842566";
+    hash = "sha256-f067kvu+Pp27iJiVAZczg49Qxz9DVPnGw/Hjwi6+a0Y=";
   };
 
   makefile = "Makefile";
diff --git a/pkgs/applications/emulators/libretro/cores/play.nix b/pkgs/applications/emulators/libretro/cores/play.nix
index ef4cc1c6bfbe..4dd6b1f215b0 100644
--- a/pkgs/applications/emulators/libretro/cores/play.nix
+++ b/pkgs/applications/emulators/libretro/cores/play.nix
@@ -14,13 +14,13 @@
 }:
 mkLibretroCore {
   core = "play";
-  version = "0-unstable-2026-03-13";
+  version = "0-unstable-2026-03-31";
 
   src = fetchFromGitHub {
     owner = "jpd002";
     repo = "Play-";
-    rev = "560781c201f8877d39a084d7e6ab583ffa25aa09";
-    hash = "sha256-Piwe54A1PNPfwy86bNMNhLsEYwwVqygysAvK6Iqt0mo=";
+    rev = "cd1dba563cb39925796175f2b8ce95a15c90ee1a";
+    hash = "sha256-nP22juzUOuD/SQqrIm3AXfa1x98Uqf9rKLhzhXA4yQI=";
     fetchSubmodules = true;
   };
 
diff --git a/pkgs/applications/graphics/apngasm/default.nix b/pkgs/applications/graphics/apngasm/default.nix
index b5643329c87e..2b13f38498cd 100644
--- a/pkgs/applications/graphics/apngasm/default.nix
+++ b/pkgs/applications/graphics/apngasm/default.nix
@@ -26,6 +26,11 @@ stdenv.mkDerivation {
       url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/media-gfx/apngasm/files/apngasm-3.1.10-static.patch?id=45fd0cde71ca2ae0e7e38ab67400d84b86b593d7";
       sha256 = "sha256-eKthgInWxXEqN5PupvVf9wVQDElxsPYRFXT7pMc6vIU=";
     })
+    # Boost 1.89+ removed the boost_system CMake component
+    (fetchpatch {
+      url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/media-gfx/apngasm/files/apngasm-3.1.10-boost-1.89.patch?id=87e57d47db8c7c68acb2dec534e70015d8b1d61e";
+      sha256 = "sha256-92oie9owUYP8a1hrJsFCRk8QI4AjTzMXTe+frlmbIuE=";
+    })
   ];
 
   nativeBuildInputs = [ cmake ];
diff --git a/pkgs/applications/networking/browsers/chromium/info.json b/pkgs/applications/networking/browsers/chromium/info.json
index a69e70625dd4..9fa56bb1fd20 100644
--- a/pkgs/applications/networking/browsers/chromium/info.json
+++ b/pkgs/applications/networking/browsers/chromium/info.json
@@ -823,7 +823,7 @@
     }
   },
   "ungoogled-chromium": {
-    "version": "146.0.7680.164",
+    "version": "146.0.7680.177",
     "deps": {
       "depot_tools": {
         "rev": "42786f6e46c25c30dd58f69283ab6fcd0c959f58",
@@ -835,16 +835,16 @@
         "hash": "sha256-wFCuu4GR0N7QZCwT8UAhqH5moicYQjZ4ZLI58AM4pJ0="
       },
       "ungoogled-patches": {
-        "rev": "146.0.7680.164-1",
-        "hash": "sha256-mqgmG+1TefLshc3QUQrGN2XB99FXJyexE6QI7uD3IXQ="
+        "rev": "146.0.7680.177-1",
+        "hash": "sha256-OMGjomgLuwO0KkqwW3IxLmSbpHM7ZbVUVOiPkQs/N6s="
       },
       "npmHash": "sha256-ByB1Ea5tduIJZXyydeBWsoS8OPABOgwHe+dNXRssdvc="
     },
     "DEPS": {
       "src": {
         "url": "https://chromium.googlesource.com/chromium/src.git",
-        "rev": "bbd8c5dd25fb2f569d98e626a9517cf2171abdff",
-        "hash": "sha256-hwZehtGUyuMdHisIaztsYlu0MEftbmmAqN/X+ias4nI=",
+        "rev": "ae03f7fb2cf1215853896d6a4c15fdceee2badb7",
+        "hash": "sha256-WVJ6dtDpXnp+Q8N/KEFJZWU9/4xEmpEYcu53MA94PZ8=",
         "recompress": true
       },
       "src/third_party/clang-format/script": {
@@ -914,8 +914,8 @@
       },
       "src/third_party/angle": {
         "url": "https://chromium.googlesource.com/angle/angle.git",
-        "rev": "e05753c6d05b17b23d514038957469c70b75475c",
-        "hash": "sha256-SMym7PN2acfw84Z95xWSbN/QV5UIDIOztWxFeTCfBsk="
+        "rev": "1c0f91aaa60a1f87725840495cbfd9717e7c77c8",
+        "hash": "sha256-9Me/9kdDgcDLGP/0lLWpj294IoUp0hDD5hfFjSZbTOc="
       },
       "src/third_party/angle/third_party/glmark2/src": {
         "url": "https://chromium.googlesource.com/external/github.com/glmark2/glmark2",
@@ -954,8 +954,8 @@
       },
       "src/third_party/dawn": {
         "url": "https://dawn.googlesource.com/dawn.git",
-        "rev": "a655251a59c4af3fbf8058bb2572d6a457f896d2",
-        "hash": "sha256-UKoDytne6QD2d6ojy4mYPjLbo9GB4xy1fUf9C1pLKaE="
+        "rev": "10fb89e3179bb7443e66911eb3c795c7aaf022e5",
+        "hash": "sha256-ATTNb61RG7hS1mapDw0o4ZyBeny4ONI8ZjJLpmbQaKU="
       },
       "src/third_party/dawn/third_party/glfw": {
         "url": "https://chromium.googlesource.com/external/github.com/glfw/glfw",
@@ -1474,8 +1474,8 @@
       },
       "src/third_party/skia": {
         "url": "https://skia.googlesource.com/skia.git",
-        "rev": "6a75afe9792764f6faa76ad50125781899ca05e8",
-        "hash": "sha256-S4AAmNw50ToTZIuHl41Pc+Z1MZfUVf0/ZGGIiEr5cXo="
+        "rev": "30d129c8800b5626c46fb83fa62db10b9b22b319",
+        "hash": "sha256-2/Deen9OwDgDRrm5j7Rw27Z2JUX1thX7mnKWRLJbEvM="
       },
       "src/third_party/smhasher/src": {
         "url": "https://chromium.googlesource.com/external/smhasher.git",
@@ -1609,8 +1609,8 @@
       },
       "src/third_party/webrtc": {
         "url": "https://webrtc.googlesource.com/src.git",
-        "rev": "b2a90ac0037ee7187102ce2c40e5007216ca9a58",
-        "hash": "sha256-rX6NEN0RbfHPRqJqkGhypwWt/NcREvPaanL+CDxwhA8="
+        "rev": "6733aa5ba16e1e1087f339d1151c80c924a6fbf8",
+        "hash": "sha256-g2GYFVTK8f296v7lUcYPqkI4qDoladsTpnKWb6SGRmw="
       },
       "src/third_party/wuffs/src": {
         "url": "https://skia.googlesource.com/external/github.com/google/wuffs-mirror-release-c.git",
@@ -1639,8 +1639,8 @@
       },
       "src/v8": {
         "url": "https://chromium.googlesource.com/v8/v8.git",
-        "rev": "0e999a528db40a3ef6fa917adf96370a18b87d70",
-        "hash": "sha256-rkSuZBdFUHJyYmqp2oN3mLjNtKjk569MocyvnICo+uw="
+        "rev": "0ad812d268a7820dba9bf848b416aeda4dd1b2e5",
+        "hash": "sha256-nG4goqqVAAWPMkq8296wCYhnwL93oAL+pF1oaMXyqZI="
       }
     }
   }
diff --git a/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix b/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
index f0fc2f8514c8..6e8f1e818757 100644
--- a/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
+++ b/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
@@ -10,13 +10,13 @@
 buildMozillaMach rec {
   pname = "firefox-devedition";
   binaryName = "firefox-devedition";
-  version = "148.0b15";
+  version = "150.0b3";
   applicationName = "Firefox Developer Edition";
   requireSigning = false;
   branding = "browser/branding/aurora";
   src = fetchurl {
     url = "mirror://mozilla/devedition/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "32d7e4b9df739d5bdab2cd54250b1c7546d26b248a62e0bbc71e4b78b12d4e3d6d9451b631a0f18568f2540141786967a33b6543256a6ec6f4f245093d37a5d5";
+    sha512 = "1a1f9079b50bb632fe578be6452269db6195df0663165d3d3906897368d4d3752c51fb4ace9651881d5a4e9a5dd5dcb2bdf18efab193d80acac1c2f502ef11e1";
   };
 
   # buildMozillaMach sets MOZ_APP_REMOTINGNAME during configuration, but
diff --git a/pkgs/applications/networking/cluster/terraform-providers/providers.json b/pkgs/applications/networking/cluster/terraform-providers/providers.json
index 0c36daa9ac54..f8849daa21d7 100644
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@@ -191,13 +191,13 @@
     "vendorHash": "sha256-jK7JuARpoxq7hvq5+vTtUwcYot0YqlOZdtDwq4IqKvk="
   },
   "cloudamqp_cloudamqp": {
-    "hash": "sha256-PAH7Avc6WQFQ7fXs7A//SxIEP88uSrN9sWlEYe9Zr+I=",
+    "hash": "sha256-WVEGtD5Hfb8xu/GymHMknK8n2KgOMW2EzBMvRmbKJug=",
     "homepage": "https://registry.terraform.io/providers/cloudamqp/cloudamqp",
     "owner": "cloudamqp",
     "repo": "terraform-provider-cloudamqp",
-    "rev": "v1.43.1",
+    "rev": "v1.44.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-SrGNzwSdkMTyNuVgjUj0tID/Qu6BBusVn+NsgTk4RJI="
+    "vendorHash": "sha256-sagrygtfsZWQUuIuGTUldZYYR5OhQfpZDxDKZAaIR4Y="
   },
   "cloudflare_cloudflare": {
     "hash": "sha256-D5Kk6xCz3CQWbGHjLKU/+SPBzCYFQlphCTMG6+LvFek=",
@@ -499,13 +499,13 @@
     "vendorHash": "sha256-MYVkNvJ+rbwGw0htClIbmxk3YX2OK/ZO/QOTyMRFiug="
   },
   "hashicorp_aws": {
-    "hash": "sha256-/Eti2S6QIHmteilt0wFverousbOapfjBhWrxeCUpOQw=",
+    "hash": "sha256-EaNOYM4qpWiAsemTOMpFFwJLcrlOxMVgjuECh4KhUsM=",
     "homepage": "https://registry.terraform.io/providers/hashicorp/aws",
     "owner": "hashicorp",
     "repo": "terraform-provider-aws",
-    "rev": "v6.37.0",
+    "rev": "v6.38.0",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-tsAxy5dt8mKtfR2o8dNgFSdjgjfIXD0ye004wPZ6fTk="
+    "vendorHash": "sha256-picwxtQOtsBX8SkA64+ekFNDC7zIpg0CG66kelO2THk="
   },
   "hashicorp_awscc": {
     "hash": "sha256-68SdqhF4RA/rjVm89yAZb8MRdDPrcqrQ6lc3tJTIeng=",
@@ -1310,11 +1310,11 @@
     "vendorHash": "sha256-omxEb+ntQuHDfS2Rmt0rj0BF0Q2T8DLhobLua2uU/0o="
   },
   "tencentcloudstack_tencentcloud": {
-    "hash": "sha256-iUbbxwnRgYtNq8a8qMYB/6HQ7QS/hrvlzL5MMS08rn0=",
+    "hash": "sha256-xsYh5gDneL3nQDUIHe3fRjObFTGp3ssPq8wlqPWsq7Y=",
     "homepage": "https://registry.terraform.io/providers/tencentcloudstack/tencentcloud",
     "owner": "tencentcloudstack",
     "repo": "terraform-provider-tencentcloud",
-    "rev": "v1.82.77",
+    "rev": "v1.82.82",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },
diff --git a/pkgs/applications/networking/droopy/default.nix b/pkgs/applications/networking/droopy/default.nix
index be41553ecfe7..a458b4a81af6 100644
--- a/pkgs/applications/networking/droopy/default.nix
+++ b/pkgs/applications/networking/droopy/default.nix
@@ -40,7 +40,7 @@ stdenv.mkDerivation {
     description = "Mini Web server that let others upload files to your computer";
     homepage = "http://stackp.online.fr/droopy";
     license = lib.licenses.bsd3;
-    maintainers = [ lib.maintainers.Profpatsch ];
+    maintainers = [ ];
     mainProgram = "droopy";
   };
 
diff --git a/pkgs/applications/networking/instant-messengers/linphone/mediastreamer2/default.nix b/pkgs/applications/networking/instant-messengers/linphone/mediastreamer2/default.nix
index 0ed276b28b89..f4f3561ecd3e 100644
--- a/pkgs/applications/networking/instant-messengers/linphone/mediastreamer2/default.nix
+++ b/pkgs/applications/networking/instant-messengers/linphone/mediastreamer2/default.nix
@@ -70,7 +70,7 @@ mkLinphoneDerivation (finalAttrs: {
     "-DENABLE_UNIT_TESTS=NO" # Do not build test executables
   ];
 
-  NIX_LDFLAGS = "-lXext";
+  env.NIX_LDFLAGS = "-lXext";
 
   meta = {
     description = "Powerful and lightweight streaming engine specialized for voice/video telephony applications. Part of the Linphone project";
diff --git a/pkgs/applications/networking/instant-messengers/telegram/kotatogram-desktop/cstring-includes.patch b/pkgs/applications/networking/instant-messengers/telegram/kotatogram-desktop/cstring-includes.patch
new file mode 100644
index 000000000000..e334777ac14f
--- /dev/null
+++ b/pkgs/applications/networking/instant-messengers/telegram/kotatogram-desktop/cstring-includes.patch
@@ -0,0 +1,74 @@
+diff --git a/src/api/video/nv12_buffer.cc b/src/api/video/nv12_buffer.cc
+index ca9dcd867..89d28f23c 100644
+--- a/src/api/video/nv12_buffer.cc
++++ b/src/api/video/nv12_buffer.cc
+@@ -16,6 +16,8 @@
+ #include "third_party/libyuv/include/libyuv/convert.h"
+ #include "third_party/libyuv/include/libyuv/scale.h"
+
++#include <cstring>
++
+ namespace webrtc {
+
+ namespace {
+diff --git a/src/audio/utility/channel_mixer.cc b/src/audio/utility/channel_mixer.cc
+index 0f1e66387..33b771b0c 100644
+--- a/src/audio/utility/channel_mixer.cc
++++ b/src/audio/utility/channel_mixer.cc
+@@ -15,6 +15,8 @@
+ #include "rtc_base/logging.h"
+ #include "rtc_base/numerics/safe_conversions.h"
+
++#include <cstring>
++
+ namespace webrtc {
+
+ ChannelMixer::ChannelMixer(ChannelLayout input_layout,
+diff --git a/src/modules/audio_processing/aec3/alignment_mixer.cc b/src/modules/audio_processing/aec3/alignment_mixer.cc
+index 7f076dea8..ffd7242b5 100644
+--- a/src/modules/audio_processing/aec3/alignment_mixer.cc
++++ b/src/modules/audio_processing/aec3/alignment_mixer.cc
+@@ -10,6 +10,7 @@
+ #include "modules/audio_processing/aec3/alignment_mixer.h"
+
+ #include <algorithm>
++#include <cstring>
+
+ #include "rtc_base/checks.h"
+
+diff --git a/src/modules/desktop_capture/linux/wayland/shared_screencast_stream.cc b/src/modules/desktop_capture/linux/wayland/shared_screencast_stream.cc
+index 7ef1a030e..5b9ab7137 100644
+--- a/src/modules/desktop_capture/linux/wayland/shared_screencast_stream.cc
++++ b/src/modules/desktop_capture/linux/wayland/shared_screencast_stream.cc
+@@ -18,6 +18,7 @@
+ #include <spa/param/video/format-utils.h>
+ #include <sys/mman.h>
+
++#include <cstring>
+ #include <vector>
+
+ #include "absl/memory/memory.h"
+diff --git a/src/modules/video_coding/utility/ivf_file_reader.cc b/src/modules/video_coding/utility/ivf_file_reader.cc
+index 4c08ca613..f82f2bfcb 100644
+--- a/src/modules/video_coding/utility/ivf_file_reader.cc
++++ b/src/modules/video_coding/utility/ivf_file_reader.cc
+@@ -10,6 +10,7 @@
+
+ #include "modules/video_coding/utility/ivf_file_reader.h"
+
++#include <cstring>
+ #include <string>
+ #include <vector>
+
+diff --git a/src/net/dcsctp/packet/bounded_byte_writer.h b/src/net/dcsctp/packet/bounded_byte_writer.h
+index d754549e4..bf5e3ed42 100644
+--- a/src/net/dcsctp/packet/bounded_byte_writer.h
++++ b/src/net/dcsctp/packet/bounded_byte_writer.h
+@@ -12,6 +12,7 @@
+ #define NET_DCSCTP_PACKET_BOUNDED_BYTE_WRITER_H_
+
+ #include <algorithm>
++#include <cstring>
+
+ #include "api/array_view.h"
+ 
\ No newline at end of file
diff --git a/pkgs/applications/networking/instant-messengers/telegram/kotatogram-desktop/default.nix b/pkgs/applications/networking/instant-messengers/telegram/kotatogram-desktop/default.nix
index f0bcaf973496..bbad5d6cb030 100644
--- a/pkgs/applications/networking/instant-messengers/telegram/kotatogram-desktop/default.nix
+++ b/pkgs/applications/networking/instant-messengers/telegram/kotatogram-desktop/default.nix
@@ -31,6 +31,9 @@ let
     };
 
     patches = [
+      # fix build with latest glibc
+      # upstream PR: https://github.com/desktop-app/tg_owt/pull/172
+      ./cstring-includes.patch
       (fetchpatch {
         url = "https://webrtc.googlesource.com/src/+/e7d10047096880feb5e9846375f2da54aef91202%5E%21/?format=TEXT";
         decode = "base64 -d";
diff --git a/pkgs/applications/networking/mailreaders/thunderbird-bin/release_esr_sources.nix b/pkgs/applications/networking/mailreaders/thunderbird-bin/release_esr_sources.nix
index 3e2f43821d38..576fac8f59fc 100644
--- a/pkgs/applications/networking/mailreaders/thunderbird-bin/release_esr_sources.nix
+++ b/pkgs/applications/networking/mailreaders/thunderbird-bin/release_esr_sources.nix
@@ -1,1193 +1,1193 @@
 {
-  version = "140.8.1esr";
+  version = "140.9.0esr";
   sources = [
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/af/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/af/thunderbird-140.9.0esr.tar.xz";
       locale = "af";
       arch = "linux-x86_64";
-      sha256 = "a2a6df485c32d95b71ee287593214f6fe93feadf7cf76c04c9f0172652a21cdc";
+      sha256 = "5eb9a9ef1ec665446b1bcc8c0901d531c5bad67ae63f5ce81a517d04c4a56ce2";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/ar/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/ar/thunderbird-140.9.0esr.tar.xz";
       locale = "ar";
       arch = "linux-x86_64";
-      sha256 = "50bfb2f9a1a27ad63732a16a6d313a9444ff4c713b84a2ce242b1c17823d3453";
+      sha256 = "c13827632f7993dc86ee623bc3d3485ff769dcf237ee04b747b621fc3c2f23c7";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/ast/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/ast/thunderbird-140.9.0esr.tar.xz";
       locale = "ast";
       arch = "linux-x86_64";
-      sha256 = "5b423b640a278fdb381e112763e72a5f9707b49e6f009407a0a7a8a0a81f5242";
+      sha256 = "fbbb6510cae937593b185f8689f03da3c1d93edf824cfb2c598c88656aa74410";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/be/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/be/thunderbird-140.9.0esr.tar.xz";
       locale = "be";
       arch = "linux-x86_64";
-      sha256 = "3e496569f5f7119f3ec6283558e9c789d105148b7dec60b2cf665cdd9fdf9435";
+      sha256 = "ad27d566272d90eff2f650945826c5a71e943ad0f7059057cb8bd8ae1d9a30eb";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/bg/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/bg/thunderbird-140.9.0esr.tar.xz";
       locale = "bg";
       arch = "linux-x86_64";
-      sha256 = "31bed156742b5b9262366585854fa272af840f8487b613b13dd86727b2d95390";
+      sha256 = "7510e22126e1e59104f4b6f4aa0c4b27de029e95d530ea1312fd8a419c0eab97";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/br/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/br/thunderbird-140.9.0esr.tar.xz";
       locale = "br";
       arch = "linux-x86_64";
-      sha256 = "88380e0616d2d7934bf22eba46f19a64ea3bdfedda36a314cbfd5aaa8dbc8729";
+      sha256 = "b99a25b00d0ec92ce74fb172e957a011e1d8076b80700d3219ab3c1b52d18c81";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/ca/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/ca/thunderbird-140.9.0esr.tar.xz";
       locale = "ca";
       arch = "linux-x86_64";
-      sha256 = "7cbea4a762de5432bd2b61825cfe6fab2a942e3dc9ff4e0c814bc2759306cbd5";
+      sha256 = "fb66167fa3c186d81333b46f6af40f95a02030a031caf845295955654f2a2951";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/cak/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/cak/thunderbird-140.9.0esr.tar.xz";
       locale = "cak";
       arch = "linux-x86_64";
-      sha256 = "3c94e5d17e0368b6abdaa2c0b91dd111c1e2e16af55c7313a9eba8cd4ce2d6d6";
+      sha256 = "ccd60ea654ab4182223e74a3cc03ee82c275a0362e37f4e446a11b97b525077a";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/cs/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/cs/thunderbird-140.9.0esr.tar.xz";
       locale = "cs";
       arch = "linux-x86_64";
-      sha256 = "7d7c7b6e32c5989199eee307aa0816eec04a5e60e4d9d3129b5adfbde9dc5e75";
+      sha256 = "97d116d5712b02607e19cf65acc90ab9e4845b9596729d141f48a9a8dc6798d0";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/cy/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/cy/thunderbird-140.9.0esr.tar.xz";
       locale = "cy";
       arch = "linux-x86_64";
-      sha256 = "9d7931783730523e3cd194e714fd8daf5fac9cde314785c72951c5cc0b4fa9ec";
+      sha256 = "cd8ac250616e4f31407a1c30f30bf8132731bf934e011b623bf512d32d4c0e52";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/da/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/da/thunderbird-140.9.0esr.tar.xz";
       locale = "da";
       arch = "linux-x86_64";
-      sha256 = "ca5244d4a282d680d74faf6617af11d78a6f439fc778a7aada985bd704e15292";
+      sha256 = "02dad1cd08244571b8d1c609665cecacc16fe8c37f79b7189c8334bb9ac4231f";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/de/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/de/thunderbird-140.9.0esr.tar.xz";
       locale = "de";
       arch = "linux-x86_64";
-      sha256 = "997467027a0f6285000df0201b3877eb5519423e08d0701517d832321cd2e077";
+      sha256 = "c624bf5d8696cfa224439d739d5eac2f80ed29be309a52b027c7d73eb9cb8ec4";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/dsb/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/dsb/thunderbird-140.9.0esr.tar.xz";
       locale = "dsb";
       arch = "linux-x86_64";
-      sha256 = "785c88a25b3b86456e48e605707cdaf8e797560a45e9552c973a5a79ec7cd3cd";
+      sha256 = "c199014f070402516b1106b32e1a2094384ab55205fa533d66fae90adea571b2";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/el/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/el/thunderbird-140.9.0esr.tar.xz";
       locale = "el";
       arch = "linux-x86_64";
-      sha256 = "8c59e36dd60ee10a706a2014ce6e641470fe9860cbb26157d4c25b3bd4933149";
+      sha256 = "ddd4d8cda3c7d8d8c79436a57cd457c35e0707275b429d703c4a106f1851fca3";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/en-CA/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/en-CA/thunderbird-140.9.0esr.tar.xz";
       locale = "en-CA";
       arch = "linux-x86_64";
-      sha256 = "ac014e1627aec7ac848a858d917e778fcb9909408afbbc06e41bfda22cc74384";
+      sha256 = "a342e46b35116136e2c58f40a065a8292da045726ef078d19bb3f416d98fc22c";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/en-GB/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/en-GB/thunderbird-140.9.0esr.tar.xz";
       locale = "en-GB";
       arch = "linux-x86_64";
-      sha256 = "620850f83520d09e58926de3b2a706be940eb897df6f750f2d5ce4efbf929f65";
+      sha256 = "de2f8596d903d3f2fdbcf358810080618350979e987e9fd83272b80ea56cf9be";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/en-US/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/en-US/thunderbird-140.9.0esr.tar.xz";
       locale = "en-US";
       arch = "linux-x86_64";
-      sha256 = "d48bbaceb92350534dc609c68c94c202740a1166788fc6b9851ea634e6027cd1";
+      sha256 = "69832e7c311bff97b2b83a393d4c8ac15a0b0823aeb838a510e510a2ddeb6c45";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/es-AR/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/es-AR/thunderbird-140.9.0esr.tar.xz";
       locale = "es-AR";
       arch = "linux-x86_64";
-      sha256 = "e8ff0f9c3dabcf2d9d1721a38d9e7a2c947da4c964cf51ea71258535608e2a5e";
+      sha256 = "f01f5ba14f11f9418ec368ecc3b9cc6b03e5afee67d50eab03428d55a76724f4";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/es-ES/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/es-ES/thunderbird-140.9.0esr.tar.xz";
       locale = "es-ES";
       arch = "linux-x86_64";
-      sha256 = "694dbae11787f1930552d9dc1c8f4c1075fd92fe5ac4b225d90d5deb5b715563";
+      sha256 = "a6613d38c0e1092fd545b02875cfe2e0189da2e9cbc9d045f228f0546cd70fc4";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/es-MX/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/es-MX/thunderbird-140.9.0esr.tar.xz";
       locale = "es-MX";
       arch = "linux-x86_64";
-      sha256 = "8a4a9028f85c1798bc8e0a74d4094a5383d8fc433af485202d79852a819f81b7";
+      sha256 = "7acae9583b32a97297a8a9c5dba7244725d1e8035bac7d3c9410e361c1b5b748";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/et/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/et/thunderbird-140.9.0esr.tar.xz";
       locale = "et";
       arch = "linux-x86_64";
-      sha256 = "1f778eaac6c26b155407d68119d4b8c5b5568a0b7966cc24b1c073fbf3e7944b";
+      sha256 = "7113cf91c0cae1d30413b19e4320460aac226d14b1777b879024d2d9b0fb8fde";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/eu/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/eu/thunderbird-140.9.0esr.tar.xz";
       locale = "eu";
       arch = "linux-x86_64";
-      sha256 = "33f9d1cf56652d29402b4142973493c886ba9ce3a18b3dec9f9c01c9c907a276";
+      sha256 = "62403e8fd44872903b1cfea829f011ecee667da09bc211618a49df8a536c626a";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/fi/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/fi/thunderbird-140.9.0esr.tar.xz";
       locale = "fi";
       arch = "linux-x86_64";
-      sha256 = "23d1fe70727aac387e3599d2d87766b0b12ca80c02cf821a443bd4c81496358a";
+      sha256 = "521675713083958b93e3a5dea6e73d94f3ef49354748df1d05e7c0e3fb120c0c";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/fr/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/fr/thunderbird-140.9.0esr.tar.xz";
       locale = "fr";
       arch = "linux-x86_64";
-      sha256 = "986251b06821ca15d7d3902608d8d91f3b83128d1c0ef93e1420c47682f7783d";
+      sha256 = "5ed6df6c32b8beaa221150a970f584ae6a627a5a56f4c871d06562a20e6ff2da";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/fy-NL/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/fy-NL/thunderbird-140.9.0esr.tar.xz";
       locale = "fy-NL";
       arch = "linux-x86_64";
-      sha256 = "de17062530629435e748ac48e06c6500712bf430fdee08baa74e3fa63b7f2aab";
+      sha256 = "cb488ddbc7a4638b49900be4a87d36390f1464080bad56f79c9bdf165368e5ed";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/ga-IE/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/ga-IE/thunderbird-140.9.0esr.tar.xz";
       locale = "ga-IE";
       arch = "linux-x86_64";
-      sha256 = "76044251b1260a60dd79c92b74586be48eda9912eceb8c747ba92dc51b94cc44";
+      sha256 = "5883b06e99066b3b772fadfef3db017a0a2db05b69e4c4565845f1ce08db850b";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/gd/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/gd/thunderbird-140.9.0esr.tar.xz";
       locale = "gd";
       arch = "linux-x86_64";
-      sha256 = "005605b6fc16111393da1031498d9b90e5ed08e1832dc316f3175bd6b1eb328e";
+      sha256 = "c50b06e7fbb61e8242f396473b8ccbcb10b4c093beb03769da95a1bff75a1ca1";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/gl/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/gl/thunderbird-140.9.0esr.tar.xz";
       locale = "gl";
       arch = "linux-x86_64";
-      sha256 = "b82275a2782b5167d19681c64efa3957a15893490b9e068b0e0d48580ca5b1ac";
+      sha256 = "257ef806883b90be3ce4fc3097a6668c1683b013b35beeb51ec28add8efd62e9";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/he/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/he/thunderbird-140.9.0esr.tar.xz";
       locale = "he";
       arch = "linux-x86_64";
-      sha256 = "b19179490601c0acabb179b006e416dec59b0babfff37c9bfa3238ee512e8fb3";
+      sha256 = "9306cac21b22223bcc0545bcd6b60d3d7b9da396ff0775b0aecf723b54916383";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/hr/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/hr/thunderbird-140.9.0esr.tar.xz";
       locale = "hr";
       arch = "linux-x86_64";
-      sha256 = "7be2a453115375c5e2a4e46b7f6d7f809713df402cced9483958a3a1053d676f";
+      sha256 = "bb753ecd3ec91790a654d846f0abec7065df0c036b5d5e6ebcd4ecf3dec46c96";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/hsb/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/hsb/thunderbird-140.9.0esr.tar.xz";
       locale = "hsb";
       arch = "linux-x86_64";
-      sha256 = "c5879ff7416edc616c3bd1362046d0650bdb20444f8b4879c06808467c260432";
+      sha256 = "0a11a947085be1a865f7192c84ddbb3315a307545338e5b42f852cd553367999";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/hu/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/hu/thunderbird-140.9.0esr.tar.xz";
       locale = "hu";
       arch = "linux-x86_64";
-      sha256 = "0d007b516a9c09a6e48e734843df0093d6d9c92705b348feedfedd54972bd24f";
+      sha256 = "c903657c3dda7e437cff9ecc8374e02209fdca298dbbd7afe842bf57a18747cb";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/hy-AM/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/hy-AM/thunderbird-140.9.0esr.tar.xz";
       locale = "hy-AM";
       arch = "linux-x86_64";
-      sha256 = "1df90a34bca5232fb18b09fa825ac0b56f83ad61b188a80d0921c697bd04a0f7";
+      sha256 = "19fcd176d832ee44c217100e34f49299070d3abf276700bbc75e49e44627205f";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/id/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/id/thunderbird-140.9.0esr.tar.xz";
       locale = "id";
       arch = "linux-x86_64";
-      sha256 = "4d33d6dfc17dbbc5e0643060e355a5eeab3ada4265f95af260d5449b497fe5d4";
+      sha256 = "c48e5c940363555c5ddc062fcbfd622891ab5b6a22a0693e8be048719aeb950b";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/is/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/is/thunderbird-140.9.0esr.tar.xz";
       locale = "is";
       arch = "linux-x86_64";
-      sha256 = "acfb46eedaf02978d3cfb16c568183e70bc9c82dd662e8aa5783afb00a873c2a";
+      sha256 = "9fe9f07be88091fbbe9aedaf0da2d82b8b2e73bdd487b0f826170a64efd56406";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/it/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/it/thunderbird-140.9.0esr.tar.xz";
       locale = "it";
       arch = "linux-x86_64";
-      sha256 = "3f09a35bdd66b7606242139d2d34c9815f5abfc6d659c2909361e52ae8bd4dbb";
+      sha256 = "a72bbcddf5306f6282f885e63cb76fe6638926f365f4abeed18d506ca28e7b05";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/ja/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/ja/thunderbird-140.9.0esr.tar.xz";
       locale = "ja";
       arch = "linux-x86_64";
-      sha256 = "d4d818cc9e73be659770f847ec2f6f3945194e04ea676bd2f8219d19c94bc89f";
+      sha256 = "7d9992eb16abdf035470fa6f6c7cbfcef52ff37ff0e94b491358dbd968b65330";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/ka/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/ka/thunderbird-140.9.0esr.tar.xz";
       locale = "ka";
       arch = "linux-x86_64";
-      sha256 = "aacdb54a957b455910e2f68f684b8d5725b7232278d178247c7d3489f5fac1f1";
+      sha256 = "219acab4927417d4ebd0b6a0dfda9a19b91ebb6b71b8de77c2d86855dbdb652a";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/kab/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/kab/thunderbird-140.9.0esr.tar.xz";
       locale = "kab";
       arch = "linux-x86_64";
-      sha256 = "92d1fd4160f58fdd9130758d85f571047487b5cd78f7e384de98696e894ce831";
+      sha256 = "e087724d93e70498cfca0b167e6407db1890b29eb62f9543faf42525a3085ad2";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/kk/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/kk/thunderbird-140.9.0esr.tar.xz";
       locale = "kk";
       arch = "linux-x86_64";
-      sha256 = "1170c05c5868a304a9f8e83ff877a7ff467f6c9baa960bc92c259509f8e720df";
+      sha256 = "26f78fde3493db4e8fc7f1f9d0f1d901de984176f684dd3e1405198b1d581297";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/ko/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/ko/thunderbird-140.9.0esr.tar.xz";
       locale = "ko";
       arch = "linux-x86_64";
-      sha256 = "38cde1a5cb9b073ccd5288d9a3c0bc5215802fe464af82a5ee39aff51ef47c71";
+      sha256 = "05ea218a524485aec96ae6488732e4c8b850066f1f1030d99d51b9c3d0e55eeb";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/lt/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/lt/thunderbird-140.9.0esr.tar.xz";
       locale = "lt";
       arch = "linux-x86_64";
-      sha256 = "5edb4f92f780df623d0cf38762ca7b95f101fc1024a1d6dd31559fdfa0b9c418";
+      sha256 = "3d09f4ef2e889bc114452388325fe62376cf5c97e856d96a2696d7cdc30f70a2";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/lv/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/lv/thunderbird-140.9.0esr.tar.xz";
       locale = "lv";
       arch = "linux-x86_64";
-      sha256 = "958ee3279f68adcaeab5745ea0239b6d37904f6bb94bef4e01369e52d0c360fd";
+      sha256 = "c78182d9b437c5b070f6ba9abfcc0ec0d6e0214d18772c24d9703138fb2f75f1";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/ms/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/ms/thunderbird-140.9.0esr.tar.xz";
       locale = "ms";
       arch = "linux-x86_64";
-      sha256 = "8c5e1f53f4f8c0722999f410f41cada2e349753e314bd751e8a88e3dfa22070a";
+      sha256 = "531845ad39645363799db90331faf612c5ae3313e2418544dce6bd6e0da47cbc";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/nb-NO/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/nb-NO/thunderbird-140.9.0esr.tar.xz";
       locale = "nb-NO";
       arch = "linux-x86_64";
-      sha256 = "6202a8ec3e33e0256d3031ecc4d4bbbfeb89963a27f33b465ce1ea8c6b76792c";
+      sha256 = "4a0a76f5cac2757ea9429c57d18d77bfa006d35d160938a7d998107d3bf2066f";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/nl/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/nl/thunderbird-140.9.0esr.tar.xz";
       locale = "nl";
       arch = "linux-x86_64";
-      sha256 = "ea348f47896e87077819a7f45c9317ebba61d92f2ef50bfb29c70c5dd740a0f3";
+      sha256 = "b9b408baa807dc5315d0a244a59fb928004de0993feac8ee6b2b4b5e02cc1c48";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/nn-NO/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/nn-NO/thunderbird-140.9.0esr.tar.xz";
       locale = "nn-NO";
       arch = "linux-x86_64";
-      sha256 = "c02063b7160e0f8da26bbc45f55e6f4764cd2b07bf513bae234b2626d9a4b3cc";
+      sha256 = "9269a973bb9235f7a67dc35c102ef19d3b76c4eb21e6b971f6f9835dba5c29ac";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/pa-IN/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/pa-IN/thunderbird-140.9.0esr.tar.xz";
       locale = "pa-IN";
       arch = "linux-x86_64";
-      sha256 = "22e8f5d21ea31b1038a427ca2851bdf9ad4e76d61deeae747920c62497099980";
+      sha256 = "bb42a8d2a127f50e09ec7ababf0344fb40e8185418ef6bd90880cfb802f8e349";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/pl/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/pl/thunderbird-140.9.0esr.tar.xz";
       locale = "pl";
       arch = "linux-x86_64";
-      sha256 = "d6537c1069430250b320fcb4dcb156a3972764b9007600d80726b503a9760306";
+      sha256 = "1b9a3c5cda2dd31df0b84eae6666bb19cd2f47485844339359ff62affb196ced";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/pt-BR/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/pt-BR/thunderbird-140.9.0esr.tar.xz";
       locale = "pt-BR";
       arch = "linux-x86_64";
-      sha256 = "5214712c72d0039a0284939a9095ef2cf954c3a55ee593389da3448718999ae5";
+      sha256 = "e8464db805b335e931da3dec07e88ba82c8dd6c97ae3a8337c91301e2560542e";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/pt-PT/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/pt-PT/thunderbird-140.9.0esr.tar.xz";
       locale = "pt-PT";
       arch = "linux-x86_64";
-      sha256 = "b6be8071e73f474f15d1f97bb7eb0d4da8673984b4862faf6aa38ebe78c6421d";
+      sha256 = "150ddd7fa40fb40f86ff5a5605ded4839584c70b936431a275d1f9ea3c688269";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/rm/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/rm/thunderbird-140.9.0esr.tar.xz";
       locale = "rm";
       arch = "linux-x86_64";
-      sha256 = "f8ca0204f1883bfa141d31d6eee01fbadceb5309d186d60de0549e68ddafeff9";
+      sha256 = "fc3e463a5fd106b398bb4a3f15e408cabc265c0b57359053e0c21d375af2b6c9";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/ro/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/ro/thunderbird-140.9.0esr.tar.xz";
       locale = "ro";
       arch = "linux-x86_64";
-      sha256 = "3d17493752007080913a194adcd568718be9caf295d4b7dac0185268f2172ad0";
+      sha256 = "643977c984fa718c8f1455d70909fecf73b35a53ac049e2985c0f60ebc556aa8";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/ru/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/ru/thunderbird-140.9.0esr.tar.xz";
       locale = "ru";
       arch = "linux-x86_64";
-      sha256 = "e2e9b128d06430cf6154075a0876a0820d6f207dff351383e6c618da7d3b4d81";
+      sha256 = "448ff79983f1711bccd406e8528335b8329edd2beed98272da410cf71dc8c8e5";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/sk/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/sk/thunderbird-140.9.0esr.tar.xz";
       locale = "sk";
       arch = "linux-x86_64";
-      sha256 = "ce44fc03b38f31172e5319c6f82283127d122b5d08bf3c2d40ab354d096c9764";
+      sha256 = "84d8a2165f1ceb970fe49f8b0fef833abf340b9fdd000dbcdd74ac3a37cc0298";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/sl/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/sl/thunderbird-140.9.0esr.tar.xz";
       locale = "sl";
       arch = "linux-x86_64";
-      sha256 = "a924ec6cd3da033146a23705e8e860c53010c0dc41efa2f28156cc38430ba9af";
+      sha256 = "8b8832af203d40f59d68382af7bae5be6b9f870d59a1490af1fc1c39b3d34a1c";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/sq/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/sq/thunderbird-140.9.0esr.tar.xz";
       locale = "sq";
       arch = "linux-x86_64";
-      sha256 = "4da2f3b2dd7596ccaf7d4b00544110c4d2bc16799bc3a502f7ba916cb28a438b";
+      sha256 = "fef3ec0ebe13508802740809d4c3fe38be476868e19ae795a93ee5cf08053cb9";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/sr/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/sr/thunderbird-140.9.0esr.tar.xz";
       locale = "sr";
       arch = "linux-x86_64";
-      sha256 = "c7b5221bdb02be1f054820ffd3775e7a00fc2e60d4bf6c3d3ab9faceaf54ec67";
+      sha256 = "d5af15cd4c34ff9b8a0036a8a8091650113de39941b44a7421aac1e5e3789f20";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/sv-SE/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/sv-SE/thunderbird-140.9.0esr.tar.xz";
       locale = "sv-SE";
       arch = "linux-x86_64";
-      sha256 = "2acf672155f03b53613f9b2b399b441d92339995036542058c83bebe04b43fb7";
+      sha256 = "75a4514e052b0caa4e0a2ae648230a7477574e30f1b11da7b78cfb2af73e0184";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/th/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/th/thunderbird-140.9.0esr.tar.xz";
       locale = "th";
       arch = "linux-x86_64";
-      sha256 = "e27b9c5e20f9bcacd12b69973c4d04422c5b4f6334a6d4addfcff24729f1b6ff";
+      sha256 = "db591da8a158734556a05037add7a7c3a8897d8762646fff283da240cae27429";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/tr/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/tr/thunderbird-140.9.0esr.tar.xz";
       locale = "tr";
       arch = "linux-x86_64";
-      sha256 = "82074179d975bcff2975bb2c000de6f51cf00a2a603cb1253217f66ca4463055";
+      sha256 = "d580688b7b3a1c41c45c739612ec358d29c512611f907096100cedd0711a6a99";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/uk/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/uk/thunderbird-140.9.0esr.tar.xz";
       locale = "uk";
       arch = "linux-x86_64";
-      sha256 = "d0ce5add86c87ef4f97d0dd16a4a29f87eadf1266c225ec9190fd8c61faabe72";
+      sha256 = "3367186b517ea330337dabfc89506d34e39da97db8c1e2ce8c0ecb31edda1cba";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/uz/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/uz/thunderbird-140.9.0esr.tar.xz";
       locale = "uz";
       arch = "linux-x86_64";
-      sha256 = "33c343747528d6f4591f96af4894b1d85d62db6c3a552d691dcf9c2600f6c8b3";
+      sha256 = "e68776e9d92d13a65b1c333d47f173499a3c851a2a0fe01f5b6b4a0119077350";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/vi/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/vi/thunderbird-140.9.0esr.tar.xz";
       locale = "vi";
       arch = "linux-x86_64";
-      sha256 = "260ebc557c460796502b16e00789b6f53cdf073adc4f75533873eee2839ebfab";
+      sha256 = "91f00d33556d7317d70be4f2f565531a9359aa7ae761c7f3a396442c47d16025";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/zh-CN/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/zh-CN/thunderbird-140.9.0esr.tar.xz";
       locale = "zh-CN";
       arch = "linux-x86_64";
-      sha256 = "6a77b94e6adb10ff4d93c82a75419ce04e14e07c20784d6219080cd7c45dd68d";
+      sha256 = "c9fef874672569ce32f05a852122ed32bd89f834eda1a9b344380e0c77cdae05";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-x86_64/zh-TW/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-x86_64/zh-TW/thunderbird-140.9.0esr.tar.xz";
       locale = "zh-TW";
       arch = "linux-x86_64";
-      sha256 = "71502937adeb494e2b286b2131c2e113fa15048d3ae4cddf40e58d59af3d5959";
+      sha256 = "656118b3777f805edf38d9b71c4e056543bf0f7d8f80918456fbc98df356b6e5";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/af/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/af/thunderbird-140.9.0esr.tar.xz";
       locale = "af";
       arch = "linux-i686";
-      sha256 = "dd2ce21bc9dc5403e12154d3dad21e744854b68aaded45db08c641f7ed5a06bb";
+      sha256 = "6f325a9cf3b98c1ca78d77aec635e91a4502756857edc6fa61a19825da6e5af1";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/ar/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/ar/thunderbird-140.9.0esr.tar.xz";
       locale = "ar";
       arch = "linux-i686";
-      sha256 = "02159d0cca4d423f6eed40c9fd14c8e915603da639103dbfe8e4dacc408879d8";
+      sha256 = "73981c7aacb840d4a491ea9d7058b64dc0c3169e40098858a5af22dfa47b1e91";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/ast/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/ast/thunderbird-140.9.0esr.tar.xz";
       locale = "ast";
       arch = "linux-i686";
-      sha256 = "09465b0a97c99b2d87491238de0e1396064ea0ba2781d6ee0a1840b3855f9eeb";
+      sha256 = "119ac734bf984560296d4fc61e9c144fa1effed7830e47fcb93e3814646b2cef";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/be/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/be/thunderbird-140.9.0esr.tar.xz";
       locale = "be";
       arch = "linux-i686";
-      sha256 = "b49a44da05bc8e620c51c24785b25a6fe1c28dbaa1b3721e601fbc295ebd73d2";
+      sha256 = "a3ac94df2520a79eeb9bae624a8a6156a6dada079e9a39ddc98f10abf5439de0";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/bg/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/bg/thunderbird-140.9.0esr.tar.xz";
       locale = "bg";
       arch = "linux-i686";
-      sha256 = "2a540d4545536672778f8cc59ba05d954689c28a950bf3e815cd245c1f1ddfd1";
+      sha256 = "b2d4016eb85c4f9705cc766502972ae18f1a75c82b3bf3f47c720e26a11c8241";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/br/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/br/thunderbird-140.9.0esr.tar.xz";
       locale = "br";
       arch = "linux-i686";
-      sha256 = "e693e89b822320fc55db17c14fa464b2332c7a017db9008bd30802475de13c4e";
+      sha256 = "da6f483ed3cfcd70d213e3e9ae2e9e2dc0076a438251f6ced9de4a3611449840";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/ca/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/ca/thunderbird-140.9.0esr.tar.xz";
       locale = "ca";
       arch = "linux-i686";
-      sha256 = "e4d6536f3efa260a56188e2552df304feb3cd8668cfe50e580577d44610277a3";
+      sha256 = "7dab9f207fdd9ddc98b54bf6e35d0999a9367b495ea81e895aecf81b20ea4af9";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/cak/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/cak/thunderbird-140.9.0esr.tar.xz";
       locale = "cak";
       arch = "linux-i686";
-      sha256 = "325c6b1cb7730beb044750664a05b205260699631c899e37093d5be866e76a71";
+      sha256 = "4288d9f9d71bf1b4a455aba39a3f98ba50f84e656a7fc5df08a2b76248722449";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/cs/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/cs/thunderbird-140.9.0esr.tar.xz";
       locale = "cs";
       arch = "linux-i686";
-      sha256 = "1680ae1e599e627ddd7ce4dd9d21eefcb0879390dfc9c7d52c9dce84102d8607";
+      sha256 = "46abfededf97d68521f71c513008a2f560ed084b41e68932df2966250ac33074";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/cy/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/cy/thunderbird-140.9.0esr.tar.xz";
       locale = "cy";
       arch = "linux-i686";
-      sha256 = "f037c87d327cb5cdf476e977754c671a2b8eda9f895835a399c0c3a43ba4c1fe";
+      sha256 = "9e6a7e534dec3b6d85e51f65d01435023ac74fb42ddb8c8eea845a603728e3d7";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/da/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/da/thunderbird-140.9.0esr.tar.xz";
       locale = "da";
       arch = "linux-i686";
-      sha256 = "f6ee6e8d7a8058346894292a3bf4daa59c13ef07be0d875b6f8ed016a3e85f43";
+      sha256 = "f46505566bf62826efb87fb383e2131231293a5cd9963ba53cd1e0210ec74e97";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/de/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/de/thunderbird-140.9.0esr.tar.xz";
       locale = "de";
       arch = "linux-i686";
-      sha256 = "267d4117268074bf5e3c4b8ce2603204c5f22b83e1b6592b0c9acd670fe0f73e";
+      sha256 = "588d6404fdc9133006c261b9e65a983b40135d4b95b11ea933076913bcc66913";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/dsb/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/dsb/thunderbird-140.9.0esr.tar.xz";
       locale = "dsb";
       arch = "linux-i686";
-      sha256 = "e886e51b2e4b0659f1093b16fa19710f16895219f1e3ae5cadfb24097f810972";
+      sha256 = "cc28fbc37298809171576b2fc147270d9eb53d936aa13075ffb2156d164fd3ba";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/el/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/el/thunderbird-140.9.0esr.tar.xz";
       locale = "el";
       arch = "linux-i686";
-      sha256 = "a497fb0f4be8ebe738adee3510a74f5c8cefeb6935e7e6a54a049d16eb49991d";
+      sha256 = "82b41b0e01a1e719a09fe278b03f542408f14ae67059a06456614baf5dd6a4b9";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/en-CA/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/en-CA/thunderbird-140.9.0esr.tar.xz";
       locale = "en-CA";
       arch = "linux-i686";
-      sha256 = "ba8ce294c3836d57261192f378869ba03de9a1da08d5d0ce9f598dd15cdad75c";
+      sha256 = "2c7311960aea490919d5623caf615a320119610f44a0d7c6f8c03add99d7ade5";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/en-GB/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/en-GB/thunderbird-140.9.0esr.tar.xz";
       locale = "en-GB";
       arch = "linux-i686";
-      sha256 = "86dc258e8d9b78adcc2c090eb826bf6665415a9715f9f3b735ac0c7870c0c449";
+      sha256 = "aaf25d7d55dbc2ccb8f533c8d004c1665745ea8f1a447736dd41e9bdae0c9fad";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/en-US/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/en-US/thunderbird-140.9.0esr.tar.xz";
       locale = "en-US";
       arch = "linux-i686";
-      sha256 = "9a227eae275c99c794d5b47e947f2b50a45de8ff3b236f8849a9c45a7e70201e";
+      sha256 = "00a7d103fde65a1116916a6e0d96f958546e8f22757888c250a0ade91948f956";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/es-AR/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/es-AR/thunderbird-140.9.0esr.tar.xz";
       locale = "es-AR";
       arch = "linux-i686";
-      sha256 = "b390377508a512261901600f8c1e19ed7e3561ba087c8e55f541fe1269aa83b5";
+      sha256 = "6d015123ccc6474ff31d5d28560126c212da322a4886fe548f57a364b307d9de";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/es-ES/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/es-ES/thunderbird-140.9.0esr.tar.xz";
       locale = "es-ES";
       arch = "linux-i686";
-      sha256 = "208146545b34e6fe4c7b9cb2e1649430b6f2a29be31d9c4d8520c87e518a0d56";
+      sha256 = "05e5ba6aeca6d208c8b1f541dffc50433239c911290baa745de45877ed7710a4";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/es-MX/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/es-MX/thunderbird-140.9.0esr.tar.xz";
       locale = "es-MX";
       arch = "linux-i686";
-      sha256 = "f41948096e01d106629248d491e0db28aab3af5784782f8bb86e5f44f5125e2d";
+      sha256 = "09908059585acd6497df10c480fa0e9bb87ee40c1f02310de6f7ec274a97a3b2";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/et/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/et/thunderbird-140.9.0esr.tar.xz";
       locale = "et";
       arch = "linux-i686";
-      sha256 = "ca36fdc6af282939a9739d188299d96fcd260fcf43b1ba4ae00944974272b19f";
+      sha256 = "6f97c18d98b810f7d59787a9651c1bb4f17af8de44d77ca779d9c808092ec15e";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/eu/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/eu/thunderbird-140.9.0esr.tar.xz";
       locale = "eu";
       arch = "linux-i686";
-      sha256 = "f0221f2d636d63514931c9a94c05c34f3e49170941fc61d1c320a4b9563017f0";
+      sha256 = "3f8edbe0c6337e0ddfb081a40b0b55ea6b62c798a343e0209f7a8a835c59da96";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/fi/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/fi/thunderbird-140.9.0esr.tar.xz";
       locale = "fi";
       arch = "linux-i686";
-      sha256 = "d9d6888452b46a64156127909becf22646f8020cf793db4e8bfe420003c21f4f";
+      sha256 = "f58200c0d092b799964dac0422cde055315efc08dc1c68407b7c9e918ef8421b";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/fr/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/fr/thunderbird-140.9.0esr.tar.xz";
       locale = "fr";
       arch = "linux-i686";
-      sha256 = "e2aa7355f6b4265daf1928a8e629551361e36c17f420e72092a008f9291a9991";
+      sha256 = "3ef718ff981091c5ba110545d8fd0e0ba48b526daa9ab4390696fa6d8a936894";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/fy-NL/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/fy-NL/thunderbird-140.9.0esr.tar.xz";
       locale = "fy-NL";
       arch = "linux-i686";
-      sha256 = "50fc5df22a97d0b9e211dc77666464f6f70d50671c3e9fddd5417abb0260a632";
+      sha256 = "08a44970105487b61df5025e02f0c3d5c860af0b3dc12dfbeb79fe3fd6763378";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/ga-IE/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/ga-IE/thunderbird-140.9.0esr.tar.xz";
       locale = "ga-IE";
       arch = "linux-i686";
-      sha256 = "c758e488dd58db908e92c414a8a0793c7a9e93ecdd1ba91ee50a97425a9d0667";
+      sha256 = "575b98f3e2bec65bfdc1581870bfc404ec60512cd5755072d86f06b845f39a17";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/gd/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/gd/thunderbird-140.9.0esr.tar.xz";
       locale = "gd";
       arch = "linux-i686";
-      sha256 = "4cac68260c2dc303aa256d243991c11470b2d3148e8011d75d93740461a6068a";
+      sha256 = "6a41919c2b1c90376e62d5f50385de64f311607893c096b332c5c4125f1458b3";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/gl/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/gl/thunderbird-140.9.0esr.tar.xz";
       locale = "gl";
       arch = "linux-i686";
-      sha256 = "5ef339bb02d8af1d0ed6f57e7f7d4df109cba01721e25640b4aca2834d457137";
+      sha256 = "7781512b491dbb7d3a75e5bf87da486013be909a77c45b79cf14661add24b9d6";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/he/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/he/thunderbird-140.9.0esr.tar.xz";
       locale = "he";
       arch = "linux-i686";
-      sha256 = "22e0ffbd1e5b2ef89f7a9d15b5f63aa6417617b416bb1117d66a00061bdd6a12";
+      sha256 = "fd377ac4d1a33a5e96ca696ef19ad54594e930fb279554b65d82900f70f546c6";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/hr/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/hr/thunderbird-140.9.0esr.tar.xz";
       locale = "hr";
       arch = "linux-i686";
-      sha256 = "fdd33df5385967689f2236cf35fdd360bb12c81373fe1fef6b0e5332c0f41551";
+      sha256 = "c8f3c66c5acddd3f463e0832d786be22ffc6967270befd56d8bf4773363defe9";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/hsb/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/hsb/thunderbird-140.9.0esr.tar.xz";
       locale = "hsb";
       arch = "linux-i686";
-      sha256 = "79b389658e6dcd527bd814729d2c9924ea9ba03c4fbb98dc8b31812fc039d8fd";
+      sha256 = "06db9fdcc5ba660bcad54faf5c4396ef2819e2335f707aeed3e848ef94041c7d";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/hu/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/hu/thunderbird-140.9.0esr.tar.xz";
       locale = "hu";
       arch = "linux-i686";
-      sha256 = "39ee8595f5471924b3f2b7d8e9369d6e3e4e855279236796a47fc6790326f14b";
+      sha256 = "2c79ef974f81d3d7fb0ff91effe65a6a50310b1164f911dd33bc6da454fb022b";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/hy-AM/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/hy-AM/thunderbird-140.9.0esr.tar.xz";
       locale = "hy-AM";
       arch = "linux-i686";
-      sha256 = "801b71c019427b9be7a3f3128f61a834c4c07749b495d9aa39395a5d03201611";
+      sha256 = "aa363fb9a2e488002bb4dd10016d4776f536de29fd12a664af562285ceba01b6";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/id/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/id/thunderbird-140.9.0esr.tar.xz";
       locale = "id";
       arch = "linux-i686";
-      sha256 = "3e00d95d75feb55a0919aea3566cd683eb9be5bd1fcbf2e906c76fc5e68090d5";
+      sha256 = "5ac4733f419c1629feef0ff1bdc2a0d0940a704258b04b9dcebe20e1d8d069c4";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/is/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/is/thunderbird-140.9.0esr.tar.xz";
       locale = "is";
       arch = "linux-i686";
-      sha256 = "8d8c5cd3feb72cb2f902c894ec59e10bfca31b1f7c55692e08f1325a8fafd7e5";
+      sha256 = "b5f4fbce1982c79248a7c6c65ead3684c7da1534b987f27c33ab8bea1fb3ba4e";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/it/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/it/thunderbird-140.9.0esr.tar.xz";
       locale = "it";
       arch = "linux-i686";
-      sha256 = "de0705ace7da5a4a0008330b52b609170ba1c19c1724cfcebfad134012fb0311";
+      sha256 = "16c1232f30de7c5763c44e64b0e90b5d8c93ee97a0a27c5e78c81bfc6eb222c3";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/ja/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/ja/thunderbird-140.9.0esr.tar.xz";
       locale = "ja";
       arch = "linux-i686";
-      sha256 = "93393d07b9d772f74b0398a7abd6051c8d6bcbba15ea23e47af2bb5e96a80d35";
+      sha256 = "d15c2cf2d0b4678e6c78ac6116226d0be705d6e5c520144ef6dae4e3b9208572";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/ka/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/ka/thunderbird-140.9.0esr.tar.xz";
       locale = "ka";
       arch = "linux-i686";
-      sha256 = "1f445699e183952bc9279d3cf693e0745548d3408be244e72a88cc5f1f3b2582";
+      sha256 = "683d72343ebd8635d36b1264eeceb6b3de6e1dfcf9013804084b1b56658c0a9e";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/kab/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/kab/thunderbird-140.9.0esr.tar.xz";
       locale = "kab";
       arch = "linux-i686";
-      sha256 = "d734067cd10d77a25c0ace4eae18a207d7c39392e037529060bcaf5a8a385459";
+      sha256 = "d60cc3f324a494f8815c2765266b0512b03f893aff9a8ed2c6f9ca0227c3711f";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/kk/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/kk/thunderbird-140.9.0esr.tar.xz";
       locale = "kk";
       arch = "linux-i686";
-      sha256 = "2154456796c62f69a2605916acbf57936e07e234c8f7d4fa2d09ffb12cf6ded4";
+      sha256 = "2e7377d940521a87d8ed102d6a4d6ccf435df9328aea1c98bb4cc0bb1521702e";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/ko/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/ko/thunderbird-140.9.0esr.tar.xz";
       locale = "ko";
       arch = "linux-i686";
-      sha256 = "198c498b0b486a3f482dbccdbe3c70d870d5b38854df08e839e5107db601216f";
+      sha256 = "27fff0b61c881740042fba9ef27cd840bbc42a0c4820db5a1d88bae7d4b7b72a";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/lt/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/lt/thunderbird-140.9.0esr.tar.xz";
       locale = "lt";
       arch = "linux-i686";
-      sha256 = "a3efc8209a72816e801a899afa45cb2bcd937818c250f8bb6f736487581fff57";
+      sha256 = "823aa56a87470dc3062f031311d4c3dfd2ae096e088c1276bf139fed3dff643b";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/lv/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/lv/thunderbird-140.9.0esr.tar.xz";
       locale = "lv";
       arch = "linux-i686";
-      sha256 = "3d6158555cade4380eeab77a6d43524dd3ccd69c3e406d9ab4643b0811a941f4";
+      sha256 = "9c54d57f9b85ab6c0f223e7a586872eb6eff91340d2227c681a6ff216032cbfb";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/ms/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/ms/thunderbird-140.9.0esr.tar.xz";
       locale = "ms";
       arch = "linux-i686";
-      sha256 = "d0702fd04a9aeb69aef103a356116c5d5e6b9ea1f975837c82618bc985f5e080";
+      sha256 = "58377c64a6ca61999bbec8f88946ae95430e7c9502a9386635f57d3879913616";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/nb-NO/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/nb-NO/thunderbird-140.9.0esr.tar.xz";
       locale = "nb-NO";
       arch = "linux-i686";
-      sha256 = "206ac112df23f8648428781ec15a2a3d52adbab3b5d77e96f561a6e0f8940f50";
+      sha256 = "184be65c63676008c72ea483ab890c6439b17ee788df7167fa46d13babdbec7e";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/nl/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/nl/thunderbird-140.9.0esr.tar.xz";
       locale = "nl";
       arch = "linux-i686";
-      sha256 = "7b4e4b489dec23c1b4e28f96f9c4da33420e3889b5b83d3b79ae2425f720ce1c";
+      sha256 = "ecd7fa3b24de74c8d9da7a9c3514a5457c9a5b011d324bdd4791239a63790e0b";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/nn-NO/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/nn-NO/thunderbird-140.9.0esr.tar.xz";
       locale = "nn-NO";
       arch = "linux-i686";
-      sha256 = "3d51d481f1d4fe5d054360f4240065d69f7839b3102f7a702ace47cc84224035";
+      sha256 = "ddbc7de98ae02237e95387daebac814e2cdf6c013dd398ffdb6b3923af4a0f73";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/pa-IN/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/pa-IN/thunderbird-140.9.0esr.tar.xz";
       locale = "pa-IN";
       arch = "linux-i686";
-      sha256 = "18f18aa018e8a4b84ef45164eb6b49b9fff91dc66e96cc6bd1fc75ea54a352a0";
+      sha256 = "244a4cedf25d0a5ed7fbb61e907751296e38f52e4a7a375d607cad89ea00695b";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/pl/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/pl/thunderbird-140.9.0esr.tar.xz";
       locale = "pl";
       arch = "linux-i686";
-      sha256 = "64eaafe5466f17cf0de7fa9cdd18dea9aa213dc237f602e95353299429879195";
+      sha256 = "58e4cca14e79266a9b6cda09a3915fc0085dd696882306613e1997bf4660d3c3";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/pt-BR/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/pt-BR/thunderbird-140.9.0esr.tar.xz";
       locale = "pt-BR";
       arch = "linux-i686";
-      sha256 = "5a89f60fecc932c4fabbf61dd43d4a8e96687125a779dfd9a8fcc5e58451c751";
+      sha256 = "63d962bcca2b6d97db0be992fb29e803191b947343e0b07f56a04401355f61c6";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/pt-PT/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/pt-PT/thunderbird-140.9.0esr.tar.xz";
       locale = "pt-PT";
       arch = "linux-i686";
-      sha256 = "831a72e09575094b4df9ebc6abc2f5e77d17984a64f0a81ecffb5c37ed7b53d0";
+      sha256 = "0c21d300a72564aecab41ba6ad18af0692ea14467a2e148b0d66572c0c2fdaaa";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/rm/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/rm/thunderbird-140.9.0esr.tar.xz";
       locale = "rm";
       arch = "linux-i686";
-      sha256 = "b0b6df3c15f1fb111594ee69b0a67e971ffd41e0ebe5633e5c64f1767d1e3ba9";
+      sha256 = "ed8ee13a1e2a5060906b9d4b68e4576916e5c0a97229bac2acfc33badbeb4563";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/ro/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/ro/thunderbird-140.9.0esr.tar.xz";
       locale = "ro";
       arch = "linux-i686";
-      sha256 = "74dd89e782fc4ada8f70837e98171806cf8eb24500ef9d60946d65e6222c7649";
+      sha256 = "2681b757a0f04a0b90943a8cca0e04fd3912ce18eede828c87a3e09564e6b585";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/ru/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/ru/thunderbird-140.9.0esr.tar.xz";
       locale = "ru";
       arch = "linux-i686";
-      sha256 = "1323e8704c5ad8491c23c8399501dbc67ed545989b83043a1ca232ac03e8fff1";
+      sha256 = "85ac3904e14e385c3dbc39a8a3164172e4d2363c7896bd0f6bf7d56cd06ffea0";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/sk/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/sk/thunderbird-140.9.0esr.tar.xz";
       locale = "sk";
       arch = "linux-i686";
-      sha256 = "5b9b506699ac3cbbf6fbb271cd305882c8fa832aa70f52511ebf71bb3d4153dd";
+      sha256 = "3868d5319e126a11e60c5974eed9e909e61e4eafff5ae86385b7dc18116c0311";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/sl/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/sl/thunderbird-140.9.0esr.tar.xz";
       locale = "sl";
       arch = "linux-i686";
-      sha256 = "c00a5812a416d19e7f3afa0db0ec216b10c12a2903b311fee9c0b6213ce3ac59";
+      sha256 = "63333ebe861b7f227a31b4ab4a42a828adabcc3f199369a9c8009af990635629";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/sq/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/sq/thunderbird-140.9.0esr.tar.xz";
       locale = "sq";
       arch = "linux-i686";
-      sha256 = "f1ee8c8bfcc6fc180f295e7b37363225a1ed596b6c01876d994275286ee835cf";
+      sha256 = "c3d1cb9ad892ac374ef13ea092e212bac05da7fda0c87b6cd97d9cbd1a799988";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/sr/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/sr/thunderbird-140.9.0esr.tar.xz";
       locale = "sr";
       arch = "linux-i686";
-      sha256 = "0b7c3297b005736a0e52c08ccb54f8cf725c4154d5767bd4aca502e88ce1d7b1";
+      sha256 = "e656b140085c7727806f728ed71631fa040e4132db9635d8cf3d150c3f88bb36";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/sv-SE/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/sv-SE/thunderbird-140.9.0esr.tar.xz";
       locale = "sv-SE";
       arch = "linux-i686";
-      sha256 = "28885f0e6a78b85b8acbf2d040bb6405caa6701088a0742cb1197709918c38fb";
+      sha256 = "4b1d12a4c824bde251009c8af8d34bff0d6dde8d586442bc2d2086484a498bd5";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/th/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/th/thunderbird-140.9.0esr.tar.xz";
       locale = "th";
       arch = "linux-i686";
-      sha256 = "23645f57987965c5cd2c0128caea047be8495c727c8881a83f222bae4f00ff06";
+      sha256 = "f7e1431d783ef5a8c77d1b7b4ccd17f967ba49d5389be442ea152980efafb7c3";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/tr/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/tr/thunderbird-140.9.0esr.tar.xz";
       locale = "tr";
       arch = "linux-i686";
-      sha256 = "917b63e9193925ba99dffca41b769099af0829b87db23e6c576f4c3c55c3d986";
+      sha256 = "685f5fcae25b69929314391fbcd734d3df6a8d1f7ab7d0c1e01d4224c6a1a8a8";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/uk/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/uk/thunderbird-140.9.0esr.tar.xz";
       locale = "uk";
       arch = "linux-i686";
-      sha256 = "06f7f0d59e2979b215f3d430a9a347b48dfd491c0d68375c6a8a4564a9440f8d";
+      sha256 = "8eb825197956b6a50c044daf1381db33b867c3ede87d9adfcfe7bf6415c67a86";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/uz/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/uz/thunderbird-140.9.0esr.tar.xz";
       locale = "uz";
       arch = "linux-i686";
-      sha256 = "62e5bf272ed9b5870d4859368f0b69f76f94699f922b48de3993aee29db4efb0";
+      sha256 = "04dec68b7bd780cb7a2cca74ba746034aeba49fc19e67f83f25a7d22f267340f";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/vi/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/vi/thunderbird-140.9.0esr.tar.xz";
       locale = "vi";
       arch = "linux-i686";
-      sha256 = "efd59dfa5b3647d614decf11dbaf9319aeb3244ced0a5b576b8c8aa9191a14b7";
+      sha256 = "a97661547ec1064af40cae6fd8aeac59445ac4c814eb76713b7d736eae501120";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/zh-CN/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/zh-CN/thunderbird-140.9.0esr.tar.xz";
       locale = "zh-CN";
       arch = "linux-i686";
-      sha256 = "c832a30626941ed31a539a7271ec40848cffe5434a0bf667e9b86e2ba4658571";
+      sha256 = "6fcc181be58a6979413635d157bfe72048f40f552bb257378ac6c80b80a16866";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/linux-i686/zh-TW/thunderbird-140.8.1esr.tar.xz";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/linux-i686/zh-TW/thunderbird-140.9.0esr.tar.xz";
       locale = "zh-TW";
       arch = "linux-i686";
-      sha256 = "5abce6cbd19e6ebe40f709968f5104b539c503ae71122bff113a3e9f21fee1f6";
+      sha256 = "60f1cc1a25e90f6631e37861bebbe28731518b136888686ada861868bb9c0dcb";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/af/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/af/Thunderbird%20140.9.0esr.dmg";
       locale = "af";
       arch = "mac";
-      sha256 = "22624183fe0d9583227a4d6c549d96fafdcbc9f3bc3a3f4e5b6ad22629ccfac0";
+      sha256 = "f0004aa0a807219e21019f6069ad3e4e66cdf4698e495489d70791e8420ce864";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/ar/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/ar/Thunderbird%20140.9.0esr.dmg";
       locale = "ar";
       arch = "mac";
-      sha256 = "ce73adcba8b5651fec00e1b86f92b111db50d65a5a8306fc5b18b5e9aed965c1";
+      sha256 = "be3d111107c917c536e21808ac45aa9968907b819c6617996fac2a46e42dfee0";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/ast/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/ast/Thunderbird%20140.9.0esr.dmg";
       locale = "ast";
       arch = "mac";
-      sha256 = "63b51337df4e38cadd6cb1ee4d1bcfaee452a5627f3471d9851365bd4de6bbbd";
+      sha256 = "50f58767fa89f1b08377ff5205ca7f9e97965abbc938f2b1a55eac0f7a26711c";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/be/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/be/Thunderbird%20140.9.0esr.dmg";
       locale = "be";
       arch = "mac";
-      sha256 = "92934cdfb7562c3dcde41dc1911437db84a22592275fab6db853fbe0d434c7d0";
+      sha256 = "36cc81c97fa1ebb7741a11842b4f6e536314762ba9bf7d1095830f64595f3400";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/bg/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/bg/Thunderbird%20140.9.0esr.dmg";
       locale = "bg";
       arch = "mac";
-      sha256 = "35aba6bcec1186922b32251661a56fd66b8431ee406169ba107221969d490585";
+      sha256 = "13513e4c776ad721fe7b5204ba7aa6c27376dbd91e0b9919fbeb6e97cebf0b3a";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/br/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/br/Thunderbird%20140.9.0esr.dmg";
       locale = "br";
       arch = "mac";
-      sha256 = "71c3b7018a6731e86b0c94a1013beb736fa31ef9b5b35bd359d31539d4a7063c";
+      sha256 = "2775f182124d6be0fe70f64dec72b203b030f74b535b320cc14cf1d943579811";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/ca/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/ca/Thunderbird%20140.9.0esr.dmg";
       locale = "ca";
       arch = "mac";
-      sha256 = "0be8322568793c296025d4c345382b2ee0f58917fdcfac0aaf3ab8cac13a9e6b";
+      sha256 = "91c1db6abb94c01d85986dabb0a7a6891110fe77be9509634f7e22ce4d31eb3c";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/cak/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/cak/Thunderbird%20140.9.0esr.dmg";
       locale = "cak";
       arch = "mac";
-      sha256 = "3fcbe75b6796395784949a514bc3853a1d86a0b6de2be984c3c73550ec4d6dea";
+      sha256 = "67bdf6139cbf9491a96f7a90d4f24536968f6e46b4a963065781e99f0475d813";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/cs/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/cs/Thunderbird%20140.9.0esr.dmg";
       locale = "cs";
       arch = "mac";
-      sha256 = "b9a6022d702c4afa6c665d7690533ed4d9a7e58df86084af7fed49a824e53b79";
+      sha256 = "e7463a16aea636937a72a83ee8cf92a7e7588ddca5732591aeb4cbce395f06dc";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/cy/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/cy/Thunderbird%20140.9.0esr.dmg";
       locale = "cy";
       arch = "mac";
-      sha256 = "d7eebea983b2110a91fd74791ab2591255564250a336d72b32b0ec9d71255dc4";
+      sha256 = "ebb796b00dfa4cc0a04e72dd08ee64fc74c33ebf0496a1b2fd7dd839118e54e6";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/da/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/da/Thunderbird%20140.9.0esr.dmg";
       locale = "da";
       arch = "mac";
-      sha256 = "d75e6dceb07a890ca71229541603320f8c07f4aed11032ba64fe19a0ff2bb4ee";
+      sha256 = "4b00a56583dc4fc1c34d6b4afdae17e22c3d36a0b6d7e8ff76ee9fae7bfc4098";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/de/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/de/Thunderbird%20140.9.0esr.dmg";
       locale = "de";
       arch = "mac";
-      sha256 = "97ea7be853fe85d87f8230d4db966a20aa3f570963cc4bdaef088b15f2293906";
+      sha256 = "506688a60636fecaf11d2513fe466a9e9ccf703ca3cfeef8c0b490dc02d66057";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/dsb/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/dsb/Thunderbird%20140.9.0esr.dmg";
       locale = "dsb";
       arch = "mac";
-      sha256 = "b2c9f248dcbaa4b82c0a6fb8367437fce280dc338bfce7441ab1ee295a9ebc1e";
+      sha256 = "f1c93f9af36e2825a34d97d64fcac400f80b8d3165009c339348609706ef1f47";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/el/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/el/Thunderbird%20140.9.0esr.dmg";
       locale = "el";
       arch = "mac";
-      sha256 = "e2739ec67f2e088a3bf65916a58fc92686dff4aeec8a7af06af98a8cb06cff29";
+      sha256 = "cb1d5949301699f7ad642a1ef40202c106d8648428b1891a29d47f4255cbd4ad";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/en-CA/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/en-CA/Thunderbird%20140.9.0esr.dmg";
       locale = "en-CA";
       arch = "mac";
-      sha256 = "e4e9e100a5d7cfd17caed84fd76a16817b6776698438c88b0299a7050bb48157";
+      sha256 = "677d31cf97706b6c38c84a212bd9c2540a0a2f86596e1f57aa5b24dce5bac104";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/en-GB/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/en-GB/Thunderbird%20140.9.0esr.dmg";
       locale = "en-GB";
       arch = "mac";
-      sha256 = "99a4f3d1bc162eb98f4d685f1508157a59daab954f8a3103d5b2b2db20f41969";
+      sha256 = "1fea91956744ae218e4acbe36c336528dc3aee503f3e93b56bcff8d72e79cf43";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/en-US/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/en-US/Thunderbird%20140.9.0esr.dmg";
       locale = "en-US";
       arch = "mac";
-      sha256 = "41eee241cdb2405ead4feb5e676917eb40e54446e3e5db4d090a75d80465c805";
+      sha256 = "b4bbf6c578dcec9e06f2f70267eb80167ed71442d71150751d04551201484df0";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/es-AR/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/es-AR/Thunderbird%20140.9.0esr.dmg";
       locale = "es-AR";
       arch = "mac";
-      sha256 = "680f8109aa6728a95e66b3eaf6eb20d17d3d62378d9ac75289aa4bc2935df55c";
+      sha256 = "6b2edd16da211c7c5c0f4dd54a7d031c021abb1e283ac630626c70048a6aa97d";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/es-ES/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/es-ES/Thunderbird%20140.9.0esr.dmg";
       locale = "es-ES";
       arch = "mac";
-      sha256 = "7536b48665d16a9ebbb7f687532b97bd08787e0978129923c6a9dd0bf52bd864";
+      sha256 = "0c4a539036a30e4ad636025e4e0249f31b54772cd572e1e639c5be7339f8da63";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/es-MX/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/es-MX/Thunderbird%20140.9.0esr.dmg";
       locale = "es-MX";
       arch = "mac";
-      sha256 = "5c8342b68e8a2afd6f370c9991bc29b6ccb9024e22af638a1fbfb0afd6ed5fd9";
+      sha256 = "af94ad2e280cc875ed211d9d3143dbcd59529f4e70e081e0c1c019bc4031a763";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/et/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/et/Thunderbird%20140.9.0esr.dmg";
       locale = "et";
       arch = "mac";
-      sha256 = "ed4beec98b1945c044cadca494f98819298cc533f656a2f4f6116f037cb18e62";
+      sha256 = "f30a0a48a7f3abb76c020d276da0dd929fef43b5e707079efa2cc1e38cd51851";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/eu/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/eu/Thunderbird%20140.9.0esr.dmg";
       locale = "eu";
       arch = "mac";
-      sha256 = "2d377cac10a089d2fa2dba8452f92f1185d485076e910159b2497c2739d79eb6";
+      sha256 = "0b61c6b290a29e9f8abdba00b7831465e4e84ae86548e9120d8412d70a6e2a9a";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/fi/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/fi/Thunderbird%20140.9.0esr.dmg";
       locale = "fi";
       arch = "mac";
-      sha256 = "0f6886d531719c0cb68b318e87435a0b3c67ee2acf239a13ac055ae11c199545";
+      sha256 = "0599e4834b2506133af0dccf005e7dad52f319c4a265c10265eacb236643e289";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/fr/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/fr/Thunderbird%20140.9.0esr.dmg";
       locale = "fr";
       arch = "mac";
-      sha256 = "cf27acf21cc6c3e9589de2ad88311643841c4e8ab01f97dceb385e17106b11f0";
+      sha256 = "aaff870e57c22974325bafb1f085bc5bb105c37734a1464136b77224a47f2032";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/fy-NL/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/fy-NL/Thunderbird%20140.9.0esr.dmg";
       locale = "fy-NL";
       arch = "mac";
-      sha256 = "3fe1aa3cd3a0880523f150d7df017edeaabf1725258942aa7fead373e9044173";
+      sha256 = "9fe0b6de90341ed4545495d1938f69e87ba1b052e6c389b437cae40baf14c49c";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/ga-IE/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/ga-IE/Thunderbird%20140.9.0esr.dmg";
       locale = "ga-IE";
       arch = "mac";
-      sha256 = "2e072cb4b589f7451626f6de5d2fffb4bab34e73d812b94a09be322833c9a0c1";
+      sha256 = "1aeb435f85f19e071adec3c435a2d8ccd84c5e8ccd186526289fc0e842014104";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/gd/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/gd/Thunderbird%20140.9.0esr.dmg";
       locale = "gd";
       arch = "mac";
-      sha256 = "b78a50e4ab1ed8fd1a46463f304c31307236a123ee8b8c64353358a371ac6f86";
+      sha256 = "2631b994f7777758c9a217f63eb20cad9977ebaa26634aaf6a59b598746ed0ef";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/gl/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/gl/Thunderbird%20140.9.0esr.dmg";
       locale = "gl";
       arch = "mac";
-      sha256 = "3d3034ad6e406318d5cfe7fcf1e46c0cefe0721892761667472ef4920dd7be78";
+      sha256 = "2fb2e540c9a8f895b608ad5d5e2b27ab8e2c1137753e976d40907c22fd5f59a7";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/he/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/he/Thunderbird%20140.9.0esr.dmg";
       locale = "he";
       arch = "mac";
-      sha256 = "8eb920c4c7c91e7655d9b614e8a710a0d9087229183b96e9c028a93c5df23f83";
+      sha256 = "181b527a9e13486a4347638363b762916b04d7332de11806101bd93d9d59907e";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/hr/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/hr/Thunderbird%20140.9.0esr.dmg";
       locale = "hr";
       arch = "mac";
-      sha256 = "e4637fb9397b5c642448e43089583add717e8052be3ad7d8d5f07f156b95d41a";
+      sha256 = "6cb415ec2409c99c4dcc49c9e62c5116cbe6dfc942b812b4c6f279b8c1314f14";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/hsb/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/hsb/Thunderbird%20140.9.0esr.dmg";
       locale = "hsb";
       arch = "mac";
-      sha256 = "1a752d30f6e0509338bc85b371109cc722e92f7c489c263b31263ab5ac26b8cc";
+      sha256 = "1c4327c78269d1962030976e1c1f40c5b8ca70845a30cf2001c980c8765c2511";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/hu/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/hu/Thunderbird%20140.9.0esr.dmg";
       locale = "hu";
       arch = "mac";
-      sha256 = "ba75bef3a72a04511676be8074c8d00b7c9317418fae22b35455deb1234de904";
+      sha256 = "0ab305f0900b7b80a727de02d31ca4c8de0d429c3b0dbff6ed2c740ac006e06f";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/hy-AM/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/hy-AM/Thunderbird%20140.9.0esr.dmg";
       locale = "hy-AM";
       arch = "mac";
-      sha256 = "df202a70c7e6b0d59beb6095f61be4d74e9873b7222946ba3aba8845a991d60c";
+      sha256 = "d3cf3d8d988a3d38925365236f62c2e341689f05dc597ce1bdf42f5cc381c2c7";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/id/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/id/Thunderbird%20140.9.0esr.dmg";
       locale = "id";
       arch = "mac";
-      sha256 = "94f83da8e9676af52b8711e7cd48575e520d8ce61063c86da27919c504cb6043";
+      sha256 = "4e14f7ffd00d684daf37d0fad3a0fdefdba57b2f16c29e8493379ac4e02ca1ff";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/is/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/is/Thunderbird%20140.9.0esr.dmg";
       locale = "is";
       arch = "mac";
-      sha256 = "69b101515450ecb6e50d83c2f9f71f405b28002ad7b64a2c569a798c83bd9468";
+      sha256 = "46a49595ef17517f2bfa213d84e2e6e0f71121e99f6bfdc58fd40303220d9f0e";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/it/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/it/Thunderbird%20140.9.0esr.dmg";
       locale = "it";
       arch = "mac";
-      sha256 = "cfc5960fc923a483105a0e3e53fc5802853dee61a4a9a392314efc80e0e13360";
+      sha256 = "0c1a1b4742198f70bad5f06b36128d168f093675fdc55e519983bbb0ada21563";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/ja-JP-mac/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/ja-JP-mac/Thunderbird%20140.9.0esr.dmg";
       locale = "ja-JP-mac";
       arch = "mac";
-      sha256 = "9eb1f856f59b676e7cf0b7acf243fbf5c3dd29098692d07d0e9eb7bbc89b9110";
+      sha256 = "daad3c5cd8b170b1c81e18451a5c824e04933635781696dc611e9f2b34688aeb";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/ka/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/ka/Thunderbird%20140.9.0esr.dmg";
       locale = "ka";
       arch = "mac";
-      sha256 = "20c809d40bb46918356ca1e4f7301ae94a6007ea83043830fd23c8b628c73b39";
+      sha256 = "0cd0bd3195d5a50c1f89dc264f9ed9950a5186c13e4aeff7b3fbda3f871def93";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/kab/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/kab/Thunderbird%20140.9.0esr.dmg";
       locale = "kab";
       arch = "mac";
-      sha256 = "a27545751025fe7835bcbf8759dcb7849b50d2bb783f54543850655602d6fc84";
+      sha256 = "94d482bd397f207c4d43544b41198a00e15c4a458d6c38e37bb6913415788259";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/kk/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/kk/Thunderbird%20140.9.0esr.dmg";
       locale = "kk";
       arch = "mac";
-      sha256 = "2a74af790469d3da851798b99d2f9f1f31a942f6683e63d148ba8fa9e7397808";
+      sha256 = "b7a16499c976ee02eacade8d5f0729231fa9ed0ea07c5c1d4bdf2a4c8615243b";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/ko/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/ko/Thunderbird%20140.9.0esr.dmg";
       locale = "ko";
       arch = "mac";
-      sha256 = "0cf9cbe7eb0a365358eb618d41ec234a2ce8a8674ebc6fe3b40a6857a13daba6";
+      sha256 = "74aed9b76f4ea924ee489d8c988644372621a15e9c003739ace0c79a9ee73afd";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/lt/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/lt/Thunderbird%20140.9.0esr.dmg";
       locale = "lt";
       arch = "mac";
-      sha256 = "3ea725b28229d2f07e1fe0daf42b8fcbda860561ca8d1c62433e450a40887db7";
+      sha256 = "2763bf1e55eae72e1677f6adcdc4eddd6393df2bd9712bbccaeaaa142f4bbd76";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/lv/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/lv/Thunderbird%20140.9.0esr.dmg";
       locale = "lv";
       arch = "mac";
-      sha256 = "01c8d2b9af2dba50b207eb7e62924f5a521a45bafde4e6b6a4110d9d7d28e170";
+      sha256 = "418aa2f935cb3e3ffc9f00ebd47d6d7d78f716b3185abc98a42cfa48ee2ce004";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/ms/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/ms/Thunderbird%20140.9.0esr.dmg";
       locale = "ms";
       arch = "mac";
-      sha256 = "aa686dd27733ad308af292a25b141a70174ff2cd09472d29e6280afd0d8533c5";
+      sha256 = "3b443332c6c685a57fec139c388dec9c5ca5b37f17f76d823a51964615337b1a";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/nb-NO/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/nb-NO/Thunderbird%20140.9.0esr.dmg";
       locale = "nb-NO";
       arch = "mac";
-      sha256 = "519b5f2075ef5b8f444abb3c0e0e09620299451703c5f549c2b782493e647251";
+      sha256 = "c2b956faa3f6900069b0159012e97f4ab840593cb08628aa77d7029f69a50fe0";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/nl/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/nl/Thunderbird%20140.9.0esr.dmg";
       locale = "nl";
       arch = "mac";
-      sha256 = "13e3db19da765d62839c72dc2032de1c9e2af2995857df7b5c11128ddc3fdca7";
+      sha256 = "1d3f0ca741abb899cc05a503698959f0764bad151848dc0abc71b12e3911a557";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/nn-NO/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/nn-NO/Thunderbird%20140.9.0esr.dmg";
       locale = "nn-NO";
       arch = "mac";
-      sha256 = "1e0b1965fb8dc9985472a960237492e52d09f9f54b1d9f01f467e2ff3653f764";
+      sha256 = "5541737c316aea93a0859604daf66e5dd1f4cf15a160a354148978108feb2e86";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/pa-IN/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/pa-IN/Thunderbird%20140.9.0esr.dmg";
       locale = "pa-IN";
       arch = "mac";
-      sha256 = "1c1fbdc3a8a58b2983a1e61afde4c1f3c82baace71ba3e34891acbad4d83089c";
+      sha256 = "46bab8449da19ee293d435fba5f45568f55c5f288645f8a6c50dc7a974ca542a";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/pl/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/pl/Thunderbird%20140.9.0esr.dmg";
       locale = "pl";
       arch = "mac";
-      sha256 = "9a0e1f2a232c20d9ef5abf8b8d081e9173f9b600fdfc80aaef1961c6ce5cb494";
+      sha256 = "1e904b2ec245e8522a85daca37b5d6f521cdcbfecaceb7d36b69fe53d4c1976c";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/pt-BR/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/pt-BR/Thunderbird%20140.9.0esr.dmg";
       locale = "pt-BR";
       arch = "mac";
-      sha256 = "bdef886cdf12eeca3a8d12162de97320594abed7c27b26ff4a80232a802c0bb3";
+      sha256 = "efedd2423a32a9b852351a89c1f61b0777d15fa3acdb4e45c89d5247b7391974";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/pt-PT/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/pt-PT/Thunderbird%20140.9.0esr.dmg";
       locale = "pt-PT";
       arch = "mac";
-      sha256 = "05857f22c10c2da4b88e93d1d30e8fc2f8ec6c56a3653e809e9f22fcfb7e206c";
+      sha256 = "18f9f2a0f62421e12bdf2ddc58655242f781870046fd243bfbf342a1303fc690";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/rm/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/rm/Thunderbird%20140.9.0esr.dmg";
       locale = "rm";
       arch = "mac";
-      sha256 = "1983dd10fc1437b68d3ba347287f889354ed848ceda3374e0c91cb8771bebe19";
+      sha256 = "53ed3c639631ad41f8fecbcc25ce029e36ee3206261e5963ce4c7293704f69a2";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/ro/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/ro/Thunderbird%20140.9.0esr.dmg";
       locale = "ro";
       arch = "mac";
-      sha256 = "fed16aef5cdc3fe07b90e85a2e988179e1059225b7a4a8a9d514fe80f5970041";
+      sha256 = "d8e512148a3bdbf1c1c6213ed189dd9323e882fd69814afe042672958a4132aa";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/ru/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/ru/Thunderbird%20140.9.0esr.dmg";
       locale = "ru";
       arch = "mac";
-      sha256 = "d34428fbe71cf813635490ffa8b06660a485eb4e3e9b28083bdfcca511d21b0a";
+      sha256 = "1615b96d8e430604ce72ddbb3e3698c864a9fd8bb6d86fe1b7315f4ff9841e62";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/sk/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/sk/Thunderbird%20140.9.0esr.dmg";
       locale = "sk";
       arch = "mac";
-      sha256 = "a475eed733592d48adb3287092f58333bf83d0e9ddd8165c0f2bab8b904d3989";
+      sha256 = "3a2c344f7fe47b4a107fbc4d91453e32888b2f1cd19bbeb10edbf269e11f16a3";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/sl/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/sl/Thunderbird%20140.9.0esr.dmg";
       locale = "sl";
       arch = "mac";
-      sha256 = "42c481c28b5b37ab6b1291804a61c6ba6579d09a405fe38782eb6e38ad67e80a";
+      sha256 = "343b3f3083d90e3af69b868cdeb2838f253eb15620391bcbfd056f1cc8e4abea";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/sq/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/sq/Thunderbird%20140.9.0esr.dmg";
       locale = "sq";
       arch = "mac";
-      sha256 = "b75b09a20c9160c88205d777201ff454ec09725bc184e8e4c44ac3c3db113553";
+      sha256 = "a5bdf5c95daf295a69efc5d10712dfe415fa1789600e8ce5e40293808f0f125b";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/sr/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/sr/Thunderbird%20140.9.0esr.dmg";
       locale = "sr";
       arch = "mac";
-      sha256 = "6e22260916ff863ec0b4b3ada5ce49e74fda15195c14cc2ac96871b9dbbfdf3a";
+      sha256 = "d55fe916c462d53a487f18e678081a93dae399aee6287e0a71626cbdf63c9830";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/sv-SE/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/sv-SE/Thunderbird%20140.9.0esr.dmg";
       locale = "sv-SE";
       arch = "mac";
-      sha256 = "bdf06df7ba37813e9e5357eeec2b62e21cee79fd5aef34b7766b6a942e629a2d";
+      sha256 = "a3d27f1adc9dd669fcb3d3b723f19a345af724d58313f673909c3f10c15b7dc3";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/th/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/th/Thunderbird%20140.9.0esr.dmg";
       locale = "th";
       arch = "mac";
-      sha256 = "8a34f2219e3380292760f877f2f8587662b433083bfd0f9d9c23cbdf58c85f7d";
+      sha256 = "6fa301645d35cad9005c89e382cf835ce14e4e16b21a14975ca5ee8bcd5fef7f";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/tr/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/tr/Thunderbird%20140.9.0esr.dmg";
       locale = "tr";
       arch = "mac";
-      sha256 = "bd903e7f5d23b77177d6e0f4b76be2f7d9cf96f33c098da44c0a0b703208aa8d";
+      sha256 = "f1e25d069a0abc2739d840e55dedc21381c336f2b33eb79a79162c279535a666";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/uk/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/uk/Thunderbird%20140.9.0esr.dmg";
       locale = "uk";
       arch = "mac";
-      sha256 = "887f8aad21bd50f6a6e3c8f1a66550a8e8561ba8e92e9ab2933c93cf6bb8be16";
+      sha256 = "64f0437ddaf063b212326f940114ae5c5a93af24126fbf1a85edf9f0c9f81dd5";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/uz/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/uz/Thunderbird%20140.9.0esr.dmg";
       locale = "uz";
       arch = "mac";
-      sha256 = "682a92f644c0bd50b6c614de0539c582faccf74a3052bd7810a2408cb7eecc09";
+      sha256 = "884bfbc9fbf55943ae5756e11eb735a98332f10029eafeb45f569fe16d166217";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/vi/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/vi/Thunderbird%20140.9.0esr.dmg";
       locale = "vi";
       arch = "mac";
-      sha256 = "9031ccf53c39a3b93ba07a080f864f09884122b0051ed9c0f58f99aa1663d51a";
+      sha256 = "4584b4388ae2030ea59646e65bc5bc622d6184c8ba0276b1e9805cf52f4e56a7";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/zh-CN/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/zh-CN/Thunderbird%20140.9.0esr.dmg";
       locale = "zh-CN";
       arch = "mac";
-      sha256 = "16aabcfbd2351429b509090894798c5fa2f6988acbcdda7cf8fc5de1a8219a82";
+      sha256 = "174172e128bf4bd67e5d01e5e9f6a264f6f4c5bb8b5edb50cc8ccca23629f29e";
     }
     {
-      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.8.1esr/mac/zh-TW/Thunderbird%20140.8.1esr.dmg";
+      url = "https://archive.mozilla.org/pub/thunderbird/releases/140.9.0esr/mac/zh-TW/Thunderbird%20140.9.0esr.dmg";
       locale = "zh-TW";
       arch = "mac";
-      sha256 = "c6de157bc45d6be2e342ddaadc8a6e24d0c61408db8c4070ff3017d4821c09d2";
+      sha256 = "230780e756d59f2c1b7244d374f83f5f724a77750d1b7edf9c67236a7644003d";
     }
   ];
 }
diff --git a/pkgs/applications/networking/syncthing/default.nix b/pkgs/applications/networking/syncthing/default.nix
index f41cd2b75748..e9c3104bbfa0 100644
--- a/pkgs/applications/networking/syncthing/default.nix
+++ b/pkgs/applications/networking/syncthing/default.nix
@@ -19,16 +19,16 @@ let
     }:
     buildGoModule rec {
       pname = stname;
-      version = "2.0.12";
+      version = "2.0.15";
 
       src = fetchFromGitHub {
         owner = "syncthing";
         repo = "syncthing";
         tag = "v${version}";
-        hash = "sha256-bWClKODxzcSbKiKFcgDKbRGih8KaSeVpltiFDAE8sHM=";
+        hash = "sha256-v77ovjV+UoCRA1GteP+HDqC8dsRvtOhFX/IkSgSIf8Y=";
       };
 
-      vendorHash = "sha256-Xiod2Bd+uXcOpZ0rt8my8jkNdkdUhuoz5fcce+6JMXY=";
+      vendorHash = "sha256-boYTLgvH+iWlh3y3Z0LPvSVGEget3X94AthtJKphhCw=";
 
       nativeBuildInputs = lib.optionals stdenv.hostPlatform.isDarwin [
         # Recent versions of macOS seem to require binaries to be signed when
diff --git a/pkgs/applications/video/kodi/addons/keymap/default.nix b/pkgs/applications/video/kodi/addons/keymap/default.nix
index c3209089ae62..c6b81abf22cf 100644
--- a/pkgs/applications/video/kodi/addons/keymap/default.nix
+++ b/pkgs/applications/video/kodi/addons/keymap/default.nix
@@ -11,11 +11,11 @@
 buildKodiAddon rec {
   pname = "keymap";
   namespace = "script.keymap";
-  version = "1.3.2";
+  version = "1.4.0";
 
   src = fetchzip {
     url = "https://mirrors.kodi.tv/addons/${lib.toLower rel}/${namespace}/${namespace}-${version}.zip";
-    sha256 = "sha256-y9bREG1fGY6TJYW4xMUBbsAp6DSzb78tY1+iyUrGjgQ=";
+    sha256 = "sha256-sbyI6ZK8HvXgMxNDtm2Tb/ub93IcdXB5PSdxoL+QIqU=";
   };
 
   propagatedBuildInputs = [
diff --git a/pkgs/applications/virtualization/virtualbox/guest-additions/default.nix b/pkgs/applications/virtualization/virtualbox/guest-additions/default.nix
index 5661ff4e0848..dbbf03daf408 100644
--- a/pkgs/applications/virtualization/virtualbox/guest-additions/default.nix
+++ b/pkgs/applications/virtualization/virtualbox/guest-additions/default.nix
@@ -76,12 +76,17 @@ stdenv.mkDerivation {
   src = "${virtualBoxNixGuestAdditionsBuilder}/VBoxGuestAdditions-${platform}.tar.bz2";
   sourceRoot = ".";
 
-  KERN_DIR = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build";
-  KERN_INCL = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/source/include";
-
   hardeningDisable = [ "pic" ];
 
-  env.NIX_CFLAGS_COMPILE = "-Wno-error=incompatible-pointer-types -Wno-error=implicit-function-declaration";
+  env = {
+    NIX_CFLAGS_COMPILE = toString [
+      "-Wno-error=incompatible-pointer-types"
+      "-Wno-error=implicit-function-declaration"
+    ];
+
+    KERN_DIR = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build";
+    KERN_INCL = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/source/include";
+  };
 
   nativeBuildInputs = [
     patchelf
diff --git a/pkgs/build-support/fetchitchio/fetchitchio.py b/pkgs/build-support/fetchitchio/fetchitchio.py
index 4d1132c4fe7f..0b7ffa3b6333 100644
--- a/pkgs/build-support/fetchitchio/fetchitchio.py
+++ b/pkgs/build-support/fetchitchio/fetchitchio.py
@@ -39,7 +39,7 @@ def urlopen(url_or_request):
 with urlopen(f'{GAME_URL}/data.json') as response:
     data = json.load(response)
     GAME_ID = data['id']
-    IS_FREE = 'price' not in data
+    IS_FREE = 'price' not in data or data['price'] == '$0.00'
 
 def api(path, params={}, download=False):
     url = f'{ENDPOINT}{path}?{urllib.parse.urlencode({'api_key': API_KEY, **params})}'
diff --git a/pkgs/by-name/ab/ab-av1/package.nix b/pkgs/by-name/ab/ab-av1/package.nix
index f8a9d91aca4f..e6bf4c01c2c3 100644
--- a/pkgs/by-name/ab/ab-av1/package.nix
+++ b/pkgs/by-name/ab/ab-av1/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ab-av1";
-  version = "0.11.1";
+  version = "0.11.2";
 
   src = fetchFromGitHub {
     owner = "alexheretic";
     repo = "ab-av1";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-UiBgtA6i5rpXAtiPwihg7sUbmD6lou6IOsb//DWNWwU=";
+    hash = "sha256-kT0BJr4xoYigKObD6vZNRieslaJj/MWuqQmhYLWNwvs=";
   };
 
-  cargoHash = "sha256-1/vxKOlbXZ8HXnVFM9dXB9crobBx8djGDKsjnzc/KwQ=";
+  cargoHash = "sha256-o64GrmHvwF2VUKw+nIRK0jesSuelxNo0TFnyKaP/YlQ=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/al/alpine-make-vm-image/package.nix b/pkgs/by-name/al/alpine-make-vm-image/package.nix
index 919aa53a24c3..59040257ecca 100644
--- a/pkgs/by-name/al/alpine-make-vm-image/package.nix
+++ b/pkgs/by-name/al/alpine-make-vm-image/package.nix
@@ -18,13 +18,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "alpine-make-vm-image";
-  version = "0.13.3";
+  version = "0.13.4";
 
   src = fetchFromGitHub {
     owner = "alpinelinux";
     repo = "alpine-make-vm-image";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-AIwT2JAGnMeMXUXZ0FRJthf22FvFfTTw/2LtZKPSj6g=";
+    hash = "sha256-U3eJ9wOxxbC9gEDBMXanBmEy0x6YBSsXXf6U5nzVoZ8=";
   };
 
   nativeBuildInputs = [ makeWrapper ];
diff --git a/pkgs/by-name/an/ananicy-rules-cachyos/package.nix b/pkgs/by-name/an/ananicy-rules-cachyos/package.nix
index e9a839161a51..8d0e58a9face 100644
--- a/pkgs/by-name/an/ananicy-rules-cachyos/package.nix
+++ b/pkgs/by-name/an/ananicy-rules-cachyos/package.nix
@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "ananicy-rules-cachyos";
-  version = "0-unstable-2026-03-21";
+  version = "0-unstable-2026-03-30";
 
   src = fetchFromGitHub {
     owner = "CachyOS";
     repo = "ananicy-rules";
-    rev = "a0305dc2070306a1af52aad9b03096a51f4147e8";
-    hash = "sha256-WAbJATvx5dWfpB0PYVVlRCVEygDzUU+qeOmhzRKA8GY=";
+    rev = "7460ed8d375425f50517119b0df3a57b876b504e";
+    hash = "sha256-hFBQGmGKUw/LT1DiyfnTsYO5Lt2c7LBMLRVBMmjYakY=";
   };
 
   dontConfigure = true;
diff --git a/pkgs/by-name/an/ansible-doctor/package.nix b/pkgs/by-name/an/ansible-doctor/package.nix
index 5911b554f8bd..8a8c73cb89a1 100644
--- a/pkgs/by-name/an/ansible-doctor/package.nix
+++ b/pkgs/by-name/an/ansible-doctor/package.nix
@@ -9,14 +9,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "ansible-doctor";
-  version = "8.2.2";
+  version = "8.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "thegeeklab";
     repo = "ansible-doctor";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-gezpY5iaFxNcngAyUnlVRPGo33zUgjdsm2zFlfWUWfA=";
+    hash = "sha256-lwN6pMKysycMOqVRNrK8+dgGfrsRF2B2EW1Kby0l/0I=";
   };
 
   build-system = with python3Packages; [
diff --git a/pkgs/by-name/an/antigravity/information.json b/pkgs/by-name/an/antigravity/information.json
index 11c396c48204..237942111016 100644
--- a/pkgs/by-name/an/antigravity/information.json
+++ b/pkgs/by-name/an/antigravity/information.json
@@ -1,22 +1,22 @@
 {
-  "version": "1.20.6",
+  "version": "1.21.9",
   "vscodeVersion": "1.107.0",
   "sources": {
     "x86_64-linux": {
-      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.20.6-5891862175809536/linux-x64/Antigravity.tar.gz",
-      "sha256": "ad382bf321a6216d07f95af1f613e03f5a07fdf6fc6632b769ce83d81afdd567"
+      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.21.9-4905428782546944/linux-x64/Antigravity.tar.gz",
+      "sha256": "85ea4d55f52d32fbbf9d92fddc747f10e8d04c1bd00a07721b571fa7f2ef5226"
     },
     "aarch64-linux": {
-      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.20.6-5891862175809536/linux-arm/Antigravity.tar.gz",
-      "sha256": "6e17f33d8ccb5622affb3590efccb87c3c4dd505f1d3b0f8506f1c20c39c026a"
+      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.21.9-4905428782546944/linux-arm/Antigravity.tar.gz",
+      "sha256": "76d56462e0fad95a98efaf25d06be9c4789e3b8551fe5b936a6858b14c723364"
     },
     "x86_64-darwin": {
-      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.20.6-5891862175809536/darwin-x64/Antigravity.zip",
-      "sha256": "4e56f3ac83bc0e1803b4d811585d567f3795b14ad57ccec1fcfe8cb02f7cb719"
+      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.21.9-4905428782546944/darwin-x64/Antigravity.zip",
+      "sha256": "a8ebdbf3b18c75d39b876541904c95576422e281fd92e45f7f7f4e7231ac769c"
     },
     "aarch64-darwin": {
-      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.20.6-5891862175809536/darwin-arm/Antigravity.zip",
-      "sha256": "c4392cc64a52b7b7066cb1c21c32918854b7cd7297b7efa3b14397fc7d05ad5a"
+      "url": "https://edgedl.me.gvt1.com/edgedl/release2/j0qc3/antigravity/stable/1.21.9-4905428782546944/darwin-arm/Antigravity.zip",
+      "sha256": "f9ec42d0a791cc13cbb57a1f7c36b2421e67f180cd0bdfb01fd8fa23ad87440b"
     }
   }
 }
diff --git a/pkgs/by-name/ao/aonsoku/fix_appid.patch b/pkgs/by-name/ao/aonsoku/fix_appid.patch
new file mode 100644
index 000000000000..ba18dde49a8e
--- /dev/null
+++ b/pkgs/by-name/ao/aonsoku/fix_appid.patch
@@ -0,0 +1,13 @@
+diff --git a/electron/main/index.ts b/electron/main/index.ts
+index 78256e3..93e3881 100644
+--- a/electron/main/index.ts
++++ b/electron/main/index.ts
+@@ -4,6 +4,8 @@ import { createAppMenu } from './core/menu'
+ import { initAutoUpdater } from './core/updater'
+ import { createWindow, mainWindow } from './window'
+ 
++app.setDesktopName("Aonsoku.desktop")
++
+ export let isQuitting = false
+ 
+ const currentDesktop = process.env.XDG_CURRENT_DESKTOP ?? ''
diff --git a/pkgs/by-name/ao/aonsoku/package.nix b/pkgs/by-name/ao/aonsoku/package.nix
index 105044b9de54..43f0be90bcd2 100644
--- a/pkgs/by-name/ao/aonsoku/package.nix
+++ b/pkgs/by-name/ao/aonsoku/package.nix
@@ -1,60 +1,102 @@
 {
   lib,
+  stdenv,
   fetchFromGitHub,
-  rustPlatform,
-  cargo-tauri,
   nodejs,
-  pnpm_8,
+  pnpm_9,
   fetchPnpmDeps,
   pnpmConfigHook,
-  pkg-config,
-  wrapGAppsHook3,
-  openssl,
-  webkitgtk_4_1,
-  glib-networking,
+  makeWrapper,
+  electron,
   nix-update-script,
+  makeDesktopItem,
+  copyDesktopItems,
 }:
-rustPlatform.buildRustPackage (finalAttrs: {
+
+stdenv.mkDerivation (finalAttrs: {
   pname = "aonsoku";
-  version = "0.9.1";
+  version = "0.13.0";
 
   src = fetchFromGitHub {
     owner = "victoralvesf";
     repo = "aonsoku";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-qlc7P222e6prYG30iVTAZhP772za3H7gVszfWvOr2NM=";
+    hash = "sha256-jpBO5MqOc18KGncpOWB/3IjCgkWb2zFfNxTpkcayZwo=";
   };
 
-  # lockfileVersion: '6.0' need old pnpm
+  patches = [
+    ./remove_updater.patch
+    ./fix_appid.patch
+  ];
+
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
-    pnpm = pnpm_8;
+    pnpm = pnpm_9;
     fetcherVersion = 3;
-    hash = "sha256-gOPjNZCljr8OvU/xLs9ZQ27dl3RatscXddOyPfSVdoE=";
+    hash = "sha256-B5bEAj6Ii/c7ZZobQmc8nHFbpBX9n/eYwRZ7lsLs3fk=";
   };
 
-  cargoRoot = "src-tauri";
-  buildAndTestSubdir = finalAttrs.cargoRoot;
-
-  cargoHash = "sha256-8UtfL8iB1XKP31GT9Ok5hIQSobQTm681uiluG+IhK/s=";
-
-  patches = [ ./remove_updater.patch ];
-
   nativeBuildInputs = [
     nodejs
+    pnpm_9
     pnpmConfigHook
-    pnpm_8
-    cargo-tauri.hook
-    pkg-config
-    wrapGAppsHook3
+    makeWrapper
+    electron
+    copyDesktopItems
   ];
 
-  buildInputs = [
-    openssl
-    webkitgtk_4_1
-    glib-networking
+  buildInputs = [ finalAttrs.pnpmDeps ];
+
+  desktopItems = [
+    (makeDesktopItem {
+      name = "aonsoku";
+      desktopName = "Aonsoku";
+      comment = "Modern desktop client for Navidrome/Subsonic servers";
+      exec = "Aonsoku";
+      icon = "aonsoku";
+      categories = [
+        "AudioVideo"
+        "Audio"
+        "Music"
+        "Player"
+      ];
+      startupWMClass = "Aonsoku";
+    })
   ];
 
+  preConfigure = ''
+    export ELECTRON_SKIP_BINARY_DOWNLOAD=1
+  '';
+
+  buildPhase = ''
+    runHook preBuild
+    pnpm run electron:build
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/lib/aonsoku/out
+    cp -r out/* $out/lib/aonsoku/out/
+
+    mkdir -p $out/lib/aonsoku/out/main/resources
+    cp -r resources/* $out/lib/aonsoku/out/main/resources/
+
+    cp -r node_modules $out/lib/aonsoku/
+
+    mkdir -p $out/bin
+    makeWrapper ${electron}/bin/electron $out/bin/Aonsoku \
+      --add-flags $out/lib/aonsoku/out/main/index.js \
+      --set ELECTRON_IS_DEV 0
+
+    mkdir -p $out/share/icons/hicolor/512x512/apps
+    cp resources/icons/icon.png \
+      $out/share/icons/hicolor/512x512/apps/aonsoku.png
+
+    runHook postInstall
+  '';
+
   passthru.updateScript = nix-update-script { };
 
   meta = {
@@ -62,7 +104,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
     homepage = "https://github.com/victoralvesf/aonsoku";
     changelog = "https://github.com/victoralvesf/aonsoku/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ genga898 ];
+    maintainers = with lib.maintainers; [
+      autrimpo
+      genga898
+    ];
     mainProgram = "Aonsoku";
   };
 })
diff --git a/pkgs/by-name/ao/aonsoku/remove_updater.patch b/pkgs/by-name/ao/aonsoku/remove_updater.patch
index 8145cf552b63..1dcb401daae7 100644
--- a/pkgs/by-name/ao/aonsoku/remove_updater.patch
+++ b/pkgs/by-name/ao/aonsoku/remove_updater.patch
@@ -1,39 +1,15 @@
-diff --git a/src-tauri/src/main.rs b/src-tauri/src/main.rs
-index 112ee8e..35137f2 100644
---- a/src-tauri/src/main.rs
-+++ b/src-tauri/src/main.rs
-@@ -50,7 +50,6 @@ fn main() {
-             Ok(())
-         })
-         .plugin(tauri_plugin_shell::init())
--        .plugin(tauri_plugin_updater::Builder::new().build())
-         .plugin(tauri_plugin_process::init())
-         .plugin(tauri_plugin_os::init())
-         .invoke_handler(tauri::generate_handler![commands::download_file])
-diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
-index 3afc5f6..19785e5 100644
---- a/src-tauri/tauri.conf.json
-+++ b/src-tauri/tauri.conf.json
-@@ -8,7 +8,6 @@
-   "bundle": {
-     "active": true,
-     "category": "Music",
--    "createUpdaterArtifacts": true,
-     "targets": "all",
-     "icon": [
-       "icons/32x32.png",
-@@ -26,14 +25,6 @@
-   "productName": "Aonsoku",
-   "mainBinaryName": "Aonsoku",
-   "identifier": "com.victoralvesf.aonsoku",
--  "plugins": {
--    "updater": {
--      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDRDNTlENjZCNTJFRDdDRDAKUldUUWZPMVNhOVpaVENsbXg5RTM1TzFnME43TmZoaHU5bWplS1VSSW9YcE1QT0w1ZHRIWHNUOVoK",
--      "endpoints": [
--        "https://github.com/victoralvesf/aonsoku/releases/latest/download/latest.json"
--      ]
--    }
--  },
-   "app": {
-     "withGlobalTauri": true,
-     "security": {
+diff --git a/src/app/observers/update-observer.tsx b/src/app/observers/update-observer.tsx
+index 7dd77aa..4a88a4f 100644
+--- a/src/app/observers/update-observer.tsx
++++ b/src/app/observers/update-observer.tsx
+@@ -30,8 +30,8 @@ export function UpdateObserver() {
+ 
+   const { data: updateCheckResult } = useQuery({
+     queryKey: [queryKeys.update.check],
+-    queryFn: async () => await window.api.checkForUpdates(),
+-    enabled: !remindOnNextBoot,
++    queryFn: async () => ({ files: [] }),
++    enabled: false,
+     refetchOnWindowFocus: false,
+     refetchOnMount: false,
+     staleTime: Infinity,
diff --git a/pkgs/by-name/as/asn/package.nix b/pkgs/by-name/as/asn/package.nix
index 8ce315fdd731..614d2ab56765 100644
--- a/pkgs/by-name/as/asn/package.nix
+++ b/pkgs/by-name/as/asn/package.nix
@@ -16,13 +16,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "asn";
-  version = "0.80.4";
+  version = "0.80.5";
 
   src = fetchFromGitHub {
     owner = "nitefood";
     repo = "asn";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-o0gHHV0tQeKd/qIGAMhA/cwUuCF7VLVDzngoFU8fGhI=";
+    hash = "sha256-o+qyNxEV2lPRsCNkkcZbj07hKw4eV45qhB8G34OWmgg=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/bg/bgnet/package.nix b/pkgs/by-name/bg/bgnet/package.nix
index c8d8e5ccb853..b656dbeda3f6 100644
--- a/pkgs/by-name/bg/bgnet/package.nix
+++ b/pkgs/by-name/bg/bgnet/package.nix
@@ -39,6 +39,6 @@ stdenv.mkDerivation {
     homepage = "https://beej.us/guide/bgnet/";
     license = lib.licenses.unfree;
 
-    maintainers = with lib.maintainers; [ Profpatsch ];
+    maintainers = [ ];
   };
 }
diff --git a/pkgs/by-name/bl/blobfuse/package.nix b/pkgs/by-name/bl/blobfuse/package.nix
index ff9c55876039..c7c85ed93ff6 100644
--- a/pkgs/by-name/bl/blobfuse/package.nix
+++ b/pkgs/by-name/bl/blobfuse/package.nix
@@ -9,19 +9,19 @@
 }:
 
 let
-  version = "2.5.2";
+  version = "2.5.3";
   src = fetchFromGitHub {
     owner = "Azure";
     repo = "azure-storage-fuse";
     rev = "blobfuse2-${version}";
-    sha256 = "sha256-iTzVKb8z7lQh40iMZiwjeufColiwU2YrihBLNLjS6JI=";
+    sha256 = "sha256-PgpXlyFo+rE32wZfjx7h11YmNka4q/6Jbr03CsW0pZc=";
   };
 in
 buildGoModule {
   pname = "blobfuse";
   inherit version src;
 
-  vendorHash = "sha256-9sT+8o+esVYdqYqAfkvyggqPiIIkG78krv+uID9+UBw=";
+  vendorHash = "sha256-I2/0BzT9KiMBpzReSll0dKY0uzULRx49fcVGD/z4BPQ=";
 
   buildInputs = [ fuse3 ];
 
diff --git a/pkgs/by-name/c3/c3c/package.nix b/pkgs/by-name/c3/c3c/package.nix
index cdb3fd534940..7aad19389076 100644
--- a/pkgs/by-name/c3/c3c/package.nix
+++ b/pkgs/by-name/c3/c3c/package.nix
@@ -19,13 +19,13 @@ in
 llvmPackages.stdenv.mkDerivation (finalAttrs: {
 
   pname = "c3c${optionalString debug "-debug"}";
-  version = "0.7.10";
+  version = "0.7.11";
 
   src = fetchFromGitHub {
     owner = "c3lang";
     repo = "c3c";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-f4/tWe9pXogRNHLeMgwyK4yeQRWqeL+xPj6cwLWo2oo=";
+    hash = "sha256-M6lx7MHhR1ghR+stRGJB7NL2SwHoyFOfU2tKu9Hh2oU=";
   };
 
   cmakeBuildType = if debug then "Debug" else "Release";
diff --git a/pkgs/by-name/ca/cargo-careful/package.nix b/pkgs/by-name/ca/cargo-careful/package.nix
index a9919b7e3606..0ccaae153a48 100644
--- a/pkgs/by-name/ca/cargo-careful/package.nix
+++ b/pkgs/by-name/ca/cargo-careful/package.nix
@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cargo-careful";
-  version = "0.4.9";
+  version = "0.4.10";
 
   src = fetchFromGitHub {
     owner = "RalfJung";
     repo = "cargo-careful";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-huo5KFb+qoPVHNrnR+vb97iNinGaU5d3NbFhAgGCzCk=";
+    hash = "sha256-xnAPMSMpdnFF6hUU+SR+kyWsLNuD2dXYp0/qDF8QRfA=";
   };
 
-  cargoHash = "sha256-mjGUSwqyqgnGwKjznj8KedIzOJi4GDldJEL0fzpuvec=";
+  cargoHash = "sha256-UiN2cWqwn+sJ56pODBilirw6jVnVz+rIsPuYVaNaSfM=";
 
   meta = {
     description = "Tool to execute Rust code carefully, with extra checking along the way";
diff --git a/pkgs/by-name/cd/cdk8s-cli/package.nix b/pkgs/by-name/cd/cdk8s-cli/package.nix
index b5eab553e9cd..29ac028fc33e 100644
--- a/pkgs/by-name/cd/cdk8s-cli/package.nix
+++ b/pkgs/by-name/cd/cdk8s-cli/package.nix
@@ -12,18 +12,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "cdk8s-cli";
-  version = "2.204.9";
+  version = "2.205.6";
 
   src = fetchFromGitHub {
     owner = "cdk8s-team";
     repo = "cdk8s-cli";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-FV9/v8/UFrLtNPIZCh8No8A7n5oIzd9BlyjP1np8VZY=";
+    hash = "sha256-ZHorjCZbZ8Lu7DwhAbCC/uKNrg+rYwL75NCjKskh/JM=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     inherit (finalAttrs) src;
-    hash = "sha256-4/1euuWSaZcRO2gwMj55g+m+K46D/bEd+yFJojGap5k=";
+    hash = "sha256-VAy3k99JB2j4MUCwXKyxSl+9OmGC1/xoJBF1/Xvuc54=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ce/censor/package.nix b/pkgs/by-name/ce/censor/package.nix
index c94bc9c46ef1..d26bea105cec 100644
--- a/pkgs/by-name/ce/censor/package.nix
+++ b/pkgs/by-name/ce/censor/package.nix
@@ -13,14 +13,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "censor";
-  version = "0.4.0";
+  version = "0.6.0";
   pyproject = false;
 
   src = fetchFromCodeberg {
     owner = "censor";
     repo = "Censor";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-piRIa/weDhSve+NCtwq9vhzGyC7jmtyJ/x//llPGQn8=";
+    hash = "sha256-r5GhPr7dFLVy8nyKWg0poZSjWVrLrpnUHhe4MdEThvM=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/ci/ciel/package.nix b/pkgs/by-name/ci/ciel/package.nix
index 666213423ac9..d3475f4990d3 100644
--- a/pkgs/by-name/ci/ciel/package.nix
+++ b/pkgs/by-name/ci/ciel/package.nix
@@ -16,16 +16,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ciel";
-  version = "3.10.2";
+  version = "3.10.3";
 
   src = fetchFromGitHub {
     owner = "AOSC-Dev";
     repo = "ciel-rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-lYw1Dzh3zQ9V5TqZGVJ5LTHuAsnEYsJsShkiJcXMGfc=";
+    hash = "sha256-y6AM3tLACJscGSVh3WhEONSkDmXC2KFL3VKt8a7CdGU=";
   };
 
-  cargoHash = "sha256-RSdJFjFO0ah2WXazc2QDFQzvNwOKxe0IKiNIjRHO0EQ=";
+  cargoHash = "sha256-rgflNUoAOKzqXKMoSDbAgqV1tKbFgJUeH0K7RCVC1ME=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/ci/ciftilib/package.nix b/pkgs/by-name/ci/ciftilib/package.nix
index 0e1497f396a4..8519e82b46e1 100644
--- a/pkgs/by-name/ci/ciftilib/package.nix
+++ b/pkgs/by-name/ci/ciftilib/package.nix
@@ -42,7 +42,9 @@ stdenv.mkDerivation (finalAttrs: {
     substituteInPlace CMakeLists.txt \
       --replace-fail "CMAKE_MINIMUM_REQUIRED(VERSION 2.6)" "cmake_minimum_required(VERSION 3.10)" \
       --replace-fail "CMAKE_POLICY(VERSION 2.8.7)" "CMAKE_POLICY(VERSION 3.10)" \
-      --replace-fail "CMAKE_POLICY(SET CMP0045 OLD)" ""
+      --replace-fail "CMAKE_POLICY(SET CMP0045 OLD)" "" \
+      --replace-fail "FIND_PACKAGE(Boost REQUIRED COMPONENTS filesystem system)" \
+                     "FIND_PACKAGE(Boost REQUIRED COMPONENTS filesystem)"
   '';
 
   meta = {
diff --git a/pkgs/by-name/cl/claude-code-bin/manifest.json b/pkgs/by-name/cl/claude-code-bin/manifest.json
index 9e3b62babace..d7849a206338 100644
--- a/pkgs/by-name/cl/claude-code-bin/manifest.json
+++ b/pkgs/by-name/cl/claude-code-bin/manifest.json
@@ -1,46 +1,46 @@
 {
-  "version": "2.1.88",
-  "buildDate": "2026-03-30T22:06:06Z",
+  "version": "2.1.89",
+  "buildDate": "2026-03-31T23:01:10Z",
   "platforms": {
     "darwin-arm64": {
       "binary": "claude",
-      "checksum": "fe0d191adb7b0d26badd1e303e95a63d62d526ca1fb5882f53644754e1e9fe95",
-      "size": 196192880
+      "checksum": "f903a5e53f845b1ac5566296b713193827665f28da16300fdca7539cb0669a7f",
+      "size": 196886384
     },
     "darwin-x64": {
       "binary": "claude",
-      "checksum": "4036c17c5ebdeaf024f198b041e012e494b8cab8c7dec1bdde567ebbbfc5124d",
-      "size": 197703504
+      "checksum": "1322c5eecec8047e9cd7114f7d547ef6a9596563d6bbc7e594167d0f8bc8b406",
+      "size": 198397008
     },
     "linux-arm64": {
       "binary": "claude",
-      "checksum": "2ba4ac149b2198c15e45837fc504146c735fc1e82b9fdf717c2a6b9e0f70c02c",
-      "size": 228330048
+      "checksum": "428301f56cf0139e6fbfa55e13be3f0f032ac1eb5ddb8849fbc703ee220c1cca",
+      "size": 228657728
     },
     "linux-x64": {
       "binary": "claude",
-      "checksum": "ced6cac958fa4425b90e6c9341a26731715fcb1a253d5bc0f51c8d5a3a6ab66e",
-      "size": 228121216
+      "checksum": "903cb3c96b314d86856632c8702f5cdf971b804d0b19ef87446573bcd1d7df1c",
+      "size": 228473472
     },
     "linux-arm64-musl": {
       "binary": "claude",
-      "checksum": "39fc36357d927750f6b2ef85afd30a50549e4ca7e3cd0887e6e7e76b2db8c56f",
-      "size": 221448640
+      "checksum": "7cb5fd60f3d2366672857077f3bd0f93ab83dffebd8f93c70344afa58bdb91ec",
+      "size": 221776320
     },
     "linux-x64-musl": {
       "binary": "claude",
-      "checksum": "658327a04523e7e9a9578bc061c7c82804846d9fbff04c88177002f2f93cff5f",
-      "size": 222747072
+      "checksum": "60941916f0a5656a5952a0f2f54228f574f8756ea503119f858724ad43c9b28d",
+      "size": 223099328
     },
     "win32-x64": {
       "binary": "claude.exe",
-      "checksum": "34a248b3f381f27e4adde1f4dc745f6b63aa28ff0c6eee550d47746a4d197ec0",
-      "size": 238212768
+      "checksum": "2e312000b538f11d13f1dfc52d4131996895b9a07bd8897d8f9153635d4ea092",
+      "size": 238557856
     },
     "win32-arm64": {
       "binary": "claude.exe",
-      "checksum": "eee6beba9efb300d097a6fe4151c1d83cb84ea1598555fe358b07d33a434decc",
-      "size": 234668704
+      "checksum": "5f1d597c542aac3a11f557e12c92d0c49220ab77e741014b0599a572d81ca679",
+      "size": 235014304
     }
   }
 }
diff --git a/pkgs/by-name/cl/claude-code/package-lock.json b/pkgs/by-name/cl/claude-code/package-lock.json
index 94a7ff08a3db..da19d3d701e2 100644
--- a/pkgs/by-name/cl/claude-code/package-lock.json
+++ b/pkgs/by-name/cl/claude-code/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@anthropic-ai/claude-code",
-  "version": "2.1.88",
+  "version": "2.1.89",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@anthropic-ai/claude-code",
-      "version": "2.1.88",
+      "version": "2.1.89",
       "license": "SEE LICENSE IN README.md",
       "bin": {
         "claude": "cli.js"
diff --git a/pkgs/by-name/cl/claude-code/package.nix b/pkgs/by-name/cl/claude-code/package.nix
index 3cb9788cfae6..9abeb47c55e2 100644
--- a/pkgs/by-name/cl/claude-code/package.nix
+++ b/pkgs/by-name/cl/claude-code/package.nix
@@ -15,14 +15,14 @@
 }:
 buildNpmPackage (finalAttrs: {
   pname = "claude-code";
-  version = "2.1.88";
+  version = "2.1.89";
 
   src = fetchzip {
     url = "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-${finalAttrs.version}.tgz";
-    hash = "sha256-LwTZaxp1Wq6BYQ/Los5aMHufGKb3NM7BuuW0Kaxo2QA=";
+    hash = "sha256-FoTm6KDr+8Dzhk4ibZUlU1QLPFdPm/OriUUWqAaFswg=";
   };
 
-  npmDepsHash = "sha256-izy3dQProZIdUF5Z11fvGQOm/TBcWGhDK8GvNs8gG5E=";
+  npmDepsHash = "sha256-NI4F5bq0lEuMjLUdkGrml2aOzGbGkdyUckgfeVFEe8o=";
 
   strictDeps = true;
 
diff --git a/pkgs/by-name/co/codex/fetchers.nix b/pkgs/by-name/co/codex/fetchers.nix
new file mode 100644
index 000000000000..0835ffdd365a
--- /dev/null
+++ b/pkgs/by-name/co/codex/fetchers.nix
@@ -0,0 +1,20 @@
+# not a stable interface, do not reference outside the codex package but make a copy if you need
+{
+  lib,
+  stdenv,
+  fetchurl,
+}:
+
+{
+  fetchLibrustyV8 =
+    args:
+    fetchurl {
+      name = "librusty_v8-${args.version}";
+      url = "https://github.com/denoland/rusty_v8/releases/download/v${args.version}/librusty_v8_release_${stdenv.hostPlatform.rust.rustcTarget}.a.gz";
+      sha256 = args.shas.${stdenv.hostPlatform.system};
+      meta = {
+        inherit (args) version;
+        sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
+      };
+    };
+}
diff --git a/pkgs/by-name/co/codex/librusty_v8.nix b/pkgs/by-name/co/codex/librusty_v8.nix
new file mode 100644
index 000000000000..213a3174cee3
--- /dev/null
+++ b/pkgs/by-name/co/codex/librusty_v8.nix
@@ -0,0 +1,12 @@
+# auto-generated file -- DO NOT EDIT!
+{ fetchLibrustyV8 }:
+
+fetchLibrustyV8 {
+  version = "146.4.0";
+  shas = {
+    x86_64-linux = "sha256-5ktNmeSuKTouhGJEqJuAF4uhA4LBP7WRwfppaPUpEVM=";
+    aarch64-linux = "sha256-2/FlsHyBvbBUvARrQ9I+afz3vMGkwbW0d2mDpxBi7Ng=";
+    x86_64-darwin = "sha256-YwzSQPG77NsHFBfcGDh6uBz2fFScHFFaC0/Pnrpke7c=";
+    aarch64-darwin = "sha256-v+LJvjKlbChUbw+WWCXuaPv2BkBfMQzE4XtEilaM+Yo=";
+  };
+}
diff --git a/pkgs/by-name/co/codex/package.nix b/pkgs/by-name/co/codex/package.nix
index 3cbb31d2466f..d69950dcf3fc 100644
--- a/pkgs/by-name/co/codex/package.nix
+++ b/pkgs/by-name/co/codex/package.nix
@@ -1,15 +1,19 @@
 {
   lib,
   stdenv,
+  callPackage,
   rustPlatform,
   fetchFromGitHub,
   installShellFiles,
-  cargo,
+  bubblewrap,
   clang,
   cmake,
   gitMinimal,
   libcap,
   libclang,
+  librusty_v8 ? callPackage ./librusty_v8.nix {
+    inherit (callPackage ./fetchers.nix { }) fetchLibrustyV8;
+  },
   makeBinaryWrapper,
   nix-update-script,
   pkg-config,
@@ -20,18 +24,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "codex";
-  version = "0.116.0";
+  version = "0.118.0";
 
   src = fetchFromGitHub {
     owner = "openai";
     repo = "codex";
     tag = "rust-v${finalAttrs.version}";
-    hash = "sha256-PTsKphg3gPlBUs5oMM34RhJJ4jxvD6hand5aVjXcuZ4=";
+    hash = "sha256-FdtV+CIqTInnegcXrXBxw4aE0JnNDh4GdYKwUDjSk9Y=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/codex-rs";
 
-  cargoHash = "sha256-X5Yh8+3UrCZfzIplb4OzFfcfoklMu3FikU9vZ6CJbfc=";
+  cargoHash = "sha256-7rexlmc79eUkwcqTa8rN3GFDy1dWs+0h/SUllZqAcpM=";
 
   nativeBuildInputs = [
     clang
@@ -64,6 +68,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
         "-Wno-error=character-conversion"
       ]
     );
+    RUSTY_V8_ARCHIVE = librusty_v8;
   };
 
   # NOTE: part of the test suite requires access to networking, local shells,
@@ -82,7 +87,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
   '';
 
   postFixup = ''
-    wrapProgram $out/bin/codex --prefix PATH : ${lib.makeBinPath [ ripgrep ]}
+    wrapProgram $out/bin/codex --prefix PATH : ${
+      lib.makeBinPath ([ ripgrep ] ++ lib.optionals stdenv.hostPlatform.isLinux [ bubblewrap ])
+    }
   '';
 
   doInstallCheck = true;
diff --git a/pkgs/by-name/co/colobot/package.nix b/pkgs/by-name/co/colobot/package.nix
index 41c95d105890..d802ca8d1d18 100644
--- a/pkgs/by-name/co/colobot/package.nix
+++ b/pkgs/by-name/co/colobot/package.nix
@@ -47,6 +47,12 @@ stdenv.mkDerivation (finalAttrs: {
     })
   ];
 
+  postPatch = ''
+    substituteInPlace CMakeLists.txt \
+      --replace-fail 'find_package(Boost COMPONENTS system filesystem regex REQUIRED)' \
+                     'find_package(Boost COMPONENTS filesystem regex REQUIRED)'
+  '';
+
   nativeBuildInputs = [
     cmake
     xmlstarlet
diff --git a/pkgs/by-name/co/compress-pptx/inject-dependency-paths.patch b/pkgs/by-name/co/compress-pptx/inject-dependency-paths.patch
new file mode 100644
index 000000000000..18cdc17bb823
--- /dev/null
+++ b/pkgs/by-name/co/compress-pptx/inject-dependency-paths.patch
@@ -0,0 +1,49 @@
+diff --git a/src/compress_pptx/__main__.py b/src/compress_pptx/__main__.py
+index 433b6d8..f86c2e2 100644
+--- a/src/compress_pptx/__main__.py
++++ b/src/compress_pptx/__main__.py
+@@ -101,7 +101,7 @@ def main():
+         "--ffmpeg-path",
+         type=str,
+         help="Path to ffmpeg executable",
+-        default="ffmpeg",
++        default="@ffmpeg@",
+     )
+     cli_args = parser.parse_args()
+ 
+diff --git a/src/compress_pptx/compress_pptx.py b/src/compress_pptx/compress_pptx.py
+index 0cb5b42..0845aef 100644
+--- a/src/compress_pptx/compress_pptx.py
++++ b/src/compress_pptx/compress_pptx.py
+@@ -131,7 +131,7 @@ class CompressPptx:
+         ffmpeg_video_codec: Optional[str] = None,
+         ffmpeg_audio_codec: Optional[str] = None,
+         ffmpeg_extra_options: Optional[str] = None,
+-        ffmpeg_path: str = "ffmpeg",
++        ffmpeg_path: str = "@ffmpeg@",
+     ) -> None:
+         """
+         Compress images in a PowerPoint file or extract media.
+@@ -187,19 +187,9 @@ class CompressPptx:
+ 
+         self.file_list: List[FileObj] = []
+ 
+-        # Check for ImageMagick - prefer 'magick' but fall back to 'convert'/'identify'
+-        if which("magick") is not None:
+-            self.magick_cmd = "magick"
+-            self.convert_cmd = ["magick", "convert"]
+-            self.identify_cmd = ["magick", "identify"]
+-        elif which("convert") is not None and which("identify") is not None:
+-            self.magick_cmd = "convert"
+-            self.convert_cmd = ["convert"]
+-            self.identify_cmd = ["identify"]
+-        else:
+-            raise CompressPptxError(
+-                "ImageMagick not found in PATH. Make sure you have installed ImageMagick and that either 'magick' or 'convert'/'identify' commands are available."
+-            )
++        self.magick_cmd = "@magick@"
++        self.convert_cmd = ["@magick@", "convert"]
++        self.identify_cmd = ["@magick@", "identify"]
+ 
+         required_executables = []
+         # add ffmpeg to required executables if user wants media files to be compressed
diff --git a/pkgs/by-name/co/compress-pptx/package.nix b/pkgs/by-name/co/compress-pptx/package.nix
new file mode 100644
index 000000000000..de14932e44a8
--- /dev/null
+++ b/pkgs/by-name/co/compress-pptx/package.nix
@@ -0,0 +1,54 @@
+{
+  lib,
+  python3Packages,
+  fetchFromGitHub,
+
+  # patches
+  replaceVars,
+  ffmpeg,
+  imagemagick,
+}:
+
+python3Packages.buildPythonApplication (finalAttrs: {
+  pname = "compress-pptx";
+  version = "1.3.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "slhck";
+    repo = "compress-pptx";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-+67EdAEWsRY11Pkie6AOz7Sl7MSTMGxZoQYS+M2x07Y=";
+  };
+
+  patches = [
+    (replaceVars ./inject-dependency-paths.patch {
+      ffmpeg = lib.getExe ffmpeg;
+      magick = lib.getExe imagemagick;
+    })
+  ];
+
+  build-system = with python3Packages; [ uv-build ];
+
+  dependencies = with python3Packages; [
+    ffmpeg-progress-yield
+    tqdm
+  ];
+
+  nativeCheckInputs = [
+    python3Packages.pytestCheckHook
+  ];
+
+  meta = {
+    description = "Compress PPTX files";
+    longDescription = ''
+      Compress a PPTX or POTX file, converting all PNG/TIFF images to lossy
+      JPEGs.
+    '';
+    homepage = "https://github.com/slhck/compress-pptx";
+    license = lib.licenses.mit;
+    changelog = "https://github.com/slhck/compress-pptx/releases/tag/${finalAttrs.src.tag}";
+    mainProgram = "compress-pptx";
+    maintainers = with lib.maintainers; [ artur-sannikov ];
+  };
+})
diff --git a/pkgs/by-name/cr/crossmacro-daemon/deps.json b/pkgs/by-name/cr/crossmacro-daemon/deps.json
index 44a1cc0c9d93..e712b6c324cf 100644
--- a/pkgs/by-name/cr/crossmacro-daemon/deps.json
+++ b/pkgs/by-name/cr/crossmacro-daemon/deps.json
@@ -1,8 +1,8 @@
 [
   {
     "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "10.0.3",
-    "hash": "sha256-ShB94jEtsq5X5r6xDZQ+wotZYG3OPKOCHNGy4B7NVFs="
+    "version": "10.0.5",
+    "hash": "sha256-KrP+hE3gk7pATbJYZsJ1LHiXjzLA+ntHW7G/VGgHk2g="
   },
   {
     "pname": "Serilog",
@@ -41,7 +41,7 @@
   },
   {
     "pname": "Tmds.DBus",
-    "version": "0.90.3",
-    "hash": "sha256-/yBQpjsIqbY4JFBxxVKXPR2S/N1TMLG5QPXvScSCdEk="
+    "version": "0.91.1",
+    "hash": "sha256-MtHZFutIm0VKVkM/kRMucZIRL0jAEEPSj2D2MLxbAH4="
   }
 ]
diff --git a/pkgs/by-name/cr/crossmacro-daemon/package.nix b/pkgs/by-name/cr/crossmacro-daemon/package.nix
index a1c1ee716529..b28b53b918ff 100644
--- a/pkgs/by-name/cr/crossmacro-daemon/package.nix
+++ b/pkgs/by-name/cr/crossmacro-daemon/package.nix
@@ -14,13 +14,13 @@
 
 buildDotnetModule rec {
   pname = "crossmacro-daemon";
-  version = "0.9.9";
+  version = "1.0.1";
 
   src = fetchFromGitHub {
     owner = "alper-han";
     repo = "CrossMacro";
     tag = "v${version}";
-    hash = "sha256-LYjGuv+LMqug0sba64sGi9U+9XlK/A4CO+9H/6drgMw=";
+    hash = "sha256-ki5zEFqa9wSGw2jidGoN0Zb69to7ilXgb9fqrjo40ks=";
   };
 
   projectFile = "src/CrossMacro.Daemon/CrossMacro.Daemon.csproj";
diff --git a/pkgs/by-name/cr/crossmacro/deps.json b/pkgs/by-name/cr/crossmacro/deps.json
index 1e958a30f8e3..ccc7a8ca29c6 100644
--- a/pkgs/by-name/cr/crossmacro/deps.json
+++ b/pkgs/by-name/cr/crossmacro/deps.json
@@ -1,8 +1,8 @@
 [
   {
     "pname": "Avalonia",
-    "version": "11.3.12",
-    "hash": "sha256-T2y8aoKUSfXqmV2RL1QStytzJkc/SZYfIdJihB5UWR0="
+    "version": "11.3.13",
+    "hash": "sha256-9khLyFw6dk82UhmQoGf0R2HA5AmRyGA0pydM+unZ+ww="
   },
   {
     "pname": "Avalonia.BuildServices",
@@ -11,53 +11,53 @@
   },
   {
     "pname": "Avalonia.Controls.ColorPicker",
-    "version": "11.3.12",
-    "hash": "sha256-zNpmfOTfw+gKZp8VPpfHe2hjqhrRmExf7lxqLf5OvDg="
+    "version": "11.3.13",
+    "hash": "sha256-hzGLVkFxGDxqYE0+1J6Ze/akUUmhnGiNaeHeNx9JYlg="
   },
   {
     "pname": "Avalonia.Diagnostics",
-    "version": "11.3.12",
-    "hash": "sha256-iDH6DjRKqm4YLXBq2JGg9IkkEGm3Rq1FQWyr/L+VaVA="
+    "version": "11.3.13",
+    "hash": "sha256-hGiZB8zq56ByjzSf1o3XEJ0rHTnVNrGrVm3xgwVwleg="
   },
   {
     "pname": "Avalonia.Fonts.Inter",
-    "version": "11.3.12",
-    "hash": "sha256-yr4/zpUbmQuVzdupV5v87qNO24sPOVhnnJ1SeiLxMx8="
+    "version": "11.3.13",
+    "hash": "sha256-cP7mpGsk+qAMzsfbrq42pujN8ZLsD+PSjXGDnMIjVp4="
   },
   {
     "pname": "Avalonia.FreeDesktop",
-    "version": "11.3.12",
-    "hash": "sha256-NTcYVHn13lFQjTNezmpmPGjxsBzryXorK0K6hl4ZZto="
+    "version": "11.3.13",
+    "hash": "sha256-YLAdQj/8zmrKJp7+7EQY6bmDXfCiBtUHYrVw0KPpXNw="
   },
   {
     "pname": "Avalonia.Remote.Protocol",
-    "version": "11.3.12",
-    "hash": "sha256-dF93nP1Cd7ZdzrO7ScGHchxYxCjWN45AjiqiO1J+cmU="
+    "version": "11.3.13",
+    "hash": "sha256-HrT+dI3NLTVv5NpmhEb1ZVrXF4hgC0IkQ23VZVmw/qc="
   },
   {
     "pname": "Avalonia.Skia",
-    "version": "11.3.12",
-    "hash": "sha256-gRMjH7igRIm22zQV0WxtwFHe8AiMTcaPlR0sC5lJy+w="
+    "version": "11.3.13",
+    "hash": "sha256-kNIZ8HpNiQIqEyYYlJ/ND/tBGT5KY3jeL8W6GFTJIvU="
   },
   {
     "pname": "Avalonia.Themes.Fluent",
-    "version": "11.3.12",
-    "hash": "sha256-4TTsW7zLF0Z9C1lzPsPfekHpHrSx7RB7I63j/cKUX8U="
+    "version": "11.3.13",
+    "hash": "sha256-bAIaj72UKH5Lxv1bLcXt5bPuB51pYGOJHO1gGs1uGrM="
   },
   {
     "pname": "Avalonia.Themes.Simple",
-    "version": "11.3.12",
-    "hash": "sha256-EIuAcUmoL7/y4lUfdSg120/l/v3zQytC2rfr0b6jKiM="
+    "version": "11.3.13",
+    "hash": "sha256-PzCYsrELqrINWcTzIHpnKQ757xsiYMEBa6fTUQGg3zE="
   },
   {
     "pname": "Avalonia.X11",
-    "version": "11.3.12",
-    "hash": "sha256-SEc0GaZTh1eGNFWHT6lGiN6LD0qE+ubTK7Efl0H/Q2w="
+    "version": "11.3.13",
+    "hash": "sha256-Eeeq4K4q2GihIVFhCKFjTc+di/M39OgfFyF7aaZOJdg="
   },
   {
     "pname": "CommunityToolkit.Mvvm",
-    "version": "8.4.0",
-    "hash": "sha256-a0D550q+ffreU9Z+kQPdzJYPNaj1UjgyPofLzUg02ZI="
+    "version": "8.4.2",
+    "hash": "sha256-jLS1vo6V+fHsJs80HYT77oJE6IEC68fIgkLpYODjWAU="
   },
   {
     "pname": "HarfBuzzSharp",
@@ -91,13 +91,13 @@
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection",
-    "version": "10.0.3",
-    "hash": "sha256-h/wiSaVtRCIGdkv6/soA41Dhdlmu2I9hjv/swP8OjDk="
+    "version": "10.0.5",
+    "hash": "sha256-ofDRirUV9XLSz4oksCqErwBJFtAieHACFfyZukHKFng="
   },
   {
     "pname": "Microsoft.Extensions.DependencyInjection.Abstractions",
-    "version": "10.0.3",
-    "hash": "sha256-ShB94jEtsq5X5r6xDZQ+wotZYG3OPKOCHNGy4B7NVFs="
+    "version": "10.0.5",
+    "hash": "sha256-KrP+hE3gk7pATbJYZsJ1LHiXjzLA+ntHW7G/VGgHk2g="
   },
   {
     "pname": "Serilog",
@@ -161,8 +161,8 @@
   },
   {
     "pname": "Tmds.DBus",
-    "version": "0.90.3",
-    "hash": "sha256-/yBQpjsIqbY4JFBxxVKXPR2S/N1TMLG5QPXvScSCdEk="
+    "version": "0.91.1",
+    "hash": "sha256-MtHZFutIm0VKVkM/kRMucZIRL0jAEEPSj2D2MLxbAH4="
   },
   {
     "pname": "Tmds.DBus.Protocol",
diff --git a/pkgs/by-name/cr/crossmacro/package.nix b/pkgs/by-name/cr/crossmacro/package.nix
index 2e218cb4f7e1..07856440a205 100644
--- a/pkgs/by-name/cr/crossmacro/package.nix
+++ b/pkgs/by-name/cr/crossmacro/package.nix
@@ -29,13 +29,13 @@
 
 buildDotnetModule rec {
   pname = "crossmacro";
-  version = "0.9.9";
+  version = "1.0.1";
 
   src = fetchFromGitHub {
     owner = "alper-han";
     repo = "CrossMacro";
     tag = "v${version}";
-    hash = "sha256-LYjGuv+LMqug0sba64sGi9U+9XlK/A4CO+9H/6drgMw=";
+    hash = "sha256-ki5zEFqa9wSGw2jidGoN0Zb69to7ilXgb9fqrjo40ks=";
   };
 
   projectFile = "src/CrossMacro.UI.Linux/CrossMacro.UI.Linux.csproj";
diff --git a/pkgs/by-name/ct/ctlptl/package.nix b/pkgs/by-name/ct/ctlptl/package.nix
index 34e0fc1e83b4..e30477e99352 100644
--- a/pkgs/by-name/ct/ctlptl/package.nix
+++ b/pkgs/by-name/ct/ctlptl/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "ctlptl";
-  version = "0.9.0";
+  version = "0.9.1";
 
   src = fetchFromGitHub {
     owner = "tilt-dev";
     repo = "ctlptl";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-y957JaHg2SnDC6yvwI/0fBFjbEKOfKFsNqOOrqQe+TU=";
+    hash = "sha256-vbg3gaVCFkQ6jKguNq6ClstEKpTrk9ryUG572emEY4U=";
   };
 
-  vendorHash = "sha256-gJiarW1uYr5vl9nt+JN6/yRyYr9J0sfDVZcNLLcwPJY=";
+  vendorHash = "sha256-b9lzCNjO0rrK/kJlw5dssuQD/cyf/Wu/LJ2YNQ645LE=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/cy/cyclonedx-python/package.nix b/pkgs/by-name/cy/cyclonedx-python/package.nix
index 80cf402c0519..431696e03d6f 100644
--- a/pkgs/by-name/cy/cyclonedx-python/package.nix
+++ b/pkgs/by-name/cy/cyclonedx-python/package.nix
@@ -6,14 +6,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "cyclonedx-python";
-  version = "7.2.2";
+  version = "7.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "CycloneDX";
     repo = "cyclonedx-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-nTQ0y2zn4idg6x8qVjK8DeZVCMnlXLEJg89ISYabp68=";
+    hash = "sha256-mBOkSgHGKc77zhcMmdsrlZLXsK2t00VFiGW5eSN2lxc=";
   };
 
   build-system = with python3Packages; [ poetry-core ];
diff --git a/pkgs/by-name/da/davmail/package.nix b/pkgs/by-name/da/davmail/package.nix
index 45ab61b1649c..e80be26e650e 100644
--- a/pkgs/by-name/da/davmail/package.nix
+++ b/pkgs/by-name/da/davmail/package.nix
@@ -12,11 +12,13 @@
   libxtst,
   coreutils,
   gnugrep,
+  zulu,
   preferGtk3 ? true,
+  preferZulu ? false,
 }:
 
 let
-  jre' = jdk.override { enableJavaFX = true; };
+  jre' = (if preferZulu then zulu else jdk).override { enableJavaFX = true; };
   gtk' = if preferGtk3 then gtk3 else gtk2;
 in
 stdenv.mkDerivation (finalAttrs: {
@@ -80,7 +82,11 @@ stdenv.mkDerivation (finalAttrs: {
     description = "Java application which presents a Microsoft Exchange server as local CALDAV, IMAP and SMTP servers";
     homepage = "https://davmail.sourceforge.net/";
     license = lib.licenses.gpl2Plus;
-    maintainers = with lib.maintainers; [ peterhoeg ];
+    maintainers = with lib.maintainers; [
+      peterhoeg
+      doronbehar
+      shymega
+    ];
     platforms = lib.platforms.all;
     mainProgram = "davmail";
   };
diff --git a/pkgs/by-name/de/deezer-desktop/package.nix b/pkgs/by-name/de/deezer-desktop/package.nix
index 20485351d119..ab20516815a8 100644
--- a/pkgs/by-name/de/deezer-desktop/package.nix
+++ b/pkgs/by-name/de/deezer-desktop/package.nix
@@ -8,15 +8,15 @@
 }:
 
 let
-  version = "7.1.110";
+  version = "7.1.120";
   srcs = {
     x86_64-linux = fetchurl {
       url = "https://github.com/aunetx/deezer-linux/releases/download/v${version}/deezer-desktop-${version}-x64.tar.xz";
-      hash = "sha256-g8HAAp36l0GrAg/bJOjlvNT13Z9p/geDbA5XQCk3QvM=";
+      hash = "sha256-RrsM8Rx/uYJpH9+w/XX0RoPw+N/+nzJCC+KFdbYzSdc=";
     };
     aarch64-linux = fetchurl {
       url = "https://github.com/aunetx/deezer-linux/releases/download/v${version}/deezer-desktop-${version}-arm64.tar.xz";
-      hash = "sha256-W6br5bvRwgrfSiwwO5OMwfReev7t3mvI6L0zTIIDiwI=";
+      hash = "sha256-WgCfX7Av8YoCHmhACyyVtxut0FUfAdgTAXaIBydWTRI=";
     };
   };
 
diff --git a/pkgs/by-name/dj/djhtml/package.nix b/pkgs/by-name/dj/djhtml/package.nix
index 7a57cf65e0ae..8c4eaf02efc3 100644
--- a/pkgs/by-name/dj/djhtml/package.nix
+++ b/pkgs/by-name/dj/djhtml/package.nix
@@ -5,14 +5,14 @@
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "djhtml";
-  version = "3.0.10";
+  version = "3.0.11";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "rtts";
     repo = "djhtml";
     tag = finalAttrs.version;
-    hash = "sha256-7K7/Zm6ORfza9AD+Jyl+0Q5zlxgF+WpH3a1O18VpT5k=";
+    hash = "sha256-l3qxPwnEyJ0sZWquaol0bOX7QvImLc8IRTfyE2yqXCo=";
   };
 
   build-system = [ python3Packages.setuptools ];
diff --git a/pkgs/by-name/dn/dn42-registry-wizard/package.nix b/pkgs/by-name/dn/dn42-registry-wizard/package.nix
index df27414acf54..41add124d1a3 100644
--- a/pkgs/by-name/dn/dn42-registry-wizard/package.nix
+++ b/pkgs/by-name/dn/dn42-registry-wizard/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "dn42-registry-wizard";
-  version = "0.4.17";
+  version = "0.4.19";
 
   src = fetchFromGitHub {
     owner = "Kioubit";
     repo = "dn42_registry_wizard";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-wczsDKHcf/izEhJp9THL9yoEfZHTZ0FoVU4CTxmNuAY=";
+    hash = "sha256-axtNkBX0OTm/3HwpZATsAefW/LEFDtTODLJgHJiFws8=";
   };
 
-  cargoHash = "sha256-Op0xjblw3fB1boRaYoVH9O+c2Zodi/TtJ6sQSiz/rLo=";
+  cargoHash = "sha256-VfdxsS8VIgDDyhNXML5jVl+9uxwHa83aWB6nJ7mHflI=";
 
   postInstall = ''
     mv $out/bin/{registry_wizard,dn42-registry-wizard}
diff --git a/pkgs/by-name/dw/dwmblocks/package.nix b/pkgs/by-name/dw/dwmblocks/package.nix
index 409e3692f810..3e9d6c92fd58 100644
--- a/pkgs/by-name/dw/dwmblocks/package.nix
+++ b/pkgs/by-name/dw/dwmblocks/package.nix
@@ -28,7 +28,12 @@ stdenv.mkDerivation {
       configFile =
         if lib.isDerivation conf || builtins.isPath conf then conf else writeText "blocks.def.h" conf;
     in
-    lib.optionalString (conf != null) "cp ${configFile} blocks.def.h";
+    lib.optionalString (conf != null) "cp ${configFile} blocks.def.h"
+    + ''
+      # gcc15
+      substituteInPlace dwmblocks.c \
+        --replace-fail 'void termhandler()' 'void termhandler(int signum)'
+    '';
 
   makeFlags = [ "PREFIX=$(out)" ];
 
diff --git a/pkgs/by-name/em/emmylua-doc-cli/package.nix b/pkgs/by-name/em/emmylua-doc-cli/package.nix
index 58984bca11bd..bf04b27f2c26 100644
--- a/pkgs/by-name/em/emmylua-doc-cli/package.nix
+++ b/pkgs/by-name/em/emmylua-doc-cli/package.nix
@@ -6,18 +6,18 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "emmylua_doc_cli";
-  version = "0.21.0";
+  version = "0.22.0";
 
   src = fetchFromGitHub {
     owner = "EmmyLuaLs";
     repo = "emmylua-analyzer-rust";
     tag = finalAttrs.version;
-    hash = "sha256-2H/8ILVk5QnLe099a25pzMEqJLRFDxMG/fQ3f5UwgmI=";
+    hash = "sha256-Zj5nLeTH/4sVElYP+erg6bSTX8jFqF7sqiXfaMam8pE=";
   };
 
   buildAndTestSubdir = "crates/emmylua_doc_cli";
 
-  cargoHash = "sha256-QdL4KtQ4sJUaviqMzxmC1KW4Qy5wO7c5koy0Pl8Eua0=";
+  cargoHash = "sha256-JNirHIKXFsiLme5oByerHjB/3lumuAr2u3pNfxh4qa0=";
 
   nativeInstallCheckInputs = [
     versionCheckHook
diff --git a/pkgs/by-name/et/ethercat/package.nix b/pkgs/by-name/et/ethercat/package.nix
index 197180f5639c..b0734d3a7745 100644
--- a/pkgs/by-name/et/ethercat/package.nix
+++ b/pkgs/by-name/et/ethercat/package.nix
@@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "ethercat";
-  version = "1.6.8";
+  version = "1.6.9";
 
   src = fetchFromGitLab {
     owner = "etherlab.org";
     repo = "ethercat";
     tag = finalAttrs.version;
-    hash = "sha256-yIlaAjPNcA7yIiCe+2kwk5IHIkwUv8bTxK0H3hu91MI=";
+    hash = "sha256-Msx0i1SAwlSMD3+vjGRNe36Yx9qdUYokVekGytZptqk=";
   };
 
   separateDebugInfo = true;
diff --git a/pkgs/by-name/ew/eww/package.nix b/pkgs/by-name/ew/eww/package.nix
index 16330866a4be..7019085acea8 100644
--- a/pkgs/by-name/ew/eww/package.nix
+++ b/pkgs/by-name/ew/eww/package.nix
@@ -15,13 +15,13 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "eww";
-  version = "0.6.0-unstable-2025-06-30";
+  version = "0.6.0-unstable-2026-03-05";
 
   src = fetchFromGitHub {
     owner = "elkowar";
     repo = "eww";
-    rev = "fddb4a09b107237819e661151e007b99b5cab36d";
-    hash = "sha256-PJW4LvW9FmkG9HyUtgXOq7MDjYtBc/iJuOxyf29nD0Y=";
+    rev = "865cf631d5bbb5f9fccc99b3f4cc80b9eeada18c";
+    hash = "sha256-fL12XFMsf/efSlbzQc7cCI366CwETkM6sWpEfcF9s6A=";
   };
 
   cargoHash = "sha256-Kf99eojqXvdbZ3eRS8GBgyLYNpZKJGIJtsOsvhhSVDk=";
diff --git a/pkgs/by-name/fd/fdtools/package.nix b/pkgs/by-name/fd/fdtools/package.nix
index e7cfff46f620..d1a56d54d88f 100644
--- a/pkgs/by-name/fd/fdtools/package.nix
+++ b/pkgs/by-name/fd/fdtools/package.nix
@@ -96,6 +96,6 @@ stdenv.mkDerivation {
     description = "Set of utilities for working with file descriptors";
     license = lib.licenses.gpl2Only;
     platforms = lib.platforms.linux;
-    maintainers = [ lib.maintainers.Profpatsch ];
+    maintainers = [ ];
   };
 }
diff --git a/pkgs/by-name/ff/fflogs/package.nix b/pkgs/by-name/ff/fflogs/package.nix
index 8fd44c0dcd99..a33dcddfd469 100644
--- a/pkgs/by-name/ff/fflogs/package.nix
+++ b/pkgs/by-name/ff/fflogs/package.nix
@@ -6,10 +6,10 @@
 
 let
   pname = "fflogs";
-  version = "9.0.24";
+  version = "9.0.33";
   src = fetchurl {
     url = "https://github.com/RPGLogs/Uploaders-fflogs/releases/download/v${version}/fflogs-v${version}.AppImage";
-    hash = "sha256-9L9eNpK2MI3P+mhUDCAzfi3YDdWpHGjiUS5LjksUjqo=";
+    hash = "sha256-gUIETMc0JQXONBt0+Pw52y37Pw4Wh5CHo1uY6IBhvkc=";
   };
   extracted = appimageTools.extractType2 { inherit pname version src; };
 in
diff --git a/pkgs/by-name/fi/fiddler-everywhere/package.nix b/pkgs/by-name/fi/fiddler-everywhere/package.nix
index be528a39d3aa..cebac8723083 100644
--- a/pkgs/by-name/fi/fiddler-everywhere/package.nix
+++ b/pkgs/by-name/fi/fiddler-everywhere/package.nix
@@ -8,11 +8,11 @@
 
 let
   pname = "fiddler-everywhere";
-  version = "7.7.1";
+  version = "7.7.2";
 
   src = fetchurl {
     url = "https://downloads.getfiddler.com/linux/fiddler-everywhere-${version}.AppImage";
-    hash = "sha256-mwHtT7GAR7CdOVvFPpzqF6j1Ed5kBlJ39RyITg1BgAs=";
+    hash = "sha256-kxS15ymgc8qJANYUnrm8TbuFIYsGlw23pfuuKrROQyE=";
   };
 
   appimageContents = appimageTools.extract {
diff --git a/pkgs/by-name/fl/flare-signal/package.nix b/pkgs/by-name/fl/flare-signal/package.nix
index 0da369dc3475..ff74d7c87bc1 100644
--- a/pkgs/by-name/fl/flare-signal/package.nix
+++ b/pkgs/by-name/fl/flare-signal/package.nix
@@ -24,18 +24,18 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "flare";
-  version = "0.20.1";
+  version = "0.20.2";
 
   src = fetchFromGitLab {
     owner = "schmiddi-on-mobile";
     repo = "flare";
     tag = finalAttrs.version;
-    hash = "sha256-DVbN+VUk7K2CBwQ4rOGIJj+KYOlB9TeDUGE+s5docok=";
+    hash = "sha256-LjUd+tq4nBJtBXeOH1SyjKS37R8f5rVvDk+jTR/Mdvs=";
   };
 
   cargoDeps = rustPlatform.fetchCargoVendor {
     inherit (finalAttrs) pname version src;
-    hash = "sha256-/3xcouWXUxoVFHV05eD4IEuQbPAn+iFIwB8tP+jJm+4=";
+    hash = "sha256-dXPCyHc6+iS4YMIVy0vOkPG57GEW1ce5sSgyw6k0M3U=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/fl/flashlabel-yxwl/package.nix b/pkgs/by-name/fl/flashlabel-yxwl/package.nix
index b862bfd7cb38..ba3f85b4b3e8 100644
--- a/pkgs/by-name/fl/flashlabel-yxwl/package.nix
+++ b/pkgs/by-name/fl/flashlabel-yxwl/package.nix
@@ -67,7 +67,10 @@ stdenv.mkDerivation rec {
         - A81
         - A81H
         - C80
+        - C801
         - C80H
+        - C80S1
+        - C80Y1
         - D80
         - D80 Pro
         - Y8
diff --git a/pkgs/by-name/fl/flclash/package.nix b/pkgs/by-name/fl/flclash/package.nix
index 1846b6f71c09..eb941222e743 100644
--- a/pkgs/by-name/fl/flclash/package.nix
+++ b/pkgs/by-name/fl/flclash/package.nix
@@ -32,7 +32,7 @@ let
     description = "Proxy client based on ClashMeta, simple and easy to use";
     homepage = "https://github.com/chen08209/FlClash";
     license = with lib.licenses; [ gpl3Plus ];
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ VZstless ];
   };
 
   core = buildGoModule {
diff --git a/pkgs/by-name/fr/freetube/darwin-targets.patch b/pkgs/by-name/fr/freetube/darwin-targets.patch
deleted file mode 100644
index 509bca6a34cd..000000000000
--- a/pkgs/by-name/fr/freetube/darwin-targets.patch
+++ /dev/null
@@ -1,13 +0,0 @@
-diff --git a/_scripts/build.js b/_scripts/build.js
-index ee1b7fa1c..1a4c9c6b2 100644
---- a/_scripts/build.js
-+++ b/_scripts/build.js
-@@ -16,7 +16,7 @@ if (platform === 'darwin') {
-     arch = Arch.arm64
-   }
- 
--  targets = Platform.MAC.createTarget(['DMG', 'zip', '7z'], arch)
-+  targets = Platform.MAC.createTarget(['dir'], arch)
- } else if (platform === 'win32') {
-   let arch = Arch.x64
- 
diff --git a/pkgs/by-name/fr/freetube/package.nix b/pkgs/by-name/fr/freetube/package.nix
index ac8a7260a28f..9114823a9b3a 100644
--- a/pkgs/by-name/fr/freetube/package.nix
+++ b/pkgs/by-name/fr/freetube/package.nix
@@ -20,13 +20,13 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "freetube";
-  version = "0.23.15";
+  version = "0.24.0";
 
   src = fetchFromGitHub {
     owner = "FreeTubeApp";
     repo = "FreeTube";
     tag = "v${finalAttrs.version}-beta";
-    hash = "sha256-tYRvR75qbJwt6U4KzT9jrJjO5UznpoALqhUTDkeUlzI=";
+    hash = "sha256-4XyN7ENsDwLNB/dt7pp8z0sbdmHSNIyVEHlp5GXIues=";
   };
 
   # Darwin requires writable Electron dist
@@ -45,12 +45,12 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     (replaceVars ./patch-build-script.patch {
       electron-version = electron.version;
     })
-    ./darwin-targets.patch
+    ./targets.patch
   ];
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = "${finalAttrs.src}/yarn.lock";
-    hash = "sha256-sxDlPB3CWbFAm3WZ6AlwuVu/4UFR9Stl3q0wpkUXPPU=";
+    hash = "sha256-9rO/XYfOf1TEQOpb5clCfdTiuDeynpnk6L4WpcIIWGk=";
   };
 
   nativeBuildInputs = [
@@ -70,7 +70,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
 
     makeWrapper ${lib.getExe electron} $out/bin/freetube \
       --add-flags "$out/share/freetube/resources/app.asar" \
-      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform=wayland --enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}"
+      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}"
 
     install -D _icons/icon.svg $out/share/icons/hicolor/scalable/apps/freetube.svg
   ''
diff --git a/pkgs/by-name/fr/freetube/patch-build-script.patch b/pkgs/by-name/fr/freetube/patch-build-script.patch
index 0e8baf9d4e3a..f925f420212a 100644
--- a/pkgs/by-name/fr/freetube/patch-build-script.patch
+++ b/pkgs/by-name/fr/freetube/patch-build-script.patch
@@ -1,13 +1,13 @@
-diff --git a/_scripts/ebuilder.config.js b/_scripts/ebuilder.config.js
-index 14d0d9df1..c5fc569c8 100644
---- a/_scripts/ebuilder.config.js
-+++ b/_scripts/ebuilder.config.js
-@@ -1,6 +1,8 @@
- const { name, productName } = require('../package.json')
+diff --git a/_scripts/ebuilder.config.mjs b/_scripts/ebuilder.config.mjs
+index bef1f6f1d..d2ee86611 100644
+--- a/_scripts/ebuilder.config.mjs
++++ b/_scripts/ebuilder.config.mjs
+@@ -2,6 +2,8 @@ import packageDetails from '../package.json' with { type: 'json' }
  
- const config = {
+ /** @type {import('electron-builder').Configuration} */
+ export default {
 +  electronVersion: "@electron-version@",
 +  electronDist: "electron-dist",
-   appId: `io.freetubeapp.${name}`,
-   copyright: 'Copyleft © 2020-2025 freetubeapp@protonmail.com',
+   appId: `io.freetubeapp.${packageDetails.name}`,
+   copyright: 'Copyleft © 2020-2026 freetubeapp@protonmail.com',
    // asar: false,
diff --git a/pkgs/by-name/fr/freetube/targets.patch b/pkgs/by-name/fr/freetube/targets.patch
new file mode 100644
index 000000000000..eeb0f535b333
--- /dev/null
+++ b/pkgs/by-name/fr/freetube/targets.patch
@@ -0,0 +1,22 @@
+diff --git a/_scripts/build.mjs b/_scripts/build.mjs
+index 1617f1ad5..b9a1de43b 100644
+--- a/_scripts/build.mjs
++++ b/_scripts/build.mjs
+@@ -14,7 +14,7 @@ if (platform === 'darwin') {
+     arch = Arch.arm64
+   }
+ 
+-  targets = Platform.MAC.createTarget(['DMG', 'zip', '7z'], arch)
++  targets = Platform.MAC.createTarget(['dir'], arch)
+ } else if (platform === 'win32') {
+   let arch = Arch.x64
+ 
+@@ -34,7 +34,7 @@ if (platform === 'darwin') {
+     arch = Arch.armv7l
+   }
+ 
+-  targets = Platform.LINUX.createTarget(['deb', 'zip', '7z', 'rpm', 'AppImage', 'pacman'], arch)
++  targets = Platform.LINUX.createTarget(['dir'], arch)
+ }
+ 
+ const output = await build({ targets, config, publish: 'never' })
diff --git a/pkgs/by-name/ge/geteltorito/package.nix b/pkgs/by-name/ge/geteltorito/package.nix
index 7b367555cc5e..51f042c097ed 100644
--- a/pkgs/by-name/ge/geteltorito/package.nix
+++ b/pkgs/by-name/ge/geteltorito/package.nix
@@ -50,7 +50,7 @@ stdenv.mkDerivation (finalAttrs: {
   meta = {
     description = "Extract the initial/default boot image from a CD image if existent";
     homepage = "https://userpages.uni-koblenz.de/~krienke/ftp/noarch/geteltorito/";
-    maintainers = [ lib.maintainers.Profpatsch ];
+    maintainers = [ ];
     license = lib.licenses.gpl2Only;
     mainProgram = "geteltorito";
   };
diff --git a/pkgs/by-name/gh/gh-token/package.nix b/pkgs/by-name/gh/gh-token/package.nix
index 10b63dd5389f..05a0728f0442 100644
--- a/pkgs/by-name/gh/gh-token/package.nix
+++ b/pkgs/by-name/gh/gh-token/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule rec {
   pname = "gh-token";
-  version = "2.0.9";
+  version = "2.0.10";
 
   src = fetchFromGitHub {
     owner = "Link-";
     repo = "gh-token";
     rev = "v${version}";
-    hash = "sha256-ff3Dzajh/7p0yNSKCHJzJcqkTpf09zuZ6Hp0ygDv6o0=";
+    hash = "sha256-pjOGEd2c2yRua3qOTEKuTg89YbVBTAIvvZ/Rd8NFesI=";
   };
 
   vendorHash = "sha256-brAFqWdvaJwURdWb9m8x21nhuXeRxIJX6FsUfGiFIWQ=";
diff --git a/pkgs/by-name/gi/ginkgo/package.nix b/pkgs/by-name/gi/ginkgo/package.nix
index 3bcddbe18d28..2cd51b4461fa 100644
--- a/pkgs/by-name/gi/ginkgo/package.nix
+++ b/pkgs/by-name/gi/ginkgo/package.nix
@@ -2,6 +2,7 @@
   lib,
   buildGoModule,
   fetchFromGitHub,
+  fetchpatch,
   testers,
   ginkgo,
 }:
@@ -18,6 +19,14 @@ buildGoModule (finalAttrs: {
   };
   vendorHash = "sha256-I3n1FPINb/nhi4QUzRFEspn7REN1dQEPg8Bhb3PemQU=";
 
+  patches = [
+    # Add ArtifactDir() to support Go 1.26 testing.TB interface
+    # https://github.com/onsi/ginkgo/pull/1648
+    (fetchpatch {
+      url = "https://github.com/onsi/ginkgo/pull/1648.patch";
+      hash = "sha256-O8YWPAvf0ukPWSTm6+YKnV/L+qSL0RCoBswmiQVXOKI=";
+    })
+  ];
   # integration tests expect more file changes
   # types tests are missing CodeLocation
   excludedPackages = [
diff --git a/pkgs/by-name/gi/git-gamble/package.nix b/pkgs/by-name/gi/git-gamble/package.nix
index 12254ca22105..cc5e06054042 100644
--- a/pkgs/by-name/gi/git-gamble/package.nix
+++ b/pkgs/by-name/gi/git-gamble/package.nix
@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "git-gamble";
-  version = "2.11.0";
+  version = "2.12.0";
 
   src = fetchFromGitLab {
     owner = "pinage404";
     repo = "git-gamble";
     rev = "version/${finalAttrs.version}";
-    hash = "sha256-b7jGrt8uJ9arH4EEsOOPCIcQmhwrrJb8uXcSsZPFrNQ=";
+    hash = "sha256-6pH1gqZaMhXlm1JNu2D7JPO8KF9bA/DxqzM7t+2BUwQ=";
   };
 
-  cargoHash = "sha256-lf66me4ot5lvrz2JTj8MreaHyVwOcFSVfPGX9lBTKug=";
+  cargoHash = "sha256-LKwhkZstsccnpg347xtryukx2d6AFbCJVJBB3bnN3bc=";
 
   nativeCheckInputs = [ gitMinimal ];
   preCheck = ''
diff --git a/pkgs/by-name/gi/github-distributed-owners/package.nix b/pkgs/by-name/gi/github-distributed-owners/package.nix
index 579da842b12c..8b47253fa75f 100644
--- a/pkgs/by-name/gi/github-distributed-owners/package.nix
+++ b/pkgs/by-name/gi/github-distributed-owners/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "github-distributed-owners";
-  version = "0.1.11";
+  version = "0.1.12";
 
   src = fetchFromGitHub {
     owner = "andrewring";
     repo = "github-distributed-owners";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-oLRcH1lgRxlYIlyk3bPWO5YmCIq462YUjBjMSPOF7Ic=";
+    hash = "sha256-Ry7l4hiVWtSm47DYG38N0L7V/z5wNfPm9tt+8Zs5tsI=";
   };
 
-  cargoHash = "sha256-pt/GoXF/uSU78pZqG8PgFe+tlbwZH2qpGQD7jgC52NM=";
+  cargoHash = "sha256-xLc9T2rS511/qWyZpqSNFVyfyf4+gzheOF95TpVlUfc=";
   nativeInstallCheckInputs = [ versionCheckHook ];
   doInstallCheck = true;
 
diff --git a/pkgs/by-name/gl/glaze/package.nix b/pkgs/by-name/gl/glaze/package.nix
index ed71a274a6b6..020f408f79d3 100644
--- a/pkgs/by-name/gl/glaze/package.nix
+++ b/pkgs/by-name/gl/glaze/package.nix
@@ -11,13 +11,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "glaze";
-  version = "7.1.0";
+  version = "7.2.2";
 
   src = fetchFromGitHub {
     owner = "stephenberry";
     repo = "glaze";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-W48BDsxUrFjjqUFwBcBqHr5Y7h+BtGGWdioGukBqzbE=";
+    hash = "sha256-E92oxXOcmA4d3s2k0D+DppnHt0Ks900+3W0XoGbbcG4=";
   };
 
   nativeBuildInputs = [ cmake ];
@@ -31,9 +31,14 @@ stdenv.mkDerivation (finalAttrs: {
   ];
 
   meta = {
+    homepage = "https://stephenberry.github.io/glaze/";
+    changelog = "https://github.com/stephenberry/glaze/releases/tag/v${finalAttrs.version}";
     description = "Extremely fast, in memory, JSON and interface library for modern C++";
     platforms = lib.platforms.all;
-    maintainers = with lib.maintainers; [ moni ];
+    maintainers = with lib.maintainers; [
+      moni
+      miniharinn
+    ];
     license = lib.licenses.mit;
   };
 })
diff --git a/pkgs/by-name/go/go-crx3/package.nix b/pkgs/by-name/go/go-crx3/package.nix
index 0b7401e7a3a9..0a950696f73f 100644
--- a/pkgs/by-name/go/go-crx3/package.nix
+++ b/pkgs/by-name/go/go-crx3/package.nix
@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "go-crx3";
-  version = "1.6.0";
+  version = "1.7.0";
 
   src = fetchFromGitHub {
     owner = "mmadfox";
     repo = "go-crx3";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XNUOnm898GtCIojWR4tCHZNDHhh+DfJvvBvTDBI8Wzg=";
+    hash = "sha256-2AuVcQIurylmxAT/QUhYvymACWDeUBUn0ukSSn5IzWA=";
   };
 
-  vendorHash = "sha256-LEIB/VZA3rqTeH9SesZ/jrfVddl6xtmoRWHP+RwGmCk=";
+  vendorHash = "sha256-00NpGn0moeDhP8oP7hueRyVnB1enS8iN2fTDfTckIqY=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/ho/hooky/package.nix b/pkgs/by-name/ho/hooky/package.nix
new file mode 100644
index 000000000000..04ba4fb69eb5
--- /dev/null
+++ b/pkgs/by-name/ho/hooky/package.nix
@@ -0,0 +1,67 @@
+{
+  lib,
+  haskell,
+  fetchFromGitHub,
+}:
+
+let
+  # Remove when haskellPackages is on GHC 9.12
+  haskellPackages = haskell.packages.ghc912;
+in
+
+haskellPackages.mkDerivation {
+  pname = "hooky";
+  version = "1.0.3";
+
+  src = fetchFromGitHub {
+    owner = "brandonchinn178";
+    repo = "hooky";
+    rev = "5ce665f376bc80948f45764bf3f2e0d590245938";
+    hash = "sha256-w4sWD5dZTNKwrYhrJw9RcwGoeNxpJnm/6RRqYjiIiBg=";
+  };
+
+  isLibrary = true;
+  isExecutable = true;
+  libraryHaskellDepends = with haskellPackages; [
+    base
+    ansi-terminal
+    bytestring
+    concurrent-output
+    containers
+    directory
+    filepath
+    kdl-hs
+    process
+    scientific
+    text
+    time
+    unliftio
+  ];
+  executableHaskellDepends = with haskellPackages; [
+    base
+    containers
+    directory
+    filepath
+    optparse-applicative
+    process
+    text
+    unliftio
+  ];
+  testHaskellDepends = with haskellPackages; [
+    base
+    directory
+    filepath
+    process
+    skeletest
+    temporary
+    text
+    unliftio
+  ];
+  doCheck = false;
+
+  homepage = "https://github.com/brandonchinn178/hooky";
+  description = "A minimal git hooks manager.";
+  maintainers = with lib.maintainers; [ brandonchinn178 ];
+  license = lib.licenses.bsd3;
+  mainProgram = "hooky";
+}
diff --git a/pkgs/by-name/hu/hugo/package.nix b/pkgs/by-name/hu/hugo/package.nix
index 2fe1ea2668d6..9b81b25d694d 100644
--- a/pkgs/by-name/hu/hugo/package.nix
+++ b/pkgs/by-name/hu/hugo/package.nix
@@ -11,16 +11,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "hugo";
-  version = "0.159.0";
+  version = "0.159.2";
 
   src = fetchFromGitHub {
     owner = "gohugoio";
     repo = "hugo";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-R+XUgATk6KHaQ+hTIbFSHEzC0VIzaVLna0mMGDRZILw=";
+    hash = "sha256-86qlh4did365g75j3fk5gkBp3T3YH3zEnNhaOrPFVcI=";
   };
 
-  vendorHash = "sha256-qAZ+EnU1Yaom8QHjaMoAJSaN7HslNpwifmBMlgnmmAE=";
+  vendorHash = "sha256-w6wjKB4jQejxW7IqpZaujxlZSUxWYqHiPI6aqOOD2+0=";
 
   checkFlags =
     let
diff --git a/pkgs/by-name/hy/hydrus/package.nix b/pkgs/by-name/hy/hydrus/package.nix
index d108f61d9e14..6232083ed6c3 100644
--- a/pkgs/by-name/hy/hydrus/package.nix
+++ b/pkgs/by-name/hy/hydrus/package.nix
@@ -16,14 +16,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "hydrus";
-  version = "663";
+  version = "665";
   pyproject = false;
 
   src = fetchFromGitHub {
     owner = "hydrusnetwork";
     repo = "hydrus";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-xIQx3aCLbFtdiugLDZsZpsv6TOUj84f6U+80rDZ9mZk=";
+    hash = "sha256-NMSZ+5slYyfrZlDig/A2QkfZBphtccmlbrsldoL/Tvk=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/hy/hyprshell/package.nix b/pkgs/by-name/hy/hyprshell/package.nix
index f2260457b228..d7e14c60df11 100644
--- a/pkgs/by-name/hy/hyprshell/package.nix
+++ b/pkgs/by-name/hy/hyprshell/package.nix
@@ -13,16 +13,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "hyprshell";
-  version = "4.9.4";
+  version = "4.9.5";
 
   src = fetchFromGitHub {
     owner = "H3rmt";
     repo = "hyprshell";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-GLNl/KujW97Lpn9fjMjt7ZwaBpgMJe1NTD94KxzNNlo=";
+    hash = "sha256-dTZQ2e7Ie3CMiaDXZlSWnUHgMm375BIyVQ75LaNSDd8=";
   };
 
-  cargoHash = "sha256-IQ15ZxUJzx+pEl0K8IDqDTp05TfBbjxUeTru42s/phw=";
+  cargoHash = "sha256-8r+f+iNLICssybsL2D/SFrjguZA2wVLGjEgXZhsmIgU=";
 
   nativeBuildInputs = [
     wrapGAppsHook4
diff --git a/pkgs/by-name/in/inputplumber/package.nix b/pkgs/by-name/in/inputplumber/package.nix
index 85f9f3167b88..94edc5abac56 100644
--- a/pkgs/by-name/in/inputplumber/package.nix
+++ b/pkgs/by-name/in/inputplumber/package.nix
@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "inputplumber";
-  version = "0.75.2";
+  version = "0.76.0";
 
   src = fetchFromGitHub {
     owner = "ShadowBlip";
     repo = "InputPlumber";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-KiSroDcaWvzr5sP0jzr1GFyk0lHbtCFJrP3g5/b3hLQ=";
+    hash = "sha256-81M/nVjLw+dI/ch+l/RJvq4ClMVCQqx+IfwPVPDB6HE=";
   };
 
-  cargoHash = "sha256-VwQ38Jv5OvyBqo9BBTnpUjgNwAbWyIdUKFKXsGC6+Mo=";
+  cargoHash = "sha256-x/jPB3QClaYt/9fVnuz1yDUWsurcrx/mKouHMv2QsFc=";
 
   nativeBuildInputs = [
     pkg-config
diff --git a/pkgs/by-name/ip/ipamjfont/package.nix b/pkgs/by-name/ip/ipamjfont/package.nix
index 1f11aa4f7df0..ac74a663fef3 100644
--- a/pkgs/by-name/ip/ipamjfont/package.nix
+++ b/pkgs/by-name/ip/ipamjfont/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenvNoCC,
   fetchzip,
+  installFonts,
   writeShellApplication,
   curl,
   gnugrep,
@@ -22,13 +23,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
       stripRoot = false;
     };
 
-  installPhase = ''
-    runHook preInstall
-
-    install -Dm444 *.ttf -t "$out/share/fonts/truetype/"
-
-    runHook postInstall
-  '';
+  nativeBuildInputs = [ installFonts ];
 
   passthru = {
     updateScript = lib.getExe (writeShellApplication {
diff --git a/pkgs/by-name/ir/irrd/package.nix b/pkgs/by-name/ir/irrd/package.nix
index 3d1f5efa7b9e..0590a268825e 100644
--- a/pkgs/by-name/ir/irrd/package.nix
+++ b/pkgs/by-name/ir/irrd/package.nix
@@ -65,14 +65,14 @@ in
 
 py.pkgs.buildPythonPackage (finalAttrs: {
   pname = "irrd";
-  version = "4.5.1";
+  version = "4.5.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "irrdnet";
     repo = "irrd";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-98DXooabwJtjI+m/HNMGBkZKT843bEbTaXJgflVdx/A=";
+    hash = "sha256-Lr2+3pG22l479mNrn1JFiea+zp+n9qWVX1yTp0Cj4Ds=";
   };
 
   pythonRelaxDeps = true;
diff --git a/pkgs/by-name/je/jellyfin-web/package.nix b/pkgs/by-name/je/jellyfin-web/package.nix
index 8ebd24ab8fff..b6f97daf670c 100644
--- a/pkgs/by-name/je/jellyfin-web/package.nix
+++ b/pkgs/by-name/je/jellyfin-web/package.nix
@@ -13,7 +13,7 @@
 }:
 buildNpmPackage (finalAttrs: {
   pname = "jellyfin-web";
-  version = "10.11.6";
+  version = "10.11.7";
 
   src =
     assert finalAttrs.version == jellyfin.version;
@@ -21,7 +21,7 @@ buildNpmPackage (finalAttrs: {
       owner = "jellyfin";
       repo = "jellyfin-web";
       tag = "v${finalAttrs.version}";
-      hash = "sha256-qmpVuxwsMM9Fhjkrrkxh+pMDh6+c3rZde7in5vIpaDg=";
+      hash = "sha256-DA3UDAcaHyxJmLfw8mRgRNxwOiGu6QIm9QHDrMAaG1w=";
     };
 
   nodejs = nodejs_20; # does not build with 22
@@ -31,7 +31,7 @@ buildNpmPackage (finalAttrs: {
       --replace-fail "git describe --always --dirty" "echo ${finalAttrs.src.rev}" \
   '';
 
-  npmDepsHash = "sha256-bXZn2FOWeIN8VTNLbKe7jM7yDtE2QRmyoWNZXgE5W4Q=";
+  npmDepsHash = "sha256-U90aZ3Kym0yxcsNUSAdm3P3XU6Nb2GjEru64wODrm8M=";
 
   preBuild = ''
     # using sass-embedded fails at executing node_modules/sass-embedded-linux-x64/dart-sass/src/dart
diff --git a/pkgs/by-name/je/jellyfin/package.nix b/pkgs/by-name/je/jellyfin/package.nix
index a76f3aef6eb6..cb46e96d91ff 100644
--- a/pkgs/by-name/je/jellyfin/package.nix
+++ b/pkgs/by-name/je/jellyfin/package.nix
@@ -14,13 +14,13 @@
 
 buildDotnetModule (finalAttrs: {
   pname = "jellyfin";
-  version = "10.11.6"; # ensure that jellyfin-web has matching version
+  version = "10.11.7"; # ensure that jellyfin-web has matching version
 
   src = fetchFromGitHub {
     owner = "jellyfin";
     repo = "jellyfin";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bF/N6FC1/qfBar2KNut8KY3Rz+pqArCt4HV3NAH8eaU=";
+    hash = "sha256-u2J55xGjjHwT+nrGvmO01JUS9edaxzYcTdoau3xqnDM=";
   };
 
   propagatedBuildInputs = [ sqlite ];
diff --git a/pkgs/by-name/kd/kdotool/package.nix b/pkgs/by-name/kd/kdotool/package.nix
index 79ef65e19ac5..f0e0650ce685 100644
--- a/pkgs/by-name/kd/kdotool/package.nix
+++ b/pkgs/by-name/kd/kdotool/package.nix
@@ -8,29 +8,17 @@
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
-  version = "0.2.2-pre";
+  version = "0.2.2";
   pname = "kdotool";
 
   src = fetchFromGitHub {
     owner = "jinliu";
     repo = "kdotool";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-qx4bWAFQcoLM/r4aNzmoZdjclw8ccAW8lKLda6ON1aQ=";
+    hash = "sha256-aJRqFcKyu4/aqI3WtH9NjzjNgiI6lq0VgCXNGaNdyvE=";
   };
 
-  patches = [
-    # Remove these two on next release.
-    (fetchpatch {
-      url = "https://github.com/jinliu/kdotool/commit/049e3f5620ad8c5484241d7d06d742bc17d423ed.patch";
-      hash = "sha256-VTpHlT6XMVRgJIeLjxZPHkzaYFZCYtS8IAD0mKZ8rzs=";
-    })
-    (fetchpatch {
-      url = "https://github.com/jinliu/kdotool/commit/e0a3bff3b5d9882033dd72836e5fcff572b64135.patch";
-      hash = "sha256-6IsV9O2h9N/FxGQRHS8qAbEqdr7282ziGza5K52vpPk=";
-    })
-  ];
-
-  cargoHash = "sha256-ASR2zMwVCKeEZPYQNoO54J00eZyTn1i6FE0NBCJWSCs=";
+  cargoHash = "sha256-QrJVN2O/pDCIpD1ioFPZyj7au3DQtU3l/I440WsyYWo=";
 
   nativeBuildInputs = [ pkg-config ];
   buildInputs = [ dbus ];
diff --git a/pkgs/by-name/ki/kiro/package.nix b/pkgs/by-name/ki/kiro/package.nix
index e77aab6a994a..c14f634e97e6 100644
--- a/pkgs/by-name/ki/kiro/package.nix
+++ b/pkgs/by-name/ki/kiro/package.nix
@@ -14,7 +14,7 @@ in
   inherit useVSCodeRipgrep;
   commandLineArgs = extraCommandLineArgs;
 
-  version = "0.11.63";
+  version = "0.11.107";
   pname = "kiro";
 
   # You can find the current VSCode version in the About dialog:
diff --git a/pkgs/by-name/ki/kiro/sources.json b/pkgs/by-name/ki/kiro/sources.json
index 3f5465236ba2..a07baf8d3781 100644
--- a/pkgs/by-name/ki/kiro/sources.json
+++ b/pkgs/by-name/ki/kiro/sources.json
@@ -1,14 +1,14 @@
 {
   "x86_64-linux": {
-    "url": "https://prod.download.desktop.kiro.dev/releases/stable/linux-x64/signed/0.11.63/tar/kiro-ide-0.11.63-stable-linux-x64.tar.gz",
-    "hash": "sha256-Y5yC28hqVm5rC/Tz1yHLUk9NMEesLQp5vYed4tp/AP4="
+    "url": "https://prod.download.desktop.kiro.dev/releases/stable/linux-x64/signed/0.11.107/tar/kiro-ide-0.11.107-stable-linux-x64.tar.gz",
+    "hash": "sha256-FK0NGElDjthy4vf+Oc1yyXeV/gCBK/IF9CP0B9SryYo="
   },
   "x86_64-darwin": {
-    "url": "https://prod.download.desktop.kiro.dev/releases/stable/darwin-x64/signed/0.11.63/kiro-ide-0.11.63-stable-darwin-x64.dmg",
-    "hash": "sha256-UkBfutRBL1fngTH92kyHyurKFC8hVDcE99Mwj52Aa10="
+    "url": "https://prod.download.desktop.kiro.dev/releases/stable/darwin-x64/signed/0.11.107/kiro-ide-0.11.107-stable-darwin-x64.dmg",
+    "hash": "sha256-79bNKtO9yvimz8Qmv/slfNVTSU7Q7HffaCR7nrDiZVQ="
   },
   "aarch64-darwin": {
-    "url": "https://prod.download.desktop.kiro.dev/releases/stable/darwin-arm64/signed/0.11.63/kiro-ide-0.11.63-stable-darwin-arm64.dmg",
-    "hash": "sha256-gy51HdrqF3Hnap9uTirR7zQMwErXUbki7YfWcwJNjBE="
+    "url": "https://prod.download.desktop.kiro.dev/releases/stable/darwin-arm64/signed/0.11.107/kiro-ide-0.11.107-stable-darwin-arm64.dmg",
+    "hash": "sha256-QcyiYb1WosjYKXKC6nZ/e/ZFT6jgynL5RpZWY6KNx0Q="
   }
 }
diff --git a/pkgs/by-name/ki/kirsch/package.nix b/pkgs/by-name/ki/kirsch/package.nix
index 7999eeb34d0b..be7efe5f1577 100644
--- a/pkgs/by-name/ki/kirsch/package.nix
+++ b/pkgs/by-name/ki/kirsch/package.nix
@@ -7,11 +7,11 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "kirsch";
-  version = "0.7.2";
+  version = "0.7.3";
 
   src = fetchzip {
     url = "https://github.com/molarmanful/kirsch/releases/download/v${finalAttrs.version}/kirsch-release_v${finalAttrs.version}.zip";
-    hash = "sha256-olm6Q6xcfSEeWXToAs/kse9QNH8k87i8vaPblU6ICnk=";
+    hash = "sha256-j7LMtOQqOl4aTDf/ytVci2M2plFliLkswRsQhY1EWC4=";
   };
 
   nativeBuildInputs = [ mkfontscale ];
diff --git a/pkgs/by-name/la/lagrange/package.nix b/pkgs/by-name/la/lagrange/package.nix
index 0ce3f53e2bba..2840c33984ef 100644
--- a/pkgs/by-name/la/lagrange/package.nix
+++ b/pkgs/by-name/la/lagrange/package.nix
@@ -22,13 +22,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "lagrange";
-  version = "1.20.2";
+  version = "1.20.3";
 
   src = fetchFromGitHub {
     owner = "skyjake";
     repo = "lagrange";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Rin9frCxY7vMJQbErtR7pXss2GciL4LbXg+BFHFNjn4=";
+    hash = "sha256-i6W4618/r3Xc9dNNxkc9eHlgHK2amZ0FQtq/qtr5sE8=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/la/lazyworktree/package.nix b/pkgs/by-name/la/lazyworktree/package.nix
index c0439e079124..72af85f673b5 100644
--- a/pkgs/by-name/la/lazyworktree/package.nix
+++ b/pkgs/by-name/la/lazyworktree/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "lazyworktree";
-  version = "1.44.0";
+  version = "1.45.0";
 
   src = fetchFromGitHub {
     owner = "chmouel";
     repo = "lazyworktree";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-sl3rlsc5HdtmYTcgo5LvDGzZroeo33gnW5F+YZiW54k=";
+    hash = "sha256-qOJlX8kMGvzlMWII0dit8DnDrgRuhqa6VER7PoUMod0=";
   };
 
   vendorHash = "sha256-EZY4flrYM3JRY5i1qsjp5vvGW32IvDHeINdYuQJgUuQ=";
diff --git a/pkgs/by-name/li/libhx/package.nix b/pkgs/by-name/li/libhx/package.nix
index b944d878d3d7..88aa5071ae06 100644
--- a/pkgs/by-name/li/libhx/package.nix
+++ b/pkgs/by-name/li/libhx/package.nix
@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "libhx";
-  version = "5.3";
+  version = "5.4";
 
   src = fetchFromCodeberg {
     tag = "v${finalAttrs.version}";
     owner = "jengelh";
     repo = "libhx";
-    hash = "sha256-q9cIZhQx1BjD7Py0VEevKwFflJ1cdFn9RcW6q52t/h8=";
+    hash = "sha256-rM0J9IHjxgHsedFiCl6LA54JBHkwuHFYfoFp4j6b3Kw=";
   };
 
   nativeBuildInputs = [ autoreconfHook ];
diff --git a/pkgs/by-name/li/librelane/package.nix b/pkgs/by-name/li/librelane/package.nix
index bd8bc20ab0f2..93a445e3d4c2 100644
--- a/pkgs/by-name/li/librelane/package.nix
+++ b/pkgs/by-name/li/librelane/package.nix
@@ -23,14 +23,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "librelane";
-  version = "3.0.0";
+  version = "3.0.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "librelane";
     repo = "librelane";
     tag = finalAttrs.version;
-    hash = "sha256-BZmoneeMpnnQ2wUb5sorLFsFZsLaKclhAtCIiMsW8Qc=";
+    hash = "sha256-NrfZm7GlFxIEIqaPB2SubKMV7DdqYzRtdRfIePMqwgM=";
   };
 
   build-system = [
diff --git a/pkgs/by-name/li/librewolf-unwrapped/librewolf.nix b/pkgs/by-name/li/librewolf-unwrapped/librewolf.nix
index 2a964bb1ab76..451272246c32 100644
--- a/pkgs/by-name/li/librewolf-unwrapped/librewolf.nix
+++ b/pkgs/by-name/li/librewolf-unwrapped/librewolf.nix
@@ -23,6 +23,9 @@ rec {
       patch -p1 < ${source}/$patch_name
     done <${source}/assets/patches.txt
 
+    rm toolkit/components/ml/content/backends/OpenAIPipeline.mjs
+    rm -rf toolkit/components/ml/vendor/openai
+
     cp -r ${source}/themes/browser .
     cp ${source}/assets/search-config.json services/settings/dumps/main/search-config.json
     sed -i '/MOZ_SERVICES_HEALTHREPORT/ s/True/False/' browser/moz.configure
@@ -40,8 +43,8 @@ rec {
     echo "patching appstrings.properties"
     find . -path '*/appstrings.properties' -exec sed -i s/Firefox/LibreWolf/ {} \;
 
-    for fn in $(find "${source}/l10n/en-US/browser" -type f -name '*.inc.ftl'); do
-      target_fn=$(echo "$fn" | sed "s,${source}/l10n,browser/locales," | sed "s,\.inc\.ftl$,.ftl,")
+    for fn in $(find "${source}/l10n/en-US/browser" -type f -name '*.inc.*'); do
+      target_fn=$(echo "$fn" | sed "s,${source}/l10n/en-US/browser,browser/locales/en-US," | sed "s,\.inc,,")
       cat "$fn" >> "$target_fn"
     done
   '';
diff --git a/pkgs/by-name/li/librewolf-unwrapped/src.json b/pkgs/by-name/li/librewolf-unwrapped/src.json
index bb6183647607..12adef839149 100644
--- a/pkgs/by-name/li/librewolf-unwrapped/src.json
+++ b/pkgs/by-name/li/librewolf-unwrapped/src.json
@@ -1,11 +1,11 @@
 {
-  "packageVersion": "148.0.2-3",
+  "packageVersion": "149.0-1",
   "source": {
-    "rev": "148.0.2-3",
-    "hash": "sha256-HPmzhmDvM3wccpKT9auKsV3w0tA9wQEs3sxFyBKCfqQ="
+    "rev": "149.0-1",
+    "hash": "sha256-lf9psaFT9PMk8CozjvUqBb6hxHct2kdzcVbQDbID+0U="
   },
   "firefox": {
-    "version": "148.0.2",
-    "hash": "sha512-Vqk65SNfOHBPL1a2JG2t2t07zvHbeXzKECAvuRm6Lw4UWd76qkHPGI8mkQjvrvG3bMv64z1Q7L1SdlF2tDIL7w=="
+    "version": "149.0",
+    "hash": "sha512-zdhxp3OPtw2FpwPonEh00b9EGEtMmyiQGQKty/olwZlnXnRjBrtZ1mgh5uzRfgfJm2akjYJ/OazKbDsBK5U3Gg=="
   }
 }
diff --git a/pkgs/by-name/li/libu2f-emu/package.nix b/pkgs/by-name/li/libu2f-emu/package.nix
new file mode 100644
index 000000000000..640402e64d20
--- /dev/null
+++ b/pkgs/by-name/li/libu2f-emu/package.nix
@@ -0,0 +1,61 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  meson,
+  ninja,
+  pkg-config,
+  openssl,
+}:
+
+stdenv.mkDerivation {
+  pname = "libu2f-emu";
+  version = "0-unstable-2020-09-04";
+
+  src = fetchFromGitHub {
+    owner = "Agnoctopus";
+    repo = "libu2f-emu";
+    rev = "d1c4b9c2e1c42e8931033912c8b609521f2a7756";
+    hash = "sha256-kDAXA/v2nb/QAiJpGs0rTjm0t6CdbonTwHHoYhDQExE=";
+  };
+
+  nativeBuildInputs = [
+    meson
+    ninja
+    pkg-config
+  ];
+
+  buildInputs = [
+    openssl
+  ];
+
+  postPatch = ''
+    # Upstream meson.build uses error() instead of warning() for missing
+    # doxygen/dot, which fails the configure.
+    substituteInPlace meson.build \
+      --replace-fail "error('Skip doc:" "warning('Skip doc:" \
+      --replace-fail "error('Skip dot in doc:" "warning('Skip dot in doc:"
+
+    # Fix header guard typo: TRANSaCTION_H -> TRANSACTION_H
+    substituteInPlace src/usb/transaction.h \
+      --replace-fail "define TRANSaCTION_H" "define TRANSACTION_H"
+
+    # Install headers into a u2f-emu/ subdirectory so consumers can
+    # use #include <u2f-emu/u2f-emu.h> (expected by QEMU).
+    substituteInPlace src/meson.build \
+      --replace-fail "install_headers(u2f_emu_headers)" \
+                     "install_headers(u2f_emu_headers, subdir: 'u2f-emu')"
+  '';
+
+  # Disable -Werror: upstream uses OpenSSL EC_KEY APIs deprecated since 3.0.
+  mesonFlags = [ "--warnlevel=2" ];
+  env.NIX_CFLAGS_COMPILE = "-Wno-error";
+
+  meta = {
+    description = "Universal 2nd Factor (U2F) Emulation C Library";
+    homepage = "https://github.com/Agnoctopus/libu2f-emu";
+    license = lib.licenses.gpl2Only;
+    maintainers = with lib.maintainers; [ philiptaron ];
+    platforms = lib.platforms.linux;
+  };
+}
diff --git a/pkgs/by-name/li/lightgbm/package.nix b/pkgs/by-name/li/lightgbm/package.nix
index 57c3522845da..a0d18df3daf7 100644
--- a/pkgs/by-name/li/lightgbm/package.nix
+++ b/pkgs/by-name/li/lightgbm/package.nix
@@ -59,7 +59,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   patches = [
     # Fix boost 1.83+ compatibility
-    # https://github.com/microsoft/LightGBM/issues/6786
+    # https://github.com/lightgbm-org/LightGBM/issues/6786
     # Patch taken from https://github.com/conda-forge/lightgbm-feedstock/pull/69
     (fetchpatch {
       name = "fix-boost-sha1";
@@ -219,8 +219,8 @@ stdenv.mkDerivation (finalAttrs: {
   meta = {
     description = "Gradient boosting framework that uses tree based learning algorithms";
     mainProgram = "lightgbm";
-    homepage = "https://github.com/microsoft/LightGBM";
-    changelog = "https://github.com/microsoft/LightGBM/releases/tag/v${finalAttrs.version}";
+    homepage = "https://github.com/lightgbm-org/LightGBM";
+    changelog = "https://github.com/lightgbm-org/LightGBM/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     platforms = lib.platforms.unix;
     maintainers = with lib.maintainers; [ nviets ];
diff --git a/pkgs/by-name/lo/lovr/package.nix b/pkgs/by-name/lo/lovr/package.nix
new file mode 100644
index 000000000000..bd872d02acac
--- /dev/null
+++ b/pkgs/by-name/lo/lovr/package.nix
@@ -0,0 +1,141 @@
+{
+  lib,
+  gcc14Stdenv, # done for better C++ support in the project
+  fetchFromGitHub,
+  cmake,
+  pkg-config,
+  python3Minimal,
+  makeWrapper,
+  libx11,
+  libxrandr,
+  libxinerama,
+  libxcursor,
+  libxi,
+  libxcb,
+  libxext,
+  libxkbcommon,
+  vulkan-headers,
+  vulkan-loader,
+  libGL,
+  curl,
+  autoPatchelfHook,
+  alsa-lib,
+  libpulseaudio,
+}:
+
+let
+  # JoltPhysics is fetched at build time via FetchContent in deps/joltc/CMakeLists.txt.
+  # Pre-fetch it here and pass via FETCHCONTENT_SOURCE_DIR_JOLTPHYSICS to avoid network access.
+  joltphysics-src = fetchFromGitHub {
+    owner = "jrouwe";
+    repo = "JoltPhysics";
+    rev = "c10d9b2a8ee134fb5e72de1a0f26f8c9cc8f6382";
+    hash = "sha256-owI9uM/hjicuUWXYeZOhfYby5ygWm3JOO/qifRGiOdM=";
+  };
+
+  # Libraries that LOVR loads at runtime via dlopen
+  runtimeLibs = [
+    vulkan-loader
+    libGL
+    libx11
+    libxcb
+    gcc14Stdenv.cc.cc.lib
+    alsa-lib
+    libpulseaudio
+    curl
+  ];
+in
+
+gcc14Stdenv.mkDerivation (finalAttrs: {
+  pname = "lovr";
+  version = "0.18.0";
+
+  src = fetchFromGitHub {
+    owner = "bjornbytes";
+    repo = "lovr";
+    rev = "v${finalAttrs.version}";
+    hash = "sha256-SyKJv9FmJyLGc3CT0JBNewvjtsmXKxiqaptysWiY4co=";
+    fetchSubmodules = true;
+  };
+
+  nativeBuildInputs = [
+    cmake
+    pkg-config
+    python3Minimal
+    makeWrapper
+    autoPatchelfHook
+  ];
+
+  buildInputs = [
+    libx11
+    libxrandr
+    libxinerama
+    libxcursor
+    libxi
+    libxcb
+    libxext
+    libxkbcommon
+    vulkan-headers
+    vulkan-loader
+    libGL
+    curl
+  ];
+
+  cmakeFlags = [
+    "-DLOVR_USE_STEAM_AUDIO=OFF"
+    "-DLOVR_USE_OCULUS_AUDIO=OFF"
+    "-DFETCHCONTENT_SOURCE_DIR_JOLTPHYSICS=${joltphysics-src}"
+  ];
+
+  installCheckPhase = ''
+    runHook preInstallCheck
+    # LOVR's test/conf.lua disables graphics when CI is set
+    export CI=1
+    export HOME=$TMPDIR
+    $out/bin/lovr $src/test
+    runHook postInstallCheck
+  '';
+
+  doInstallCheck = true;
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/bin $out/lib $out/libexec
+
+    cp bin/lovr $out/libexec/lovr
+    for f in bin/lib*.so*; do
+      mv "$f" $out/lib/
+    done
+
+    # move plugin modules (e.g. http.so, enet.so) next to the executable
+    # where LOVR's libLoader expects to find them via dlopen.
+    for f in bin/*.so; do
+      mv "$f" $out/libexec/
+    done
+
+    # zorch stale plugin rpaths so we can get them at fixup
+    for f in $out/libexec/*.so; do
+      patchelf --remove-rpath "$f"
+    done
+
+    # wrap the binary so dlopen can find vulkan, audio backends, etc.
+    # the LD_LIBRARY_PATH is sorta load bearing, so don't kill it
+    # it needs to be suffixed to use the system audio properly (prefix doesn't work)
+    makeWrapper $out/libexec/lovr $out/bin/lovr \
+      --suffix LD_LIBRARY_PATH : "${lib.makeLibraryPath runtimeLibs}:$out/lib"
+
+    runHook postInstall
+  '';
+
+  dontUseCmakeInstall = true;
+
+  meta = {
+    description = "An open source framework for rapidly building immersive 3D experiences";
+    homepage = "https://lovr.org";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ crertel ];
+    platforms = [ "x86_64-linux" ];
+    mainProgram = "lovr";
+  };
+})
diff --git a/pkgs/by-name/lu/luau/package.nix b/pkgs/by-name/lu/luau/package.nix
index 442a822ebe41..9a22f71312ed 100644
--- a/pkgs/by-name/lu/luau/package.nix
+++ b/pkgs/by-name/lu/luau/package.nix
@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "luau";
-  version = "0.712";
+  version = "0.714";
 
   src = fetchFromGitHub {
     owner = "luau-lang";
     repo = "luau";
     tag = finalAttrs.version;
-    hash = "sha256-pReKrGXO7cZrSCO9ZKv4ikzs45ApZlJ0mvZPUt6+TOU=";
+    hash = "sha256-TSkiVG0ORRU4+4TsAoLBYfMbB1Ki/ctn3cZDAEsRn/Q=";
   };
 
   nativeBuildInputs = [ cmake ];
diff --git a/pkgs/by-name/ma/mame/package.nix b/pkgs/by-name/ma/mame/package.nix
index e2a9e2aa9030..18f3de878d65 100644
--- a/pkgs/by-name/ma/mame/package.nix
+++ b/pkgs/by-name/ma/mame/package.nix
@@ -36,14 +36,14 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "mame";
-  version = "0.286";
+  version = "0.287";
   srcVersion = builtins.replaceStrings [ "." ] [ "" ] finalAttrs.version;
 
   src = fetchFromGitHub {
     owner = "mamedev";
     repo = "mame";
     rev = "mame${finalAttrs.srcVersion}";
-    hash = "sha256-NsCW8cFSaCW85iXmCro5mj3xTlKUM/nE0nBF92UZAeQ=";
+    hash = "sha256-d1Y3KrJwL8iDjQDqG6FRN82WzVAqTcY1YJaayUQO8sk=";
   };
 
   outputs = [
diff --git a/pkgs/by-name/mb/mbake/package.nix b/pkgs/by-name/mb/mbake/package.nix
index 53572a9f1836..a8b98fec5639 100644
--- a/pkgs/by-name/mb/mbake/package.nix
+++ b/pkgs/by-name/mb/mbake/package.nix
@@ -9,14 +9,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "mbake";
-  version = "1.4.5";
+  version = "1.4.6";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "EbodShojaei";
     repo = "bake";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ZUcSEWwPR9w/xD+xbaQcKf+4QNwUu3WXMxXvkUm4+SQ=";
+    hash = "sha256-pA72tKQ3ji2VlW+7rFGNW3yPZmBS9JHqVF0/gpUUqAk=";
   };
 
   build-system = [
diff --git a/pkgs/by-name/mi/mihomo/package.nix b/pkgs/by-name/mi/mihomo/package.nix
index 556e3ae1b205..03d7cc2dfefb 100644
--- a/pkgs/by-name/mi/mihomo/package.nix
+++ b/pkgs/by-name/mi/mihomo/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule rec {
   pname = "mihomo";
-  version = "1.19.21";
+  version = "1.19.22";
 
   src = fetchFromGitHub {
     owner = "MetaCubeX";
     repo = "mihomo";
     rev = "v${version}";
-    hash = "sha256-vNWnGLVbwsyD0DqOXe1dfUy/Mym+YhBzGlrZrgZ3RuE=";
+    hash = "sha256-HRFtKx9g7AsBPl3HlOf+2giDc6a7e4YmQZlg4hElfdI=";
   };
 
-  vendorHash = "sha256-yj+vCpwyyyw0++V1UHxzV8j1tZ+Jc65eilyef9UShZQ=";
+  vendorHash = "sha256-K5lC6bvetwaXvufa+FU+noXWXBem/IZ1pkl2eLo7vTc=";
 
   excludedPackages = [ "./test" ];
 
diff --git a/pkgs/by-name/mk/mktorrent/package.nix b/pkgs/by-name/mk/mktorrent/package.nix
index 3bb71c702c4d..1aada679ea06 100644
--- a/pkgs/by-name/mk/mktorrent/package.nix
+++ b/pkgs/by-name/mk/mktorrent/package.nix
@@ -33,7 +33,6 @@ stdenv.mkDerivation (finalAttrs: {
     homepage = "https://github.com/pobrn/mktorrent/wiki";
     license = lib.licenses.gpl2Plus;
     maintainers = with lib.maintainers; [
-      Profpatsch
       winter
     ];
     platforms = lib.platforms.all;
diff --git a/pkgs/by-name/mp/mpdris2-rs/package.nix b/pkgs/by-name/mp/mpdris2-rs/package.nix
index 069e7e4bc96b..2387720718ac 100644
--- a/pkgs/by-name/mp/mpdris2-rs/package.nix
+++ b/pkgs/by-name/mp/mpdris2-rs/package.nix
@@ -6,15 +6,15 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "mpdris2-rs";
-  version = "1.1.0";
+  version = "1.1.1";
 
   src = fetchFromGitHub {
     owner = "szclsya";
     repo = "mpdris2-rs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-OiD6nVyy8vkwTwA2aKmZN+kxYvygI0tfVFuKdy+32hQ=";
+    hash = "sha256-oiyqK7vj41d9bsXBtenc477SOrVHRkXpFljkN8MjdQg=";
   };
-  cargoHash = "sha256-bPZUKpbWNUa6/XIaWB6Eel9iQo248POxY1yQybBAR8M=";
+  cargoHash = "sha256-xdgUKU9YiaC3o1uH38ZjvQgR78B/1LqTPis4+XqinQ8=";
 
   postPatch = ''
     substituteInPlace misc/mpdris2-rs.service --replace-fail "/usr/local" "$out"
diff --git a/pkgs/by-name/mp/mpv/scripts/convert.nix b/pkgs/by-name/mp/mpv/scripts/convert.nix
index 34243ab928d3..dc2139cb33bb 100644
--- a/pkgs/by-name/mp/mpv/scripts/convert.nix
+++ b/pkgs/by-name/mp/mpv/scripts/convert.nix
@@ -38,7 +38,7 @@ buildLua {
   meta = {
     description = "Convert parts of a video while you are watching it in mpv";
     homepage = "https://gist.github.com/Zehkul/25ea7ae77b30af959be0";
-    maintainers = [ lib.maintainers.Profpatsch ];
+    maintainers = [ ];
     longDescription = ''
       When this script is loaded into mpv, you can hit Alt+W to mark the beginning
       and Alt+W again to mark the end of the clip. Then a settings window opens.
diff --git a/pkgs/by-name/mu/mustache-spec/package.nix b/pkgs/by-name/mu/mustache-spec/package.nix
index 0329ac22b946..1f0d6b531ed6 100644
--- a/pkgs/by-name/mu/mustache-spec/package.nix
+++ b/pkgs/by-name/mu/mustache-spec/package.nix
@@ -40,7 +40,7 @@ stdenv.mkDerivation (finalAttrs: {
 
     homepage = "http://mustache.github.io/";
     license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ Profpatsch ];
+    maintainers = [ ];
     platforms = lib.platforms.all;
   };
 })
diff --git a/pkgs/by-name/mu/muvm/package.nix b/pkgs/by-name/mu/muvm/package.nix
index 2c85e4a7eff3..c132cbec943d 100644
--- a/pkgs/by-name/mu/muvm/package.nix
+++ b/pkgs/by-name/mu/muvm/package.nix
@@ -52,16 +52,16 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "muvm";
-  version = "0.5.0";
+  version = "0.5.1";
 
   src = fetchFromGitHub {
     owner = "AsahiLinux";
     repo = "muvm";
     tag = "muvm-${finalAttrs.version}";
-    hash = "sha256-k3Jj/Tzu5ZfnADMiVG7pAPqosrkZvhmehi0NMbyudN0=";
+    hash = "sha256-eXsU2QRJ55gx5RhjT+m9F1KAFqGrd4WwnyR3eMpuIc4=";
   };
 
-  cargoHash = "sha256-jFNyQD2Hf1K5+wHDRD2WG70IJfZbL+hT/gtjeUnt5Mk=";
+  cargoHash = "sha256-OP44LRMN4Lp9LaXQ8Oa8B4LRTqlMyaTa0xKn4eoh1LQ=";
 
   postPatch = ''
     substituteInPlace crates/muvm/src/guest/bin/muvm-guest.rs \
diff --git a/pkgs/by-name/ne/nettee/package.nix b/pkgs/by-name/ne/nettee/package.nix
index d0ff55435ebd..cad2b11f7b0a 100644
--- a/pkgs/by-name/ne/nettee/package.nix
+++ b/pkgs/by-name/ne/nettee/package.nix
@@ -39,7 +39,7 @@ stdenv.mkDerivation (finalAttrs: {
     homepage = "https://sourceforge.net/projects/nettee";
     description = ''Network "tee" program'';
     license = lib.licenses.gpl2Only;
-    maintainers = with lib.maintainers; [ Profpatsch ];
+    maintainers = [ ];
     platforms = lib.platforms.linux;
     mainProgram = "nettee";
   };
diff --git a/pkgs/by-name/nf/nfpm/package.nix b/pkgs/by-name/nf/nfpm/package.nix
index 7299597c8575..f020830cf1ba 100644
--- a/pkgs/by-name/nf/nfpm/package.nix
+++ b/pkgs/by-name/nf/nfpm/package.nix
@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "nfpm";
-  version = "2.45.2";
+  version = "2.46.0";
 
   src = fetchFromGitHub {
     owner = "goreleaser";
     repo = "nfpm";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-MzxN4oQFmhnuR8T5wa5AGKjL+LhlTSBd2tGVf9WsCBc=";
+    hash = "sha256-dzgC8SnGsKdW95xyq7pXacBvCTrte6QQCjYvo5R4D9I=";
   };
 
-  vendorHash = "sha256-cq0pcbC0T3klh3D9l0e0u5JPYv1kWYlpeNYyGczGX+A=";
+  vendorHash = "sha256-HfqPqGpwInTrGjTCA4qJjtngJTCmb+c/sJ1Uhi/CCZ0=";
 
   ldflags = [
     "-s"
diff --git a/pkgs/by-name/no/notesnook/package.nix b/pkgs/by-name/no/notesnook/package.nix
index 59936916a2ec..642101b5fa61 100644
--- a/pkgs/by-name/no/notesnook/package.nix
+++ b/pkgs/by-name/no/notesnook/package.nix
@@ -9,7 +9,7 @@
 
 let
   pname = "notesnook";
-  version = "3.3.10";
+  version = "3.3.12";
 
   inherit (stdenv.hostPlatform) system;
   throwSystem = throw "Unsupported system: ${system}";
@@ -27,10 +27,10 @@ let
     url = "https://github.com/streetwriters/notesnook/releases/download/v${version}/notesnook_${suffix}";
     hash =
       {
-        x86_64-linux = "sha256-93WUP/z4ur33idUoKlBLMrbcR40VlF/3U/mZaQMlxbA=";
-        aarch64-linux = "sha256-kprLfd7XbXs+jph/ZbdhQ8RimjEBLCdVMDR5+Y2OyJ8=";
-        x86_64-darwin = "sha256-dD9UEANS+QLjVUk1Ubi//mVdFaFp46y4aqJjIrqNts0=";
-        aarch64-darwin = "sha256-lDf+eElp6kY2nUDkFka8Z2zOBGtqgTPG9aGNsWpnGys=";
+        x86_64-linux = "sha256-KW5FstIDT/5qdWZuprLzeR1LzBsoYLGq6D6xBiPKY7w=";
+        aarch64-linux = "sha256-54yew9wo1wYbzCupvZsnM+2F3xL2WZ5Uj76CQFkW5+o=";
+        x86_64-darwin = "sha256-g/NnQq8A4ithTp3ajFuRzfpRCCKZqIqdSFnH1EkW9mc=";
+        aarch64-darwin = "sha256-bEX5vObXYEOeS48bQniA1gzDMHtvQrmYa3uZ6CTLnwo=";
       }
       .${system} or throwSystem;
   };
diff --git a/pkgs/by-name/ob/objfw/package.nix b/pkgs/by-name/ob/objfw/package.nix
index 0ddcc1fc0795..6c46a4828b0b 100644
--- a/pkgs/by-name/ob/objfw/package.nix
+++ b/pkgs/by-name/ob/objfw/package.nix
@@ -3,7 +3,8 @@
   autogen,
   automake,
   clangStdenv,
-  fetchfossil,
+  fetchFromGitea,
+  gitUpdater,
   lib,
   objfw,
   writeTextDir,
@@ -11,12 +12,14 @@
 
 clangStdenv.mkDerivation (finalAttrs: {
   pname = "objfw";
-  version = "1.3.2";
+  version = "1.5.1";
 
-  src = fetchfossil {
-    url = "https://objfw.nil.im/home";
+  src = fetchFromGitea {
+    domain = "git.nil.im";
+    owner = "ObjFW";
+    repo = "ObjFW";
     rev = "${finalAttrs.version}-release";
-    hash = "sha256-cFYsiNG60FyDXAeiuBZn/u/1dEawVAxF7EDFBZRYt7w=";
+    hash = "sha256-5ECvNsDU3MagbS2tVq2sJCRMQHBkCuMQHqpWlB6tbR8=";
   };
 
   nativeBuildInputs = [
@@ -36,6 +39,8 @@ clangStdenv.mkDerivation (finalAttrs: {
     build-hello-world = (import ./test-build-and-run.nix) { inherit clangStdenv objfw writeTextDir; };
   };
 
+  passthru.updateScript = gitUpdater { rev-suffix = "-release"; };
+
   meta = {
     description = "Portable framework for the Objective-C language";
     homepage = "https://objfw.nil.im";
diff --git a/pkgs/by-name/om/omnictl/package.nix b/pkgs/by-name/om/omnictl/package.nix
index 41607ef0fffe..f6518f9553f8 100644
--- a/pkgs/by-name/om/omnictl/package.nix
+++ b/pkgs/by-name/om/omnictl/package.nix
@@ -8,13 +8,13 @@
 
 buildGoModule rec {
   pname = "omnictl";
-  version = "1.6.1";
+  version = "1.6.2";
 
   src = fetchFromGitHub {
     owner = "siderolabs";
     repo = "omni";
     rev = "v${version}";
-    hash = "sha256-ncffAF1gEsCMeUszgqZExTSYRPkZ6em85S9thM1U3Sc=";
+    hash = "sha256-IxPsm361gYdYWDy16vai5JsmJ5NWUSIRQ9k2Qnwi2K8=";
   };
 
   vendorHash = "sha256-snrOKwD4xbMTdjP13KLTVVB7ikXG+yHS8QT60/tHZ3I=";
diff --git a/pkgs/by-name/op/opensbi/package.nix b/pkgs/by-name/op/opensbi/package.nix
index 19d7538e13cb..ac644c1418b4 100644
--- a/pkgs/by-name/op/opensbi/package.nix
+++ b/pkgs/by-name/op/opensbi/package.nix
@@ -10,13 +10,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "opensbi";
-  version = "1.6";
+  version = "1.8.1";
 
   src = fetchFromGitHub {
     owner = "riscv-software-src";
     repo = "opensbi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-X3j+4hdNDq36O/vFdlnd/QvDVIkXtvFbheFaZwf4GQY=";
+    hash = "sha256-nD22UZfH0rJECHMDwd9ATyLz44cFHqcFH7N6piK8hog=";
   };
 
   postPatch = ''
diff --git a/pkgs/by-name/op/openvswitch/package.nix b/pkgs/by-name/op/openvswitch/package.nix
index a49571845bf0..74222ad18979 100644
--- a/pkgs/by-name/op/openvswitch/package.nix
+++ b/pkgs/by-name/op/openvswitch/package.nix
@@ -30,13 +30,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = if withDPDK then "openvswitch-dpdk" else "openvswitch";
-  version = "3.7.0";
+  version = "3.7.1";
 
   src = fetchFromGitHub {
     owner = "openvswitch";
     repo = "ovs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-3lbehoy3hbwuM4tXbtfQCXULFr1VQpjsSQ3fZzZcR4U=";
+    hash = "sha256-3FQjV4BZZpn7Loiu9Xm30cCqzkU1HgJ3sAc+I6D8OvQ=";
   };
 
   outputs = [
diff --git a/pkgs/by-name/pd/pdfding/frontend.nix b/pkgs/by-name/pd/pdfding/frontend.nix
index c408df8cdf9f..7e10dda1567c 100644
--- a/pkgs/by-name/pd/pdfding/frontend.nix
+++ b/pkgs/by-name/pd/pdfding/frontend.nix
@@ -1,6 +1,5 @@
 {
   stdenv,
-  fetchpatch2,
   fetchNpmDeps,
   fetchzip,
   fetchFromGitHub,
@@ -10,8 +9,8 @@
   nodejs,
 }:
 let
-  pdfjsVersion = "5.4.394"; # see update script
-  pdfjsHash = "sha256-pd7xwfvR9U1bHT5eblszYU3YJQwQwhuyDDiNj+fnyaQ=";
+  pdfjsVersion = "5.5.207"; # see update script
+  pdfjsHash = "sha256-HikisEa6L+BqsG6imgWhV+4J46BluU5zqU1nFZAG0eM=";
   pdfjs = fetchzip {
     url = "https://github.com/mozilla/pdf.js/releases/download/v${pdfjsVersion}/pdfjs-${pdfjsVersion}-dist.zip";
     hash = pdfjsHash;
@@ -28,18 +27,18 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "pdfding-frontend";
-  version = "1.5.1";
+  version = "1.7.1";
   src = fetchFromGitHub {
     owner = "mrmn2";
     repo = "PdfDing";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-PXkD+2k8/LmMWzZAj8qEK4mLoOKS4mDWcqe8AgoCdBU=";
+    hash = "sha256-T3Y9eWwBVxGPISZ3EZndAR6mwsq4g67RRCPpoZPuh+0=";
   };
 
   npmDeps = fetchNpmDeps {
     inherit (finalAttrs) src;
     name = "pdfding-frontend-${finalAttrs.version}-npm-deps";
-    hash = "sha256-SgL8QhRGONGhJBu6b8HSVqZPzJ+NojhVClBEH5ajCcc=";
+    hash = "sha256-an4KKKx65ehCm1YAlwLWYAW8pQMgB4HdDERqC/hfQi0=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/pd/pdfding/package.nix b/pkgs/by-name/pd/pdfding/package.nix
index d8ab658b72ee..fcc50b33aa0e 100644
--- a/pkgs/by-name/pd/pdfding/package.nix
+++ b/pkgs/by-name/pd/pdfding/package.nix
@@ -2,7 +2,6 @@
   lib,
   callPackage,
   fetchFromGitHub,
-  fetchpatch2,
   makeWrapper,
   nixosTests,
 
@@ -13,30 +12,18 @@ let
 in
 python.pkgs.buildPythonPackage (finalAttrs: {
   pname = "pdfding";
-  version = "1.5.1";
+  version = "1.7.1";
   src = fetchFromGitHub {
     owner = "mrmn2";
     repo = "PdfDing";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-PXkD+2k8/LmMWzZAj8qEK4mLoOKS4mDWcqe8AgoCdBU=";
+    hash = "sha256-T3Y9eWwBVxGPISZ3EZndAR6mwsq4g67RRCPpoZPuh+0=";
   };
   pyproject = true;
 
-  patches = [
-    # fixes two tests, remove patch in the next version
-    # https://github.com/mrmn2/PdfDing/pull/248
-    (fetchpatch2 {
-      url = "https://github.com/mrmn2/PdfDing/commit/24df5a82ffb1d60162978791b716f67d20128a22.patch?full_index=1";
-      hash = "sha256-N3FtPQGSOFeUbVcinXK9kJM6hZOn4YdJJVWe4VXb8pE=";
-    })
-  ];
-
   # remove supervisor from dependencies
   postPatch = ''
     sed -i 's/supervisor.*$//' pyproject.toml
-
-    substituteInPlace pdfding/backup/tests/test_management.py pdfding/backup/tests/test_tasks.py \
-      --replace-fail "Path(__file__).parents[2]" "Path('$PDFDING_OUT_DIR')"
   '';
 
   dependencies =
@@ -68,6 +55,7 @@ python.pkgs.buildPythonPackage (finalAttrs: {
       requests
     ]
     ++ qrcode.optional-dependencies.pil
+    ++ django-allauth.optional-dependencies.mfa
     ++ django-allauth.optional-dependencies.socialaccount;
 
   build-system = with python.pkgs; [ poetry-core ];
@@ -139,36 +127,31 @@ python.pkgs.buildPythonPackage (finalAttrs: {
   pythonRelaxDeps = [
     "django"
     "django-allauth"
-    "django-htmx"
+    "gunicorn"
+    "markdown"
+    "nh3"
     "pypdf"
-    "ruamel-yaml"
+    "whitenoise"
+  ];
+
+  checkInputs = with python.pkgs; [
+    fido2
+    pytest-django
   ];
 
   nativeCheckInputs = with python.pkgs; [
-    pytest-django
     pytestCheckHook
   ];
 
   # from .github/workflows/tests.yaml
-  pytestFlags = [
-    "--ignore=e2e"
-  ];
+  pytestFlags = [ "--ignore=e2e" ];
 
-  disabledTests = [
-    # broken tests in 1.5.0
-    "test_adjust_file_paths_to_ws_collection"
-    "test_oidc_callback" # AssertionError: 200 != 401
-  ];
-
-  /*
-    fix two breaking tests by providing full out path
-    AssertionError: Calls not found
-    AssertionError: 'add_file_to_minio' does not contain all of ...
-  */
   preCheck = ''
     # dev.py is required for tests, restore it
     mv dev.py.bak $PDFDING_OUT_DIR/core/settings/dev.py
 
+    export DATA_DIR=$PWD/pdfding
+
     # tests should run in pdfding directory
     pushd pdfding
   '';
@@ -177,6 +160,8 @@ python.pkgs.buildPythonPackage (finalAttrs: {
     # come out of the pdfding directory
     popd
 
+    unset DATA_DIR
+
     # remove dev.py
     rm $PDFDING_OUT_DIR/core/settings/dev.py
   '';
@@ -199,7 +184,6 @@ python.pkgs.buildPythonPackage (finalAttrs: {
     homepage = "https://pdfding.com";
     license = lib.licenses.agpl3Only;
     mainProgram = "pdfding-manage";
-    maintainers = with lib.maintainers; [ phanirithvij ];
     platforms = lib.platforms.unix;
     teams = with lib.teams; [ ngi ];
   };
diff --git a/pkgs/by-name/ph/phpunit/package.nix b/pkgs/by-name/ph/phpunit/package.nix
index cc3805e0adc1..43c0e975e9aa 100644
--- a/pkgs/by-name/ph/phpunit/package.nix
+++ b/pkgs/by-name/ph/phpunit/package.nix
@@ -8,16 +8,16 @@
 
 php.buildComposerProject2 (finalAttrs: {
   pname = "phpunit";
-  version = "13.0.5";
+  version = "13.0.6";
 
   src = fetchFromGitHub {
     owner = "sebastianbergmann";
     repo = "phpunit";
     tag = finalAttrs.version;
-    hash = "sha256-AHrVwRe0uMBZwHqCYkbRTkyO8tqsZs7w2BveX89Mlb8=";
+    hash = "sha256-leSHb+G5zzYOw0AbQRbB8bIcKS4kvIY/6TGDFBto/9o=";
   };
 
-  vendorHash = "sha256-Et/HsW56GhFwHNyXtcBOL0D39A2Rv1vPnxOZhhEM278=";
+  vendorHash = "sha256-uUENOq9BEX0vZU3PBc7+nL4IkUx/R2QTO+COT6oNsPM=";
 
   passthru = {
     updateScript = nix-update-script { };
diff --git a/pkgs/tools/networking/ebpf-verifier/default.nix b/pkgs/by-name/pr/prevail/package.nix
similarity index 52%
rename from pkgs/tools/networking/ebpf-verifier/default.nix
rename to pkgs/by-name/pr/prevail/package.nix
index b672d2c6297f..dc0228506381 100644
--- a/pkgs/tools/networking/ebpf-verifier/default.nix
+++ b/pkgs/by-name/pr/prevail/package.nix
@@ -4,28 +4,30 @@
   fetchFromGitHub,
   boost,
   cmake,
-  catch2,
+  catch2_3,
+  microsoft-gsl,
   pkg-config,
   replaceVars,
   yaml-cpp,
 }:
 
-stdenv.mkDerivation {
-  pname = "ebpf-verifier";
-  version = "unstable-2023-07-15";
+stdenv.mkDerivation (finalAttrs: {
+  pname = "prevail";
+  version = "0.2.0";
 
   src = fetchFromGitHub {
     owner = "vbpf";
-    repo = "ebpf-verifier";
-    rev = "de14d3aa3cd2845b621faf32b599766a66e158cf";
+    repo = "prevail";
+    rev = "v${finalAttrs.version}";
     fetchSubmodules = true;
-    hash = "sha256-gnxB8ZLbTyIYpd61T57LPKFm1MHufeVEq/qN9pu2Vpk=";
+    hash = "sha256-qlQSoz9GE2Z2rzmrPIj+HnIQmNxiBSgvR40FR9psuDc=";
   };
 
   patches = [
     (replaceVars ./remove-fetchcontent-usage.patch {
       # We will download them instead of cmake's fetchContent
-      catch2Src = catch2.src;
+      catch2Src = catch2_3.src;
+      gslSrc = microsoft-gsl.src;
     })
   ];
 
@@ -39,21 +41,35 @@ stdenv.mkDerivation {
     yaml-cpp
   ];
 
+  cmakeFlags = [
+    (lib.cmakeBool "prevail_ENABLE_TESTS" finalAttrs.doCheck)
+  ];
+
   installPhase = ''
     runHook preInstall
 
     mkdir -p $out/bin
-    cp ../check $out/bin/ebpf-verifier
+    cp ../bin/prevail $out/bin/prevail
 
     runHook postInstall
   '';
 
+  doCheck = true;
+
+  checkPhase = ''
+    runHook preCheck
+    pushd ..
+    bin/tests
+    popd
+    runHook postCheck
+  '';
+
   meta = {
     description = "eBPF verifier based on abstract interpretation";
-    homepage = "https://github.com/vbpf/ebpf-verifier";
+    homepage = "https://github.com/vbpf/prevail";
     license = lib.licenses.mit;
     platforms = lib.platforms.linux;
     maintainers = [ ];
-    mainProgram = "ebpf-verifier";
+    mainProgram = "prevail";
   };
-}
+})
diff --git a/pkgs/by-name/pr/prevail/remove-fetchcontent-usage.patch b/pkgs/by-name/pr/prevail/remove-fetchcontent-usage.patch
new file mode 100644
index 000000000000..84827c87db01
--- /dev/null
+++ b/pkgs/by-name/pr/prevail/remove-fetchcontent-usage.patch
@@ -0,0 +1,25 @@
+diff --git a/CMakeLists.txt b/CMakeLists.txt
+--- a/CMakeLists.txt
++++ b/CMakeLists.txt
+@@ -75,9 +75,7 @@
+ endif ()
+ 
+ FetchContent_Declare(GSL
+-  GIT_REPOSITORY "https://github.com/microsoft/GSL"
+-  GIT_TAG "v4.2.0"
+-  GIT_SHALLOW ON
++  SOURCE_DIR "@gslSrc@"
+ )
+ set(GSL_INSTALL ON CACHE BOOL "Force GSL install to vendor it with prevail" FORCE)
+ set(GSL_TEST OFF CACHE BOOL "Skip GSL tests when building as a dependency" FORCE)
+@@ -196,9 +194,7 @@
+ # Tests
+ if (prevail_ENABLE_TESTS)
+   FetchContent_Declare(Catch2
+-    GIT_REPOSITORY "https://github.com/catchorg/Catch2.git"
+-    GIT_TAG "v3.13.0"
+-    GIT_SHALLOW ON
++    SOURCE_DIR "@catch2Src@"
+   )
+   FetchContent_MakeAvailable(Catch2)
+ 
diff --git a/pkgs/by-name/qe/qemu/package.nix b/pkgs/by-name/qe/qemu/package.nix
index 5dde5e581158..be472939ad21 100644
--- a/pkgs/by-name/qe/qemu/package.nix
+++ b/pkgs/by-name/qe/qemu/package.nix
@@ -92,6 +92,8 @@
   fuse3,
   canokeySupport ? false,
   canokey-qemu,
+  u2fEmuSupport ? false,
+  libu2f-emu,
   capstoneSupport ? !minimal,
   capstone,
   valgrindSupport ? false,
@@ -245,6 +247,7 @@ stdenv.mkDerivation (finalAttrs: {
   ++ lib.optionals uringSupport [ liburing ]
   ++ lib.optionals fuseSupport [ fuse3 ]
   ++ lib.optionals canokeySupport [ canokey-qemu ]
+  ++ lib.optionals u2fEmuSupport [ libu2f-emu ]
   ++ lib.optionals capstoneSupport [ capstone ]
   ++ lib.optionals valgrindSupport [ valgrind-light ];
 
@@ -329,6 +332,7 @@ stdenv.mkDerivation (finalAttrs: {
   ++ lib.optional uringSupport "--enable-linux-io-uring"
   ++ lib.optional fuseSupport "--enable-fuse"
   ++ lib.optional canokeySupport "--enable-canokey"
+  ++ lib.optional u2fEmuSupport "--enable-u2f"
   ++ lib.optional capstoneSupport "--enable-capstone"
   ++ lib.optional (!pluginsSupport) "--disable-plugins"
   ++ lib.optional (!enableBlobs) "--disable-install-blobs"
diff --git a/pkgs/by-name/ra/rattler-build/package.nix b/pkgs/by-name/ra/rattler-build/package.nix
index 21a8c985cf52..8fb1a0cffe8f 100644
--- a/pkgs/by-name/ra/rattler-build/package.nix
+++ b/pkgs/by-name/ra/rattler-build/package.nix
@@ -14,16 +14,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rattler-build";
-  version = "0.61.0";
+  version = "0.61.4";
 
   src = fetchFromGitHub {
     owner = "prefix-dev";
     repo = "rattler-build";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-IuCfWhj3MQVJghJYkmLxV//VOZ9SSNTbIiyo3KsRbLc=";
+    hash = "sha256-wW2NVfEMFQaQZG9hAhw5I/lR5Ay1nTs49FTa4c1LL0M=";
   };
 
-  cargoHash = "sha256-dgjCTHq0HHv5GX7BrZgH4oUXWbnb8SRBU13Qf9f4Qt0=";
+  cargoHash = "sha256-yRPr1ENHkN7XqRgy937iE7gAvcWDXyqwHXOUhU6S/Pg=";
 
   doCheck = false; # test requires network access
 
diff --git a/pkgs/by-name/re/renovate/package.nix b/pkgs/by-name/re/renovate/package.nix
index 0bbdaff3a62b..052423560662 100644
--- a/pkgs/by-name/re/renovate/package.nix
+++ b/pkgs/by-name/re/renovate/package.nix
@@ -20,13 +20,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "renovate";
-  version = "43.76.5";
+  version = "43.91.1";
 
   src = fetchFromGitHub {
     owner = "renovatebot";
     repo = "renovate";
     tag = finalAttrs.version;
-    hash = "sha256-9DAgX6CG3Wnesp5AZqfv12KT8tRAGZXuewm7fqPVmpg=";
+    hash = "sha256-HW0rI9qN/eUgEnPJPJk0m5x4S/69RgaoA/+I7GoGUyc=";
   };
 
   postPatch = ''
@@ -51,7 +51,7 @@ stdenv.mkDerivation (finalAttrs: {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_10;
     fetcherVersion = 2;
-    hash = "sha256-LgVtV/jyJP/+fJ9XQHEsz67COUHV4RL0hfVdxph1cUg=";
+    hash = "sha256-R+4TswBHCv/z5MMiLgT3M5E4b9oeIWb/wWs9PXFk3s4=";
   };
 
   env.COREPACK_ENABLE_STRICT = 0;
diff --git a/pkgs/by-name/se/sealcurses/package.nix b/pkgs/by-name/se/sealcurses/package.nix
index efc40858f655..b27da69d7ff5 100644
--- a/pkgs/by-name/se/sealcurses/package.nix
+++ b/pkgs/by-name/se/sealcurses/package.nix
@@ -10,14 +10,14 @@
 
 stdenv.mkDerivation {
   pname = "sealcurses";
-  version = "0-unstable-2024-12-02"; # No release yet
+  version = "0-unstable-2026-03-22"; # No release yet
 
   src = fetchFromGitea {
     domain = "git.skyjake.fi";
     owner = "skyjake";
     repo = "sealcurses";
-    rev = "310348a6b88678a47d371c7edfcc1e8c76ca1677";
-    hash = "sha256-SEK3w6pVrYi+h2l5RuULpORYPnm8H78lEVR01cMkku0=";
+    rev = "35c2e0332301f7aa14d3a849b30a844d65fa81bd";
+    hash = "sha256-ILskZo5BNw4JK6n0ig2ULkUI7k9mdPjuk4VVEB7jx8c=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/se/secrethound/package.nix b/pkgs/by-name/se/secrethound/package.nix
index bb7835df2731..18eb778b9839 100644
--- a/pkgs/by-name/se/secrethound/package.nix
+++ b/pkgs/by-name/se/secrethound/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "secrethound";
-  version = "1.0.1";
+  version = "1.1.0";
 
   src = fetchFromGitHub {
     owner = "rafabd1";
     repo = "SecretHound";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-TyN7byX4rkRXrKzcx/u/LYNqVRBue2YNJRnkF+f34jQ=";
+    hash = "sha256-mZ2rZMjNKLJ+AQQlEGUwgSpIAhqbHG53wUNDIEtJXwI=";
   };
 
   vendorHash = "sha256-oTyI3/+evDTzyH+BjfSP0A1r2bYVAMxtWRsg0G1d2zQ=";
diff --git a/pkgs/by-name/se/sem/package.nix b/pkgs/by-name/se/sem/package.nix
index f600970bef51..313402ea4955 100644
--- a/pkgs/by-name/se/sem/package.nix
+++ b/pkgs/by-name/se/sem/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "sem";
-  version = "0.33.0";
+  version = "0.33.1";
 
   src = fetchFromGitHub {
     owner = "semaphoreci";
     repo = "cli";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-sWj0eenqZBanHO2E047Jd0MlphgzszvD+1ZsMFHiQ00=";
+    sha256 = "sha256-+MNl+JOpC3FgzWBVybTDqV6VE4cdBafQ77IYcXO4j48=";
   };
 
   vendorHash = "sha256-XEr/vXamJ7GTRpXNdcVQ9PcUVvQ8EW3pmq/tEZMHSDo=";
diff --git a/pkgs/by-name/se/servo/package.nix b/pkgs/by-name/se/servo/package.nix
index c686d97ab69b..8bc1c0bd5433 100644
--- a/pkgs/by-name/se/servo/package.nix
+++ b/pkgs/by-name/se/servo/package.nix
@@ -69,13 +69,13 @@ in
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "servo";
-  version = "0.0.5";
+  version = "0.0.6";
 
   src = fetchFromGitHub {
     owner = "servo";
     repo = "servo";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-XBaILyWIM1BecnJrkoFy4Q/zf7+n65Mv/wOxT4OheiU=";
+    hash = "sha256-eKog8kcZJXBMJz/Lr0+ZwU95HYZRljGWByJ84vPfiEY=";
     # Breaks reproducibility depending on whether the picked commit
     # has other ref-names or not, which may change over time, i.e. with
     # "ref-names: HEAD -> main" as long this commit is the branch HEAD
@@ -85,7 +85,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     '';
   };
 
-  cargoHash = "sha256-iGS56vh4tgpJDLoXp7ou0/4+9onb3W3MEBzjcEOXjsw=";
+  cargoHash = "sha256-VP+hAQDfUVbOa2+Uq6hqG5YgQYRNI01+gDaR2MyYUTM=";
 
   # set `HOME` to a temp dir for write access
   # Fix invalid option errors during linking (https://github.com/mozilla/nixpkgs-mozilla/commit/c72ff151a3e25f14182569679ed4cd22ef352328)
diff --git a/pkgs/by-name/sh/shelfmark-frontend/package.nix b/pkgs/by-name/sh/shelfmark-frontend/package.nix
index d8f448281fe8..95fcfeac6214 100644
--- a/pkgs/by-name/sh/shelfmark-frontend/package.nix
+++ b/pkgs/by-name/sh/shelfmark-frontend/package.nix
@@ -9,7 +9,7 @@ buildNpmPackage (finalAttrs: {
 
   sourceRoot = "${finalAttrs.src.name}/src/frontend";
 
-  npmDepsHash = "sha256-RAzotFGj0FGpfF7iyB5f2fdKFvMLcpJx142yplRwboU=";
+  npmDepsHash = "sha256-VCnxEcaqWo31oIpF6X8Lid4I/aaQCQZ9l9rV6TTqXPI=";
 
   installPhase = ''
     runHook preInstall
diff --git a/pkgs/by-name/sh/shelfmark/package.nix b/pkgs/by-name/sh/shelfmark/package.nix
index 464e4755bef4..ca13ad35ae59 100644
--- a/pkgs/by-name/sh/shelfmark/package.nix
+++ b/pkgs/by-name/sh/shelfmark/package.nix
@@ -35,13 +35,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "shelfmark";
-  version = "1.2.0";
+  version = "1.2.1";
 
   src = fetchFromGitHub {
     owner = "calibrain";
     repo = "shelfmark";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-t4t7je7Y/aezx/EX7paJIcsCq5qyZeU/+mPLeZ8oTPg=";
+    hash = "sha256-Fe7zu51gFG2QgcBWcGkFi64CdZW4ohZg+7jdmeMFVLI=";
   };
 
   nativeBuildInputs = [
@@ -90,7 +90,10 @@ stdenv.mkDerivation (finalAttrs: {
     homepage = "https://github.com/calibrain/shelfmark";
     changelog = "https://github.com/calibrain/shelfmark/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
-    maintainers = [ lib.maintainers.jamiemagee ];
+    maintainers = with lib.maintainers; [
+      jamiemagee
+      pyrox0
+    ];
     mainProgram = "shelfmark";
   };
 })
diff --git a/pkgs/by-name/si/signalbackup-tools/package.nix b/pkgs/by-name/si/signalbackup-tools/package.nix
index 8d6c7f4e0f37..4ffffd4064e1 100644
--- a/pkgs/by-name/si/signalbackup-tools/package.nix
+++ b/pkgs/by-name/si/signalbackup-tools/package.nix
@@ -14,13 +14,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "signalbackup-tools";
-  version = "20260306";
+  version = "20260325";
 
   src = fetchFromGitHub {
     owner = "bepaald";
     repo = "signalbackup-tools";
     tag = finalAttrs.version;
-    hash = "sha256-mGJkkE+sT+FKd2tSAXcmDAmKbsE9H9k5IyQbzxJcvjY=";
+    hash = "sha256-5Tb9bY0sZvCUlYkGpmu6hVi7EOEMaygEH9x3tbyo2T4=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/si/siyuan/package.nix b/pkgs/by-name/si/siyuan/package.nix
index 33cf6716b6b8..3de192463d64 100644
--- a/pkgs/by-name/si/siyuan/package.nix
+++ b/pkgs/by-name/si/siyuan/package.nix
@@ -36,20 +36,20 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "siyuan";
-  version = "3.6.1";
+  version = "3.6.2";
 
   src = fetchFromGitHub {
     owner = "siyuan-note";
     repo = "siyuan";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Qsqg6WKfpPOZwvH6aFcDVjIAJcBckClqE/1g92JvR2M=";
+    hash = "sha256-2OBTX4Lh3dx7NbuWsvyB4FzXk6ywDcp6LswhlRlBjCI=";
   };
 
   kernel = buildGoModule {
     name = "${finalAttrs.pname}-${finalAttrs.version}-kernel";
     inherit (finalAttrs) src;
     sourceRoot = "${finalAttrs.src.name}/kernel";
-    vendorHash = "sha256-R+/njKBraRPgWLnhBXy969ILA/fn0wyq6OkYgJnS1WM=";
+    vendorHash = "sha256-EfGCeVsD4yYUBEkSCbRdmMitZfJmQffcbScKaAOX+0o=";
 
     patches = [
       (replaceVars ./set-pandoc-path.patch {
@@ -100,7 +100,7 @@ stdenv.mkDerivation (finalAttrs: {
       ;
     pnpm = pnpm_9;
     fetcherVersion = 3;
-    hash = "sha256-N/LKkE0I6sIiO0+wGvPZMgaWKUPcq7Gjpsw5Oj9cvqI=";
+    hash = "sha256-HKAK0XwudDuMk/1l6FH1h/FS0xUhzE0s37tpXDdtMU4=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/app";
diff --git a/pkgs/by-name/sp/spicedb/package.nix b/pkgs/by-name/sp/spicedb/package.nix
index 954124454457..170099b33892 100644
--- a/pkgs/by-name/sp/spicedb/package.nix
+++ b/pkgs/by-name/sp/spicedb/package.nix
@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "spicedb";
-  version = "1.50.0";
+  version = "1.51.0";
 
   src = fetchFromGitHub {
     owner = "authzed";
     repo = "spicedb";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-ixV2BINcZgcl17g58Qsi6t7nbjmJ86MBEcl12AEMHfg=";
+    hash = "sha256-kKdBS9Rl0nHRE3Nv/B5KF8SRlG4dnGmpVt8qaE3idMI=";
   };
 
-  vendorHash = "sha256-C3GqC0isMM8XP8K6BLd7I3UFxXPHs2Vmm0+LCroH6k4=";
+  vendorHash = "sha256-9VWTJyAOJD7YivzNcVOYYF3eWnR7Fhb/neSVx9pNM7g=";
 
   ldflags = [
     "-X 'github.com/jzelinskie/cobrautil/v2.Version=${finalAttrs.src.tag}'"
diff --git a/pkgs/by-name/sq/squashfsTools/package.nix b/pkgs/by-name/sq/squashfsTools/package.nix
index 389e4faeddba..5312431c58ba 100644
--- a/pkgs/by-name/sq/squashfsTools/package.nix
+++ b/pkgs/by-name/sq/squashfsTools/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch,
   help2man,
   lz4,
   lzo,
@@ -23,6 +24,14 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-rQ69sXvi6wY8yRyuQzcJZ6MvVGBbIw7vG+kYVHvfQQ8=";
   };
 
+  patches = [
+    # Fix for Darwin: struct stat uses st_atimespec instead of st_atim.
+    (fetchpatch {
+      url = "https://github.com/plougher/squashfs-tools/commit/f88f4a659d6ab432a57e90fe2f6191149c6b343f.patch";
+      hash = "sha256-XRDV6qtd5jVwt2jbIlLDYKiI1tbVcuij5/vaPj9SN5w=";
+    })
+  ];
+
   strictDeps = true;
   nativeBuildInputs = [
     which
diff --git a/pkgs/by-name/st/stash/package.nix b/pkgs/by-name/st/stash/package.nix
index e9dcfcf0168a..566ebd51fa2f 100644
--- a/pkgs/by-name/st/stash/package.nix
+++ b/pkgs/by-name/st/stash/package.nix
@@ -131,7 +131,6 @@ buildGoModule (
       homepage = "https://stashapp.cc/";
       changelog = "https://github.com/stashapp/stash/blob/v${finalAttrs.version}/ui/v2.5/src/docs/en/Changelog/v${lib.versions.major finalAttrs.version}${lib.versions.minor finalAttrs.version}0.md";
       maintainers = with lib.maintainers; [
-        Golo300
         DrakeTDL
       ];
       platforms = [
diff --git a/pkgs/by-name/st/static-web-server/package.nix b/pkgs/by-name/st/static-web-server/package.nix
index 4a8b8b9a60ad..0b834e9f52c3 100644
--- a/pkgs/by-name/st/static-web-server/package.nix
+++ b/pkgs/by-name/st/static-web-server/package.nix
@@ -3,29 +3,31 @@
   rustPlatform,
   fetchFromGitHub,
   nixosTests,
+  versionCheckHook,
+  nix-update-script,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "static-web-server";
-  version = "2.39.0";
+  version = "2.42.0";
 
   src = fetchFromGitHub {
     owner = "static-web-server";
     repo = "static-web-server";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-iprQlSHO+ac7v1odVoS/9IU+Zov8/xh1l9pm1PJE8fs=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-EWCkad2v937GPL7qeHxPp24wf3EWk+M5iQkZBhErv/Y=";
   };
 
-  cargoHash = "sha256-rNrGlgUvPezX7RnKhprRjl9DiJ/Crt4phmxnfY9tNXA=";
+  cargoHash = "sha256-RYTG54c4Q4uP4lAZpjfulP/BV4jDp5xxsa6vtSn+vOs=";
 
   # static-web-server already has special handling for files with modification
-  # time = unix epoch, but the nix store is unix epoch + 1 second.
+  # time = Unix epoch, but the nix store is Unix epoch + 1 second.
   patches = [ ./include-unix-time-plus-one.diff ];
 
-  # Some tests which implicitly relied on the above behavior now break.  Force
-  # an mtime update to fix.
+  # Some tests which implicitly relied on the above behavior now break.
+  # Force an mtime update to everything except symbolic inks to fix.
   postUnpack = ''
-    find . -exec touch -m {} +
+    find . -not -type l -exec touch -m {} +
   '';
 
   # Need to copy in the systemd units for systemd.packages to discover them
@@ -33,12 +35,18 @@ rustPlatform.buildRustPackage (finalAttrs: {
     install -Dm444 -t $out/lib/systemd/system/ systemd/static-web-server.{service,socket}
   '';
 
-  passthru.tests = {
-    inherit (nixosTests) static-web-server;
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  passthru = {
+    updateScript = nix-update-script { };
+    tests = {
+      inherit (nixosTests) static-web-server;
+    };
   };
 
   meta = {
-    description = "Asynchronous web server for static files-serving";
+    description = "A cross-platform, high-performance and asynchronous web server for static files-serving";
     homepage = "https://static-web-server.net/";
     changelog = "https://github.com/static-web-server/static-web-server/blob/v${finalAttrs.version}/CHANGELOG.md";
     license = with lib.licenses; [
@@ -47,6 +55,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     ];
     maintainers = with lib.maintainers; [
       misilelab
+      progrm_jarvis
     ];
     mainProgram = "static-web-server";
   };
diff --git a/pkgs/by-name/st/steelix/package.nix b/pkgs/by-name/st/steelix/package.nix
index 5ffda38f0e79..99025419983d 100644
--- a/pkgs/by-name/st/steelix/package.nix
+++ b/pkgs/by-name/st/steelix/package.nix
@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "steelix";
-  version = "0-unstable-2026-03-19";
+  version = "0-unstable-2026-03-29";
 
   src = fetchFromGitHub {
     owner = "mattwparas";
     repo = "helix";
-    rev = "03ad8a1b026c28f9ecec80c4d67151731ec9d5fc";
-    hash = "sha256-ifMz83gWOfZTxahD+kafCij2Z6SBDgntM/nCdN7OZEs=";
+    rev = "912d8d8b97da21de9b44b4e24a476e193e7cc44d";
+    hash = "sha256-5h6eicp0+qzgiDrWc0mlTiX+jvcx8d54Fp922uQ2p0k=";
   };
 
-  cargoHash = "sha256-iKurrnsJw3x4QHNQYALinO39bw/XVAFJSdN/t8Nzq68=";
+  cargoHash = "sha256-t8BJmJGnNMaZbMHrQhg2BRo8NYYv7qNtfrCO1rgOlgo=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/st/stevenblack-blocklist/package.nix b/pkgs/by-name/st/stevenblack-blocklist/package.nix
index ef21f148c744..c719cc855d05 100644
--- a/pkgs/by-name/st/stevenblack-blocklist/package.nix
+++ b/pkgs/by-name/st/stevenblack-blocklist/package.nix
@@ -6,13 +6,13 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "stevenblack-blocklist";
-  version = "3.16.69";
+  version = "3.16.72";
 
   src = fetchFromGitHub {
     owner = "StevenBlack";
     repo = "hosts";
     tag = finalAttrs.version;
-    hash = "sha256-OSN3K2lSag5aA58UmfI1JMvmksuEVwlT7TOeBOsEmX8=";
+    hash = "sha256-4jL8uNtLxjFObsp34uYAdPinNHZEcLk+wQ9Dg2wGxgk=";
   };
 
   outputs = [
diff --git a/pkgs/by-name/ta/tagtime/package.nix b/pkgs/by-name/ta/tagtime/package.nix
index d877baf57d2b..3a665b9c59c0 100644
--- a/pkgs/by-name/ta/tagtime/package.nix
+++ b/pkgs/by-name/ta/tagtime/package.nix
@@ -81,7 +81,7 @@ stdenv.mkDerivation {
     '';
     homepage = "https://messymatters.com/tagtime/";
     license = lib.licenses.bsd3;
-    maintainers = [ lib.maintainers.Profpatsch ];
+    maintainers = [ ];
     mainProgram = "tagtimed";
   };
 }
diff --git a/pkgs/by-name/ta/tailscale/package.nix b/pkgs/by-name/ta/tailscale/package.nix
index bc93c2f21030..ca6b3f073e05 100644
--- a/pkgs/by-name/ta/tailscale/package.nix
+++ b/pkgs/by-name/ta/tailscale/package.nix
@@ -24,7 +24,7 @@
 
 buildGoModule (finalAttrs: {
   pname = "tailscale";
-  version = "1.96.4";
+  version = "1.96.5";
 
   outputs = [
     "out"
@@ -35,7 +35,7 @@ buildGoModule (finalAttrs: {
     owner = "tailscale";
     repo = "tailscale";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-VnAEfY8W+2QPnQLvVFJA7/XyvSnppSdRvgAOgpmRFGM=";
+    hash = "sha256-vYYb+2OtuXftjGGG0zWJesHccrClB8YZpclv9KzNN/c=";
   };
 
   vendorHash = "sha256-rhuWEEN+CtumVxOw6Dy/IRxWIrZ2x6RJb6ULYwXCQc4=";
diff --git a/pkgs/by-name/ta/tanka/package.nix b/pkgs/by-name/ta/tanka/package.nix
index b83d7a9e9b80..6bfcd6120daa 100644
--- a/pkgs/by-name/ta/tanka/package.nix
+++ b/pkgs/by-name/ta/tanka/package.nix
@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "tanka";
-  version = "0.36.3";
+  version = "0.36.4";
 
   src = fetchFromGitHub {
     owner = "grafana";
     repo = "tanka";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-ukWPmOEFOMnjwqTy9GkA8+WF3ItXUUvuh8EdKngLlT8=";
+    sha256 = "sha256-t40sGSXKb7Q0WvMl4D7J59FurbkGRX8PHA34WM2Hnwk=";
   };
 
-  vendorHash = "sha256-nO0nv7tpUovtooeCr6zFA2mgCvuaLszrjU0EpcMMRmE=";
+  vendorHash = "sha256-4Ojuu4Jv++yh/wbJATdd/uozFb9gDVv3nD64Iy5EjQQ=";
 
   doCheck = false;
   # Required for versions >= 0.28 as they introduce a gowork.sum file. This is only used for tests so we can safely disable GOWORK
diff --git a/pkgs/by-name/ta/tar2ext4/package.nix b/pkgs/by-name/ta/tar2ext4/package.nix
index a5181813a91f..44bc4792427a 100644
--- a/pkgs/by-name/ta/tar2ext4/package.nix
+++ b/pkgs/by-name/ta/tar2ext4/package.nix
@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "tar2ext4";
-  version = "0.13.0";
+  version = "0.14.0";
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "hcsshim";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-/ImyicXRBGclnUEpqygNYhknFYJmRqBqKkz/gNxVLWQ=";
+    sha256 = "sha256-8FPEGQ6DBYYnT6mIjYmSTRfHMloS42oB8xPU5wmFLwI=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/cmd/tar2ext4";
diff --git a/pkgs/by-name/ty/ty/package.nix b/pkgs/by-name/ty/ty/package.nix
index ef0cd4bfb355..e866fb19368f 100644
--- a/pkgs/by-name/ty/ty/package.nix
+++ b/pkgs/by-name/ty/ty/package.nix
@@ -14,14 +14,14 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "ty";
-  version = "0.0.26";
+  version = "0.0.27";
 
   src = fetchFromGitHub {
     owner = "astral-sh";
     repo = "ty";
     tag = finalAttrs.version;
     fetchSubmodules = true;
-    hash = "sha256-Q4xYL+MbFnzLFUbfqY5yrepBD7tIujwr9tTPp0H2J/U=";
+    hash = "sha256-PhPEUNoEGw5tKm1HDHAjJQcYsV6H/b2IpOosSD+sbMA=";
   };
 
   # For Darwin platforms, remove the integration test for file notifications,
@@ -35,7 +35,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   cargoBuildFlags = [ "--package=ty" ];
 
-  cargoHash = "sha256-la+8mIFxoTmGUkiIhCZLSP5pRZmOVrenhLjK/yCSz5I=";
+  cargoHash = "sha256-ARSE/TnZ6vRAb6v8XFathQfpCxfzqYaphKRfhIzHUtc=";
 
   nativeBuildInputs = [ installShellFiles ];
 
diff --git a/pkgs/by-name/ub/ubase/package.nix b/pkgs/by-name/ub/ubase/package.nix
new file mode 100644
index 000000000000..d6d1e7d58591
--- /dev/null
+++ b/pkgs/by-name/ub/ubase/package.nix
@@ -0,0 +1,85 @@
+{
+  lib,
+  stdenv,
+  fetchgit,
+  libxcrypt,
+  testers,
+  unstableGitUpdater,
+  which,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "ubase";
+  version = "0-unstable-2024-03-07";
+
+  src = fetchgit {
+    url = "https://git.suckless.org/ubase";
+    rev = "a570a80ed1606bed43118cb148fc83c3ac22b5c1";
+    hash = "sha256-afsTkctATIZ6ug9S2gIGoxtFM1h/esgsexyuxXpocs0=";
+  };
+
+  strictDeps = true;
+  enableParallelBuilding = true;
+
+  buildInputs = [ libxcrypt ];
+
+  makeFlags = [ "PREFIX=${placeholder "out"}" ];
+  buildFlags = [ "ubase-box" ];
+  installTargets = [ "ubase-box-install" ];
+
+  passthru = {
+    updateScript = unstableGitUpdater { };
+
+    tests = {
+      ddCopiesBytes = testers.runCommand {
+        name = "ubase-dd-copies-bytes";
+        buildInputs = [ finalAttrs.finalPackage ];
+        script = ''
+          dd if=/dev/zero of=test.bin bs=1 count=4
+          set -- $(stat -t test.bin)
+          [ "$1" = "test.bin" ] && [ "$2" = "4" ]
+          touch $out
+        '';
+      };
+
+      idMatchesUid = testers.runCommand {
+        name = "ubase-id-matches-uid";
+        buildInputs = [ finalAttrs.finalPackage ];
+        script = ''
+          [ "$(id -u)" = "$UID" ]
+          touch $out
+        '';
+      };
+
+      pagesizePositive = testers.runCommand {
+        name = "ubase-pagesize-positive";
+        buildInputs = [ finalAttrs.finalPackage ];
+        script = ''
+          [ "$(pagesize)" -gt 0 ]
+          touch $out
+        '';
+      };
+
+      whichIdIsBox = testers.runCommand {
+        name = "ubase-which-id-is-box";
+        buildInputs = [
+          which
+          finalAttrs.finalPackage
+        ];
+        script = ''
+          [ $(which id) -ef $(which ubase-box) ]
+          touch $out
+        '';
+      };
+    };
+  };
+
+  meta = {
+    description = "Linux base utilities from suckless.org";
+    homepage = "https://core.suckless.org/ubase/";
+    license = lib.licenses.mit;
+    platforms = lib.platforms.linux;
+    mainProgram = "ubase-box";
+    maintainers = with lib.maintainers; [ Zaczero ];
+  };
+})
diff --git a/pkgs/by-name/ul/ultrastardx/package.nix b/pkgs/by-name/ul/ultrastardx/package.nix
index f9228af431ae..3583ad5ab012 100644
--- a/pkgs/by-name/ul/ultrastardx/package.nix
+++ b/pkgs/by-name/ul/ultrastardx/package.nix
@@ -82,7 +82,6 @@ stdenv.mkDerivation (finalAttrs: {
     license = lib.licenses.gpl2Plus;
     maintainers = with lib.maintainers; [
       diogotcorreia
-      Profpatsch
     ];
     platforms = lib.platforms.linux;
   };
diff --git a/pkgs/by-name/va/vanilla-dmz/package.nix b/pkgs/by-name/va/vanilla-dmz/package.nix
index e7097a329208..9cffc7ebbe60 100644
--- a/pkgs/by-name/va/vanilla-dmz/package.nix
+++ b/pkgs/by-name/va/vanilla-dmz/package.nix
@@ -43,6 +43,19 @@ stdenvNoCC.mkDerivation rec {
     for theme in DMZ-{White,Black}; do
       mkdir -p $out/share/icons/$theme/cursors
       cp -a $theme/xcursors/* $out/share/icons/$theme/cursors/
+
+      pushd $out/share/icons/$theme/cursors
+      ln -s bottom_left_corner sw-resize
+      ln -s bottom_right_corner se-resize
+      ln -s bottom_side s-resize
+      ln -s left_ptr default
+      ln -s left_side w-resize
+      ln -s right_side e-resize
+      ln -s top_left_corner nw-resize
+      ln -s top_right_corner ne-resize
+      ln -s top_side n-resize
+      popd
+
       install -m644 $theme/index.theme $out/share/icons/$theme/index.theme
     done
 
@@ -57,6 +70,6 @@ stdenvNoCC.mkDerivation rec {
     description = "Style neutral scalable cursor theme";
     platforms = lib.platforms.all;
     license = lib.licenses.cc-by-sa-30;
-    maintainers = [ ];
+    maintainers = with lib.maintainers; [ amaanq ];
   };
 }
diff --git a/pkgs/by-name/vu/vulkan-cts/package.nix b/pkgs/by-name/vu/vulkan-cts/package.nix
index 1b3019575943..54d512b6f50d 100644
--- a/pkgs/by-name/vu/vulkan-cts/package.nix
+++ b/pkgs/by-name/vu/vulkan-cts/package.nix
@@ -53,13 +53,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "vulkan-cts";
-  version = "1.4.5.2";
+  version = "1.4.5.3";
 
   src = fetchFromGitHub {
     owner = "KhronosGroup";
     repo = "VK-GL-CTS";
     rev = "vulkan-cts-${finalAttrs.version}";
-    hash = "sha256-VlnKeZlf6oMROHfJ5cnvUXSQequosul6BhrjBP/IoUU=";
+    hash = "sha256-UZktBlSADFowMuGoWH98Dhg9nD5hYjs19melnx996gg=";
   };
 
   prePatch = ''
diff --git a/pkgs/by-name/wa/wakatime-cli/package.nix b/pkgs/by-name/wa/wakatime-cli/package.nix
index 0243a8666849..f50240efc067 100644
--- a/pkgs/by-name/wa/wakatime-cli/package.nix
+++ b/pkgs/by-name/wa/wakatime-cli/package.nix
@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "wakatime-cli";
-  version = "1.139.2";
+  version = "2.0.8";
 
   src = fetchFromGitHub {
     owner = "wakatime";
     repo = "wakatime-cli";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-kFZEg71tV5Afe6wzhatNwH3lE1Lr+CnH0AHy+e/DSMA=";
+    hash = "sha256-VBlERyaoRmOO7CGPmF9R2f6sU+8BNJ3Ze4AX2mxezCo=";
   };
 
   vendorHash = "sha256-1BtTtR8wPVzzOEGv3te3hOeKakZX7cS+HYvoCLnuZ/c=";
diff --git a/pkgs/by-name/we/webeep-sync/package.nix b/pkgs/by-name/we/webeep-sync/package.nix
new file mode 100644
index 000000000000..911c34414df8
--- /dev/null
+++ b/pkgs/by-name/we/webeep-sync/package.nix
@@ -0,0 +1,125 @@
+{
+  stdenvNoCC,
+  fetchFromGitHub,
+  pnpm_10,
+  fetchPnpmDeps,
+  pnpmConfigHook,
+  writableTmpDirAsHomeHook,
+  makeWrapper,
+  electron,
+  nodejs,
+  zip,
+  makeDesktopItem,
+  copyDesktopItems,
+  lib,
+  nix-update-script,
+  withDebug ? false,
+}:
+
+stdenvNoCC.mkDerivation (finalAttrs: {
+  pname = "webeep-sync";
+  version = "1.0.3-unstable-2026-03-24";
+
+  src = fetchFromGitHub {
+    owner = "toto04";
+    repo = "webeep-sync";
+    rev = "eabae4471b32660358c8bf95a985473f145d160a";
+    hash = "sha256-wQUNhuhuARLJG0ZYRVpIAgUIbYDFTLC3sRH762HOmBY=";
+  };
+
+  nativeBuildInputs = [
+    pnpmConfigHook
+    pnpm_10
+    writableTmpDirAsHomeHook
+    makeWrapper
+    nodejs
+    zip
+    electron
+    copyDesktopItems
+  ];
+
+  pnpmDeps = fetchPnpmDeps {
+    inherit (finalAttrs) pname version src;
+    hash = "sha256-IuI1asHqq2n1/hqf1NlRUG5/GU7HTLKCjalNooyPcO4=";
+    pnpm = pnpm_10;
+    fetcherVersion = 3;
+  };
+
+  env = {
+    ELECTRON_SKIP_BINARY_DOWNLOAD = 1;
+  };
+
+  patches = [ ./workspace.patch ]; # TODO: waiting for PR https://github.com/toto04/webeep-sync/pull/138
+
+  preBuild = ''
+    # create the electron archive to be used by electron-packager
+    cp -r ${electron.dist} electron-dist
+    chmod -R u+w electron-dist
+
+    pushd electron-dist
+    zip -0Xqr ../electron.zip .
+    popd
+
+    rm -r electron-dist
+
+    # force @electron/packager to use our electron instead of downloading it
+    substituteInPlace node_modules/.pnpm/@electron+packager@*/node_modules/@electron/packager/dist/packager.js \
+      --replace-fail "await this.getElectronZipPath(downloadOpts)" "'$(pwd)/electron.zip'"
+  '';
+
+  buildPhase = ''
+    runHook preBuild
+    pnpm config set node-linker hoisted
+    pnpm run package | cat
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    ${lib.optionalString (!withDebug) ''
+      find -type f \( -name "*.ts" -o -name "*.map" \) -exec rm -rf {} +
+    ''}
+
+    rm -rf node_modules/.pnpm/{*electron*,*typescript*,prettier*,eslint*,@babel*,react-icons*}
+    # remove symlinks to the previously deleted packages
+    find node_modules packages/**/node_modules -xtype l -delete
+
+    mkdir -p $out/lib/node_modules/${finalAttrs.pname}
+    cp -r .webpack node_modules $out/lib/node_modules/${finalAttrs.pname}/
+
+    makeWrapper ${electron}/bin/electron $out/bin/${finalAttrs.pname} \
+      ${lib.optionalString withDebug ''--set NODE_OPTIONS "--enable-source-maps"''} \
+      --add-flags "$out/lib/node_modules/${finalAttrs.pname}/.webpack/x64/main/index.js" \
+      --add-flags "--user-data-dir=\$HOME/.config/${finalAttrs.pname}"
+
+    for size in 32 48 64 72 96 128 256; do
+      install -Dm644 static/icons/icon-$size"x"$size.png \
+        $out/share/icons/hicolor/$size"x"$size/apps/${finalAttrs.pname}.png
+    done
+
+    runHook postInstall
+  '';
+
+  desktopItems = [
+    (makeDesktopItem {
+      name = finalAttrs.pname;
+      exec = finalAttrs.pname;
+      icon = finalAttrs.pname; # Matches the PNG name we installed earlier
+      desktopName = "WeBeep Sync";
+      comment = finalAttrs.meta.description;
+      categories = [ "Education" ];
+    })
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Keep all your WeBeep files synced on your computer";
+    homepage = "https://github.com/toto04/webeep-sync";
+    license = lib.licenses.gpl3Only;
+    platforms = lib.platforms.linux;
+    maintainers = [ lib.maintainers.lnk3 ];
+    mainProgram = "webeep-sync";
+  };
+})
diff --git a/pkgs/by-name/we/webeep-sync/workspace.patch b/pkgs/by-name/we/webeep-sync/workspace.patch
new file mode 100644
index 000000000000..c56d7646b0d0
--- /dev/null
+++ b/pkgs/by-name/we/webeep-sync/workspace.patch
@@ -0,0 +1,8 @@
+--- a/pnpm-workspace.yaml
++++ b/pnpm-workspace.yaml
+@@ -1,3 +1,5 @@
++packages:
++  - '.'
+ allowBuilds:
+   '@parcel/watcher': true
+   electron: true
diff --git a/pkgs/by-name/wh/whatsie/package.nix b/pkgs/by-name/wh/whatsie/package.nix
index 2e1bc381e9dc..7f2a6f1d8cdc 100644
--- a/pkgs/by-name/wh/whatsie/package.nix
+++ b/pkgs/by-name/wh/whatsie/package.nix
@@ -2,65 +2,38 @@
   fetchFromGitHub,
   lib,
   stdenv,
-  makeDesktopItem,
-  copyDesktopItems,
+  cmake,
   libx11,
   libxcb,
-  qt5,
+  qt6,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "whatsie";
-  version = "4.16.3";
+  version = "5.0.0";
 
   src = fetchFromGitHub {
     owner = "keshavbhatt";
     repo = "whatsie";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-F6hQY3Br0iFDYkghBgRAyzLW6QhhG8UHOgkEgDjeQLg=";
+    hash = "sha256-GVXwZZFfPqAmBrP95zleHc2PpMMBj/8xZdW4JpFdYVs=";
   };
 
-  sourceRoot = "${finalAttrs.src.name}/src";
-
-  desktopItems = [
-    (makeDesktopItem {
-      name = "whatsie";
-      desktopName = "Whatsie";
-      icon = "whatsie";
-      exec = "whatsie";
-      comment = finalAttrs.meta.description;
-    })
-  ];
-
   buildInputs = [
     libx11
     libxcb
-    qt5.qtwebengine
+    qt6.qtwebengine
   ];
 
   nativeBuildInputs = [
-    copyDesktopItems
-    qt5.wrapQtAppsHook
-    qt5.qmake
+    cmake
+    qt6.wrapQtAppsHook
   ];
 
-  strictDeps = false;
+  strictDeps = true;
 
   enableParallelBuilding = true;
 
-  preBuild = ''
-    export QT_WEBENGINE_ICU_DATA_DIR=${qt5.qtwebengine.out}/resources
-  '';
-
-  installPhase = ''
-    runHook preInstall
-
-    install -Dm755 whatsie -t $out/bin
-    install -Dm644 $src/snap/gui/icon.svg $out/share/icons/hicolor/scalable/apps/whatsie.svg
-
-    runHook postInstall
-  '';
-
   meta = {
     homepage = "https://github.com/keshavbhatt/whatsie";
     description = "Feature rich WhatsApp Client for Desktop Linux";
diff --git a/pkgs/by-name/yj/yj/package.nix b/pkgs/by-name/yj/yj/package.nix
index 6a0db061fd44..5ad7e7aefaf4 100644
--- a/pkgs/by-name/yj/yj/package.nix
+++ b/pkgs/by-name/yj/yj/package.nix
@@ -27,7 +27,7 @@ buildGoModule (finalAttrs: {
     description = "Convert YAML <=> TOML <=> JSON <=> HCL";
     license = lib.licenses.asl20;
     mainProgram = "yj";
-    maintainers = with lib.maintainers; [ Profpatsch ];
+    maintainers = [ ];
     homepage = "https://github.com/sclevine/yj";
   };
 })
diff --git a/pkgs/by-name/za/zapzap/package.nix b/pkgs/by-name/za/zapzap/package.nix
index ef76bf4a0a62..eed208d6579a 100644
--- a/pkgs/by-name/za/zapzap/package.nix
+++ b/pkgs/by-name/za/zapzap/package.nix
@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "zapzap";
-  version = "6.3.4.1";
+  version = "6.4.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "rafatosta";
     repo = "zapzap";
     tag = finalAttrs.version;
-    hash = "sha256-BKu78K0dVBw1NK/WkL95/fZUBuWXX4mkFQxdk1FV390=";
+    hash = "sha256-3iFuJdiye0yt/6b6N1etS1YK+/QDS2p0eYXXtpPQDdE=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/zi/zigbee2mqtt/package.nix b/pkgs/by-name/zi/zigbee2mqtt/package.nix
index 5038cc8e0fb3..52365017d72a 100644
--- a/pkgs/by-name/zi/zigbee2mqtt/package.nix
+++ b/pkgs/by-name/zi/zigbee2mqtt/package.nix
@@ -14,20 +14,20 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "zigbee2mqtt";
-  version = "2.9.1";
+  version = "2.9.2";
 
   src = fetchFromGitHub {
     owner = "Koenkk";
     repo = "zigbee2mqtt";
     tag = finalAttrs.version;
-    hash = "sha256-PsgQ1/h9YCQNV58PB7o3CQyfuOXzU878I9qIfozX02w=";
+    hash = "sha256-LdrsHOeRXeNccpf1UNg20y82M75PGt070zVbmQYYsVg=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_9;
     fetcherVersion = 1;
-    hash = "sha256-MM184JsFVGqOALyQjCyR3QnHqHoQr39lnodq5v4cXAQ=";
+    hash = "sha256-8ioe9/gSI9u9ehrnj3L1j+vPS9p+nJGs2d8TdZTEsk4=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/by-name/zo/zotero/package.nix b/pkgs/by-name/zo/zotero/package.nix
index c314c3c90bca..081eaba71c7f 100644
--- a/pkgs/by-name/zo/zotero/package.nix
+++ b/pkgs/by-name/zo/zotero/package.nix
@@ -27,13 +27,13 @@ let
   nodejs = nodejs_22;
 
   pname = "zotero";
-  version = "8.0.3";
+  version = "8.0.5";
 
   src = fetchFromGitHub {
     owner = "zotero";
     repo = "zotero";
     tag = version;
-    hash = "sha256-I6s6m8CG1b1BXQK2qIdOqmsNyxzwj3fAfFFuHK7t6ec=";
+    hash = "sha256-Amk2ehdzrQjFhx1eEHcnq+Z+un+2bT/u4kpbWqD5Sbc=";
     fetchSubmodules = true;
   };
 
@@ -326,6 +326,7 @@ buildNpmPackage (finalAttrs: {
   meta = {
     homepage = "https://www.zotero.org";
     description = "Collect, organize, cite, and share your research sources";
+    changelog = "https://www.zotero.org/support/changelog";
     mainProgram = "zotero";
     license = lib.licenses.agpl3Only;
     platforms = lib.platforms.linux ++ lib.platforms.darwin;
diff --git a/pkgs/by-name/zs/zsh-forgit/package.nix b/pkgs/by-name/zs/zsh-forgit/package.nix
index b487b54c6458..6416d9bd2348 100644
--- a/pkgs/by-name/zs/zsh-forgit/package.nix
+++ b/pkgs/by-name/zs/zsh-forgit/package.nix
@@ -15,13 +15,13 @@
 
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "zsh-forgit";
-  version = "26.01.0";
+  version = "26.04.0";
 
   src = fetchFromGitHub {
     owner = "wfxr";
     repo = "forgit";
     tag = finalAttrs.version;
-    hash = "sha256-3PjKFARsN3BE5c3/JonNj+LpKBPT1N3hc1bK6NdWDTQ=";
+    hash = "sha256-H5Vuf+VIrurs9lwad/K4klElXvM1kg6LEjm/wgv1/z8=";
   };
 
   strictDeps = true;
diff --git a/pkgs/desktops/pantheon/apps/appcenter/default.nix b/pkgs/desktops/pantheon/apps/appcenter/default.nix
index f5406df506f7..82d36277cb00 100644
--- a/pkgs/desktops/pantheon/apps/appcenter/default.nix
+++ b/pkgs/desktops/pantheon/apps/appcenter/default.nix
@@ -26,13 +26,13 @@
 
 stdenv.mkDerivation rec {
   pname = "appcenter";
-  version = "8.3.2";
+  version = "8.4.0";
 
   src = fetchFromGitHub {
     owner = "elementary";
     repo = "appcenter";
     tag = version;
-    hash = "sha256-K8XqWHR9TLkekPvx8VuigIWnqMRJcNf/rkfzUQAE0iU=";
+    hash = "sha256-8OgGeht0K7MpV9o2MOOt/XvTWHvvQGH+4bLzsWCsFqg=";
   };
 
   nativeBuildInputs = [
diff --git a/pkgs/development/cuda-modules/packages/libnvshmem.nix b/pkgs/development/cuda-modules/packages/libnvshmem.nix
index d1960e913be2..ddc8953b0232 100644
--- a/pkgs/development/cuda-modules/packages/libnvshmem.nix
+++ b/pkgs/development/cuda-modules/packages/libnvshmem.nix
@@ -27,6 +27,14 @@
   ucx,
   # passthru.updateScript
   gitUpdater,
+
+  withGdrcopy ? true,
+  withIbgda ? true,
+  withLibfabric ? true,
+  withMpi ? true,
+  withNccl ? true,
+  withPmix ? true,
+  withUcx ? true,
 }:
 let
   inherit (lib)
@@ -38,6 +46,8 @@ let
     getLib
     licenses
     maintainers
+    optional
+    optionals
     teams
     ;
 in
@@ -64,13 +74,14 @@ backendStdenv.mkDerivation (finalAttrs: {
     cmake
     ninja
 
-    # NOTE: mpi is in nativeBuildInputs because it contains compilers and is only discoverable by CMake
-    # when a nativeBuildInput.
-    mpi
-
     # NOTE: Python is required even if not building nvshmem4py:
     # https://github.com/NVIDIA/nvshmem/blob/131da55f643ac87c810ba0bc51d359258bf433a1/CMakeLists.txt#L173
     python3Packages.python
+  ]
+  ++ optionals withMpi [
+    # NOTE: mpi is in nativeBuildInputs because it contains compilers and is only discoverable by CMake
+    # when a nativeBuildInput.
+    mpi
   ];
 
   # NOTE: Hardcoded standard versions mean CMake doesn't respect values we provide, so we need to patch the files.
@@ -98,12 +109,22 @@ backendStdenv.mkDerivation (finalAttrs: {
     cuda_nvml_dev
     cuda_nvrtc
     cuda_nvtx
-    gdrcopy
-    libfabric
     libnvjitlink
-    nccl
-    pmix
     rdma-core
+  ]
+  ++ optionals withLibfabric [
+    libfabric
+  ]
+  ++ optionals withGdrcopy [
+    gdrcopy
+  ]
+  ++ optionals withNccl [
+    nccl
+  ]
+  ++ optionals withPmix [
+    pmix
+  ]
+  ++ optionals withUcx [
     ucx
   ];
 
@@ -113,49 +134,51 @@ backendStdenv.mkDerivation (finalAttrs: {
   env.CUDA_HOME = (getBin cuda_nvcc).outPath;
 
   # https://docs.nvidia.com/nvshmem/release-notes-install-guide/install-guide/nvshmem-install-proc.html#other-distributions
-  cmakeFlags = [
-    (cmakeFeature "NVSHMEM_PREFIX" (placeholder "out"))
+  cmakeFlags = lib.concatLists [
+    [
+      (cmakeFeature "NVSHMEM_PREFIX" (placeholder "out"))
 
-    (cmakeFeature "CUDA_HOME" (getBin cuda_nvcc).outPath)
-    (cmakeFeature "CMAKE_CUDA_COMPILER" (getExe cuda_nvcc))
+      (cmakeFeature "CUDA_HOME" (getBin cuda_nvcc).outPath)
+      (cmakeFeature "CMAKE_CUDA_COMPILER" (getExe cuda_nvcc))
 
-    (cmakeFeature "CMAKE_CUDA_ARCHITECTURES" flags.cmakeCudaArchitecturesString)
+      (cmakeFeature "CMAKE_CUDA_ARCHITECTURES" flags.cmakeCudaArchitecturesString)
 
-    (cmakeBool "NVSHMEM_USE_NCCL" true)
-    (cmakeFeature "NCCL_HOME" (getDev nccl).outPath)
+      (cmakeBool "NVSHMEM_BUILD_TESTS" true)
+      (cmakeBool "NVSHMEM_BUILD_EXAMPLES" true)
 
-    (cmakeBool "NVSHMEM_USE_GDRCOPY" true)
-    (cmakeFeature "GDRCOPY_HOME" (getDev gdrcopy).outPath)
+      (cmakeBool "NVSHMEM_BUILD_DEB_PACKAGE" false)
+      (cmakeBool "NVSHMEM_BUILD_RPM_PACKAGE" false)
+
+      # TODO: Looks like a nightmare to package and depends on things we haven't packaged yet
+      # https://github.com/NVIDIA/nvshmem/tree/131da55f643ac87c810ba0bc51d359258bf433a1/nvshmem4py
+      (cmakeBool "NVSHMEM_BUILD_PYTHON_LIB" false)
+
+      # NOTE: unsupported because it requires Clang
+      (cmakeBool "NVSHMEM_BUILD_BITCODE_LIBRARY" false)
+    ]
+
+    [ (cmakeBool "NVSHMEM_USE_NCCL" withNccl) ]
+    (optional withNccl (cmakeFeature "NCCL_HOME" (getDev nccl).outPath))
+
+    [ (cmakeBool "NVSHMEM_USE_GDRCOPY" withGdrcopy) ]
+    (optional withGdrcopy (cmakeFeature "GDRCOPY_HOME" (getDev gdrcopy).outPath))
 
     # NOTE: Make sure to use mpi from buildPackages to match the spliced version created through nativeBuildInputs.
-    (cmakeBool "NVSHMEM_MPI_SUPPORT" true)
-    (cmakeFeature "MPI_HOME" (getLib buildPackages.mpi).outPath)
+    [ (cmakeBool "NVSHMEM_MPI_SUPPORT" withMpi) ]
+    (optional withMpi (cmakeFeature "MPI_HOME" (getLib buildPackages.mpi).outPath))
 
     # TODO: Doesn't UCX need to be built with some argument when we want to use it with libnvshmem?
-    (cmakeBool "NVSHMEM_UCX_SUPPORT" true)
-    (cmakeFeature "UCX_HOME" (getDev ucx).outPath)
+    [ (cmakeBool "NVSHMEM_UCX_SUPPORT" withUcx) ]
+    (optional withUcx (cmakeFeature "UCX_HOME" (getDev ucx).outPath))
 
-    (cmakeBool "NVSHMEM_LIBFABRIC_SUPPORT" true)
-    (cmakeFeature "LIBFABRIC_HOME" (getDev libfabric).outPath)
+    [ (cmakeBool "NVSHMEM_LIBFABRIC_SUPPORT" withLibfabric) ]
+    (optional withLibfabric (cmakeFeature "LIBFABRIC_HOME" (getDev libfabric).outPath))
 
-    (cmakeBool "NVSHMEM_IBGDA_SUPPORT" true)
     # NOTE: no corresponding _HOME variable for IBGDA.
+    [ (cmakeBool "NVSHMEM_IBGDA_SUPPORT" withIbgda) ]
 
-    (cmakeBool "NVSHMEM_PMIX_SUPPORT" true)
-    (cmakeFeature "PMIX_HOME" (getDev pmix).outPath)
-
-    (cmakeBool "NVSHMEM_BUILD_TESTS" true)
-    (cmakeBool "NVSHMEM_BUILD_EXAMPLES" true)
-
-    (cmakeBool "NVSHMEM_BUILD_DEB_PACKAGE" false)
-    (cmakeBool "NVSHMEM_BUILD_RPM_PACKAGE" false)
-
-    # TODO: Looks like a nightmare to package and depends on things we haven't packaged yet
-    # https://github.com/NVIDIA/nvshmem/tree/131da55f643ac87c810ba0bc51d359258bf433a1/nvshmem4py
-    (cmakeBool "NVSHMEM_BUILD_PYTHON_LIB" false)
-
-    # NOTE: unsupported because it requires Clang
-    (cmakeBool "NVSHMEM_BUILD_BITCODE_LIBRARY" false)
+    [ (cmakeBool "NVSHMEM_PMIX_SUPPORT" withPmix) ]
+    (optional withPmix (cmakeFeature "PMIX_HOME" (getDev pmix).outPath))
   ];
 
   postInstall = ''
diff --git a/pkgs/development/em-modules/generic/default.nix b/pkgs/development/em-modules/generic/default.nix
index 394defdb631d..262e0bd1abf0 100644
--- a/pkgs/development/em-modules/generic/default.nix
+++ b/pkgs/development/em-modules/generic/default.nix
@@ -37,8 +37,10 @@ wrapDerivation (
     ]
     ++ nativeBuildInputs;
 
-    # fake conftest results with emscripten's python magic
-    EMCONFIGURE_JS = 2;
+    env = args.env or { } // {
+      # fake conftest results with emscripten's python magic
+      EMCONFIGURE_JS = 2;
+    };
 
     # removes archive indices
     dontStrip = args.dontStrip or true;
diff --git a/pkgs/development/haskell-modules/configuration-hackage2nix/main.yaml b/pkgs/development/haskell-modules/configuration-hackage2nix/main.yaml
index dbe9d2a8223a..3a2f8fafce2c 100644
--- a/pkgs/development/haskell-modules/configuration-hackage2nix/main.yaml
+++ b/pkgs/development/haskell-modules/configuration-hackage2nix/main.yaml
@@ -396,8 +396,6 @@ package-maintainers:
     - cornelis
   poscat:
     - hinit
-  Profpatsch:
-    - gitit
   psibi:
     - path-pieces
     - persistent
diff --git a/pkgs/development/haskell-modules/hackage-packages.nix b/pkgs/development/haskell-modules/hackage-packages.nix
index c478d5044b52..13fa65a3ed55 100644
--- a/pkgs/development/haskell-modules/hackage-packages.nix
+++ b/pkgs/development/haskell-modules/hackage-packages.nix
@@ -277018,7 +277018,6 @@ self: {
       description = "Wiki using happstack, git or darcs, and pandoc";
       license = "GPL";
       maintainers = [
-        lib.maintainers.Profpatsch
         lib.maintainers.sternenseemann
       ];
     }
diff --git a/pkgs/development/interpreters/elixir/1.20.nix b/pkgs/development/interpreters/elixir/1.20.nix
index f640da61fa16..82a43c1fa202 100644
--- a/pkgs/development/interpreters/elixir/1.20.nix
+++ b/pkgs/development/interpreters/elixir/1.20.nix
@@ -1,7 +1,7 @@
 import ./generic-builder.nix {
-  version = "1.20.0-rc.3";
-  hash = "sha256-n0Y9HHb3sppliLMADUiNZKsNStghH8WwsOsjYzIzNoU=";
-  # https://hexdocs.pm/elixir/1.20.0-rc.2/compatibility-and-deprecations.html#between-elixir-and-erlang-otp
-  minimumOTPVersion = "26";
-  maximumOTPVersion = "28";
+  version = "1.20.0-rc.4";
+  hash = "sha256-sboB+GW3T+t9gEcOGtd6NllmIlyWio1+cgWyyxE+484=";
+  # https://hexdocs.pm/elixir/1.20.0-rc.4/compatibility-and-deprecations.html#between-elixir-and-erlang-otp
+  minimumOTPVersion = "27";
+  maximumOTPVersion = "29";
 }
diff --git a/pkgs/development/interpreters/luajit/default.nix b/pkgs/development/interpreters/luajit/default.nix
index 2df24afc2fa3..91c706e4efa8 100644
--- a/pkgs/development/interpreters/luajit/default.nix
+++ b/pkgs/development/interpreters/luajit/default.nix
@@ -172,7 +172,9 @@ stdenv.mkDerivation (finalAttrs: {
       badPlatforms = [
         "loongarch64-linux" # See https://github.com/LuaJIT/LuaJIT/issues/1278
         "riscv64-linux" # See https://github.com/LuaJIT/LuaJIT/issues/628
-        "powerpc64le-linux" # `#error "No support for PPC64"`
+        # `#error "No support for PPC64"`
+        "powerpc64-linux"
+        "powerpc64le-linux"
       ];
       mainProgram = "lua";
       maintainers = with lib.maintainers; [
diff --git a/pkgs/development/interpreters/luajit/openresty.nix b/pkgs/development/interpreters/luajit/openresty.nix
index c8bf0cfd50e8..2321f87f524e 100644
--- a/pkgs/development/interpreters/luajit/openresty.nix
+++ b/pkgs/development/interpreters/luajit/openresty.nix
@@ -15,5 +15,17 @@ callPackage ./default.nix rec {
     hash = "sha256-SICmM+/dvp/36UAWAH0l7D938iFDimnoKBOjlOodrCY=";
   };
 
+  extraMeta = {
+    badPlatforms = [
+      "loongarch64-linux" # See https://github.com/LuaJIT/LuaJIT/issues/1278
+      "riscv64-linux" # See https://github.com/LuaJIT/LuaJIT/issues/628
+      # 64-bit POWER (LE and BE, either ELF ABI version on the latter) *is* supported, but ELFv1 powerpc64-linux has an
+      # issue with memory allocation
+      # https://github.com/openresty/luajit2/issues/258
+      # Both BE ABI versions use the same double though, so would have to inspect stdenv to differentiate.
+      "powerpc64-linux"
+    ];
+  };
+
   inherit self passthruFun;
 }
diff --git a/pkgs/development/libraries/kde-frameworks/kinit/default.nix b/pkgs/development/libraries/kde-frameworks/kinit/default.nix
index b8b0d74acad0..533af32e64bb 100644
--- a/pkgs/development/libraries/kde-frameworks/kinit/default.nix
+++ b/pkgs/development/libraries/kde-frameworks/kinit/default.nix
@@ -42,13 +42,15 @@ mkDerivation {
     ./0003-kdeinit-extra-libs.patch
     ./0004-start_kdeinit-environ-hard-limit.patch
   ];
-  CXXFLAGS = [
-    ''-DNIXPKGS_KF5_KIOCORE=\"${getLib kio}/lib/libKF5KIOCore.so.5\"''
-    ''-DNIXPKGS_KF5_PARTS=\"${getLib kparts}/lib/libKF5Parts.so.5\"''
-  ]
-  ++ lib.optionals stdenv.hostPlatform.isLinux [
-    ''-DNIXPKGS_KF5_PLASMA=\"${getLib plasma-framework}/lib/libKF5Plasma.so.5\"''
-  ];
+  env.CXXFLAGS = toString (
+    [
+      ''-DNIXPKGS_KF5_KIOCORE=\"${getLib kio}/lib/libKF5KIOCore.so.5\"''
+      ''-DNIXPKGS_KF5_PARTS=\"${getLib kparts}/lib/libKF5Parts.so.5\"''
+    ]
+    ++ lib.optionals stdenv.hostPlatform.isLinux [
+      ''-DNIXPKGS_KF5_PLASMA=\"${getLib plasma-framework}/lib/libKF5Plasma.so.5\"''
+    ]
+  );
   setupHook = writeScript "setup-hook.sh" ''
     kinitFixupOutputHook() {
         if [ $prefix != ''${!outputBin} ] && [ -d $prefix/lib ]; then
diff --git a/pkgs/development/libraries/mesa/common.nix b/pkgs/development/libraries/mesa/common.nix
index a37debea366e..98a47c617d02 100644
--- a/pkgs/development/libraries/mesa/common.nix
+++ b/pkgs/development/libraries/mesa/common.nix
@@ -5,14 +5,14 @@
 # nix build .#legacyPackages.x86_64-darwin.mesa .#legacyPackages.aarch64-darwin.mesa
 rec {
   pname = "mesa";
-  version = "26.0.3";
+  version = "26.0.4";
 
   src = fetchFromGitLab {
     domain = "gitlab.freedesktop.org";
     owner = "mesa";
     repo = "mesa";
     rev = "mesa-${version}";
-    hash = "sha256-CTOnJKsx9hDtLhDnuJSGc/lBQ2ZcDm3/Iie7awusGho=";
+    hash = "sha256-gsrqhFCxZRrTbA5MMWARrN6lFVp4Q3D5Jz7MDYbXznY=";
   };
 
   meta = {
diff --git a/pkgs/development/libraries/qoauth/default.nix b/pkgs/development/libraries/qoauth/default.nix
index 31f1719e39c3..6ec0a7bc0517 100644
--- a/pkgs/development/libraries/qoauth/default.nix
+++ b/pkgs/development/libraries/qoauth/default.nix
@@ -31,8 +31,10 @@ stdenv.mkDerivation rec {
   ];
   nativeBuildInputs = [ qmake ];
 
-  env.NIX_CFLAGS_COMPILE = "-I${qca-qt5}/include/Qca-qt5/QtCrypto";
-  NIX_LDFLAGS = "-lqca-qt5";
+  env = {
+    NIX_CFLAGS_COMPILE = "-I${qca-qt5}/include/Qca-qt5/QtCrypto";
+    NIX_LDFLAGS = "-lqca-qt5";
+  };
 
   dontWrapQtApps = true;
 
diff --git a/pkgs/development/python-modules/aioopenssl/default.nix b/pkgs/development/python-modules/aioopenssl/default.nix
index b69ba513263f..cb6336de2438 100644
--- a/pkgs/development/python-modules/aioopenssl/default.nix
+++ b/pkgs/development/python-modules/aioopenssl/default.nix
@@ -3,6 +3,7 @@
   stdenv,
   buildPythonPackage,
   fetchFromGitHub,
+  fetchpatch,
 
   # build-system
   setuptools,
@@ -34,6 +35,15 @@ buildPythonPackage rec {
 
   nativeCheckInputs = [ pytestCheckHook ];
 
+  patches = [
+    # compatibility with python3.14: set a asyncio event loop for the unit tetsts
+    (fetchpatch {
+      name = "fix-asyncio-event-loop.patch";
+      url = "https://github.com/theobori/aioopenssl/commit/47b1a1e5593fd8c3f4dedcdbc68c17e83d5c88ec.patch";
+      hash = "sha256-XdoeWS5wqmGDWRObVpjcRLyN7SF2IdVmSAUBD7U4dfI=";
+    })
+  ];
+
   # Tests that fail in when built in the Darwin sandbox.
   disabledTests = lib.optionals stdenv.hostPlatform.isDarwin [
     # address already in use
diff --git a/pkgs/development/python-modules/azure-kusto-ingest/default.nix b/pkgs/development/python-modules/azure-kusto-ingest/default.nix
index 1def8cac3ddd..25bccb378d7d 100644
--- a/pkgs/development/python-modules/azure-kusto-ingest/default.nix
+++ b/pkgs/development/python-modules/azure-kusto-ingest/default.nix
@@ -17,14 +17,14 @@
 
 buildPythonPackage rec {
   pname = "azure-kusto-ingest";
-  version = "6.0.2";
+  version = "6.0.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Azure";
     repo = "azure-kusto-python";
     tag = "v${version}";
-    hash = "sha256-jg8VueMohp7z45va5Z+cF0Hz+RMW4Vd5AchJX/wngLc=";
+    hash = "sha256-n69KpWZpAVMjr7d1QRQ/J/SgeTLkadJUhCgD62F6O7w=";
   };
 
   sourceRoot = "${src.name}/${pname}";
diff --git a/pkgs/development/python-modules/deep-ep/default.nix b/pkgs/development/python-modules/deep-ep/default.nix
new file mode 100644
index 000000000000..a26eafdd22e9
--- /dev/null
+++ b/pkgs/development/python-modules/deep-ep/default.nix
@@ -0,0 +1,114 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+
+  # build-system
+  torch,
+  setuptools,
+
+  # env
+  symlinkJoin,
+  cudaPackages,
+
+  # buildInputs
+  pybind11,
+  rdma-core,
+
+  config,
+  cudaCapabilities ? torch.cudaCapabilities,
+  cudaSupport ? config.cudaSupport,
+}:
+let
+  inherit (lib)
+    getBin
+    getInclude
+    ;
+
+  minSupportedCudaCapability = "8.0"; # build fails with 7.5
+
+  minCudaCapability = builtins.head (
+    builtins.sort (a: b: builtins.compareVersions a b < 0) cudaCapabilities
+  );
+
+  cudaCapabilities' =
+    if lib.versionOlder minCudaCapability minSupportedCudaCapability then
+      throw ''
+        CUDA capability "${minCudaCapability}" from `cudaCapabilities` is incompatible with DeepEP.
+        Only CUDA capabilities must be "${minSupportedCudaCapability}" or newer.
+        Build `python3Packages.deep-ep` with a compatible `cudaCapabilities` list.
+      ''
+    else
+      cudaCapabilities;
+
+  disableSm90Features = lib.versionOlder minCudaCapability "9.0";
+in
+buildPythonPackage.override { inherit (torch) stdenv; } (finalAttrs: {
+  pname = "deep-ep";
+  version = "1.2.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "deepseek-ai";
+    repo = "DeepEP";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-xURR3uBAwKjDTNEG9p/vRRhH4Ldiz/u6kD/a+DPn5/Q=";
+  };
+
+  build-system = [
+    setuptools
+    torch
+  ];
+
+  env = lib.optionalAttrs cudaSupport (
+    {
+      TORCH_CUDA_ARCH_LIST = "${lib.concatStringsSep " " cudaCapabilities'}";
+
+      DISABLE_SM90_FEATURES =
+        if disableSm90Features then
+          lib.warn ''
+            python3Packages.deepep: Disabling SM90 features as the provided `cudaCapabilities` list include '${minCudaCapability}'
+          '' "1"
+        else
+          "0";
+
+      CUDA_HOME = symlinkJoin {
+        name = "cuda-redist";
+        paths = with cudaPackages; [
+          (getBin cuda_nvcc)
+
+          (getInclude cuda_cccl) # <nv/target>
+          (getInclude cuda_cudart) # cuda_runtime.h
+          (getInclude libcublas) # cublas_v2.h
+          (getInclude libcusolver) # cusolverDn.h
+          (getInclude libcusparse) # cusparse.h
+        ];
+      };
+    }
+
+    # nvshmem must be disabled (unsetting NVSHMEM_DIR) when supporting <9.0 capabilities
+    # https://github.com/deepseek-ai/DeepEP/blob/v1.2.1/setup.py#L65
+    // lib.optionalAttrs (!disableSm90Features) {
+      NVSHMEM_DIR = (getInclude cudaPackages.libnvshmem).outPath;
+    }
+  );
+
+  buildInputs = [
+    pybind11
+    rdma-core
+  ];
+
+  pythonImportsCheck = [ "deep_ep" ];
+
+  # Tests check internode communications which is not possible in the sandbox
+  doCheck = false;
+
+  meta = {
+    description = "Efficient expert-parallel communication library";
+    homepage = "https://github.com/deepseek-ai/DeepEP";
+    changelog = "https://github.com/deepseek-ai/DeepEP/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ GaetanLepage ];
+    broken = !cudaSupport;
+  };
+})
diff --git a/pkgs/development/python-modules/google-cloud-org-policy/default.nix b/pkgs/development/python-modules/google-cloud-org-policy/default.nix
index 39c1ece4a0f3..15ded2114cd0 100644
--- a/pkgs/development/python-modules/google-cloud-org-policy/default.nix
+++ b/pkgs/development/python-modules/google-cloud-org-policy/default.nix
@@ -12,13 +12,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "google-cloud-org-policy";
-  version = "1.16.1";
+  version = "1.17.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "google_cloud_org_policy";
     inherit (finalAttrs) version;
-    hash = "sha256-KleKj6JhG4pi/XAM82C/VndJED2nvK1+NzvT1lm7zpE=";
+    hash = "sha256-93GJ7n9loo83VfhV9xC4tnuYYuKmtqk7B15vnak7/yA=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/google-cloud-run/default.nix b/pkgs/development/python-modules/google-cloud-run/default.nix
index 0bee0cc87a80..b71d53b4a349 100644
--- a/pkgs/development/python-modules/google-cloud-run/default.nix
+++ b/pkgs/development/python-modules/google-cloud-run/default.nix
@@ -13,13 +13,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "google-cloud-run";
-  version = "0.15.0";
+  version = "0.16.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "google_cloud_run";
     inherit (finalAttrs) version;
-    hash = "sha256-FY8mRkP5gr+k9PGPnijFbqAOqVwki8inRuFZtTivq1c=";
+    hash = "sha256-1Sz05q03Aq5Iysz2q8q1Q6/ub2HCpux1PMYqMeW2KfE=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/google-cloud-securitycenter/default.nix b/pkgs/development/python-modules/google-cloud-securitycenter/default.nix
index 983346872eb4..349359e90fe0 100644
--- a/pkgs/development/python-modules/google-cloud-securitycenter/default.nix
+++ b/pkgs/development/python-modules/google-cloud-securitycenter/default.nix
@@ -13,13 +13,13 @@
 
 buildPythonPackage rec {
   pname = "google-cloud-securitycenter";
-  version = "1.42.0";
+  version = "1.44.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "google_cloud_securitycenter";
     inherit version;
-    hash = "sha256-zwCV0I0vBIgvVRXG31JX8M00u8mzXGMCw/5QpEMKa+Q=";
+    hash = "sha256-ir0rdSUREsfGTyR8YbSWbpDd1GxYOZ2hj8f7jwTmVsc=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/google-cloud-videointelligence/default.nix b/pkgs/development/python-modules/google-cloud-videointelligence/default.nix
index 252a034cbdc6..5173483e2350 100644
--- a/pkgs/development/python-modules/google-cloud-videointelligence/default.nix
+++ b/pkgs/development/python-modules/google-cloud-videointelligence/default.nix
@@ -14,13 +14,13 @@
 
 buildPythonPackage rec {
   pname = "google-cloud-videointelligence";
-  version = "2.18.0";
+  version = "2.19.0";
   pyproject = true;
 
   src = fetchPypi {
     pname = "google_cloud_videointelligence";
     inherit version;
-    hash = "sha256-sq45vSLRhiGGhKKXwvovpjblh05p059xlQTXKfRGOf0=";
+    hash = "sha256-ezIMGKBHWwjd6bYKD7/fiRUyDCCWYVn62AtVlAidVh4=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/iamdata/default.nix b/pkgs/development/python-modules/iamdata/default.nix
index 2cce1032fab0..5c8a23f37fb3 100644
--- a/pkgs/development/python-modules/iamdata/default.nix
+++ b/pkgs/development/python-modules/iamdata/default.nix
@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "iamdata";
-  version = "0.1.202603311";
+  version = "0.1.202604011";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "cloud-copilot";
     repo = "iam-data-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-r4BpJJq/2xopL16+JXss7Xj7XgebQTmKdDkc9KeEbU0=";
+    hash = "sha256-V5T63ZkaxJ5WEThNHa7lpjDQX6O+InzkygM0wBt+4CY=";
   };
 
   __darwinAllowLocalNetworking = true;
diff --git a/pkgs/development/python-modules/iapws/default.nix b/pkgs/development/python-modules/iapws/default.nix
index b146f948d7bd..43179ef17252 100644
--- a/pkgs/development/python-modules/iapws/default.nix
+++ b/pkgs/development/python-modules/iapws/default.nix
@@ -7,12 +7,12 @@
 
 buildPythonPackage rec {
   pname = "iapws";
-  version = "1.5.4";
+  version = "1.5.5";
   format = "setuptools";
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-nw+qOaln12/F5flfYdki4TVFMZLgK/h10HJC8T1uqlU=";
+    hash = "sha256-yG4eFxVRh3/pzrA+5BXkpJBtLlJpj/nVZWeEYJc5300=";
   };
 
   propagatedBuildInputs = [ scipy ];
diff --git a/pkgs/development/python-modules/json-stream/default.nix b/pkgs/development/python-modules/json-stream/default.nix
index 5a052f19d89b..f236d6774f5f 100644
--- a/pkgs/development/python-modules/json-stream/default.nix
+++ b/pkgs/development/python-modules/json-stream/default.nix
@@ -13,14 +13,14 @@
 
 buildPythonPackage rec {
   pname = "json-stream";
-  version = "2.4.1";
+  version = "2.5.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "daggaz";
     repo = "json-stream";
     tag = "v${version}";
-    hash = "sha256-oZYVRgDSl15/UJmhTAoLk3UoVimQeLGNOjNXLH6GTtY=";
+    hash = "sha256-iSJY53VImv9GSIC2IB969zzYYNg7gFKJH8QQFpjzrQU=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/karton-dashboard/default.nix b/pkgs/development/python-modules/karton-dashboard/default.nix
index 2b7b7937f7ce..2aa27525f45b 100644
--- a/pkgs/development/python-modules/karton-dashboard/default.nix
+++ b/pkgs/development/python-modules/karton-dashboard/default.nix
@@ -11,14 +11,14 @@
 
 buildPythonPackage rec {
   pname = "karton-dashboard";
-  version = "1.6.0";
+  version = "1.7.0";
   format = "setuptools";
 
   src = fetchFromGitHub {
     owner = "CERT-Polska";
     repo = "karton-dashboard";
     tag = "v${version}";
-    hash = "sha256-VzBC7IATF8QBtTXMv4vmorAzBlImEsayjenQ2Uz5jIo=";
+    hash = "sha256-DYfL//i1gJ0ci7jVPtrMKC8j+i5/L8rvmbs8zz6Eq2M=";
   };
 
   pythonRelaxDeps = [
diff --git a/pkgs/development/python-modules/led-ble/default.nix b/pkgs/development/python-modules/led-ble/default.nix
index bac9dc029567..056113a0fd87 100644
--- a/pkgs/development/python-modules/led-ble/default.nix
+++ b/pkgs/development/python-modules/led-ble/default.nix
@@ -12,14 +12,14 @@
 
 buildPythonPackage rec {
   pname = "led-ble";
-  version = "1.1.7";
+  version = "1.1.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Bluetooth-Devices";
     repo = "led-ble";
     tag = "v${version}";
-    hash = "sha256-6vQPsZvBvoLlxzgfnvjnUdkN24tpBZHr62AFcy3s4gE=";
+    hash = "sha256-98nAtv2p6WNxg6wwlGviVRzaKGCWGZNqPG4k3jwQpjw=";
   };
 
   build-system = [ poetry-core ];
diff --git a/pkgs/development/python-modules/lightgbm/default.nix b/pkgs/development/python-modules/lightgbm/default.nix
index c7f154d8a9c8..5409d1662452 100644
--- a/pkgs/development/python-modules/lightgbm/default.nix
+++ b/pkgs/development/python-modules/lightgbm/default.nix
@@ -127,8 +127,8 @@ buildPythonPackage rec {
 
   meta = {
     description = "Fast, distributed, high performance gradient boosting (GBDT, GBRT, GBM or MART) framework";
-    homepage = "https://github.com/Microsoft/LightGBM";
-    changelog = "https://github.com/microsoft/LightGBM/releases/tag/v${version}";
+    homepage = "https://github.com/lightgbm-org/LightGBM";
+    changelog = "https://github.com/lightgbm-org/LightGBM/releases/tag/v${version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ teh ];
   };
diff --git a/pkgs/development/python-modules/llama-index-llms-ollama/default.nix b/pkgs/development/python-modules/llama-index-llms-ollama/default.nix
index c349bb061a24..c72af825812d 100644
--- a/pkgs/development/python-modules/llama-index-llms-ollama/default.nix
+++ b/pkgs/development/python-modules/llama-index-llms-ollama/default.nix
@@ -9,13 +9,13 @@
 
 buildPythonPackage rec {
   pname = "llama-index-llms-ollama";
-  version = "0.10.0";
+  version = "0.10.1";
   pyproject = true;
 
   src = fetchPypi {
     pname = "llama_index_llms_ollama";
     inherit version;
-    hash = "sha256-dYJnOyDpAoiJg3LcqxfrT4E9WWSGW5DQdFs/CrOMbtQ=";
+    hash = "sha256-Rw7YNt7kO8AXHcBcaMLao2GKfDgWa4BE1/g2DNjNj6Y=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/llm/default.nix b/pkgs/development/python-modules/llm/default.nix
index d59ca6b09cc9..17794a696d85 100644
--- a/pkgs/development/python-modules/llm/default.nix
+++ b/pkgs/development/python-modules/llm/default.nix
@@ -167,7 +167,7 @@ let
 
   llm = buildPythonPackage rec {
     pname = "llm";
-    version = "0.29";
+    version = "0.30";
     pyproject = true;
 
     build-system = [ setuptools ];
@@ -176,7 +176,7 @@ let
       owner = "simonw";
       repo = "llm";
       tag = version;
-      hash = "sha256-51WHV8ZvyUJgr+a3jFUoZ2hPlv2oiA4rrgalqZEFIfM=";
+      hash = "sha256-+8fwx7sS1vFSTqb+p2uDLqWW/UIx8WoW3kYJihznRRg=";
     };
 
     patches = [
diff --git a/pkgs/development/python-modules/mkdocs-jupyter/default.nix b/pkgs/development/python-modules/mkdocs-jupyter/default.nix
index 6d7f0ee85296..8b97384dcab5 100644
--- a/pkgs/development/python-modules/mkdocs-jupyter/default.nix
+++ b/pkgs/development/python-modules/mkdocs-jupyter/default.nix
@@ -16,13 +16,13 @@
 
 buildPythonPackage rec {
   pname = "mkdocs-jupyter";
-  version = "0.25.1";
+  version = "0.26.1";
   pyproject = true;
 
   src = fetchPypi {
     pname = "mkdocs_jupyter";
     inherit version;
-    hash = "sha256-DpJy/0lH4OxoPJJCOkv7QqJkd8EDqxpquCd+LcyPev4=";
+    hash = "sha256-fIDA05U96R5bQKDTIJIzeVyPgAJDqymOTsOOBQTtpjA=";
   };
 
   pythonRelaxDeps = [
diff --git a/pkgs/development/python-modules/mlx-lm/default.nix b/pkgs/development/python-modules/mlx-lm/default.nix
index f46a8786a06d..d86518623c1f 100644
--- a/pkgs/development/python-modules/mlx-lm/default.nix
+++ b/pkgs/development/python-modules/mlx-lm/default.nix
@@ -79,6 +79,12 @@ buildPythonPackage (finalAttrs: {
     "tests/test_models.py::TestModels::test_gated_delta_masked"
   ];
 
+  disabledTests = [
+    # ValueError: [rope] dims must be positive but got 0
+    # Reported upstream: https://github.com/ml-explore/mlx-lm/issues/1089
+    "test_all_models"
+  ];
+
   meta = {
     description = "Run LLMs with MLX";
     homepage = "https://github.com/ml-explore/mlx-lm";
diff --git a/pkgs/development/python-modules/mlx-vlm/default.nix b/pkgs/development/python-modules/mlx-vlm/default.nix
index 9a5f6d6bc133..9319be349917 100644
--- a/pkgs/development/python-modules/mlx-vlm/default.nix
+++ b/pkgs/development/python-modules/mlx-vlm/default.nix
@@ -9,13 +9,13 @@
   # dependencies
   datasets,
   fastapi,
+  miniaudio,
   mlx,
   mlx-lm,
   numpy,
   opencv-python,
   pillow,
   requests,
-  soundfile,
   tqdm,
   transformers,
   uvicorn,
@@ -26,35 +26,32 @@
   rich,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "mlx-vlm";
-  version = "0.3.9";
+  version = "0.4.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Blaizzy";
     repo = "mlx-vlm";
-    tag = "v${version}";
-    hash = "sha256-L+llrfFo4C++JZ3GjpZi16wMZNXtKrYh3pxhZ5N1n/4=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-GmeMcANmztICfYR9Ca5wQfLOugOlK1mt5j3q616n6TQ=";
   };
 
   build-system = [
     setuptools
   ];
 
-  pythonRelaxDeps = [
-    "opencv-python"
-  ];
   dependencies = [
     datasets
     fastapi
+    miniaudio
     mlx
     mlx-lm
     numpy
     opencv-python
     pillow
     requests
-    soundfile
     tqdm
     transformers
     uvicorn
@@ -91,11 +88,11 @@ buildPythonPackage rec {
   meta = {
     description = "Inference and fine-tuning of Vision Language Models (VLMs) on your Mac using MLX";
     homepage = "https://github.com/Blaizzy/mlx-vlm";
-    changelog = "https://github.com/Blaizzy/mlx-vlm/releases/tag/${src.tag}";
+    changelog = "https://github.com/Blaizzy/mlx-vlm/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ GaetanLepage ];
     platforms = [
       "aarch64-darwin"
     ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/mlx/default.nix b/pkgs/development/python-modules/mlx/default.nix
index 3e72fc401a41..6cdc7cb6e6c9 100644
--- a/pkgs/development/python-modules/mlx/default.nix
+++ b/pkgs/development/python-modules/mlx/default.nix
@@ -33,6 +33,7 @@ let
   gguf-tools = fetchFromGitHub {
     owner = "antirez";
     repo = "gguf-tools";
+    # Tag from https://github.com/ml-explore/mlx/blob/v0.31.1/mlx/io/CMakeLists.txt#L14
     rev = "8fa6eb65236618e28fd7710a0fba565f7faa1848";
     hash = "sha256-15FvyPOFqTOr5vdWQoPnZz+mYH919++EtghjozDlnSA=";
   };
@@ -40,14 +41,14 @@ let
 in
 buildPythonPackage (finalAttrs: {
   pname = "mlx";
-  version = "0.30.5";
+  version = "0.31.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "ml-explore";
     repo = "mlx";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SV/3MXt+SuJ69XfLfXycold6KgtXSM7OE0KwMSNw+eE=";
+    hash = "sha256-PiNk/MdMw9Vpat2KuslBTyaFuK+mJ4UvwJqBnysvvUU=";
   };
 
   patches = [
diff --git a/pkgs/development/python-modules/modal/default.nix b/pkgs/development/python-modules/modal/default.nix
index 41e6c4ad3b5e..472504368099 100644
--- a/pkgs/development/python-modules/modal/default.nix
+++ b/pkgs/development/python-modules/modal/default.nix
@@ -38,14 +38,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "modal";
-  version = "1.3.5";
+  version = "1.4.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "modal-labs";
     repo = "modal-client";
     tag = "py/v${finalAttrs.version}";
-    hash = "sha256-DjCEnQ+H03Ga0My2qHGEEF4Ae5HnmlWNvwL+jLdo0pg=";
+    hash = "sha256-Ol6KYncP1F9EHbcyJmScuBwev79/vxrKWlO/ZkoxOhQ=";
   };
   sourceRoot = "${finalAttrs.src.name}/py";
 
diff --git a/pkgs/development/python-modules/napari-console/default.nix b/pkgs/development/python-modules/napari-console/default.nix
index fcd5b2b2c813..334304cad94a 100644
--- a/pkgs/development/python-modules/napari-console/default.nix
+++ b/pkgs/development/python-modules/napari-console/default.nix
@@ -14,7 +14,7 @@
   qtpy,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "napari-console";
   version = "0.1.4";
   pyproject = true;
@@ -22,7 +22,7 @@ buildPythonPackage rec {
   src = fetchFromGitHub {
     owner = "napari";
     repo = "napari-console";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
     hash = "sha256-z1pyG31g+fvTNLbWc2W56zDf33HCx8PvPKwIIc/x2VA=";
   };
 
@@ -31,6 +31,9 @@ buildPythonPackage rec {
     setuptools-scm
   ];
 
+  pythonRelaxDeps = [
+    "ipykernel"
+  ];
   dependencies = [
     ipykernel
     ipython
@@ -47,4 +50,4 @@ buildPythonPackage rec {
     license = lib.licenses.bsd3;
     maintainers = with lib.maintainers; [ SomeoneSerge ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/napari-npe2/default.nix b/pkgs/development/python-modules/napari-npe2/default.nix
index 47970169b677..a5db48cec83d 100644
--- a/pkgs/development/python-modules/napari-npe2/default.nix
+++ b/pkgs/development/python-modules/napari-npe2/default.nix
@@ -15,6 +15,7 @@
   pydantic-extra-types,
   pyyaml,
   rich,
+  tomli,
   tomli-w,
   typer,
 
@@ -33,14 +34,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "napari-npe2";
-  version = "0.8.0";
+  version = "0.8.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "napari";
     repo = "npe2";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-aZOs9wTYcblt9EZftYHKFWI/GvpZcC2KqVTAis15+Iw=";
+    hash = "sha256-cR7hf5v+RgcENY3rSHnOB4E/TONVYvHKS5i3Kv1Sbuc=";
   };
 
   build-system = [
@@ -56,6 +57,7 @@ buildPythonPackage (finalAttrs: {
     pydantic-extra-types
     pyyaml
     rich
+    tomli
     tomli-w
     typer
   ];
diff --git a/pkgs/development/python-modules/napari/default.nix b/pkgs/development/python-modules/napari/default.nix
index 725091b56a15..026a0cb3b56a 100644
--- a/pkgs/development/python-modules/napari/default.nix
+++ b/pkgs/development/python-modules/napari/default.nix
@@ -1,7 +1,6 @@
 {
   lib,
   buildPythonPackage,
-  pythonAtLeast,
   fetchFromGitHub,
 
   # build-system
@@ -24,12 +23,13 @@
   napari-console,
   napari-npe2,
   napari-svg,
-  numpydoc,
   pandas,
   pillow,
   pint,
   psutil,
   pydantic,
+  pydantic-extra-types,
+  pydantic-settings,
   pyopengl,
   pyyaml,
   scikit-image,
@@ -44,6 +44,7 @@
 
   # tests
   hypothesis,
+  pooch,
   pretend,
   pyautogui,
   pytest-pretty,
@@ -56,18 +57,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "napari";
-  version = "0.6.6";
+  version = "0.7.0";
   pyproject = true;
 
-  # napari uses pydantic v1 which is not compatible with python 3.14
-  # ValueError: '__slots__' in __slots__ conflicts with class variable
-  disabled = pythonAtLeast "3.14";
-
   src = fetchFromGitHub {
     owner = "napari";
     repo = "napari";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-F0l6GWyZ6n4HNZW7XyUk4ZBPQfrAW4DWixCaRHViDPI=";
+    hash = "sha256-fDt9n4+yQcA03IO7sMhcpiP3TfOWfyvbCjY7ImEj+Qg=";
   };
 
   postPatch = ''
@@ -86,11 +83,6 @@ buildPythonPackage (finalAttrs: {
     qt6.qtbase
   ];
 
-  pythonRelaxDeps = [
-    "app-model"
-    "psygnal"
-    "vispy"
-  ];
   dependencies = [
     app-model
     appdirs
@@ -104,12 +96,13 @@ buildPythonPackage (finalAttrs: {
     napari-console
     napari-npe2
     napari-svg
-    numpydoc
     pandas
     pillow
     pint
     psutil
     pydantic
+    pydantic-extra-types
+    pydantic-settings
     pyopengl
     pyyaml
     scikit-image
@@ -134,6 +127,7 @@ buildPythonPackage (finalAttrs: {
 
   nativeCheckInputs = [
     hypothesis
+    pooch
     pretend
     pyautogui
     pytest-pretty
@@ -189,6 +183,7 @@ buildPythonPackage (finalAttrs: {
     # Fatal Python error: Aborted
     "test_add_layer_data_to_viewer_optional"
     "test_from_layer_data_tuple_accept_deprecating_dict"
+    "test_layer_rename_updates_combobox"
     "test_layers_populate_immediately"
     "test_magicgui_add_data"
     "test_magicgui_add_future_data"
diff --git a/pkgs/development/python-modules/ncclient/default.nix b/pkgs/development/python-modules/ncclient/default.nix
index cad5d2ee997a..1b947ee117cd 100644
--- a/pkgs/development/python-modules/ncclient/default.nix
+++ b/pkgs/development/python-modules/ncclient/default.nix
@@ -2,15 +2,16 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
+  hatchling,
+  hatch-vcs,
   lxml,
   paramiko,
-  setuptools,
   pytestCheckHook,
 }:
 
 buildPythonPackage rec {
   pname = "ncclient";
-  version = "0.7.0";
+  version = "0.7.1";
   pyproject = true;
 
   src = fetchFromGitHub {
@@ -25,11 +26,12 @@ buildPythonPackage rec {
     postFetch = ''
       sed -i 's/git_refnames = "[^"]*"/git_refnames = " (tag: ${src.tag})"/' $out/ncclient/_version.py
     '';
-    hash = "sha256-vSX+9nTl4r6vnP/vmavdmdChzOC8P2G093/DQNMQwS4=";
+    hash = "sha256-A1e1YE+RW6mkuhF9eEUPiMiKw3YuHqA+4pNqJpYtAJU=";
   };
 
   build-system = [
-    setuptools
+    hatchling
+    hatch-vcs
   ];
 
   dependencies = [
diff --git a/pkgs/development/python-modules/nglview/default.nix b/pkgs/development/python-modules/nglview/default.nix
index f31c5470c826..bc47ab64e8fb 100644
--- a/pkgs/development/python-modules/nglview/default.nix
+++ b/pkgs/development/python-modules/nglview/default.nix
@@ -1,13 +1,12 @@
 {
   lib,
   buildPythonPackage,
-  fetchFromGitHub,
-  nodejs,
+  fetchPypi,
+  pythonRelaxDepsHook,
   notebook,
   ipywidgets,
   ipykernel,
   numpy,
-  runCommand,
   jupyter-packaging,
   jupyter-core,
   notebook-shim,
@@ -18,32 +17,24 @@
   pillow,
   ase,
 }:
-let
-  nodeModules = runCommand "nglview-node-modules" { } ''
-    mkdir -p $out/node_modules/@jupyter-widgets/base
-    cat > $out/node_modules/@jupyter-widgets/base/package.json <<EOF
-    {
-      "name": "@jupyter-widgets/base",
-      "version": "4.1.1",
-      "main": "lib/index.js"
-    }
-    EOF
-  '';
-in
 buildPythonPackage rec {
   pname = "nglview";
   version = "4.0";
   pyproject = true;
 
-  src = fetchFromGitHub {
-    owner = "nglviewer";
-    repo = "nglview";
-    tag = "v${version}";
-    hash = "sha256-Dacsg3+asY0THJ5qrM7+IZCnc2rhCOrbOfN7Xai63Ac=";
+  src = fetchPypi {
+    inherit pname version;
+    hash = "sha256-LAz/LFseKgpy4zkwh85ErgMIUkxapflTV4EtPtvCboM=";
   };
 
+  nativeBuildInputs = [
+    pythonRelaxDepsHook
+  ];
+
+  # NGLview demands numpy < 2.3, but nixpkgs ships >= 2.4
+  pythonRelaxDeps = [ "numpy" ];
+
   build-system = [
-    nodejs
     jupyter-packaging
     jupyter-core
     notebook-shim
@@ -58,12 +49,6 @@ buildPythonPackage rec {
     numpy
   ];
 
-  preBuild = ''
-    cd js
-    cp -r ${nodeModules}/node_modules .
-    cd ..
-  '';
-
   pythonImportsCheck = [ "nglview" ];
 
   nativeCheckInputs = [
@@ -80,15 +65,10 @@ buildPythonPackage rec {
     "test_movie_maker"
   ];
 
-  postInstall = ''
-    mkdir -p $out/share/jupyter/nbextensions
-    cp -r nglview/static $out/share/jupyter/nbextensions/nglview-js-widgets
-  '';
-
   meta = {
     description = "IPython/Jupyter widget to interactively view molecular structures and trajectories";
     homepage = "https://github.com/nglviewer/nglview";
-    changelog = "https://github.com/nglviewer/nglview/releases/tag/${src.tag}";
+    changelog = "https://github.com/nglviewer/nglview/releases/tag/v${version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ guelakais ];
   };
diff --git a/pkgs/development/python-modules/niquests/default.nix b/pkgs/development/python-modules/niquests/default.nix
index 00ec9516980b..597047a0fd47 100644
--- a/pkgs/development/python-modules/niquests/default.nix
+++ b/pkgs/development/python-modules/niquests/default.nix
@@ -18,14 +18,14 @@
 
 buildPythonPackage rec {
   pname = "niquests";
-  version = "3.18.2";
+  version = "3.18.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jawah";
     repo = "niquests";
     tag = "v${version}";
-    hash = "sha256-lZMUm1rYCsNSMz/cKTqynaLqb1P75JJCFMDZ9onFS4g=";
+    hash = "sha256-8XR1TZ2VbUVbXb6dEBS3yr+FB4L6Gbhhx3hoYlHfcoA=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/oasatelematics/default.nix b/pkgs/development/python-modules/oasatelematics/default.nix
index 4869b8b23603..04a090d5cee5 100644
--- a/pkgs/development/python-modules/oasatelematics/default.nix
+++ b/pkgs/development/python-modules/oasatelematics/default.nix
@@ -2,32 +2,36 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
+  pytestCheckHook,
   requests,
+  setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "oasatelematics";
-  version = "0.3";
-  format = "setuptools";
+  version = "0.4";
+  pyproject = true;
 
   src = fetchFromGitHub {
     owner = "panosmz";
     repo = "oasatelematics";
-    rev = "v${version}";
-    hash = "sha256-3O7XbNVj1S3ZwheklEhm0ivw16Tj7drML/xYC9383Kg=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-pqjzvLeVGW5rC3lK/9WnYdCLyF1fM7GGwzEG5h2lKPA=";
   };
 
-  propagatedBuildInputs = [ requests ];
+  build-system = [ setuptools ];
 
-  # Module has no tests
-  doCheck = false;
+  dependencies = [ requests ];
+
+  nativeCheckInputs = [ pytestCheckHook ];
 
   pythonImportsCheck = [ "oasatelematics" ];
 
   meta = {
     description = "Python wrapper for the OASA Telematics API";
     homepage = "https://github.com/panosmz/oasatelematics";
+    changelog = "https://github.com/panosmz/oasatelematics/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/openfga-sdk/default.nix b/pkgs/development/python-modules/openfga-sdk/default.nix
index 7322a562c256..de7010bb74b2 100644
--- a/pkgs/development/python-modules/openfga-sdk/default.nix
+++ b/pkgs/development/python-modules/openfga-sdk/default.nix
@@ -17,14 +17,14 @@
 
 buildPythonPackage rec {
   pname = "openfga-sdk";
-  version = "0.9.9";
+  version = "0.10.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "openfga";
     repo = "python-sdk";
     tag = "v${version}";
-    hash = "sha256-bkDeIQJ+5VDMkBDorEMczsN7Ex04SaxhxulXLtUW/CM=";
+    hash = "sha256-yopZJMGv2cVJZsTXqU7vaQN31QOwCW/kg0gghqt6rus=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/pubnub/default.nix b/pkgs/development/python-modules/pubnub/default.nix
index 392207f7282f..657b8dce7c2a 100644
--- a/pkgs/development/python-modules/pubnub/default.nix
+++ b/pkgs/development/python-modules/pubnub/default.nix
@@ -17,14 +17,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pubnub";
-  version = "10.6.1";
+  version = "10.6.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pubnub";
     repo = "python";
     tag = finalAttrs.version;
-    hash = "sha256-EZfJ+DAZdaF1jf2nU2dUXZ7tQlGNXUMsIGyj4cjmdOs=";
+    hash = "sha256-YEcxDFO3UK7U17YgIENoxYN/hxqFw58cA2Dg4WJCOvU=";
   };
 
   pythonRelaxDeps = [ "httpx" ];
diff --git a/pkgs/development/python-modules/pyais/default.nix b/pkgs/development/python-modules/pyais/default.nix
index 66011b695cd9..90a21c204ed8 100644
--- a/pkgs/development/python-modules/pyais/default.nix
+++ b/pkgs/development/python-modules/pyais/default.nix
@@ -11,14 +11,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pyais";
-  version = "2.20.0";
+  version = "2.20.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "M0r13n";
     repo = "pyais";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bU4EYVAZ0LRjMvyYaqt0KjyfbDsNm/W4KFVuDdUcStw=";
+    hash = "sha256-ZyVXZZd9JXTkfucJ5tAcP813FLWapoiTUrzj27SrLlk=";
   };
 
   __darwinAllowLocalNetworking = true;
diff --git a/pkgs/development/python-modules/pydantic-ai-slim/default.nix b/pkgs/development/python-modules/pydantic-ai-slim/default.nix
index b4e3653337ce..20b9e60fe91c 100644
--- a/pkgs/development/python-modules/pydantic-ai-slim/default.nix
+++ b/pkgs/development/python-modules/pydantic-ai-slim/default.nix
@@ -20,14 +20,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pydantic-ai-slim";
-  version = "1.73.0";
+  version = "1.75.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pydantic";
     repo = "pydantic-ai";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bcL/ZquuJTbaXu1DKzZGNdRluUUhwhakqnYVOqQ84Ts=";
+    hash = "sha256-ii6q9eC/7qRBnyMFA7kdmz5tq/KR0EWqcu1+kXOCxVE=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/pydantic_ai_slim";
diff --git a/pkgs/development/python-modules/pydantic-graph/default.nix b/pkgs/development/python-modules/pydantic-graph/default.nix
index 8d6152bde53d..4c03bbd9c456 100644
--- a/pkgs/development/python-modules/pydantic-graph/default.nix
+++ b/pkgs/development/python-modules/pydantic-graph/default.nix
@@ -16,14 +16,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pydantic-graph";
-  version = "1.73.0";
+  version = "1.75.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pydantic";
     repo = "pydantic-ai";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bcL/ZquuJTbaXu1DKzZGNdRluUUhwhakqnYVOqQ84Ts=";
+    hash = "sha256-ii6q9eC/7qRBnyMFA7kdmz5tq/KR0EWqcu1+kXOCxVE=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/pydantic_graph";
diff --git a/pkgs/development/python-modules/pydicom/default.nix b/pkgs/development/python-modules/pydicom/default.nix
index 933f58295a9c..5634acf70a50 100644
--- a/pkgs/development/python-modules/pydicom/default.nix
+++ b/pkgs/development/python-modules/pydicom/default.nix
@@ -14,6 +14,7 @@
   pyjpegls,
   pylibjpeg,
   pylibjpeg-libjpeg,
+  pyfakefs,
   writableTmpDirAsHomeHook,
 }:
 let
@@ -28,14 +29,14 @@ let
 in
 buildPythonPackage (finalAttrs: {
   pname = "pydicom";
-  version = "3.0.1";
+  version = "3.0.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pydicom";
     repo = "pydicom";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-SvRevQehRaSp+vCtJRQVEJiC5noIJS+bGG1/q4p7/XU=";
+    hash = "sha256-d7fFsNKzUoGUDg9E6KVHq64g7p8QzIAAEIk3vLQ+rQ0=";
   };
 
   build-system = [ flit-core ];
@@ -58,6 +59,7 @@ buildPythonPackage (finalAttrs: {
 
   nativeCheckInputs = [
     pytestCheckHook
+    pyfakefs
     writableTmpDirAsHomeHook
   ]
   ++ finalAttrs.passthru.optional-dependencies.pixeldata;
diff --git a/pkgs/development/python-modules/pyexploitdb/default.nix b/pkgs/development/python-modules/pyexploitdb/default.nix
index 6010f38fb497..a461f7ea4211 100644
--- a/pkgs/development/python-modules/pyexploitdb/default.nix
+++ b/pkgs/development/python-modules/pyexploitdb/default.nix
@@ -9,12 +9,12 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "pyexploitdb";
-  version = "0.3.19";
+  version = "0.3.20";
   pyproject = true;
 
   src = fetchPypi {
     inherit (finalAttrs) pname version;
-    hash = "sha256-6lLacEjLsq7d39Ih5aQbXnoiSsHm4O4LV8e22VnMw90=";
+    hash = "sha256-rz+juMgqJJ9PaJVfg79+j26MSV2enG3dH5fOJrU1g+E=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/pymdown-extensions/default.nix b/pkgs/development/python-modules/pymdown-extensions/default.nix
index 80f1dec7ceba..7ba31d5ed9ab 100644
--- a/pkgs/development/python-modules/pymdown-extensions/default.nix
+++ b/pkgs/development/python-modules/pymdown-extensions/default.nix
@@ -45,14 +45,14 @@ let
 in
 buildPythonPackage rec {
   pname = "pymdown-extensions";
-  version = "10.20";
+  version = "10.21.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "facelessuser";
     repo = "pymdown-extensions";
     tag = version;
-    hash = "sha256-ei1qbWDH/gpyj111TXeUR3uxmpg+wbfuPscqahjIEOU=";
+    hash = "sha256-BKnrq8m+xQYZs6V+x+3al7yS8531UvvaC4V+ny+f+Qg=";
   };
 
   build-system = [ hatchling ];
@@ -67,13 +67,6 @@ buildPythonPackage rec {
     pyyaml
   ];
 
-  disabledTests = [
-    # test artifact mismatch
-    "test_toc_tokens"
-    # Tests fails with AssertionError
-    "test_windows_root_conversion"
-  ];
-
   pythonImportsCheck = map (ext: "pymdownx.${ext}") extensions;
 
   passthru.tests = {
@@ -86,6 +79,7 @@ buildPythonPackage rec {
   };
 
   meta = {
+    changelog = "https://github.com/facelessuser/pymdown-extensions/blob/${src.tag}/docs/src/markdown/about/changelog.md";
     description = "Extensions for Python Markdown";
     homepage = "https://facelessuser.github.io/pymdown-extensions/";
     license = with lib.licenses; [
diff --git a/pkgs/development/python-modules/python-lsp-ruff/default.nix b/pkgs/development/python-modules/python-lsp-ruff/default.nix
index 08f2d8b1fbd5..c793da08d7f5 100644
--- a/pkgs/development/python-modules/python-lsp-ruff/default.nix
+++ b/pkgs/development/python-modules/python-lsp-ruff/default.nix
@@ -14,16 +14,16 @@
   pytestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "python-lsp-ruff";
-  version = "2.3.0";
+  version = "2.3.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "python-lsp";
     repo = "python-lsp-ruff";
-    tag = "v${version}";
-    hash = "sha256-jtfDdZ68AroXlmR+AIVk/b3WpZk78BCtT8TUh4ELZZI=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-1dgtuUX1GWKRiZOl5BYB/U8ecg42eTUMZqRYPKzHW/Y=";
   };
 
   postPatch =
@@ -70,8 +70,8 @@ buildPythonPackage rec {
   meta = {
     homepage = "https://github.com/python-lsp/python-lsp-ruff";
     description = "Ruff linting plugin for pylsp";
-    changelog = "https://github.com/python-lsp/python-lsp-ruff/releases/tag/v${version}";
+    changelog = "https://github.com/python-lsp/python-lsp-ruff/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ linsui ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/qcelemental/default.nix b/pkgs/development/python-modules/qcelemental/default.nix
index 5e3a8ddd6fdd..4cd63dd9c6b7 100644
--- a/pkgs/development/python-modules/qcelemental/default.nix
+++ b/pkgs/development/python-modules/qcelemental/default.nix
@@ -6,6 +6,7 @@
   fetchPypi,
   poetry-core,
   setuptools,
+  setuptools-scm,
   ipykernel,
   networkx,
   numpy,
@@ -18,17 +19,18 @@
 
 buildPythonPackage rec {
   pname = "qcelemental";
-  version = "0.30.1";
+  version = "0.50.0rc3";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-WMNKl4hfW/GIOwHNekZSwguaM64LLerQarEhOgqb2rs=";
+    hash = "sha256-caQmd7zoDzyd4YT9c5J/7oz2eEbhWpirgZHcnOTwz7k=";
   };
 
   build-system = [
     poetry-core
     setuptools
+    setuptools-scm
   ];
 
   dependencies = [
@@ -53,8 +55,25 @@ buildPythonPackage rec {
 
   pythonImportsCheck = [ "qcelemental" ];
 
+  # These tests require network access
+  disabledTestPaths = [
+    "qcelemental/tests/test_gph_uno_bipartite.py"
+    "qcelemental/tests/test_model_general.py"
+    "qcelemental/tests/test_model_results.py"
+    "qcelemental/tests/test_molecule.py"
+    "qcelemental/tests/test_molparse_align_chiral.py"
+    "qcelemental/tests/test_molparse_from_schema.py"
+    "qcelemental/tests/test_molparse_from_string.py"
+    "qcelemental/tests/test_molparse_pubchem.py"
+    "qcelemental/tests/test_molparse_to_schema.py"
+    "qcelemental/tests/test_molparse_to_string.py"
+    "qcelemental/tests/test_molutil.py"
+    "qcelemental/tests/test_utils.py"
+    "qcelemental/tests/test_zqcschema.py"
+  ];
+
   meta = {
-    broken = stdenv.hostPlatform.isDarwin || pythonAtLeast "3.14"; # https://github.com/MolSSI/QCElemental/issues/375
+    broken = stdenv.hostPlatform.isDarwin;
     description = "Periodic table, physical constants and molecule parsing for quantum chemistry";
     homepage = "https://github.com/MolSSI/QCElemental";
     changelog = "https://github.com/MolSSI/QCElemental/blob/v${version}/docs/changelog.rst";
diff --git a/pkgs/development/python-modules/qcengine/default.nix b/pkgs/development/python-modules/qcengine/default.nix
index e8fe59a5878a..87496c5f6476 100644
--- a/pkgs/development/python-modules/qcengine/default.nix
+++ b/pkgs/development/python-modules/qcengine/default.nix
@@ -16,19 +16,24 @@
   qcelemental,
   scipy,
   setuptools,
+  setuptools-scm,
+  pydantic-settings,
 }:
 
 buildPythonPackage rec {
   pname = "qcengine";
-  version = "0.34.0";
+  version = "0.50.0rc2";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-VKULy45bYn5TmxU7TbOVK98r0pRMWAwissmgx0Ee/8w=";
+    hash = "sha256-XIxHFemTXXsqCLAHizzrEt0tVdfp6vY0Pl4CHv+EzDM=";
   };
 
-  build-system = [ setuptools ];
+  build-system = [
+    setuptools
+    setuptools-scm
+  ];
 
   dependencies = [
     msgpack
@@ -38,6 +43,7 @@ buildPythonPackage rec {
     pydantic
     pyyaml
     qcelemental
+    pydantic-settings
   ];
 
   optional-dependencies = {
@@ -55,12 +61,16 @@ buildPythonPackage rec {
 
   pythonImportsCheck = [ "qcengine" ];
 
+  # These tests require network access
+  disabledTestPaths = [
+    "qcengine/tests/test_harness_canonical.py"
+  ];
+
   meta = {
     description = "Quantum chemistry program executor and IO standardizer (QCSchema) for quantum chemistry";
     homepage = "https://molssi.github.io/QCElemental/";
     license = lib.licenses.bsd3;
     maintainers = with lib.maintainers; [ sheepforce ];
     mainProgram = "qcengine";
-    broken = pythonAtLeast "3.14"; # https://github.com/MolSSI/QCEngine/issues/481
   };
 }
diff --git a/pkgs/development/python-modules/qtconsole/default.nix b/pkgs/development/python-modules/qtconsole/default.nix
index 67ad65250e0d..0882f7c9a2b5 100644
--- a/pkgs/development/python-modules/qtconsole/default.nix
+++ b/pkgs/development/python-modules/qtconsole/default.nix
@@ -21,14 +21,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "qtconsole";
-  version = "5.7.1";
+  version = "5.7.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jupyter";
     repo = "qtconsole";
     tag = finalAttrs.version;
-    hash = "sha256-3NXW/6W0Gr8/LnB6VfHgFWJdwty4gLe2D8YzXn0/Cds=";
+    hash = "sha256-GL6CAXijlgc/3nj9KaJJgK+AIq6wHdEf0kpgryJ3KuQ=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/solarlog-cli/default.nix b/pkgs/development/python-modules/solarlog-cli/default.nix
index afc404da422c..eba6fffac044 100644
--- a/pkgs/development/python-modules/solarlog-cli/default.nix
+++ b/pkgs/development/python-modules/solarlog-cli/default.nix
@@ -15,7 +15,7 @@
 
 buildPythonPackage rec {
   pname = "solarlog-cli";
-  version = "0.7.0";
+  version = "0.7.1";
   pyproject = true;
 
   disabled = pythonOlder "3.12";
@@ -24,7 +24,7 @@ buildPythonPackage rec {
     owner = "dontinelli";
     repo = "solarlog_cli";
     tag = "v${version}";
-    hash = "sha256-ryhC2RpLK7olglgOOmja4LzUpVyi6vt6vj3EntUYZx0=";
+    hash = "sha256-sZ3H2x4QkDMjxo50HHEktfdjOwwGqdPr8tiUq6AafS4=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/spacy/default.nix b/pkgs/development/python-modules/spacy/default.nix
index c54b938fabd3..c77bc05697ba 100644
--- a/pkgs/development/python-modules/spacy/default.nix
+++ b/pkgs/development/python-modules/spacy/default.nix
@@ -47,14 +47,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "spacy";
-  version = "3.8.13";
+  version = "3.8.14";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "explosion";
     repo = "spaCy";
     tag = "release-v${finalAttrs.version}";
-    hash = "sha256-mjl4s3uUEdwPTvyq5HGDtxxREdnHAmUU8IpN/7+YxTc=";
+    hash = "sha256-w9cNP304H/EntpoMkXGwkxIVoThkl5HZPDK4+k4Py0Y=";
   };
 
   build-system = [
diff --git a/pkgs/development/python-modules/spyder-kernels/default.nix b/pkgs/development/python-modules/spyder-kernels/default.nix
index 744ac7df4938..94a240c50425 100644
--- a/pkgs/development/python-modules/spyder-kernels/default.nix
+++ b/pkgs/development/python-modules/spyder-kernels/default.nix
@@ -35,18 +35,21 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "spyder-kernels";
-  version = "3.1.3";
+  version = "3.1.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "spyder-ide";
     repo = "spyder-kernels";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BhXJZB4lZuNqesJBcuAmOHTM38fMir4tTnr+mmwBaqA=";
+    hash = "sha256-HMkenC9a+UZ0VCFx+q9K6KQ8BdTvpc4nHukhEqCLGXo=";
   };
 
   build-system = [ setuptools ];
 
+  pythonRelaxDeps = [
+    "ipykernel"
+  ];
   dependencies = [
     cloudpickle
     ipykernel
diff --git a/pkgs/development/python-modules/srpenergy/default.nix b/pkgs/development/python-modules/srpenergy/default.nix
index 9a5cda9428a5..a28b6f3a3117 100644
--- a/pkgs/development/python-modules/srpenergy/default.nix
+++ b/pkgs/development/python-modules/srpenergy/default.nix
@@ -10,14 +10,14 @@
 
 buildPythonPackage rec {
   pname = "srpenergy";
-  version = "1.3.7";
+  version = "1.3.8";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "lamoreauxlab";
     repo = "srpenergy-api-client-python";
     tag = version;
-    hash = "sha256-bdBF5y9hRj4rceUD5qjHOM9TIaHGElJ36YjWCJgCzX8=";
+    hash = "sha256-V0WDY1tWt5O/35wDDE0e89bqspcKMtl9/QK2A7NIZu8=";
   };
 
   postPatch = ''
@@ -34,6 +34,11 @@ buildPythonPackage rec {
 
   nativeCheckInputs = [ pytestCheckHook ];
 
+  disabledTestPaths = [
+    # requires an account
+    "quickstart_test.py"
+  ];
+
   pythonImportsCheck = [ "srpenergy.client" ];
 
   meta = {
diff --git a/pkgs/development/python-modules/stable-baselines3/default.nix b/pkgs/development/python-modules/stable-baselines3/default.nix
index c6a81f6be253..cb752b201af5 100644
--- a/pkgs/development/python-modules/stable-baselines3/default.nix
+++ b/pkgs/development/python-modules/stable-baselines3/default.nix
@@ -20,31 +20,20 @@
   rich,
   tqdm,
 }:
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "stable-baselines3";
-  version = "2.7.1";
+  version = "2.8.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "DLR-RM";
     repo = "stable-baselines3";
-    tag = "v${version}";
-    hash = "sha256-ucfdXyOYgevrKQ+RQbuoLjhGEvlzwH80yognMNbJlgQ=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-eMtkcPvTtdy0gqedCD8NxlC85rDEB9Dam5fIKujEWp4=";
   };
 
-  postPatch =
-    # Environment version v0 for `CliffWalking` is deprecated
-    ''
-      substituteInPlace "tests/test_vec_normalize.py" \
-        --replace-fail "CliffWalking-v0" "CliffWalking-v1"
-    '';
-
   build-system = [ setuptools ];
 
-  pythonRelaxDeps = [
-    "gymnasium"
-  ];
-
   dependencies = [
     cloudpickle
     gymnasium
@@ -83,8 +72,8 @@ buildPythonPackage rec {
   meta = {
     description = "PyTorch version of Stable Baselines, reliable implementations of reinforcement learning algorithms";
     homepage = "https://github.com/DLR-RM/stable-baselines3";
-    changelog = "https://github.com/DLR-RM/stable-baselines3/releases/tag/v${version}";
+    changelog = "https://github.com/DLR-RM/stable-baselines3/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ derdennisop ];
   };
-}
+})
diff --git a/pkgs/development/python-modules/synchronicity/default.nix b/pkgs/development/python-modules/synchronicity/default.nix
index 1509b56d96db..45ff33aad211 100644
--- a/pkgs/development/python-modules/synchronicity/default.nix
+++ b/pkgs/development/python-modules/synchronicity/default.nix
@@ -16,14 +16,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "synchronicity";
-  version = "0.11.1";
+  version = "0.12.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "modal-labs";
     repo = "synchronicity";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-Uyn4apHILBwjHoMkr52IkcFlaX7jx3WzuzZfvdxcDFo=";
+    hash = "sha256-/yN7FrOIVB30MVUZxqy607uG+niF7flxOLh94DvIrhM=";
   };
 
   build-system = [ hatchling ];
diff --git a/pkgs/development/python-modules/tensordict/default.nix b/pkgs/development/python-modules/tensordict/default.nix
index 2c907bbbadf7..e068a3ea6ffa 100644
--- a/pkgs/development/python-modules/tensordict/default.nix
+++ b/pkgs/development/python-modules/tensordict/default.nix
@@ -29,14 +29,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "tensordict";
-  version = "0.11.0";
+  version = "0.12.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "pytorch";
     repo = "tensordict";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-PUPDKv10Ks4B1kpgbRcnmfWFUkpFEdxMmTNztFVfdK4=";
+    hash = "sha256-5m5nNVsaBabUuKPHErBr+LQWfCvjG9b2CjwdK9mASF0=";
   };
 
   postPatch = ''
diff --git a/pkgs/development/python-modules/torch-c-dlpack-ext/default.nix b/pkgs/development/python-modules/torch-c-dlpack-ext/default.nix
new file mode 100644
index 000000000000..07d254591587
--- /dev/null
+++ b/pkgs/development/python-modules/torch-c-dlpack-ext/default.nix
@@ -0,0 +1,40 @@
+{
+  lib,
+  buildPythonPackage,
+  apache-tvm-ffi,
+
+  # build-system
+  setuptools,
+
+  # dependencies
+  torch,
+}:
+
+buildPythonPackage (finalAttrs: {
+  pname = "torch-c-dlpack-ext";
+  inherit (apache-tvm-ffi) version src;
+  pyproject = true;
+
+  sourceRoot = "${finalAttrs.src.name}/addons/torch_c_dlpack_ext";
+
+  build-system = [
+    apache-tvm-ffi
+    setuptools
+  ];
+
+  dependencies = [
+    torch
+  ];
+
+  pythonImportsCheck = [ "torch_c_dlpack_ext" ];
+
+  # No tests
+  doCheck = false;
+
+  meta = {
+    description = "Ahead-Of-Time (AOT) compiled module to support faster DLPack conversion in DLPack";
+    homepage = "https://github.com/apache/tvm-ffi/tree/main/addons/torch_c_dlpack_ext";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ GaetanLepage ];
+  };
+})
diff --git a/pkgs/development/python-modules/ttp-templates/default.nix b/pkgs/development/python-modules/ttp-templates/default.nix
index 0fb6e96c733e..c0eef67aa1a9 100644
--- a/pkgs/development/python-modules/ttp-templates/default.nix
+++ b/pkgs/development/python-modules/ttp-templates/default.nix
@@ -7,14 +7,14 @@
 
 buildPythonPackage rec {
   pname = "ttp-templates";
-  version = "0.3.7";
+  version = "0.5.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "dmulyalin";
     repo = "ttp_templates";
     tag = version;
-    hash = "sha256-Pntm/wUv/K0ci8U/+nBUVszuX8KT95gyp+i2N6NshKo=";
+    hash = "sha256-lGlg8AgP7VtwZm5xfpEzs1VJSbfBdYns/l4ROP0LtEQ=";
   };
 
   nativeBuildInputs = [ poetry-core ];
diff --git a/pkgs/development/python-modules/ucsmsdk/default.nix b/pkgs/development/python-modules/ucsmsdk/default.nix
index 47995ad6608b..da4d16f8a7c9 100644
--- a/pkgs/development/python-modules/ucsmsdk/default.nix
+++ b/pkgs/development/python-modules/ucsmsdk/default.nix
@@ -9,14 +9,14 @@
 
 buildPythonPackage rec {
   pname = "ucsmsdk";
-  version = "0.9.24";
+  version = "0.9.25";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "CiscoUcs";
     repo = "ucsmsdk";
     tag = "v${version}";
-    hash = "sha256-c2Tvm4xMyda9PoL7VWMCo7/RjSVcHBJQMh4GeTzgz5I=";
+    hash = "sha256-hpGWaBlzfb5rcmgnmVQFGGH5T/EJRdilIH4Q83Ml8XQ=";
   };
 
   build-system = [ setuptools ];
diff --git a/pkgs/development/python-modules/urllib3-future/default.nix b/pkgs/development/python-modules/urllib3-future/default.nix
index 055139daed20..6b51b06424de 100644
--- a/pkgs/development/python-modules/urllib3-future/default.nix
+++ b/pkgs/development/python-modules/urllib3-future/default.nix
@@ -24,14 +24,14 @@
 
 buildPythonPackage rec {
   pname = "urllib3-future";
-  version = "2.18.901";
+  version = "2.19.900";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jawah";
     repo = "urllib3.future";
     tag = version;
-    hash = "sha256-y6DRN24U2vxLRcVw9w9E4FMlk71W44x7UYSJrS6hfuA=";
+    hash = "sha256-6jRc3hxPSFV+vhAzbSudKuCGV0l+X2aTKXPZnAAs0Bk=";
   };
 
   postPatch = ''
diff --git a/pkgs/development/ruby-modules/gem-config/default.nix b/pkgs/development/ruby-modules/gem-config/default.nix
index e4e5d20c3e42..e509560fddee 100644
--- a/pkgs/development/ruby-modules/gem-config/default.nix
+++ b/pkgs/development/ruby-modules/gem-config/default.nix
@@ -263,7 +263,9 @@ in
   };
 
   dep-selector-libgecode = attrs: {
-    USE_SYSTEM_GECODE = true;
+    env = attrs.env or { } // {
+      USE_SYSTEM_GECODE = true;
+    };
     postInstall = ''
       installPath=$(cat $out/nix-support/gem-meta/install-path)
       sed -i $installPath/lib/dep-selector-libgecode.rb -e 's@VENDORED_GECODE_DIR =.*@VENDORED_GECODE_DIR = "${gecode_3}"@'
@@ -327,7 +329,9 @@ in
   };
 
   mimemagic = attrs: {
-    FREEDESKTOP_MIME_TYPES_PATH = "${shared-mime-info}/share/mime/packages/freedesktop.org.xml";
+    env = attrs.env or { } // {
+      FREEDESKTOP_MIME_TYPES_PATH = "${shared-mime-info}/share/mime/packages/freedesktop.org.xml";
+    };
   };
 
   mini_magick = attrs: {
@@ -1035,7 +1039,9 @@ in
   sassc = attrs: {
     nativeBuildInputs = [ rake ];
     dontBuild = false;
-    SASS_LIBSASS_PATH = toString libsass;
+    env = attrs.env or { } // {
+      SASS_LIBSASS_PATH = toString libsass;
+    };
     postPatch = ''
       substituteInPlace lib/sassc/native.rb \
         --replace 'gem_root = spec.gem_dir' 'gem_root = File.join(__dir__, "../../")'
diff --git a/pkgs/development/tools/database/cdb/default.nix b/pkgs/development/tools/database/cdb/default.nix
index a7dd567d9b89..c92961ef09e5 100644
--- a/pkgs/development/tools/database/cdb/default.nix
+++ b/pkgs/development/tools/database/cdb/default.nix
@@ -67,7 +67,7 @@ stdenv.mkDerivation {
   meta = {
     homepage = "https://cr.yp.to/cdb.html";
     license = lib.licenses.publicDomain;
-    maintainers = [ lib.maintainers.Profpatsch ];
+    maintainers = [ ];
     platforms = lib.platforms.unix;
   };
 }
diff --git a/pkgs/development/tools/kgt/default.nix b/pkgs/development/tools/kgt/default.nix
index e578ff678773..bdfaf883d443 100644
--- a/pkgs/development/tools/kgt/default.nix
+++ b/pkgs/development/tools/kgt/default.nix
@@ -91,7 +91,7 @@ stdenv.mkDerivation {
     homepage = "https://github.com/katef/kgt";
     license = lib.licenses.bsd2;
     platforms = lib.platforms.unix;
-    maintainers = with lib.maintainers; [ Profpatsch ];
+    maintainers = [ ];
   };
 
 }
diff --git a/pkgs/development/tools/parsing/tree-sitter/default.nix b/pkgs/development/tools/parsing/tree-sitter/default.nix
index 9815212c4b89..b54f3967ead2 100644
--- a/pkgs/development/tools/parsing/tree-sitter/default.nix
+++ b/pkgs/development/tools/parsing/tree-sitter/default.nix
@@ -231,7 +231,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
     '';
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [
-      Profpatsch
       uncenter
       amaanq
     ];
diff --git a/pkgs/development/web/nodejs/v25.nix b/pkgs/development/web/nodejs/v25.nix
index 5cff17d273a4..f16fd951dce2 100644
--- a/pkgs/development/web/nodejs/v25.nix
+++ b/pkgs/development/web/nodejs/v25.nix
@@ -23,8 +23,8 @@ let
       [ ];
 in
 buildNodejs {
-  version = "25.8.2";
-  sha256 = "3efb19e757dc59bb21632507200d2de782369d5226a68955e9372c925fdf2471";
+  version = "25.9.0";
+  sha256 = "8f78af3ee55fb278668b5f801db58bd1a38ea161318eb5ce2128ddbc9cd813aa";
   patches =
     (
       if (stdenv.hostPlatform.emulatorAvailable buildPackages) then
diff --git a/pkgs/os-specific/linux/decklink/default.nix b/pkgs/os-specific/linux/decklink/default.nix
index eb77f2f068ca..8c43af4c8c35 100644
--- a/pkgs/os-specific/linux/decklink/default.nix
+++ b/pkgs/os-specific/linux/decklink/default.nix
@@ -12,8 +12,10 @@ stdenv.mkDerivation (finalAttrs: {
   # See pkgs/by-name/bl/blackmagic-desktop-video/package.nix for more.
   inherit (blackmagic-desktop-video) src version;
 
-  KERNELDIR = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build";
-  INSTALL_MOD_PATH = placeholder "out";
+  env = {
+    KERNELDIR = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build";
+    INSTALL_MOD_PATH = placeholder "out";
+  };
 
   nativeBuildInputs = kernel.moduleBuildDependencies;
 
diff --git a/pkgs/os-specific/linux/dpdk-kmods/default.nix b/pkgs/os-specific/linux/dpdk-kmods/default.nix
index 034d0545fc58..e158912d5324 100644
--- a/pkgs/os-specific/linux/dpdk-kmods/default.nix
+++ b/pkgs/os-specific/linux/dpdk-kmods/default.nix
@@ -6,13 +6,13 @@
   kernelModuleMakeFlags,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "dpdk-kmods";
   version = "2023-02-05";
 
   src = fetchzip {
     url = "https://git.dpdk.org/dpdk-kmods/snapshot/dpdk-kmods-e721c733cd24206399bebb8f0751b0387c4c1595.tar.xz";
-    sha256 = "sha256-AG5Lthp+CPR4R7I23DUmoWAmET8gLEFHHdjk2TUbQn4=";
+    hash = "sha256-AG5Lthp+CPR4R7I23DUmoWAmET8gLEFHHdjk2TUbQn4=";
   };
 
   hardeningDisable = [ "pic" ];
@@ -20,14 +20,15 @@ stdenv.mkDerivation rec {
   makeFlags = kernelModuleMakeFlags ++ [
     "INSTALL_MOD_PATH=${placeholder "out"}"
   ];
-  KSRC = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build";
+
+  env.KSRC = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build";
 
   nativeBuildInputs = kernel.moduleBuildDependencies;
 
   preBuild = "cd linux/igb_uio";
 
   installPhase = ''
-    make -C ${KSRC} M=$(pwd) modules_install $makeFlags
+    make -C ${finalAttrs.env.KSRC} M=$(pwd) modules_install $makeFlags
   '';
 
   enableParallelBuilding = true;
@@ -39,4 +40,4 @@ stdenv.mkDerivation rec {
     maintainers = [ lib.maintainers.mic92 ];
     platforms = lib.platforms.linux;
   };
-}
+})
diff --git a/pkgs/os-specific/linux/tmon/default.nix b/pkgs/os-specific/linux/tmon/default.nix
index 3b306b193f80..1a299ad50669 100644
--- a/pkgs/os-specific/linux/tmon/default.nix
+++ b/pkgs/os-specific/linux/tmon/default.nix
@@ -23,7 +23,8 @@ stdenv.mkDerivation {
     "INSTALL_ROOT=\"$(out)\""
     "BINDIR=bin"
   ];
-  NIX_CFLAGS_LINK = "-lgcc_s";
+
+  env.NIX_CFLAGS_LINK = "-lgcc_s";
 
   enableParallelBuilding = true;
 
diff --git a/pkgs/os-specific/linux/virtualbox/default.nix b/pkgs/os-specific/linux/virtualbox/default.nix
index f6846eb1945d..2c30499c23f9 100644
--- a/pkgs/os-specific/linux/virtualbox/default.nix
+++ b/pkgs/os-specific/linux/virtualbox/default.nix
@@ -16,7 +16,7 @@ stdenv.mkDerivation {
 
   nativeBuildInputs = kernel.moduleBuildDependencies;
 
-  KERN_DIR = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build";
+  env.KERN_DIR = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build";
 
   makeFlags = [ "INSTALL_MOD_PATH=$(out)" ];
   installTargets = [ "install" ];
diff --git a/pkgs/servers/home-assistant/custom-components/frigate/package.nix b/pkgs/servers/home-assistant/custom-components/frigate/package.nix
index 641b20bafbd4..6b83f51daafd 100644
--- a/pkgs/servers/home-assistant/custom-components/frigate/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/frigate/package.nix
@@ -28,6 +28,11 @@ buildHomeAssistantComponent rec {
     hash = "sha256-fgsYznTqJrEh4niyGfksnflRp1PpljrlzJBvs8gKn54=";
   };
 
+  patches = [
+    # https://github.com/blakeblackshear/frigate-hass-integration/pull/1070
+    ./service-to-action.patch
+  ];
+
   dependencies = [
     hass-web-proxy-lib
     titlecase
diff --git a/pkgs/servers/home-assistant/custom-components/frigate/service-to-action.patch b/pkgs/servers/home-assistant/custom-components/frigate/service-to-action.patch
new file mode 100644
index 000000000000..5bc2bbda90d0
--- /dev/null
+++ b/pkgs/servers/home-assistant/custom-components/frigate/service-to-action.patch
@@ -0,0 +1,21 @@
+index 9d3ba82..dabf566 100644
+--- a/tests/test_integration_services.py
++++ b/tests/test_integration_services.py
+@@ -137,7 +137,7 @@ async def test_review_summarize_service_version_check(
+     await setup_mock_frigate_config_entry(hass, client=client)
+ 
+     # Verify service is not available (should not be registered for version < 0.17)
+-    with pytest.raises(Exception, match="service_not_found"):
++    with pytest.raises(Exception, match="Action frigate.review_summarize not found"):
+         await hass.services.async_call(
+             "frigate",
+             SERVICE_REVIEW_SUMMARIZE,
+@@ -156,7 +156,7 @@ async def test_review_summarize_service_no_integration(
+     # Don't set up any Frigate integration
+ 
+     # When no integration is configured, the service won't exist
+-    with pytest.raises(Exception, match="service_not_found"):
++    with pytest.raises(Exception, match="Action frigate.review_summarize not found"):
+         await hass.services.async_call(
+             "frigate",
+             SERVICE_REVIEW_SUMMARIZE,
diff --git a/pkgs/servers/home-assistant/custom-components/pirate-weather/package.nix b/pkgs/servers/home-assistant/custom-components/pirate-weather/package.nix
index 1ef7554d5dca..308af647e8c1 100644
--- a/pkgs/servers/home-assistant/custom-components/pirate-weather/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/pirate-weather/package.nix
@@ -12,13 +12,13 @@
 buildHomeAssistantComponent rec {
   owner = "Pirate-Weather";
   domain = "pirateweather";
-  version = "1.8.4";
+  version = "1.8.7";
 
   src = fetchFromGitHub {
     inherit owner;
     repo = "pirate-weather-ha";
     tag = "v${version}";
-    hash = "sha256-rGjpjO4Jnm1SuQBiqhzb80lNonUKmX0tkAL+DhLxMnw=";
+    hash = "sha256-3vhsuyPXDDSd2x6m4HS53Iuszga4lxP7uWCznfSFj1w=";
   };
 
   nativeCheckInputs = [
diff --git a/pkgs/servers/home-assistant/custom-components/sensi/package.nix b/pkgs/servers/home-assistant/custom-components/sensi/package.nix
index 07bde216193c..846e086699da 100644
--- a/pkgs/servers/home-assistant/custom-components/sensi/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/sensi/package.nix
@@ -7,13 +7,13 @@
 buildHomeAssistantComponent rec {
   owner = "iprak";
   domain = "sensi";
-  version = "2.1.3";
+  version = "2.1.4";
 
   src = fetchFromGitHub {
     inherit owner;
     repo = domain;
     tag = "v${version}";
-    hash = "sha256-dyA4L/2FjyI4BM3IZHKE4UD+jUbrNs5dGKZGD1a1duY=";
+    hash = "sha256-FTyFxQd2upNUKhfSfd5rEr5BLpu6veYHrExHUazTamU=";
   };
 
   postPatch = ''
diff --git a/pkgs/servers/home-assistant/custom-components/solax_modbus/package.nix b/pkgs/servers/home-assistant/custom-components/solax_modbus/package.nix
index 2365baa6029b..c2adeeb3bc20 100644
--- a/pkgs/servers/home-assistant/custom-components/solax_modbus/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/solax_modbus/package.nix
@@ -8,13 +8,13 @@
 buildHomeAssistantComponent rec {
   owner = "wills106";
   domain = "solax_modbus";
-  version = "2026.03.3";
+  version = "2026.03.4";
 
   src = fetchFromGitHub {
     owner = "wills106";
     repo = "homeassistant-solax-modbus";
     tag = version;
-    hash = "sha256-ARgTPPBHky7tTInDcHlqTl64JB545xNxsIl0pAV+BRo=";
+    hash = "sha256-bgXpwY2kWwOAQCE2BioOmhkWVXBSX4cXL71kkB7EomE=";
   };
 
   dependencies = [ pymodbus ];
diff --git a/pkgs/servers/home-assistant/custom-components/versatile_thermostat/package.nix b/pkgs/servers/home-assistant/custom-components/versatile_thermostat/package.nix
index 8d3d2f82ff95..ffe78ea45e0e 100644
--- a/pkgs/servers/home-assistant/custom-components/versatile_thermostat/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/versatile_thermostat/package.nix
@@ -10,13 +10,13 @@
 buildHomeAssistantComponent rec {
   owner = "jmcollin78";
   domain = "versatile_thermostat";
-  version = "9.2.2";
+  version = "9.3.1";
 
   src = fetchFromGitHub {
     inherit owner;
     repo = domain;
     tag = version;
-    hash = "sha256-njVafcJdnpYF7m1u6674IqWdU5Yv1n3HNEvXr61mL/I=";
+    hash = "sha256-BdGMF4f6OfG+y6RrN7r7/GjY8OD+4eQM9syuxGI0IiI=";
   };
 
   dependencies = [
diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/auto-entities/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/auto-entities/package.nix
index 6a818050dec1..d113600c562c 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/auto-entities/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/auto-entities/package.nix
@@ -6,16 +6,16 @@
 
 buildNpmPackage rec {
   pname = "auto-entities";
-  version = "2.0.0";
+  version = "2.1.0";
 
   src = fetchFromGitHub {
     owner = "Lint-Free-Technology";
     repo = "lovelace-auto-entities";
     tag = "v${version}";
-    hash = "sha256-W6D9z4D00wIVmrUo9KFlttK2k013kHbWXKwbyh9bsLY=";
+    hash = "sha256-lErNtkRS6xbbpNvqrOu8k8ZZyKcwwzP/6Hlll4CggEQ=";
   };
 
-  npmDepsHash = "sha256-H9Mt5lBZAZwkGfPSRlbgPaqHETWxI7Wge7zEPLcdvgE=";
+  npmDepsHash = "sha256-diRmXYsbsMP6jC/dBRraRDknloZKA1SNrnoLST8wMfw=";
 
   installPhase = ''
     runHook preInstall
diff --git a/pkgs/servers/home-assistant/custom-lovelace-modules/sankey-chart/package.nix b/pkgs/servers/home-assistant/custom-lovelace-modules/sankey-chart/package.nix
index d8ac0a9b6699..44cd8530269e 100644
--- a/pkgs/servers/home-assistant/custom-lovelace-modules/sankey-chart/package.nix
+++ b/pkgs/servers/home-assistant/custom-lovelace-modules/sankey-chart/package.nix
@@ -6,16 +6,16 @@
 
 buildNpmPackage rec {
   pname = "sankey-chart";
-  version = "3.10.1";
+  version = "3.10.2";
 
   src = fetchFromGitHub {
     owner = "MindFreeze";
     repo = "ha-sankey-chart";
     rev = "v${version}";
-    hash = "sha256-3SRPtj86EbXu59kqeUoJyenCBrIIyqQhw0+7LgB0jwI=";
+    hash = "sha256-dwviZVfs8CAdawUuaVHYmGWBri+X6r962kX8xiFhzsM=";
   };
 
-  npmDepsHash = "sha256-cCRc1UKixxr11eWC7W6Gw7DNKVhrZ1G7EukkfmyPY2Y=";
+  npmDepsHash = "sha256-Kpv43sPc/+1E7TJzzncOBQbV2lVTNIfMC3gYWXDP/6k=";
 
   installPhase = ''
     runHook preInstall
diff --git a/pkgs/servers/sql/postgresql/ext/pg_background.nix b/pkgs/servers/sql/postgresql/ext/pg_background.nix
index 98fc79c49274..603693027b39 100644
--- a/pkgs/servers/sql/postgresql/ext/pg_background.nix
+++ b/pkgs/servers/sql/postgresql/ext/pg_background.nix
@@ -8,13 +8,13 @@
 
 postgresqlBuildExtension (finalAttrs: {
   pname = "pg_background";
-  version = "1.8";
+  version = "1.9.1";
 
   src = fetchFromGitHub {
     owner = "vibhorkum";
     repo = "pg_background";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-m14hBIqBBwxGrOIKV77F/S3vH4YH0/0husy9edDkuMM=";
+    hash = "sha256-UbqMz7s4rSr7kKeZb+UVMc2Xg2r5GuM34SxI6DEIMPg=";
   };
 
   buildInputs = postgresql.buildInputs;
diff --git a/pkgs/servers/sql/postgresql/ext/pg_search.nix b/pkgs/servers/sql/postgresql/ext/pg_search.nix
index e62c4e77d1cb..ac0e62bdcfa1 100644
--- a/pkgs/servers/sql/postgresql/ext/pg_search.nix
+++ b/pkgs/servers/sql/postgresql/ext/pg_search.nix
@@ -49,16 +49,16 @@ let
 in
 buildPgrxExtension (finalAttrs: {
   pname = "pg_search";
-  version = "0.22.2";
+  version = "0.22.4";
 
   src = fetchFromGitHub {
     owner = "paradedb";
     repo = "paradedb";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-BqmYuSmA/yrfw8Np1HghOcFs7erv0SiryiGyDpV7CQQ=";
+    hash = "sha256-WPkgVqrA2mOgj7IGh/GSjpJoLP7usdUWbFVY1SqGHq4=";
   };
 
-  cargoHash = "sha256-kZfWYk3bx3bKV3GcDikrhg3N7gg31bi86V7dvotLtTE=";
+  cargoHash = "sha256-f8/5wDle97O3RoIvM+iPWeEzfASsaQm2k8YnaYg32Do=";
 
   inherit postgresql;
 
diff --git a/pkgs/shells/fish/plugins/forgit.nix b/pkgs/shells/fish/plugins/forgit.nix
index 25212f3f17b2..ab4a491fc181 100644
--- a/pkgs/shells/fish/plugins/forgit.nix
+++ b/pkgs/shells/fish/plugins/forgit.nix
@@ -6,13 +6,13 @@
 
 buildFishPlugin rec {
   pname = "forgit";
-  version = "26.01.0";
+  version = "26.04.0";
 
   src = fetchFromGitHub {
     owner = "wfxr";
     repo = "forgit";
     rev = version;
-    hash = "sha256-3PjKFARsN3BE5c3/JonNj+LpKBPT1N3hc1bK6NdWDTQ=";
+    hash = "sha256-H5Vuf+VIrurs9lwad/K4klElXvM1kg6LEjm/wgv1/z8=";
   };
 
   postInstall = ''
diff --git a/pkgs/tools/misc/ultrastar-creator/default.nix b/pkgs/tools/misc/ultrastar-creator/default.nix
index 6e7074ead176..9fabf29831a5 100644
--- a/pkgs/tools/misc/ultrastar-creator/default.nix
+++ b/pkgs/tools/misc/ultrastar-creator/default.nix
@@ -60,6 +60,6 @@ stdenv.mkDerivation {
     description = "Ultrastar karaoke song creation tool";
     homepage = "https://github.com/UltraStar-Deluxe/UltraStar-Creator";
     license = lib.licenses.gpl2Only;
-    maintainers = with lib.maintainers; [ Profpatsch ];
+    maintainers = [ ];
   };
 }
diff --git a/pkgs/tools/misc/ultrastar-manager/default.nix b/pkgs/tools/misc/ultrastar-manager/default.nix
index 822f27bff0fc..a7c2f7d0ad95 100644
--- a/pkgs/tools/misc/ultrastar-manager/default.nix
+++ b/pkgs/tools/misc/ultrastar-manager/default.nix
@@ -151,6 +151,6 @@ stdenv.mkDerivation {
     mainProgram = "UltraStar-Manager";
     homepage = "https://github.com/UltraStar-Deluxe/UltraStar-Manager";
     license = lib.licenses.gpl2Only;
-    maintainers = with lib.maintainers; [ Profpatsch ];
+    maintainers = [ ];
   };
 }
diff --git a/pkgs/tools/networking/ebpf-verifier/remove-fetchcontent-usage.patch b/pkgs/tools/networking/ebpf-verifier/remove-fetchcontent-usage.patch
deleted file mode 100644
index 8a4af1bee19a..000000000000
--- a/pkgs/tools/networking/ebpf-verifier/remove-fetchcontent-usage.patch
+++ /dev/null
@@ -1,14 +0,0 @@
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index d7cf256..cb94e5a 100644
---- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -6,8 +6,7 @@ project(ebpf_verifier)
- include(FetchContent)
- FetchContent_Declare(
-   Catch2
--  GIT_REPOSITORY https://github.com/catchorg/Catch2.git
--  GIT_TAG        ac93f1943762f6fc92f0dc5bac0d720a33a27530
-+  SOURCE_DIR @catch2Src@
- )
- FetchContent_MakeAvailable(Catch2)
- 
diff --git a/pkgs/tools/package-management/nix/default.nix b/pkgs/tools/package-management/nix/default.nix
index 8772d9df0b1e..5783c99771b6 100644
--- a/pkgs/tools/package-management/nix/default.nix
+++ b/pkgs/tools/package-management/nix/default.nix
@@ -179,7 +179,7 @@ lib.makeExtensible (
 
       nixComponents_2_31 = nixDependencies.callPackage ./modular/packages.nix rec {
         version = "2.31.3";
-        inherit (self.nix_2_30.meta) teams;
+        inherit teams;
         otherSplices = generateSplicesForNixComponents "nixComponents_2_31";
         src = fetchFromGitHub {
           owner = "NixOS";
@@ -191,42 +191,10 @@ lib.makeExtensible (
 
       nix_2_31 = addTests "nix_2_31" self.nixComponents_2_31.nix-everything;
 
-      nixComponents_2_32 =
-        (nixDependencies.callPackage ./modular/packages.nix rec {
-          version = "2.32.6";
-          inherit (self.nix_2_31.meta) teams;
-          otherSplices = generateSplicesForNixComponents "nixComponents_2_32";
-          src = fetchFromGitHub {
-            owner = "NixOS";
-            repo = "nix";
-            tag = version;
-            hash = "sha256-5aH3xppfBs8j6P7A2wq8WQ05yJvlL7x0gQbWk4RN5eY=";
-          };
-        }).appendPatches
-          patches_common;
-
-      nix_2_32 = addTests "nix_2_32" self.nixComponents_2_32.nix-everything;
-
-      nixComponents_2_33 =
-        (nixDependencies.callPackage ./modular/packages.nix rec {
-          version = "2.33.3";
-          inherit (self.nix_2_32.meta) teams;
-          otherSplices = generateSplicesForNixComponents "nixComponents_2_33";
-          src = fetchFromGitHub {
-            owner = "NixOS";
-            repo = "nix";
-            tag = version;
-            hash = "sha256-2Mga4e9ZtOPLwYqF4+hcjdsTImcA7TKUvDDfaF7jqEo=";
-          };
-        }).appendPatches
-          patches_common;
-
-      nix_2_33 = addTests "nix_2_33" self.nixComponents_2_33.nix-everything;
-
       nixComponents_2_34 =
         (nixDependencies.callPackage ./modular/packages.nix rec {
           version = "2.34.4";
-          inherit (self.nix_2_33.meta) teams;
+          inherit teams;
           otherSplices = generateSplicesForNixComponents "nixComponents_2_34";
           src = fetchFromGitHub {
             owner = "NixOS";
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 69322770da6c..b89ce2544678 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -625,6 +625,7 @@ mapAliases {
   e17gtk = throw "'e17gtk' has been removed because it was archived upstream."; # Added 2026-01-15
   eask = throw "'eask' has been renamed to/replaced by 'eask-cli'"; # Converted to throw 2025-10-27
   easyloggingpp = throw "easyloggingpp has been removed, as it is deprecated upstream and does not build with CMake 4"; # Added 2025-09-17
+  ebpf-verifier = warnAlias "'ebpf-verifier' has been renamed to 'prevail'" prevail; # Added 2026-04-01
   EBTKS = throw "'EBTKS' has been renamed to/replaced by 'ebtks'"; # Converted to throw 2025-10-27
   ec2-utils = throw "'ec2-utils' has been renamed to/replaced by 'amazon-ec2-utils'"; # Converted to throw 2025-10-27
   ecryptfs = throw "'ecryptfs' has been removed due to lack of maintenance. Consider using 'fscrypt', 'gocryptfs' or 'cryfs' instead."; # Added 2026-01-14
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index cb5759dcc792..b825be4e14e8 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -403,10 +403,6 @@ with pkgs;
 
   dnf4 = python3Packages.callPackage ../development/python-modules/dnf4/wrapper.nix { };
 
-  ebpf-verifier = callPackage ../tools/networking/ebpf-verifier {
-    catch2 = catch2_3;
-  };
-
   enochecker-test = with python3Packages; callPackage ../development/tools/enochecker-test { };
 
   inherit (gridlock) nyarr;
@@ -1125,7 +1121,7 @@ with pkgs;
 
   waydroid-nftables = waydroid.override { withNftables = true; };
 
-  winbox = winbox3;
+  winbox = winbox4;
 
   ### APPLICATIONS/VERSION-MANAGEMENT
 
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 62f1694ede0a..72c71514d080 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -3756,6 +3756,8 @@ self: super: with self; {
 
   deep-chainmap = callPackage ../development/python-modules/deep-chainmap { };
 
+  deep-ep = callPackage ../development/python-modules/deep-ep { };
+
   deep-translator = callPackage ../development/python-modules/deep-translator { };
 
   deepdiff = callPackage ../development/python-modules/deepdiff { };
@@ -19451,6 +19453,8 @@ self: super: with self; {
 
   torch-bin = callPackage ../development/python-modules/torch/bin { triton = self.triton-bin; };
 
+  torch-c-dlpack-ext = callPackage ../development/python-modules/torch-c-dlpack-ext { };
+
   torch-geometric = callPackage ../development/python-modules/torch-geometric { };
 
   # Required to test triton