Merge remote-tracking branch 'origin/staging-next' into staging

maintainers/maintainer-list.nix

@@ -2325,6 +2325,12 @@
     githubId = 29058;
     name = "Mikalai Seva";
   };
+  asamonik = {
+    email = "signup-nixpkgs@asamonik.at";
+    github = "asamonik";
+    githubId = 49288593;
+    name = "Andreas Samonik";
+  };
   asappia = {
     email = "asappia@gmail.com";
     github = "asappia";

maintainers/team-list.nix

@@ -901,13 +901,6 @@ with lib.maintainers;
     shortName = "secshell";
   };
 
-  serokell = {
-    # Verify additions by approval of an already existing member of the team.
-    members = [ balsoft ];
-    scope = "Group registration for Serokell employees who collectively maintain packages.";
-    shortName = "Serokell employees";
-  };
-
   stdenv = {
     enableFeatureFreezePing = true;
     github = "stdenv";
@@ -923,15 +916,6 @@ with lib.maintainers;
     shortName = "Steam";
   };
 
-  stridtech = {
-    # Verify additions by approval of an already existing member of the team
-    members = [
-      ulrikstrid
-    ];
-    scope = "Group registration for Strid Tech AB team members who collectively maintain packages";
-    shortName = "StridTech";
-  };
-
   swift = {
     members = [
       dduan

nixos/modules/services/security/kanidm.nix

@@ -29,6 +29,7 @@ let
     mkIf
     mkMerge
     mkOption
+    mkOrder
     mkPackageOption
     optional
     optionals
@@ -368,7 +369,7 @@ in
         freeformType = settingsFormat.type;
 
         options = {
-          pam_allowed_login_groups = mkOption {
+          kanidm.pam_allowed_login_groups = mkOption {
             description = "Kanidm groups that are allowed to login using PAM.";
             example = "my_pam_group";
             type = types.listOf types.str;
@@ -673,6 +674,10 @@ in
 
   config = mkIf (cfg.enableClient || cfg.enableServer || cfg.enablePam) {
     warnings = lib.optionals (cfg.package.eolMessage != "") [ cfg.package.eolMessage ];
+    services.kanidm = {
+      unixSettings.version = "2";
+      serverSettings.version = "2";
+    };
 
     assertions =
       let
@@ -710,6 +715,14 @@ in
           };
       in
       [
+        {
+          assertion = cfg.enablePam -> !(cfg.unixSettings ? pam_allowed_login_groups);
+          message = ''
+            <option>services.kanidm.unixSettings.pam_allowed_login_groups</option> has been renamed
+            to <option>services.kanidm.unixSettings.kanidm.pam_allowed_login_groups</option>.
+            Please change your usage.
+          '';
+        }
         {
           assertion =
             !cfg.enableServer
@@ -1040,8 +1053,9 @@ in
 
     system.nssModules = mkIf cfg.enablePam [ cfg.package ];
 
-    system.nssDatabases.group = optional cfg.enablePam "kanidm";
-    system.nssDatabases.passwd = optional cfg.enablePam "kanidm";
+    # Needs to be before "files" which is `mkBefore`
+    system.nssDatabases.group = mkOrder 490 (optional cfg.enablePam "kanidm");
+    system.nssDatabases.passwd = mkOrder 490 (optional cfg.enablePam "kanidm");
 
     users.groups = mkMerge [
       (mkIf cfg.enableServer { kanidm = { }; })

nixos/tests/kanidm.nix

@@ -66,7 +66,7 @@ in
         };
         enablePam = true;
         unixSettings = {
-          pam_allowed_login_groups = [ "shell" ];
+          kanidm.pam_allowed_login_groups = [ "shell" ];
         };
       };
 

nixos/tests/oci-containers.nix

@@ -16,7 +16,7 @@ let
     makeTest {
       name = "oci-containers-${backend}";
 
-      meta.maintainers = lib.teams.serokell.members ++ (with lib.maintainers; [ benley ]);
+      meta.maintainers = with lib.maintainers; [ benley ];
 
       nodes = {
         ${backend} =

pkgs/applications/editors/vim/plugins/overrides.nix

@@ -2788,10 +2788,6 @@ assertNoAdditions {
     nvimSkipModules = [ "install_parsers" ];
   };
 
-  nvim-treesitter-endwise = super.nvim-treesitter-endwise.overrideAttrs {
-    dependencies = [ self.nvim-treesitter-legacy ];
-  };
-
   nvim-treesitter-pairs = super.nvim-treesitter-pairs.overrideAttrs {
     dependencies = [ self.nvim-treesitter-legacy ];
   };

pkgs/applications/editors/vscode/extensions/ms-azuretools.vscode-bicep/default.nix

@@ -25,7 +25,6 @@ vscode-utils.buildVscodeMarketplaceExtension {
     downloadPage = "https://marketplace.visualstudio.com/items?itemName=ms-azuretools.vscode-bicep";
     homepage = "https://github.com/Azure/bicep/tree/main/src/vscode-bicep";
     license = lib.licenses.mit;
-    teams = [ lib.teams.stridtech ];
   };
 }
 

pkgs/applications/networking/cluster/nixops/plugins/nixops-digitalocean.nix

@@ -6,7 +6,6 @@
   poetry-core,
   nixops,
   python-digitalocean,
-  pythonOlder,
 }:
 
 buildPythonPackage {
@@ -14,8 +13,6 @@ buildPythonPackage {
   version = "0.1.0-unstable-2022-08-14";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "nix-community";
     repo = "nixops-digitalocean";

pkgs/applications/video/obs-studio/plugins/advanced-scene-switcher/default.nix

@@ -36,13 +36,13 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "advanced-scene-switcher";
-  version = "1.32.5";
+  version = "1.32.6";
 
   src = fetchFromGitHub {
     owner = "WarmUpTill";
     repo = "SceneSwitcher";
     rev = version;
-    hash = "sha256-MoOakwxyDlhB4YFXWR5Q2jLb0k3wuj87tOO5f0Xy5Vg=";
+    hash = "sha256-BQnu7zRk1zOsEqFjmRrOeK/jE+rmnsB1ktW+OfH+L3I=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ac/acme-sh/package.nix

@@ -74,7 +74,6 @@ stdenv.mkDerivation rec {
       - Cron job notifications for renewal or error etc.
     '';
     license = lib.licenses.gpl3Only;
-    teams = [ lib.teams.serokell ];
     inherit (coreutils.meta) platforms;
     mainProgram = "acme.sh";
   };

pkgs/by-name/az/azure-cli/package.nix

@@ -480,7 +480,6 @@ py.pkgs.toPythonApplication (
       license = lib.licenses.mit;
       mainProgram = "az";
       maintainers = with lib.maintainers; [ katexochen ];
-      teams = [ lib.teams.stridtech ];
       platforms = lib.platforms.all;
     };
   }

pkgs/by-name/bi/bicep-lsp/package.nix

@@ -50,7 +50,6 @@ buildDotnetModule rec {
     homepage = "https://github.com/Azure/bicep/";
     changelog = "https://github.com/Azure/bicep/releases/tag/v${version}";
     license = lib.licenses.mit;
-    teams = [ lib.teams.stridtech ];
     platforms = lib.platforms.all;
     badPlatforms = [ "aarch64-linux" ];
   };

pkgs/by-name/bi/bicep/package.nix

@@ -57,7 +57,6 @@ buildDotnetModule rec {
     changelog = "https://github.com/Azure/bicep/releases/tag/v${version}";
     license = lib.licenses.mit;
     maintainers = [ ];
-    teams = [ lib.teams.stridtech ];
     mainProgram = "bicep";
   };
 }

pkgs/by-name/ce/ceph/old-python-packages/cryptography.nix

@@ -34,7 +34,6 @@ buildPythonPackage rec {
   pname = "cryptography";
   version = "40.0.1"; # Also update the hash in vectors.nix
   format = "setuptools";
-  disabled = pythonOlder "3.6";
 
   src = fetchPypi {
     inherit pname version;

pkgs/by-name/ce/ceph/old-python-packages/trustme.nix

@@ -7,7 +7,6 @@
   idna,
   pyopenssl,
   pytestCheckHook,
-  pythonOlder,
   service-identity,
 }:
 
@@ -16,8 +15,6 @@ buildPythonPackage rec {
   version = "1.1.0";
   format = "setuptools";
 
-  disabled = pythonOlder "3.8";
-
   src = fetchPypi {
     inherit pname version;
     hash = "sha256-U3Wtf7QnB0vslWWS4NTuKkz02miTThukvPQhcSa8ReY=";

pkgs/by-name/co/coc-rust-analyzer/package.nix

@@ -7,13 +7,13 @@
 
 buildNpmPackage {
   pname = "coc-rust-analyzer";
-  version = "0-unstable-2026-01-01";
+  version = "0-unstable-2026-01-06";
 
   src = fetchFromGitHub {
     owner = "fannheyward";
     repo = "coc-rust-analyzer";
-    rev = "ffb3c8af18c7c86e05f335d2a614d1a88bd61a3e";
-    hash = "sha256-8d4GCWpVSwlGn2HSB56/Nll4U+YPx4aupRBxkOUUAr8=";
+    rev = "35615c7feafbc8005e160e7609888a97f5d3b031";
+    hash = "sha256-Kj3gUKFsfgUVVWuz7nuc7djRvfyvXc3wkHt1DxYIw30=";
   };
 
   npmDepsHash = "sha256-PgMgpVoKmhuqtSV73wSdqdQ5Bt5AeRwbn71mIulBh8Y=";

pkgs/by-name/co/code/package.nix

@@ -11,18 +11,18 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "code";
-  version = "0.6.5";
+  version = "0.6.45";
 
   src = fetchFromGitHub {
     owner = "just-every";
     repo = "code";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-X+YwTXla6EePXLhMgokiZkgkm9P/rkl2+2XC27tqAEk=";
+    hash = "sha256-Ycl+r0fcopsWhT2QsRYPKWGRcXRyylgUalFBOgFF800=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/code-rs";
 
-  cargoHash = "sha256-oNrBwI0klqQtGTMhPzVvOqMqvdexEVkZpLD6ssXqQX8=";
+  cargoHash = "sha256-Yo8g9GavX9lrIHGoTs8YzMJkVyABflaRa3ni0xf7EvQ=";
 
   nativeBuildInputs = lib.optionals stdenvNoCC.hostPlatform.isLinux [
     pkg-config
@@ -32,7 +32,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     openssl
   ];
 
-  CODE_VERSION = finalAttrs.version;
+  env.CODE_VERSION = finalAttrs.version;
 
   cargoBuildFlags = [
     "--bin"

pkgs/by-name/co/complgen/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "complgen";
-  version = "0.6.0";
+  version = "0.6.1";
 
   src = fetchFromGitHub {
     owner = "adaszko";
     repo = "complgen";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-iwbU3DOzyPm3ZoyCRsgBZcSBSg48SsAMS/W4o5e3Gfs=";
+    hash = "sha256-fmnnRG3Vj7oFNJTsnK6KeFnimR9bJ0QDvrJI1Dg6V00=";
   };
 
-  cargoHash = "sha256-BGnTZxDv971s0h87RcOowoOpNdpwCx7FLcQNipPCTvc=";
+  cargoHash = "sha256-zueRWnIiANtlZvOwdh22zXumq4Bmq0/FN6vTU5w/XDk=";
 
   meta = {
     changelog = "https://github.com/adaszko/complgen/blob/v${finalAttrs.version}/CHANGELOG.md";

pkgs/by-name/da/daemontools/package.nix

@@ -42,7 +42,7 @@ stdenv.mkDerivation rec {
 
     cd daemontools-${version}
 
-    sed -i -e '1 s_$_ -include ${glibc.dev}/include/errno.h_' src/conf-cc
+    sed -i -e '1 s_$_ -include ${glibc.dev}/include/errno.h -std=gnu17_' src/conf-cc
 
     substituteInPlace src/Makefile \
       --replace-fail '/bin/sh' '${bash}/bin/bash -oxtrace'

pkgs/by-name/da/danger-gitlab/package.nix

@@ -15,7 +15,6 @@ bundlerApp {
     description = "Gem that exists to ensure all dependencies are set up for Danger with GitLab";
     homepage = "https://github.com/danger/danger-gitlab-gem";
     license = lib.licenses.mit;
-    teams = with lib.teams; [ serokell ];
     mainProgram = "danger";
   };
 }

pkgs/by-name/de/deploy-rs/package.nix

@@ -25,7 +25,6 @@ rustPlatform.buildRustPackage {
       teutat3s
       jk
     ];
-    teams = [ lib.teams.serokell ];
     mainProgram = "deploy";
   };
 }

pkgs/by-name/df/dfmt/package.nix

@@ -14,7 +14,6 @@ buildPythonApplication rec {
   pname = "dfmt";
   version = "1.2.0";
   format = "setuptools";
-  disabled = pythonOlder "3.7";
 
   src = fetchPypi {
     inherit pname version;

pkgs/by-name/dj/djbdns/package.nix

@@ -39,7 +39,7 @@ stdenv.mkDerivation {
   ];
 
   postPatch = ''
-    echo gcc -O2 -include ${glibc.dev}/include/errno.h > conf-cc
+    echo gcc -O2 -include ${glibc.dev}/include/errno.h -std=gnu17 > conf-cc
     echo $out > conf-home
     # djbdns ships with an outdated list of root servers
     awk '/^.?.ROOT-SERVERS.NET/ { print $4 }' ${dns-root-data}/root.hints > dnsroots.global

pkgs/by-name/dn/dns-collector/package.nix

@@ -7,13 +7,13 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "dns-collector";
-  version = "1.14.0";
+  version = "2.0.0";
 
   src = fetchFromGitHub {
     owner = "dmachard";
     repo = "dns-collector";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-J6h/td5vCZwVruamZziIxRhAOdLdlv3Aupz9m0bExU4=";
+    hash = "sha256-d6FFxVGolXfZF4Ulklxg8u26DdV9yHeDUf2IEEryELw=";
   };
   subPackages = [ "." ];
 
@@ -27,7 +27,7 @@ buildGoModule (finalAttrs: {
     "-X github.com/prometheus/common/version.Version=${finalAttrs.version}"
   ];
 
-  vendorHash = "sha256-BQLlEY9CJDwJRbzB5kflBwwxcWMLbaqgWUtz2p3CJsE=";
+  vendorHash = "sha256-4gk7LwRDrTiMCrR6JJpdSvCmNa7wQ5Hk06OGd6/SACc=";
 
   passthru.updateScript = nix-update-script { };
 

pkgs/by-name/ex/expresslrs-configurator/package.nix

@@ -0,0 +1,87 @@
+{
+  lib,
+  stdenv,
+  fetchzip,
+  makeWrapper,
+  makeDesktopItem,
+  copyDesktopItems,
+  electron,
+  asar,
+  git,
+}:
+
+let
+  pname = "expresslrs-configurator";
+  version = "1.7.11";
+  installPath = "share/${pname}";
+  resourcesPath = "${installPath}/resources";
+in
+stdenv.mkDerivation {
+  inherit pname version;
+
+  src = fetchzip {
+    url = "https://github.com/ExpressLRS/ExpressLRS-Configurator/releases/download/v${version}/${pname}-${version}.zip";
+    stripRoot = false;
+    hash = "sha256-BIbJzNWjYFbbwCEWoym3g6XBpQGi2owbf2XsQiXwHmw=";
+  };
+
+  nativeBuildInputs = [
+    makeWrapper
+    copyDesktopItems
+    asar
+  ];
+
+  desktopItems = [
+    (makeDesktopItem {
+      name = pname;
+      exec = pname;
+      icon = pname;
+      desktopName = "ExpressLRS Configurator";
+      comment = "Configuration tool for ExpressLRS";
+      categories = [
+        "Utility"
+        "Development"
+      ];
+    })
+  ];
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/${installPath} $out/bin $out/share/icons/hicolor/512x512/apps
+    cp -r $src/locales $src/resources $out/${installPath}/
+    chmod -R u+w $out/${resourcesPath}
+
+    # broken symlink
+    rm -f $out/${resourcesPath}/app.asar.unpacked/node_modules/@serialport/bindings-cpp/build/node_gyp_bins/python3
+    touch $out/${resourcesPath}/app.asar.unpacked/node_modules/@serialport/bindings-cpp/build/node_gyp_bins/python3
+
+    # patch asar absolute paths
+    asar extract $out/${resourcesPath}/app.asar $TMPDIR/app
+    substituteInPlace $TMPDIR/app/dist/main/main.js \
+      --replace-fail 'process.resourcesPath' "'$out/${resourcesPath}'" \
+      --replace-fail '__dirname,"../../devices"' "'$out/${resourcesPath}/devices'" \
+      --replace-fail '__dirname,"../../assets"' "'$out/${resourcesPath}/assets'" \
+      --replace-fail '__dirname,"../../dependencies"' "'$out/${resourcesPath}/dependencies'" \
+      --replace-fail '__dirname,"../","i18n","locales"' "'$out/${resourcesPath}/i18n/locales'" \
+      --replace-fail '__dirname,"../../.erb/dll/preload.js"' '__dirname,"preload.js"'
+    asar pack $TMPDIR/app $out/${resourcesPath}/app.asar
+
+    makeWrapper '${lib.getExe electron}' "$out/bin/${pname}" \
+      --add-flags "$out/${resourcesPath}/app.asar" \
+      --prefix PATH : ${lib.makeBinPath [ git ]} \
+      --set ELECTRON_OVERRIDE_DIST_PATH "${electron}/lib/electron" \
+      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto}}"
+
+    runHook postInstall
+  '';
+
+  meta = {
+    description = "Cross-platform build & configuration tool for ExpressLRS";
+    homepage = "https://github.com/ExpressLRS/ExpressLRS-Configurator";
+    license = lib.licenses.gpl3Plus;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ asamonik ];
+    mainProgram = pname;
+  };
+}

pkgs/by-name/fa/factoriolab/package.nix

@@ -10,13 +10,13 @@
 }:
 buildNpmPackage rec {
   pname = "factoriolab";
-  version = "3.17.5";
+  version = "3.18.0";
 
   src = fetchFromGitHub {
     owner = "factoriolab";
     repo = "factoriolab";
     tag = "v${version}";
-    hash = "sha256-Ra3xnOCIzx5oCeMU8kARcup+wsxknePBO/w1xGbwgT8=";
+    hash = "sha256-Id0o+Wxt0oNtik3lMHuvdm99HkuPY1XhE5yPCdkR8L4=";
     fetchLFS = true;
   };
   buildInputs = [ vips ];

pkgs/by-name/fa/faust2sndfile/package.nix

@@ -0,0 +1,26 @@
+{
+  faust,
+  flac,
+  lame,
+  libmpg123,
+  libogg,
+  libopus,
+  libsndfile,
+  libvorbis,
+}:
+
+faust.wrapWithBuildEnv {
+
+  baseName = "faust2sndfile";
+
+  propagatedBuildInputs = [
+    flac
+    lame
+    libmpg123
+    libogg
+    libopus
+    libsndfile
+    libvorbis
+  ];
+
+}

pkgs/by-name/fi/firezone-headless-client/package.nix

@@ -6,15 +6,15 @@
 }:
 rustPlatform.buildRustPackage rec {
   pname = "firezone-headless-client";
-  version = "1.5.4";
+  version = "1.5.5";
   src = fetchFromGitHub {
     owner = "firezone";
     repo = "firezone";
     tag = "headless-client-${version}";
-    hash = "sha256-dVqZs5Xie9lc3F6wVMdxRHeoM7y/e9TvwjzfikenQ6w=";
+    hash = "sha256-Lo5iUXlpAecglr0uohOdsefeaDQZor2YoF0O99CxvEo=";
   };
 
-  cargoHash = "sha256-J2IqqFBuoTkbO0nMJbY680G2HTAtC1To/nMra2PCopY=";
+  cargoHash = "sha256-1e2uqxZFDbtcQREB0s2jxfSFgs/hnPxTlUGFeK5L9yw=";
   sourceRoot = "${src.name}/rust";
   buildAndTestSubdir = "headless-client";
   env.RUSTFLAGS = "--cfg system_certs";

pkgs/by-name/ki/kikit/default.nix

@@ -5,7 +5,6 @@
   fetchFromGitHub,
   bats,
   buildPythonApplication,
-  pythonOlder,
   callPackage,
   kicad,
   numpy,
@@ -30,8 +29,6 @@ buildPythonApplication rec {
   version = "1.7.2";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "yaqwsx";
     repo = "KiKit";

pkgs/by-name/li/libmediainfo/package.nix

@@ -14,11 +14,11 @@
 
 stdenv.mkDerivation rec {
   pname = "libmediainfo";
-  version = "25.09";
+  version = "25.10";
 
   src = fetchurl {
     url = "https://mediaarea.net/download/source/libmediainfo/${version}/libmediainfo_${version}.tar.xz";
-    hash = "sha256-hWLo6gPir4veJ/ZteaD1c4WbjxMZPsEVq/EPc1sxOhI=";
+    hash = "sha256-rRPZeXsEbOOdDGWm+B0q7yQpc0whhlpqTFksfAHySd0=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ma/matrix-synapse-unwrapped/plugins/s3-storage-provider.nix

@@ -5,7 +5,6 @@
   fetchFromGitHub,
   humanize,
   matrix-synapse-unwrapped,
-  pythonOlder,
   tqdm,
   twisted,
   psycopg2,
@@ -16,8 +15,6 @@ buildPythonPackage rec {
   version = "1.6.0";
   format = "setuptools";
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "matrix-org";
     repo = "synapse-s3-storage-provider";

pkgs/by-name/ni/nix-heuristic-gc/package.nix

@@ -9,13 +9,13 @@
 }:
 python3Packages.buildPythonPackage rec {
   pname = "nix-heuristic-gc";
-  version = "0.7.1";
+  version = "0.7.2";
   format = "setuptools";
   src = fetchFromGitHub {
     owner = "risicle";
     repo = "nix-heuristic-gc";
     tag = "v${version}";
-    hash = "sha256-x3rGD1QbRyknL0I7qlfq0mlshJQP4icKRFpSjRyS3Ro=";
+    hash = "sha256-6qZG3bbiPu3lad1YHy7oyZ4uPu7sagxlE6qcC+irjII=";
   };
 
   # NIX_SYSTEM suggested at

pkgs/by-name/oa/oauth2-proxy/package.nix

@@ -28,7 +28,6 @@ buildGoModule rec {
     description = "Reverse proxy that provides authentication with Google, Github, or other providers";
     homepage = "https://github.com/oauth2-proxy/oauth2-proxy/";
     license = lib.licenses.mit;
-    teams = [ lib.teams.serokell ];
     mainProgram = "oauth2-proxy";
   };
 }

pkgs/by-name/oc/octodns/providers/bind/package.nix

@@ -4,7 +4,6 @@
   fetchFromGitHub,
   octodns,
   pytestCheckHook,
-  pythonOlder,
   dnspython,
   setuptools,
 }:
@@ -14,8 +13,6 @@ buildPythonPackage rec {
   version = "1.0.1";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "octodns";
     repo = "octodns-bind";

pkgs/by-name/oc/octodns/providers/cloudflare/package.nix

@@ -4,7 +4,6 @@
   fetchFromGitHub,
   octodns,
   pytestCheckHook,
-  pythonOlder,
   requests,
   requests-mock,
   setuptools,
@@ -15,8 +14,6 @@ buildPythonPackage rec {
   version = "1.0.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "octodns";
     repo = "octodns-cloudflare";

pkgs/by-name/oc/octodns/providers/gandi/package.nix

@@ -4,7 +4,6 @@
   fetchFromGitHub,
   octodns,
   pytestCheckHook,
-  pythonOlder,
   requests,
   requests-mock,
   setuptools,
@@ -15,8 +14,6 @@ buildPythonPackage rec {
   version = "1.1.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "octodns";
     repo = "octodns-gandi";

pkgs/by-name/oc/octodns/providers/hetzner/package.nix

@@ -4,7 +4,6 @@
   fetchFromGitHub,
   octodns,
   pytestCheckHook,
-  pythonOlder,
   requests,
   requests-mock,
   setuptools,
@@ -15,8 +14,6 @@ buildPythonPackage rec {
   version = "1.0.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "octodns";
     repo = "octodns-hetzner";

pkgs/by-name/oc/octodns/providers/powerdns/package.nix

@@ -4,7 +4,6 @@
   fetchFromGitHub,
   octodns,
   pytestCheckHook,
-  pythonOlder,
   requests,
   requests-mock,
   setuptools,
@@ -15,8 +14,6 @@ buildPythonPackage rec {
   version = "1.0.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "octodns";
     repo = "octodns-powerdns";

pkgs/by-name/op/openapi-tui/package.nix

@@ -3,6 +3,7 @@
   rustPlatform,
   fetchFromGitHub,
   pkg-config,
+  oniguruma,
   openssl,
 }:
 
@@ -19,10 +20,17 @@ rustPlatform.buildRustPackage rec {
 
   cargoHash = "sha256-911ARjYvTNqLVVUWxATbtiKXOC9AqalFvDvp/qAef1Q=";
 
-  env.OPENSSL_NO_VENDOR = true;
+  # Do not vendor Oniguruma
+  env = {
+    RUSTONIG_SYSTEM_LIBONIG = true;
+    OPENSSL_NO_VENDOR = true;
+  };
 
   nativeBuildInputs = [ pkg-config ];
-  buildInputs = [ openssl ];
+  buildInputs = [
+    openssl
+    oniguruma
+  ];
 
   meta = {
     description = "Terminal UI to list, browse and run APIs defined with openapi spec";

pkgs/by-name/pk/pkgsite/package.nix

@@ -7,13 +7,13 @@
 
 buildGoModule {
   pname = "pkgsite";
-  version = "0-unstable-2026-01-01";
+  version = "0-unstable-2026-01-07";
 
   src = fetchFromGitHub {
     owner = "golang";
     repo = "pkgsite";
-    rev = "3a74f05acd7522e74e16a35bdf80301dae44cfc9";
-    hash = "sha256-1YTCjaPf6t0Tn/u1ERBxoHeXAIMO4wsPIcODBPJjrlM=";
+    rev = "a6a3e5202c579664010c2776ca0b3d1a6d035b69";
+    hash = "sha256-xUN/aHcAzA2DDzitZV+kEVfGgADOSCsY0zJLiRdTAQg=";
   };
 
   vendorHash = "sha256-rruIjtXtFZ0MOJkWx4n+7apKGv4Pq6GrOWoQ3o+8KFs=";

pkgs/by-name/po/poetry/unwrapped.nix

@@ -40,8 +40,6 @@ buildPythonPackage rec {
   version = "2.2.1";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "python-poetry";
     repo = "poetry";

pkgs/by-name/pu/pulumi/extra/mk-pulumi-package.nix

@@ -51,7 +51,6 @@ let
     python3Packages.callPackage (
       {
         buildPythonPackage,
-        pythonOlder,
         parver,
         pip,
         pulumi,
@@ -67,8 +66,6 @@ let
           ;
         format = "pyproject";
 
-        disabled = pythonOlder "3.7";
-
         sourceRoot = "${src.name}/sdk/python";
 
         propagatedBuildInputs = [

pkgs/by-name/pw/pwgen-secure/package.nix

@@ -14,7 +14,6 @@ buildPythonApplication rec {
   pyproject = true;
 
   # it needs `secrets` which was introduced in 3.6
-  disabled = pythonOlder "3.6";
 
   # GH is newer than Pypi and contains both library *and* the actual program
   # whereas Pypi only has the library

pkgs/by-name/qo/qownnotes/package.nix

@@ -19,11 +19,11 @@
 stdenv.mkDerivation (finalAttrs: {
   pname = "qownnotes";
   appname = "QOwnNotes";
-  version = "26.1.4";
+  version = "26.1.6";
 
   src = fetchurl {
     url = "https://github.com/pbek/QOwnNotes/releases/download/v${finalAttrs.version}/qownnotes-${finalAttrs.version}.tar.xz";
-    hash = "sha256-+YDDbG1M/po1ln/vpzoWcj8wD5302o1kjv9b6UWZsNU=";
+    hash = "sha256-qytiwlnuQvGljhgzLm7WpyA3E8VMpbhcKT7n5TcL2P0=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/ra/radicale/package.nix

@@ -7,14 +7,14 @@
 
 python3.pkgs.buildPythonApplication rec {
   pname = "radicale";
-  version = "3.5.10";
+  version = "3.6.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Kozea";
     repo = "Radicale";
     tag = "v${version}";
-    hash = "sha256-tLBWPWkSGI7vQIGo9FIwCEgHWPlrs1q70CsAWQn9sEs=";
+    hash = "sha256-FzCNmmlQeka+Z7h1Dp631coKPF7gc0LOWnyca994bgs=";
   };
 
   build-system = with python3.pkgs; [
@@ -25,14 +25,15 @@ python3.pkgs.buildPythonApplication rec {
     with python3.pkgs;
     [
       defusedxml
-      passlib
+      libpass
       vobject
+      packaging
       pika
       requests
-      pytz # https://github.com/Kozea/Radicale/issues/816
       ldap3
     ]
-    ++ passlib.optional-dependencies.bcrypt;
+    ++ libpass.optional-dependencies.argon2
+    ++ libpass.optional-dependencies.bcrypt;
 
   __darwinAllowLocalNetworking = true;
 

pkgs/by-name/re/regclient/package.nix

@@ -18,16 +18,16 @@ in
 
 buildGoModule rec {
   pname = "regclient";
-  version = "0.9.2";
+  version = "0.11.1";
   tag = "v${version}";
 
   src = fetchFromGitHub {
     owner = "regclient";
     repo = "regclient";
     rev = tag;
-    sha256 = "sha256-m7gN6Rpj/p726a3yG0dMSOL536N7KTKwiXbckcS67GM=";
+    sha256 = "sha256-7HfcwDb4BgpOxkjOau/QVs9x/U6Da5eh5rHB6W1NhwE=";
   };
-  vendorHash = "sha256-uWlZHQ2LKPdKBsct6t8ZPNk3MzrVzpm9+Ny51wYDZZA=";
+  vendorHash = "sha256-cNbHgb/yHF/ubhnWkyEQOjOz5qmircJJR8jDYj+d8bM=";
 
   outputs = [ "out" ] ++ bins;
 

pkgs/by-name/re/renovate/package.nix

@@ -16,13 +16,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "renovate";
-  version = "42.71.0";
+  version = "42.76.4";
 
   src = fetchFromGitHub {
     owner = "renovatebot";
     repo = "renovate";
     tag = finalAttrs.version;
-    hash = "sha256-35kAAvtK1wrd4ydsuinhFHxLDOwY3OzuXQxcxY9uKXE=";
+    hash = "sha256-kmQzhmXmrVr3yDecjq2BxGkORgYWnRUi+p/TGd3we7Q=";
   };
 
   postPatch = ''
@@ -44,7 +44,7 @@ stdenv.mkDerivation (finalAttrs: {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_10;
     fetcherVersion = 2;
-    hash = "sha256-ryAmVtU3bZEmgIAowQQJyK963zKiS31gC3lR0f+q2tc=";
+    hash = "sha256-KcZ4MGo/5hZ6DJ/YLaHzd2mp/PEb9a3AlujDMgqHm28=";
   };
 
   env.COREPACK_ENABLE_STRICT = 0;

pkgs/by-name/ro/rocketchat-desktop/package.nix

@@ -20,13 +20,13 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "rocketchat-desktop";
-  version = "4.10.0";
+  version = "4.11.1";
 
   src = fetchFromGitHub {
     owner = "RocketChat";
     repo = "Rocket.Chat.Electron";
     tag = version;
-    hash = "sha256-ZEjhYjMcCA2ABNfcwe7JbYCoTBHr+geyMSSh6ceBt5g=";
+    hash = "sha256-JJb4VALCzw2QjiyBc4E9KUMMj1FvZL0SSJvyoEg7Olc=";
   };
 
   # This might need to be updated between releases.

pkgs/by-name/sk/sketchybar-app-font/package.nix

@@ -7,6 +7,7 @@
   stdenvNoCC,
   nodejs,
   nix-update-script,
+  fetchpatch,
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "sketchybar-app-font";
@@ -51,6 +52,15 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     runHook postInstall
   '';
 
+  patches = [
+    # TODO: remove on next release
+    (fetchpatch {
+      name = "lua-regression-patch";
+      url = "https://github.com/kvndrsslr/sketchybar-app-font/commit/f6735ef0acacc700b84b31b2cc3f430bf0f01f6e.patch";
+      hash = "sha256-Fj3oqRdEvRcM0Bz6E97lN02H+nRx5vonW1p2jcSig7s=";
+    })
+  ];
+
   passthru.updateScript = nix-update-script { };
 
   meta = {

pkgs/by-name/sl/slidev-cli/package.nix

@@ -10,13 +10,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "slidev-cli";
-  version = "52.11.1";
+  version = "52.11.2";
 
   src = fetchFromGitHub {
     owner = "slidevjs";
     repo = "slidev";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-AYU36NsALC4CCZVr+1PmspX6RKZkxI2xpLNUSccEPwY=";
+    hash = "sha256-dAGHcnHNSYtIQvcrn/jRbA2GF7YBJkYXbQbjkGtTUa0=";
   };
 
   pnpmWorkspaces = [ "@slidev/cli..." ];
@@ -29,7 +29,7 @@ stdenv.mkDerivation (finalAttrs: {
       pnpmWorkspaces
       ;
     fetcherVersion = 3;
-    hash = "sha256-nZPyqP4NruVIzONHIT6hx1Px9p8mHTK9Xt5wHEcpwBM=";
+    hash = "sha256-rHqrtK6eIqQ6SoZA1CtuUwDbHSZ9HSHikMdNrTtojHs=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/sq/sqruff/package.nix

@@ -8,16 +8,16 @@
 }:
 rustPlatform.buildRustPackage rec {
   pname = "sqruff";
-  version = "0.29.3";
+  version = "0.32.0";
 
   src = fetchFromGitHub {
     owner = "quarylabs";
     repo = "sqruff";
     tag = "v${version}";
-    hash = "sha256-bJmkHOACjdSXHE56okrIFERs1wK00XeyipdIFbRjIFI=";
+    hash = "sha256-/hMeYhiz2W1zu68LfZmmTK41nV5nJSLMZFQ4HKp0BSw=";
   };
 
-  cargoHash = "sha256-TxADMtapo6Pc4Z0MUkzkzUIrLnGa1DdZFzfTq4buF4g=";
+  cargoHash = "sha256-ytPLhC9qOcdA09xcQGwtUXUaD9QXn0bjyzgT4I/4xjw=";
 
   # Disable the `python` feature which doesn't work on Nix yet
   buildNoDefaultFeatures = true;
@@ -28,14 +28,17 @@ rustPlatform.buildRustPackage rec {
     substituteInPlace \
       crates/cli/tests/config_not_found.rs \
       crates/cli/tests/configure_rule.rs \
+      crates/cli/tests/dialect_override.rs \
       crates/cli/tests/fix_parse_errors.rs \
       crates/cli/tests/fix_return_code.rs \
+      crates/cli/tests/ignore_data_directory.rs \
+      crates/cli/tests/verbose_logging_ignore.rs \
       crates/cli/tests/ui_github.rs \
       crates/cli/tests/ui_json.rs \
       crates/cli/tests/ui.rs \
       --replace-fail \
-      'sqruff_path.push(format!("../../target/{}/sqruff", profile));' \
-      'sqruff_path.push(format!("../../target/${stdenv.hostPlatform.rust.cargoShortTarget}/{}/sqruff", profile));'
+      '"../../target/{}/sqruff"' \
+      '"../../target/${stdenv.hostPlatform.rust.cargoShortTarget}/{}/sqruff"'
   '';
 
   nativeCheckInputs = [ versionCheckHook ];
@@ -51,6 +54,9 @@ rustPlatform.buildRustPackage rec {
     changelog = "https://github.com/quarylabs/sqruff/releases/tag/${version}";
     license = lib.licenses.asl20;
     mainProgram = "sqruff";
-    maintainers = with lib.maintainers; [ hasnep ];
+    maintainers = with lib.maintainers; [
+      hasnep
+      pyrox0
+    ];
   };
 }

pkgs/by-name/tr/trilium-desktop/package.nix

@@ -15,7 +15,7 @@
 
 let
   pname = "trilium-desktop";
-  version = "0.101.1";
+  version = "0.101.3";
 
   triliumSource = os: arch: hash: {
     url = "https://github.com/TriliumNext/Trilium/releases/download/v${version}/TriliumNotes-v${version}-${os}-${arch}.zip";
@@ -26,10 +26,10 @@ let
   darwinSource = triliumSource "macos";
 
   # exposed like this for update.sh
-  x86_64-linux.hash = "sha256-6kz3V/pbC+7PnSk2t9LeUckfdCFQOBIhqMaJhKbnkJA=";
-  aarch64-linux.hash = "sha256-Ttw7sNUuWgc1kAOSwCm8tf0eCRSZmQM5gMf0eOZhpJQ=";
-  x86_64-darwin.hash = "sha256-fAQHPx1DZ4IRCbEjUZdCJFjqUtdVMDoxQxGP89Skf00=";
-  aarch64-darwin.hash = "sha256-vAF1AL2tkdikuvmR2HEQfWD/IcVaknLnoNERoElawuI=";
+  x86_64-linux.hash = "sha256-+Q0RfWa9wl0SEb5hiT9q9+careuLgZh7Bgpi8HuUFyA=";
+  aarch64-linux.hash = "sha256-r8CJBBiSzgNpZ5K3FKwKR84xqm90pxgBEj1NVbRfQos=";
+  x86_64-darwin.hash = "sha256-oprNyKQs8sPPrm67SyTxvlgGuRKJ0OcVJ4OGAsOT6rQ=";
+  aarch64-darwin.hash = "sha256-1VXeU+a1tw4fhlZX0r88BkIo/wXBvWEFBzloBjVvouk=";
 
   sources = {
     x86_64-linux = linuxSource "x64" x86_64-linux.hash;

pkgs/by-name/tr/trilium-server/package.nix

@@ -7,12 +7,12 @@
 }:
 
 let
-  version = "0.101.1";
+  version = "0.101.3";
 
   serverSource_x64.url = "https://github.com/TriliumNext/Trilium/releases/download/v${version}/TriliumNotes-Server-v${version}-linux-x64.tar.xz";
-  serverSource_x64.hash = "sha256-Auo0ONEoEO69Fp7sHduRfeCOazqNofvWg7Mp8qNtvMM=";
+  serverSource_x64.hash = "sha256-WbEv3B1axs8UI7uj4JRW0hQKEfkKfiLxtQWbNgiYeos=";
   serverSource_arm64.url = "https://github.com/TriliumNext/Trilium/releases/download/v${version}/TriliumNotes-Server-v${version}-linux-arm64.tar.xz";
-  serverSource_arm64.hash = "sha256-+RLRCTCfZyeN0t/uehdVxYS3qVAXYBmtUMTcztKMvhE=";
+  serverSource_arm64.hash = "sha256-k1mtBqw6BGqe7/kwoMl8N01BShVRTxMxnTxkYkwGbCc=";
 
   serverSource =
     if stdenv.hostPlatform.isx86_64 then

pkgs/by-name/tu/tutanota-desktop/package.nix

@@ -8,11 +8,11 @@
 
 appimageTools.wrapType2 rec {
   pname = "tutanota-desktop";
-  version = "317.251217.0";
+  version = "319.260107.1";
 
   src = fetchurl {
     url = "https://github.com/tutao/tutanota/releases/download/tutanota-desktop-release-${version}/tutanota-desktop-linux.AppImage";
-    hash = "sha256-XvMeH3WPTO1W7B0QhnJjbXz7k9ViJqOHBHxvopuDjSc=";
+    hash = "sha256-alp8+6tk+EfUSQZOjuQk83b3UPPkz9FnQblWcNyAWz4=";
   };
 
   extraPkgs = pkgs: [ pkgs.libsecret ];

pkgs/by-name/uc/uclibc-ng/package.nix

@@ -69,11 +69,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "uclibc-ng";
-  version = "1.0.55";
+  version = "1.0.56";
 
   src = fetchurl {
     url = "https://downloads.uclibc-ng.org/releases/${finalAttrs.version}/uClibc-ng-${finalAttrs.version}.tar.xz";
-    hash = "sha256-X386r92yygj7KVvkVWHAGIQHED10Rs/SZLm4Iv7T7S0=";
+    hash = "sha256-I8nKtUwRPgIPsgudwGvkpJVg33kbePy8LKiZpujyE90=";
   };
 
   configurePhase = ''

pkgs/by-name/va/vault-bin/package.nix

@@ -67,7 +67,6 @@ stdenv.mkDerivation rec {
       Chili-Man
       techknowlogick
     ];
-    teams = [ lib.teams.serokell ];
     mainProgram = "vault";
     platforms = [
       "x86_64-linux"

pkgs/by-name/va/vaultwarden/package.nix

@@ -19,13 +19,13 @@ in
 
 rustPlatform.buildRustPackage rec {
   pname = "vaultwarden";
-  version = "1.35.1";
+  version = "1.35.2";
 
   src = fetchFromGitHub {
     owner = "dani-garcia";
     repo = "vaultwarden";
     tag = version;
-    hash = "sha256-Lp3BDObJItscI1ifx8kFScSCaOajQMycYgGfpjVTL8I=";
+    hash = "sha256-3/Wpn84QHTQ8yoj4lR2J8iUj39elg9CKP4lkQjDVVT4=";
   };
 
   cargoHash = "sha256-XqZOy84L6Spzd1NZf4CzZsdhDhrYNoQGToad4giFJR8=";

pkgs/by-name/va/vaultwarden/webvault.nix

@@ -11,7 +11,7 @@
 
 buildNpmPackage rec {
   pname = "vaultwarden-webvault";
-  version = "2025.12.1.0";
+  version = "2025.12.1.1";
 
   # doesn't build with newer versions
   nodejs = nodejs_22;
@@ -20,7 +20,7 @@ buildNpmPackage rec {
     owner = "vaultwarden";
     repo = "vw_web_builds";
     tag = "v${version}";
-    hash = "sha256-s2PTB6ABN2qubwAjqWvO9jXndQxIHlI3qoTFBCRw8iU=";
+    hash = "sha256-/T0UPxGITxmTxl07NYufDnVat6EIC28oD+PEmmGaXXI=";
   };
 
   npmDepsHash = "sha256-tM+jAhM+/QB+o6wNJJMSZ/HTcWnPR0DyYItdhlVVyc4=";

pkgs/by-name/yo/youtrack/package.nix

@@ -44,7 +44,6 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   meta = {
     description = "Issue tracking and project management tool for developers";
     maintainers = [ lib.maintainers.leona ];
-    teams = [ lib.teams.serokell ];
     sourceProvenance = with lib.sourceTypes; [ binaryBytecode ];
     # https://www.jetbrains.com/youtrack/buy/license.html
     license = lib.licenses.unfree;

pkgs/by-name/yt/ytdl-sub/package.nix

@@ -9,14 +9,14 @@
 
 python3Packages.buildPythonApplication rec {
   pname = "ytdl-sub";
-  version = "2025.12.31.post5";
+  version = "2026.01.06";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "jmbannon";
     repo = "ytdl-sub";
     tag = version;
-    hash = "sha256-Ksm3aXqE+rhuc9nDN4uFqePrrIonvPTSz+J6WkxlnTg=";
+    hash = "sha256-VmnsCmjKRHES6QtebFLhUvRQHNa6nE8GpG1Asuq/sas=";
   };
 
   postPatch = ''

pkgs/by-name/ze/zerofs/package.nix

@@ -11,18 +11,18 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "zerofs";
-  version = "0.22.11";
+  version = "0.23.3";
 
   src = fetchFromGitHub {
     owner = "Barre";
     repo = "ZeroFS";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Gy3yZEQ7jLOed6ZmXfegd4YN+i20N5D1E2rleA52FDc=";
+    hash = "sha256-Y7uPewlElVdmoOPuPkxXX6SPnXpxOuYa82BftBz17Jg=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/zerofs";
 
-  cargoHash = "sha256-IUWzbZG/uHHjkxe/4moZ1mDUC+ROuxBZjQlAZcGutUc=";
+  cargoHash = "sha256-LmHF6nXfXzd4lQ9ZlZXv37QCej6aFZJmBvFL0XqOK3A=";
 
   nativeBuildInputs = [ cmake ];
 

pkgs/development/compilers/vyper/default.nix

@@ -10,7 +10,6 @@
   importlib-metadata,
   packaging,
   pycryptodome,
-  pythonOlder,
   recommonmark,
   setuptools-scm,
   sphinx,
@@ -33,8 +32,6 @@ buildPythonPackage rec {
   version = "0.4.3";
   pyproject = true;
 
-  disabled = pythonOlder "3.10";
-
   src = fetchPypi {
     inherit pname version;
     hash = "sha256-IqdXNldAHYo7xpDWXWt3QWgABxgJeMOgX5iS2zHV3PU=";

pkgs/development/haskell-modules/lib/compose.nix

@@ -482,10 +482,11 @@ rec {
     overrideCabal (drv: {
       src = "${sdistTarball pkg}/${pkg.pname}-${pkg.version}.tar.gz";
 
-      # Revising and jailbreaking the cabal file has been handled in sdistTarball
+      # Revising, jailbreaking and patches have been handled in sdistTarball
       revision = null;
       editedCabalFile = null;
       jailbreak = false;
+      patches = [ ];
     }) pkg;
 
   /*

pkgs/development/haskell-modules/make-package-set.nix

@@ -699,10 +699,18 @@ package-set { inherit pkgs lib callPackage; } self
   */
   buildFromCabalSdist =
     pkg:
-    haskellLib.overrideSrc {
-      src = self.cabalSdist { inherit (pkg) src; };
-      version = pkg.version;
-    } pkg;
+    haskellLib.overrideCabal
+      (_: {
+        # Patches are already applied by srcOnly above, so clear them
+        # to avoid double-application.
+        patches = [ ];
+      })
+      (
+        haskellLib.overrideSrc {
+          src = self.cabalSdist { src = pkgs.srcOnly pkg; };
+          version = pkg.version;
+        } pkg
+      );
 
   /*
     Modify a Haskell package to add shell completion scripts for the

pkgs/development/interpreters/python/tests/test_nix_pythonprefix/typeddep/default.nix

@@ -1,7 +1,6 @@
 {
   lib,
   buildPythonPackage,
-  pythonOlder,
 }:
 
 buildPythonPackage {
@@ -18,6 +17,4 @@ buildPythonPackage {
     ];
   };
 
-  disabled = pythonOlder "3.7";
-
 }

pkgs/development/libraries/openssl/default.nix

@@ -385,7 +385,6 @@ let
         license = lib.licenses.openssl;
         mainProgram = "openssl";
         maintainers = with lib.maintainers; [ thillux ];
-        teams = [ lib.teams.stridtech ];
         pkgConfigModules = [
           "libcrypto"
           "libssl"

pkgs/development/python-modules/accessible-pygments/default.nix

@@ -2,7 +2,6 @@
   lib,
   buildPythonPackage,
   fetchPypi,
-  pythonOlder,
   hatchling,
   hatch-vcs,
   hatch-fancy-pypi-readme,
@@ -14,8 +13,6 @@ buildPythonPackage rec {
   version = "0.0.5";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchPypi {
     pname = "accessible_pygments";
     inherit version;

pkgs/development/python-modules/accupy/default.nix

@@ -22,8 +22,6 @@ buildPythonPackage rec {
   version = "0.3.6";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "nschloe";
     repo = "accupy";

pkgs/development/python-modules/actdiag/default.nix

@@ -4,7 +4,6 @@
   buildPythonPackage,
   fetchFromGitHub,
   pytestCheckHook,
-  pythonOlder,
   setuptools,
 }:
 
@@ -13,8 +12,6 @@ buildPythonPackage rec {
   version = "3.0.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "blockdiag";
     repo = "actdiag";

pkgs/development/python-modules/acunetix/default.nix

@@ -3,7 +3,6 @@
   aiofiles,
   buildPythonPackage,
   fetchFromGitHub,
-  pythonOlder,
   requests,
 }:
 
@@ -12,8 +11,6 @@ buildPythonPackage {
   version = "0.0.7";
   format = "setuptools";
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "hikariatama";
     repo = "acunetix";

pkgs/development/python-modules/adafruit-board-toolkit/default.nix

@@ -2,7 +2,6 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
-  pythonOlder,
 
   # build-system
   setuptools-scm,
@@ -16,8 +15,6 @@ buildPythonPackage rec {
   version = "1.1.2";
   pyproject = true;
 
-  disabled = pythonOlder "3.5";
-
   src = fetchFromGitHub {
     owner = "adafruit";
     repo = "Adafruit_Board_Toolkit";

pkgs/development/python-modules/adafruit-io/default.nix

@@ -4,7 +4,6 @@
   fetchFromGitHub,
   paho-mqtt,
   pytestCheckHook,
-  pythonOlder,
   requests,
   setuptools-scm,
 }:
@@ -14,8 +13,6 @@ buildPythonPackage rec {
   version = "2.8.0";
   format = "setuptools";
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "adafruit";
     repo = "Adafruit_IO_Python";

pkgs/development/python-modules/adafruit-pureio/default.nix

@@ -2,7 +2,6 @@
   lib,
   buildPythonPackage,
   fetchPypi,
-  pythonOlder,
   setuptools-scm,
 }:
 
@@ -11,8 +10,6 @@ buildPythonPackage rec {
   version = "1.1.11";
   format = "pyproject";
 
-  disabled = pythonOlder "3.7";
-
   src = fetchPypi {
     pname = "Adafruit_PureIO";
     inherit version;

pkgs/development/python-modules/adax/default.nix

@@ -4,7 +4,6 @@
   async-timeout,
   buildPythonPackage,
   fetchFromGitHub,
-  pythonOlder,
 }:
 
 buildPythonPackage rec {
@@ -12,8 +11,6 @@ buildPythonPackage rec {
   version = "0.4.0";
   format = "setuptools";
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "Danielhiversen";
     repo = "pyadax";

pkgs/development/python-modules/adb-enhanced/default.nix

@@ -6,7 +6,6 @@
   setuptools,
   jdk11,
   psutil,
-  pythonOlder,
 }:
 
 buildPythonPackage rec {
@@ -14,8 +13,6 @@ buildPythonPackage rec {
   version = "2.5.24";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "ashishb";
     repo = "adb-enhanced";

pkgs/development/python-modules/adblock/default.nix

@@ -8,7 +8,6 @@
   pkg-config,
   openssl,
   publicsuffix-list,
-  pythonOlder,
   libiconv,
   pytestCheckHook,
   toml,
@@ -19,8 +18,6 @@ buildPythonPackage rec {
   version = "0.6.0";
   format = "pyproject";
 
-  disabled = pythonOlder "3.7";
-
   # Pypi only has binary releases
   src = fetchFromGitHub {
     owner = "ArniDagur";

pkgs/development/python-modules/add-trailing-comma/default.nix

@@ -3,7 +3,6 @@
   buildPythonPackage,
   fetchFromGitHub,
   pytestCheckHook,
-  pythonOlder,
   setuptools,
   tokenize-rt,
 }:
@@ -13,8 +12,6 @@ buildPythonPackage rec {
   version = "4.0.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.10";
-
   src = fetchFromGitHub {
     owner = "asottile";
     repo = "add-trailing-comma";

pkgs/development/python-modules/adext/default.nix

@@ -5,7 +5,6 @@
   setuptools-scm,
   alarmdecoder,
   pytestCheckHook,
-  pythonOlder,
 }:
 
 buildPythonPackage rec {
@@ -13,8 +12,6 @@ buildPythonPackage rec {
   version = "0.4.7";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "ajschmidt8";
     repo = "adext";

pkgs/development/python-modules/adjusttext/default.nix

@@ -5,7 +5,6 @@
   matplotlib,
   numpy,
   packaging,
-  pythonOlder,
   scipy,
   setuptools,
 }:
@@ -15,8 +14,6 @@ buildPythonPackage rec {
   version = "1.3.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "Phlya";
     repo = "adjusttext";

pkgs/development/python-modules/adlfs/default.nix

@@ -8,7 +8,6 @@
   buildPythonPackage,
   fetchFromGitHub,
   fsspec,
-  pythonOlder,
   setuptools,
   setuptools-scm,
 }:
@@ -18,8 +17,6 @@ buildPythonPackage rec {
   version = "2025.8.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.8";
-
   src = fetchFromGitHub {
     owner = "fsspec";
     repo = "adlfs";

pkgs/development/python-modules/advantage-air/default.nix

@@ -3,7 +3,6 @@
   aiohttp,
   buildPythonPackage,
   fetchPypi,
-  pythonOlder,
 }:
 
 buildPythonPackage rec {
@@ -11,8 +10,6 @@ buildPythonPackage rec {
   version = "0.4.4";
   format = "setuptools";
 
-  disabled = pythonOlder "3.6";
-
   src = fetchPypi {
     pname = "advantage_air";
     inherit version;

pkgs/development/python-modules/aenum/default.nix

@@ -5,7 +5,6 @@
   pyparsing,
   pytestCheckHook,
   pythonAtLeast,
-  pythonOlder,
   setuptools,
 }:
 
@@ -14,8 +13,6 @@ buildPythonPackage rec {
   version = "3.1.15";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchPypi {
     inherit pname version;
     hash = "sha256-jL12zRjE+HD/ObJChNPqAo++hzGljfOqWB5DTFdblVk=";

pkgs/development/python-modules/aesedb/default.nix

@@ -5,7 +5,6 @@
   colorama,
   fetchFromGitHub,
   pycryptodomex,
-  pythonOlder,
   setuptools,
   tqdm,
   unicrypto,
@@ -16,8 +15,6 @@ buildPythonPackage rec {
   version = "0.1.8";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "skelsec";
     repo = "aesedb";

pkgs/development/python-modules/aetcd/default.nix

@@ -8,7 +8,6 @@
   pytest-cov-stub,
   pytest-mock,
   pytestCheckHook,
-  pythonOlder,
   setuptools,
   setuptools-scm,
 }:
@@ -18,8 +17,6 @@ buildPythonPackage rec {
   version = "1.0.0a4";
   pyproject = true;
 
-  disabled = pythonOlder "3.8";
-
   src = fetchFromGitHub {
     owner = "martyanov";
     repo = "aetcd";

pkgs/development/python-modules/afdko/default.nix

@@ -15,7 +15,6 @@
   mutatormath,
   ninja,
   pytestCheckHook,
-  pythonOlder,
   runAllTests ? false,
   scikit-build,
   setuptools-scm,
@@ -29,8 +28,6 @@ buildPythonPackage (finalAttrs: {
   version = "4.0.2";
   pyproject = true;
 
-  disabled = pythonOlder "3.8";
-
   src = fetchFromGitHub {
     owner = "adobe-type-tools";
     repo = "afdko";

pkgs/development/python-modules/affine/default.nix

@@ -1,7 +1,6 @@
 {
   lib,
   buildPythonPackage,
-  pythonOlder,
   fetchPypi,
   flit-core,
   pytestCheckHook,
@@ -11,8 +10,6 @@ buildPythonPackage rec {
   pname = "affine";
   version = "2.4.0";
 
-  disabled = pythonOlder "3.7";
-
   format = "pyproject";
 
   src = fetchPypi {

pkgs/development/python-modules/afsapi/default.nix

@@ -6,7 +6,6 @@
   lxml,
   pytest-aiohttp,
   pytestCheckHook,
-  pythonOlder,
   setuptools-scm,
 }:
 
@@ -15,8 +14,6 @@ buildPythonPackage rec {
   version = "0.2.8";
   format = "setuptools";
 
-  disabled = pythonOlder "3.8";
-
   src = fetchFromGitHub {
     owner = "wlcrs";
     repo = "python-afsapi";

pkgs/development/python-modules/agate-excel/default.nix

@@ -7,7 +7,6 @@
   xlrd,
   olefile,
   pytestCheckHook,
-  pythonOlder,
 }:
 
 buildPythonPackage rec {
@@ -15,8 +14,6 @@ buildPythonPackage rec {
   version = "0.4.1";
   format = "setuptools";
 
-  disabled = pythonOlder "3.8";
-
   src = fetchPypi {
     inherit pname version;
     hash = "sha256-KEJmGMkHRxEebVZumD2Djx4vrmQeppcNessOnUs4QJE=";

pkgs/development/python-modules/aio-geojson-client/default.nix

@@ -9,7 +9,6 @@
   mock,
   pytest-asyncio,
   pytestCheckHook,
-  pythonOlder,
   setuptools,
 }:
 
@@ -18,8 +17,6 @@ buildPythonPackage rec {
   version = "0.21";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "exxamalte";
     repo = "python-aio-geojson-client";

pkgs/development/python-modules/aio-geojson-generic-client/default.nix

@@ -8,7 +8,6 @@
   geojson,
   pytest-asyncio,
   pytestCheckHook,
-  pythonOlder,
   pytz,
   setuptools,
 }:
@@ -18,8 +17,6 @@ buildPythonPackage rec {
   version = "0.5";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "exxamalte";
     repo = "python-aio-geojson-generic-client";

pkgs/development/python-modules/aio-geojson-geonetnz-quakes/default.nix

@@ -8,7 +8,6 @@
   pytest-asyncio,
   pytestCheckHook,
   pytz,
-  pythonOlder,
   setuptools,
 }:
 
@@ -17,8 +16,6 @@ buildPythonPackage rec {
   version = "0.17";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "exxamalte";
     repo = "python-aio-geojson-geonetnz-quakes";

pkgs/development/python-modules/aio-geojson-geonetnz-volcano/default.nix

@@ -10,7 +10,6 @@
   pytest-xdist,
   pytestCheckHook,
   pytz,
-  pythonOlder,
   setuptools,
 }:
 
@@ -19,8 +18,6 @@ buildPythonPackage rec {
   version = "0.10";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "exxamalte";
     repo = "python-aio-geojson-geonetnz-volcano";

pkgs/development/python-modules/aio-geojson-nsw-rfs-incidents/default.nix

@@ -7,7 +7,6 @@
   fetchFromGitHub,
   pytest-asyncio,
   pytestCheckHook,
-  pythonOlder,
   pytz,
   setuptools,
 }:
@@ -17,8 +16,6 @@ buildPythonPackage rec {
   version = "0.8";
   pyproject = true;
 
-  disabled = pythonOlder "3.8";
-
   src = fetchFromGitHub {
     owner = "exxamalte";
     repo = "python-aio-geojson-nsw-rfs-incidents";

pkgs/development/python-modules/aio-geojson-usgs-earthquakes/default.nix

@@ -8,7 +8,6 @@
   pytest-asyncio,
   pytestCheckHook,
   pytz,
-  pythonOlder,
   setuptools,
 }:
 
@@ -17,8 +16,6 @@ buildPythonPackage rec {
   version = "0.4";
   pyproject = true;
 
-  disabled = pythonOlder "3.8";
-
   src = fetchFromGitHub {
     owner = "exxamalte";
     repo = "python-aio-geojson-usgs-earthquakes";

pkgs/development/python-modules/aio-georss-client/default.nix

@@ -9,7 +9,6 @@
   mock,
   pytest-asyncio,
   pytestCheckHook,
-  pythonOlder,
   requests,
   setuptools,
   xmltodict,
@@ -20,8 +19,6 @@ buildPythonPackage rec {
   version = "0.14";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "exxamalte";
     repo = "python-aio-georss-client";

pkgs/development/python-modules/aio-georss-gdacs/default.nix

@@ -7,7 +7,6 @@
   pytest-asyncio,
   pytestCheckHook,
   python-dateutil,
-  pythonOlder,
   setuptools,
 }:
 
@@ -16,8 +15,6 @@ buildPythonPackage rec {
   version = "0.10";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "exxamalte";
     repo = "python-aio-georss-gdacs";

pkgs/development/python-modules/aioairzone/default.nix

@@ -6,16 +6,16 @@
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "aioairzone";
-  version = "1.0.4";
+  version = "1.0.5";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "Noltari";
     repo = "aioairzone";
-    tag = version;
-    hash = "sha256-dVnjBhb2gWP0DIYONoJNrd/an5PTrNa1ldSi8Ip9UFs=";
+    tag = finalAttrs.version;
+    hash = "sha256-mYCArILj+B4eXdmK8hPAQP2/QYwDoZcYGGhy3p+VABQ=";
   };
 
   build-system = [ setuptools ];
@@ -30,8 +30,8 @@ buildPythonPackage rec {
   meta = {
     description = "Module to control AirZone devices";
     homepage = "https://github.com/Noltari/aioairzone";
-    changelog = "https://github.com/Noltari/aioairzone/releases/tag/${src.tag}";
+    changelog = "https://github.com/Noltari/aioairzone/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ fab ];
   };
-}
+})

pkgs/development/python-modules/aioamqp/default.nix

@@ -3,7 +3,6 @@
   buildPythonPackage,
   fetchFromGitHub,
   pamqp,
-  pythonOlder,
   setuptools,
 }:
 
@@ -12,8 +11,6 @@ buildPythonPackage rec {
   version = "0.15.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchFromGitHub {
     owner = "Polyconseil";
     repo = "aioamqp";

pkgs/development/python-modules/aioapcaccess/default.nix

@@ -4,7 +4,6 @@
   fetchFromGitHub,
   pytest-asyncio,
   pytestCheckHook,
-  pythonOlder,
   setuptools,
   setuptools-scm,
 }:
@@ -14,8 +13,6 @@ buildPythonPackage rec {
   version = "1.0.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.9";
-
   src = fetchFromGitHub {
     owner = "yuxincs";
     repo = "aioapcaccess";

pkgs/development/python-modules/aioapns/default.nix

@@ -5,7 +5,6 @@
   h2,
   pyjwt,
   pyopenssl,
-  pythonOlder,
   setuptools,
 }:
 
@@ -14,8 +13,6 @@ buildPythonPackage rec {
   version = "4.0";
   pyproject = true;
 
-  disabled = pythonOlder "3.7";
-
   src = fetchPypi {
     inherit pname version;
     hash = "sha256-NxX6q/P6bAJA52N/RCfYjQiv3M6w3PuVbG0JtvSUJ/g=";