Merge branch 'master' into staging-next

nixos/modules/services/misc/llama-cpp.nix

@@ -8,6 +8,12 @@
 
 let
   cfg = config.services.llama-cpp;
+
+  modelsPresetFile =
+    if cfg.modelsPreset != null then
+      pkgs.writeText "llama-models.ini" (lib.generators.toINI { } cfg.modelsPreset)
+    else
+      null;
 in
 {
 
@@ -32,6 +38,32 @@ in
         default = null;
       };
 
+      modelsPreset = lib.mkOption {
+        type = lib.types.nullOr (lib.types.attrsOf lib.types.attrs);
+        default = null;
+        description = ''
+          Models preset configuration as a Nix attribute set.
+          This is converted to an INI file and passed to llama-server via --model-preset.
+          See llama-server documentation for available options.
+        '';
+        example = lib.literalExpression ''
+          {
+            "Qwen3-Coder-Next" = {
+              hf-repo = "unsloth/Qwen3-Coder-Next-GGUF";
+              hf-file = "Qwen3-Coder-Next-UD-Q4_K_XL.gguf";
+              alias = "unsloth/Qwen3-Coder-Next";
+              fit = "on";
+              seed = "3407";
+              temp = "1.0";
+              top-p = "0.95";
+              min-p = "0.01";
+              top-k = "40";
+              jinja = "on";
+            };
+          }
+        '';
+      };
+
       extraFlags = lib.mkOption {
         type = lib.types.listOf lib.types.str;
         description = "Extra flags passed to llama-cpp-server.";
@@ -77,6 +109,10 @@ in
       serviceConfig = {
         Type = "idle";
         KillSignal = "SIGINT";
+        StateDirectory = "llama-cpp";
+        CacheDirectory = "llama-cpp";
+        WorkingDirectory = "/var/lib/llama-cpp";
+        Environment = [ "LLAMA_CACHE=/var/cache/llama-cpp" ];
         ExecStart =
           let
             args = [
@@ -93,6 +129,10 @@ in
               "--models-dir"
               cfg.modelsDir
             ]
+            ++ lib.optionals (cfg.modelsPreset != null) [
+              "--models-preset"
+              modelsPresetFile
+            ]
             ++ cfg.extraFlags;
           in
           "${cfg.package}/bin/llama-server ${utils.escapeSystemdExecArgs args}";

nixos/modules/services/web-apps/netbox.nix

@@ -106,6 +106,16 @@ in
       example = "/run/netbox/netbox.sock";
     };
 
+    gunicornArgs = lib.mkOption {
+      type = lib.types.listOf lib.types.str;
+      default = [ ];
+      description = "extra args for gunicorn when serving netbox";
+      example = [
+        "--workers"
+        "9"
+      ];
+    };
+
     package = lib.mkOption {
       type = lib.types.package;
       default =
@@ -362,7 +372,8 @@ in
                   else
                     "${cfg.listenAddress}:${toString cfg.port}"
                 } \
-                --pythonpath ${pkg}/opt/netbox/netbox
+                --pythonpath ${pkg}/opt/netbox/netbox \
+                ${lib.concatStringsSep " " cfg.gunicornArgs}
             '';
             PrivateTmp = true;
             TimeoutStartSec = lib.mkDefault "5min";

nixos/modules/system/boot/clevis.nix

@@ -77,6 +77,9 @@ in
         copy_bin_and_libs ${pkgs.jose}/bin/jose
         copy_bin_and_libs ${pkgs.curl}/bin/curl
         copy_bin_and_libs ${pkgs.bashNonInteractive}/bin/bash
+        copy_bin_and_libs ${pkgs.cryptsetup}/bin/cryptsetup
+        copy_bin_and_libs ${pkgs.gnused}/bin/gnused
+        copy_bin_and_libs ${pkgs.gnugrep}/bin/gnugrep
 
         copy_bin_and_libs ${pkgs.tpm2-tools}/bin/.tpm2-wrapped
         mv $out/bin/{.tpm2-wrapped,tpm2}
@@ -103,13 +106,15 @@ in
       systemd = {
         extraBin = lib.mkIf systemd.enable {
           clevis = "${cfg.package}/bin/clevis";
-          curl = "${pkgs.curl}/bin/curl";
         };
 
         storePaths = lib.mkIf systemd.enable [
           cfg.package
           "${pkgs.jose}/bin/jose"
           "${pkgs.curl}/bin/curl"
+          "${pkgs.cryptsetup}/bin/cryptsetup"
+          "${pkgs.gnused}/bin/sed"
+          "${pkgs.gnugrep}/bin/grep"
           "${pkgs.tpm2-tools}/bin/tpm2_createprimary"
           "${pkgs.tpm2-tools}/bin/tpm2_flushcontext"
           "${pkgs.tpm2-tools}/bin/tpm2_load"

pkgs/applications/editors/okteta/default.nix

@@ -20,11 +20,11 @@
 
 stdenv.mkDerivation rec {
   pname = "okteta";
-  version = "0.26.24";
+  version = "0.26.25";
 
   src = fetchurl {
     url = "mirror://kde/stable/okteta/${version}/src/${pname}-${version}.tar.xz";
-    sha256 = "sha256-MbIyPwL01PyHLD/BNdVLuQklglaB5ZHdJfSmgMDSZWo=";
+    sha256 = "sha256-K+GJG/SYyzgDDKXbGtAixQJVfBwLj/asP9rIJUpbt2s=";
   };
 
   nativeBuildInputs = [

pkgs/applications/emulators/libretro/cores/pcsx2.nix

@@ -11,13 +11,13 @@
 }:
 mkLibretroCore {
   core = "pcsx2";
-  version = "0-unstable-2025-09-29";
+  version = "0-unstable-2026-02-06";
 
   src = fetchFromGitHub {
     owner = "libretro";
     repo = "ps2";
-    rev = "9485a53fa5aa2bff17e04518116107f81a8c82e3";
-    hash = "sha256-xkRPESbLNX9AFOIdEA9iW4Xn7hdJXfdi+TEbegC8KXA=";
+    rev = "416291ad7dc3caf5df4501c9249cbbe30cbef811";
+    hash = "sha256-rdrUsrezAfsbR7xd6ykIjB8cc4USUQcOMJV5mxbVn2o=";
     fetchSubmodules = true;
   };
 

pkgs/applications/networking/browsers/chromium/browser.nix

@@ -6,6 +6,11 @@
   ungoogled,
 }:
 
+let
+  # https://chromium-review.googlesource.com/c/chromium/src/+/7253206
+  ifElseM145 = new: old: if chromiumVersionAtLeast "145" then new else old;
+in
+
 mkChromiumDerivation (base: rec {
   name = "chromium-browser";
   packageName = "chromium";
@@ -62,11 +67,11 @@ mkChromiumDerivation (base: rec {
       $out/share/applications/chromium-browser.desktop
 
     substituteInPlace $out/share/applications/chromium-browser.desktop \
-      --replace-fail "@@MENUNAME@@" "Chromium" \
-      --replace-fail "@@PACKAGE@@" "chromium" \
-      --replace-fail "/usr/bin/@@USR_BIN_SYMLINK_NAME@@" "chromium" \
-      --replace-fail "@@URI_SCHEME@@" "x-scheme-handler/chromium;" \
-      --replace-fail "@@EXTRA_DESKTOP_ENTRIES@@" ""
+      --replace-fail "${ifElseM145 "@@MENUNAME" "@@MENUNAME@@"}" "Chromium" \
+      --replace-fail "${ifElseM145 "@@PACKAGE" "@@PACKAGE@@"}" "chromium" \
+      --replace-fail "${ifElseM145 "/usr/bin/@@usr_bin_symlink_name" "/usr/bin/@@USR_BIN_SYMLINK_NAME@@"}" "chromium" \
+      --replace-fail "${ifElseM145 "@@uri_scheme" "@@URI_SCHEME@@"}" "x-scheme-handler/chromium;" \
+      --replace-fail "${ifElseM145 "@@extra_desktop_entries" "@@EXTRA_DESKTOP_ENTRIES@@"}" ""
 
     # See https://github.com/NixOS/nixpkgs/issues/12433
     substituteInPlace $out/share/applications/chromium-browser.desktop \

pkgs/applications/networking/browsers/chromium/common.nix

@@ -2,6 +2,7 @@
   stdenv,
   lib,
   fetchpatch,
+  fetchurl,
   zstd,
   fetchFromGitiles,
   fetchNpmDeps,
@@ -507,11 +508,12 @@ let
       # https://chromium-review.googlesource.com/c/chromium/src/+/6897026
       ./patches/chromium-141-rust.patch
     ]
-    ++ lib.optionals stdenv.hostPlatform.isAarch64 [
+    ++ lib.optionals (!chromiumVersionAtLeast "145" && stdenv.hostPlatform.isAarch64) [
       # Reverts decommit pooled pages which causes random crashes of tabs on systems
       # with page sizes different than 4k. It 'supports' runtime page sizes, but has
       # a hardcode for aarch64 systems.
       # https://issues.chromium.org/issues/378017037
+      # Started failing to apply with M145, but this is no longer needed anyway.
       (fetchpatch {
         name = "reverted-v8-decommit-pooled-paged-by-default.patch";
         # https://chromium-review.googlesource.com/c/v8/v8/+/5864909
@@ -558,7 +560,7 @@ let
       # https://chromium-review.googlesource.com/c/chromium/src/+/7022369
       ./patches/chromium-144-rustc_nightly_capability.patch
     ]
-    ++ lib.optionals (chromiumVersionAtLeast "144.0.7559.132" && !ungoogled) [
+    ++ lib.optionals (versionRange "144.0.7559.132" "145" && !ungoogled) [
       # Rollup was swapped with esbuild because of compile failures on Windows,
       # which is not compatible with our build yet. So let's revert it for now.
       # Ungoogled ships its own variant of this patch upstream.
@@ -573,6 +575,29 @@ let
         revert = true;
         hash = "sha256-k+xCfhDuHxtuGhY7LVE8HvbDJt8SEFkslBcJe7t5CAg=";
       })
+    ]
+    ++ lib.optionals (chromiumVersionAtLeast "145" && !ungoogled) [
+      # Non-backported variant of the patch above for M145
+      (fetchpatch {
+        name = "revert-devtools-frontend-esbuild-instead-of-rollup.patch";
+        # https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/7485622
+        url = "https://chromium.googlesource.com/devtools/devtools-frontend/+/72846d78927b90a77b51b12d13009320a74067e0^!?format=TEXT";
+        decode = "base64 -d";
+        stripLen = 1;
+        extraPrefix = "third_party/devtools-frontend/src/";
+        revert = true;
+        hash = "sha256-vu60z6PuWavNoEoxW0thSy89WxztOEG50V1ZSfJRRug=";
+      })
+      (fetchpatch {
+        name = "revert-devtools-frontend-reland-use-native-rollup.patch";
+        # https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/7368549
+        url = "https://chromium.googlesource.com/devtools/devtools-frontend/+/7c2d912b52f18fff4a9ef7bd64608f2feefc0d83^!?format=TEXT";
+        decode = "base64 -d";
+        stripLen = 1;
+        extraPrefix = "third_party/devtools-frontend/src/";
+        revert = true;
+        hash = "sha256-Qa4GvamZ//0WTAZmDXOQJVz9dnYNzBkD8lYcWOHdVIY=";
+      })
     ];
 
     postPatch =
@@ -672,6 +697,20 @@ let
             '${glibc}/share/locale/'
 
       ''
+      # Workaround (crimes) for our rollup/esbuild revert in M145.
+      # https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/7414812
+      # We cannot use fetchpatch{,2} because it silently drops blobs and messes up symlinks.
+      # We cannot use GNU patch (patchPhase) because it does not support git binary diffs.
+      # We cannot use Gerrit/Gitiles because the git sha lengths may change as the repo grows.
+      + lib.optionalString (chromiumVersionAtLeast "145" && !ungoogled) ''
+        ${lib.getExe buildPackages.git} apply --reverse --directory=third_party/devtools-frontend/src/ ${
+          fetchurl {
+            name = "revert-devtools-frontend-remove-rollup-wasm.patch";
+            url = "https://github.com/ChromeDevTools/devtools-frontend/commit/a377a8c570a370e1bfccaf82f128e3b977dbf866.patch?full_index=1";
+            hash = "sha256-83T37ts54iotGYQAAyVv5CF8fMVrh/tfVRhfWaOlUkI=";
+          }
+        }
+      ''
       + ''
         # Allow to put extensions into the system-path.
         sed -i -e 's,/usr,/run/current-system/sw,' chrome/common/chrome_paths.cc

pkgs/applications/networking/browsers/firefox/packages/firefox-beta.nix

@@ -10,11 +10,11 @@
 buildMozillaMach rec {
   pname = "firefox-beta";
   binaryName = "firefox-beta";
-  version = "148.0b12";
+  version = "148.0b14";
   applicationName = "Firefox Beta";
   src = fetchurl {
     url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "acb728a94790b1df8afb8e868dfbe28e70f6c3635ed00411713b207f3f4eac0ed1f4c2adce470f7a542a917a2c85288ecba07a30569c0bb5421d597ecd80d690";
+    sha512 = "a28ac52a1c74b1a24959bf20c993311df5b87110677f0027cdea6b59d017f5365888d9ea07fb0f8b0c8f5d35266ee793fb072e2872712a6ef2e9c5d69521a6b7";
   };
 
   meta = {

pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix

@@ -10,13 +10,13 @@
 buildMozillaMach rec {
   pname = "firefox-devedition";
   binaryName = "firefox-devedition";
-  version = "148.0b13";
+  version = "148.0b14";
   applicationName = "Firefox Developer Edition";
   requireSigning = false;
   branding = "browser/branding/aurora";
   src = fetchurl {
     url = "mirror://mozilla/devedition/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "950dcb33c1d639ff54ae47c2573fbbdd9882b7d9cd7da0cab5f3fe891f2c466fb05a58fd74a941e887255b04f239eb39434f555c40999137e0ec3dbe1899c82b";
+    sha512 = "10de6926c3c20fcbffe2f25f97213ac777e4ce3984cb303262ddaef15be24788a40c6064ce8cc138ab3a35ba621efdcd0f6e0a105b2e773f7f14a1d661c10693";
   };
 
   # buildMozillaMach sets MOZ_APP_REMOTINGNAME during configuration, but

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -191,13 +191,13 @@
     "vendorHash": "sha256-jK7JuARpoxq7hvq5+vTtUwcYot0YqlOZdtDwq4IqKvk="
   },
   "cloudamqp_cloudamqp": {
-    "hash": "sha256-rUKpwJISR2OiSMkj+zo0+mXOLjyUrJ9yqvKVfj2j/1w=",
+    "hash": "sha256-FrK+deN2X98pG42aDsN4WqiJOC4QcGGS58PoLQMnRXo=",
     "homepage": "https://registry.terraform.io/providers/cloudamqp/cloudamqp",
     "owner": "cloudamqp",
     "repo": "terraform-provider-cloudamqp",
-    "rev": "v1.41.1",
+    "rev": "v1.42.1",
     "spdx": "MPL-2.0",
-    "vendorHash": "sha256-l30Jv7FYOLNrlC9f89pqziq29jkSjuWz/N26m98rMak="
+    "vendorHash": "sha256-1kuzWw7OhzruRT572pTR3zpE9jPGEuKRdwReWxte3/E="
   },
   "cloudflare_cloudflare": {
     "hash": "sha256-N594aLeErFeO7n6M+D1JcC8FlTmTrfaaMa71kFqv0vs=",
@@ -274,11 +274,11 @@
     "vendorHash": "sha256-3o6YRDrq4rQhNAFyqiGJrAoxuAykWw85OExRGSE3kGI="
   },
   "datadog_datadog": {
-    "hash": "sha256-7VC/sWnZF44+Ee3yFSPSGInq5zxrlaZ6FkF/QqT0e0s=",
+    "hash": "sha256-cK3vueSObBu8m8hszIGxEa7l8+vebkZgSRtcuocnJxY=",
     "homepage": "https://registry.terraform.io/providers/DataDog/datadog",
     "owner": "DataDog",
     "repo": "terraform-provider-datadog",
-    "rev": "v3.87.0",
+    "rev": "v3.88.0",
     "spdx": "MPL-2.0",
     "vendorHash": "sha256-WvN5Z7P2rcyzuOr6ySUC1j9RMPs+BgTQd3iy68QsCqk="
   },
@@ -751,11 +751,11 @@
     "vendorHash": null
   },
   "integrations_github": {
-    "hash": "sha256-WN8G05llSdh7IE7mJelrehTkNNtWBMG8Co/YLJUNLmk=",
+    "hash": "sha256-qf6iGCGE5Hod5PEasxqjdMij+4DS5vDvaiPBKkeQOwU=",
     "homepage": "https://registry.terraform.io/providers/integrations/github",
     "owner": "integrations",
     "repo": "terraform-provider-github",
-    "rev": "v6.10.2",
+    "rev": "v6.11.0",
     "spdx": "MIT",
     "vendorHash": null
   },
@@ -1310,11 +1310,11 @@
     "vendorHash": "sha256-omxEb+ntQuHDfS2Rmt0rj0BF0Q2T8DLhobLua2uU/0o="
   },
   "tencentcloudstack_tencentcloud": {
-    "hash": "sha256-gd7n5a+tusSXjkErYYD0YYQnJovGA3G81TW4si8PumQ=",
+    "hash": "sha256-T2pGaLv8uUBHi3MyLVLEfPleoHb3R2QuQa3pFEqxAoM=",
     "homepage": "https://registry.terraform.io/providers/tencentcloudstack/tencentcloud",
     "owner": "tencentcloudstack",
     "repo": "terraform-provider-tencentcloud",
-    "rev": "v1.82.66",
+    "rev": "v1.82.70",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },

pkgs/applications/networking/cluster/terraform/default.nix

@@ -194,8 +194,8 @@ rec {
   mkTerraform = attrs: pluggable (generic attrs);
 
   terraform_1 = mkTerraform {
-    version = "1.14.4";
-    hash = "sha256-fEuIAKmR+shKHNldUlU6qvel9tjYFdKnc25JWtxRPHs=";
+    version = "1.14.5";
+    hash = "sha256-qy/aS82YLIalVDFje4F7TWzC8OdYGBijuEpbDMlyEKY=";
     vendorHash = "sha256-NDtBLa8vokrSRDCNX10lQyfMDzTrodoEj5zbDanL4bk=";
     patches = [ ./provider-path-0_15.patch ];
     passthru = {

pkgs/build-support/vm/default.nix

@@ -41,7 +41,7 @@
     "virtio_rng"
     "ext4"
     "virtiofs"
-    "crc32c_generic"
+    "crc32c"
   ],
 }:
 

pkgs/by-name/_3/_3cpio/package.nix

@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage rec {
   pname = "3cpio";
-  version = "0.13.1";
+  version = "0.14.0";
 
   src = fetchFromGitHub {
     owner = "bdrung";
     repo = "3cpio";
     tag = version;
-    hash = "sha256-LZu+g5ISpG/9ZZimTedvTjUEofhAaYKJdpLTex3ehQE=";
+    hash = "sha256-BKJ1DIKRcOviWyz6cituxSynzZSvVvR1muesL91cIAg=";
   };
 
-  cargoHash = "sha256-YP6fCmY9fQD4hmKV6gLoElvce/BlRc9vAqyli7aaBNI=";
+  cargoHash = "sha256-q3WcEv2JF6SHdeFPSJrx0aE/DU/v08ihZjklJRVLwPY=";
 
   # Tests attempt to access arbitrary filepaths
   doCheck = false;

pkgs/by-name/ad/adrs/package.nix

@@ -6,16 +6,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "adrs";
-  version = "0.6.1";
+  version = "0.6.2";
 
   src = fetchFromGitHub {
     owner = "joshrotenberg";
     repo = "adrs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-PAvn1yIptyiVG96BNXHPgc5rYEHyCTo42hh88dwxrhA=";
+    hash = "sha256-dHiXnLARzviShnih1gkMehMpsztaofFXToDStd3GWkY=";
   };
 
-  cargoHash = "sha256-va6s+nbW4vafnt6SqqdaeAF06Q30NEDqFVWDz9mYdAo=";
+  cargoHash = "sha256-RThX4n4qn/0cPm8GZLnzbNt5VrMWf0wMXz0G9Im9CHk=";
 
   meta = {
     description = "Command-line tool for managing Architectural Decision Records";

pkgs/by-name/ai/airwindows/package.nix

@@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation {
   pname = "airwindows";
-  version = "0-unstable-2026-02-01";
+  version = "0-unstable-2026-02-07";
 
   src = fetchFromGitHub {
     owner = "airwindows";
     repo = "airwindows";
-    rev = "3abe5301227e554321a6ea3145d26693864aa7f4";
-    hash = "sha256-r8D/xBi/mYPSQhGk+iTBJblwqovPy976MqZqXV/+fg0=";
+    rev = "96c2dda4c62cecbb640baddc4b0db5752a184dd0";
+    hash = "sha256-ITn8YNofWqVTMT3bNl2d9c48wwN+jQJsM1J4Fs5s8s8=";
   };
 
   # we patch helpers because honestly im spooked out by where those variables

pkgs/by-name/al/aliyunpan/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "aliyunpan";
-  version = "0.3.7";
+  version = "0.3.8";
 
   src = fetchFromGitHub {
     owner = "tickstep";
     repo = "aliyunpan";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-9sbAKv2SOZPKnP56vL0rfMEDhTpIV524s9sIvlWAM6o=";
+    hash = "sha256-6aukI4woQvNI8zcstF92VL7M70GKAiwj9viaTX3iJ2o=";
   };
 
-  vendorHash = "sha256-tNUXB+pU/0gJL3oG9rdk6J+SvO5ASqkuO+gVZiRdaVg=";
+  vendorHash = "sha256-or1C88KE0RkXL08ZjaXELqKlNP3PoY31ib4PWDdDmNA=";
 
   ldflags = [
     "-s"

pkgs/by-name/al/alpaca/package.nix

@@ -33,14 +33,14 @@ let
 in
 pythonPackages.buildPythonApplication rec {
   pname = "alpaca";
-  version = "8.5.1";
+  version = "9.0.5";
   pyproject = false; # Built with meson
 
   src = fetchFromGitHub {
     owner = "Jeffser";
     repo = "Alpaca";
     tag = version;
-    hash = "sha256-Sqs6xXnh1I8fhrxVS8p5r7PRqI5rxK0pJWhDQ2qddks=";
+    hash = "sha256-fN4WKYpsgkYIhPLU7Ckcroo2S0lzX5cGN6uvYS4lG50=";
   };
 
   postPatch = ''
@@ -86,6 +86,7 @@ pythonPackages.buildPythonApplication rec {
       markitdown
       gst-python
       opencv4
+      zstandard
     ]
     ++ lib.concatAttrValues optional-dependencies;
 

pkgs/by-name/al/alt-ergo-free/package.nix

@@ -0,0 +1,40 @@
+{
+  fetchurl,
+  lib,
+  ocamlPackages,
+  stdenv,
+}:
+
+ocamlPackages.buildDunePackage (finalAttrs: {
+  pname = "alt-ergo-free";
+  version = "2.4.3";
+
+  src = fetchurl {
+    url = "https://github.com/OCamlPro/alt-ergo/releases/download/v${finalAttrs.version}-free/alt-ergo-${finalAttrs.version}-free.tar.gz";
+    hash = "sha256-ksVP9HH9pY+T6Es/wgC9pGd805AGw1e1vgfVlNGCXG8=";
+  };
+
+  nativeBuildInputs = [ ocamlPackages.menhir ];
+
+  sourceRoot = ".";
+
+  buildInputs = with ocamlPackages; [
+    cmdliner
+    camlzip
+    stdlib-shims
+    dune-configurator
+    dune-build-info
+    num
+    psmt2-frontend
+    ocplib-simplex_0_4
+    zarith
+    seq
+  ];
+
+  meta = {
+    description = "High-performance theorem prover and SMT solver";
+    homepage = "https://alt-ergo.ocamlpro.com/";
+    license = lib.licenses.cecill-c;
+    maintainers = with lib.maintainers; [ redianthus ];
+  };
+})

pkgs/by-name/an/ananicy-rules-cachyos/package.nix

@@ -7,13 +7,13 @@
 
 stdenvNoCC.mkDerivation {
   pname = "ananicy-rules-cachyos";
-  version = "0-unstable-2026-02-03";
+  version = "0-unstable-2026-02-10";
 
   src = fetchFromGitHub {
     owner = "CachyOS";
     repo = "ananicy-rules";
-    rev = "395aa3e98f1970bb7a4df6dfe624ea2d5b8cc4b5";
-    hash = "sha256-cTeW9mbepe5i7lROfZZ/GfcM8fudCOmGpvFsAvL2o4I=";
+    rev = "061314309227b08b5acf8ff2963fc3ce976539e9";
+    hash = "sha256-Kn+m6evpaB4r/a11+6ItfhnCveB8iC6ZJGgkvvPWulc=";
   };
 
   dontConfigure = true;

pkgs/by-name/ap/api-linter/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "api-linter";
-  version = "2.2.0";
+  version = "2.3.0";
 
   src = fetchFromGitHub {
     owner = "googleapis";
     repo = "api-linter";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/bn/TlR2nl/BGgtUVr1IEL7o05QbF7QeXViPevINqqM=";
+    hash = "sha256-Yx4UTxFJSc+tsA2u6IiSlzV9H7occ2qKtCm7zwv5PaA=";
   };
 
   vendorHash = "sha256-TiZRts1ruC0R5DQ5at7Z1c+zuGpD0f3D89X2b1gXA5s=";

pkgs/by-name/ap/apko/package.nix

@@ -11,13 +11,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "apko";
-  version = "1.1.4";
+  version = "1.1.6";
 
   src = fetchFromGitHub {
     owner = "chainguard-dev";
     repo = "apko";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-8nxz8Qmo1waHa3c6qbb5cy+mMT2kaWcHSl4uW3qrBsI=";
+    hash = "sha256-7WNWbTs+r3L2O6ixK1yEElwdFfRPqx2yX+nPRy3nSEM=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;
@@ -29,7 +29,7 @@ buildGoModule (finalAttrs: {
       find "$out" -name .git -print0 | xargs -0 rm -rf
     '';
   };
-  vendorHash = "sha256-vGtxVQSesrqWnYJT7B2KhWiYtUFsYVPdI/ZEbpFmkOc=";
+  vendorHash = "sha256-mSnEga9JtS1ObMJpS0uo1RZs2ubpTwsErtmD8rMe5gg=";
 
   excludedPackages = [
     "internal/gen-jsonschema"

pkgs/by-name/ap/aprx/package.nix

@@ -22,6 +22,7 @@ stdenv.mkDerivation {
     "-fcommon"
     "-O2"
     "-Wno-implicit-int" # clang, gcc 14
+    "-std=gnu17" # gcc 15
   ];
 
   configureFlags = [

pkgs/by-name/ar/artisan/package.nix

@@ -6,11 +6,11 @@
 }:
 let
   pname = "artisan";
-  version = "4.0.0";
+  version = "4.0.2";
 
   src = fetchurl {
     url = "https://github.com/artisan-roaster-scope/artisan/releases/download/v${version}/${pname}-linux-${version}.AppImage";
-    hash = "sha256-Oe671eWyiQtddCZM8dydh/YldNRV7qmdA7lwQhE9sag=";
+    hash = "sha256-KmjqM3gYpxxjEBaXjF5zvL8bgfgD8IKvAX0xYf29J48=";
   };
 
   appimageContents = appimageTools.extract {

pkgs/by-name/at/atac/package.nix

@@ -4,6 +4,8 @@
   fetchFromGitHub,
   pkg-config,
   oniguruma,
+  installShellFiles,
+  writableTmpDirAsHomeHook,
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "atac";
@@ -18,7 +20,11 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   cargoHash = "sha256-lJO9riP/3FRrQ/gkKQCghfkNn1ePS+p6FtMcJTIJxZY=";
 
-  nativeBuildInputs = [ pkg-config ];
+  nativeBuildInputs = [
+    installShellFiles
+    writableTmpDirAsHomeHook
+    pkg-config
+  ];
 
   buildInputs = [ oniguruma ];
 
@@ -26,6 +32,22 @@ rustPlatform.buildRustPackage (finalAttrs: {
     RUSTONIG_SYSTEM_LIBONIG = true;
   };
 
+  postInstall = ''
+    $out/bin/atac completions bash
+    $out/bin/atac completions fish
+    $out/bin/atac completions zsh
+    installShellCompletion --cmd atac \
+      --bash atac.bash \
+      --fish atac.fish \
+      --zsh _atac
+
+    mkdir -p $out/share/powershell
+    $out/bin/atac completions powershell $out/share/powershell
+
+    $out/bin/atac man
+    installManPage atac.1
+  '';
+
   meta = {
     description = "Simple API client (postman like) in your terminal";
     homepage = "https://github.com/Julien-cpsn/ATAC";

pkgs/by-name/at/atlas/package.nix

@@ -9,13 +9,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "atlas";
-  version = "1.0.0";
+  version = "1.1.0";
 
   src = fetchFromGitHub {
     owner = "ariga";
     repo = "atlas";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Ls5N6HZFR3+KfuqoyE6gaaxhjZ/stQC+g1kWIUE8EaE=";
+    hash = "sha256-ke7XT1ZRJbYnTMjMFEUcF3jOuvcTjYAX7H+nJxHrU5E=";
   };
 
   modRoot = "cmd/atlas";

pkgs/by-name/ba/balena-cli/package.nix

@@ -21,16 +21,16 @@ let
 in
 buildNpmPackage' rec {
   pname = "balena-cli";
-  version = "23.2.30";
+  version = "23.2.31";
 
   src = fetchFromGitHub {
     owner = "balena-io";
     repo = "balena-cli";
     rev = "v${version}";
-    hash = "sha256-hRXOErA3WqXzd/W3nLgFgkyikenn8XsOELaQZScQRow=";
+    hash = "sha256-hyiMPOTiPgRmCvimepW7tqPoeEr52MLtIFL1t4DDBX8=";
   };
 
-  npmDepsHash = "sha256-kDcxcK0DyV1xWLDi8rjyqjOwaDcdJvHQCV7XKj0WmnM=";
+  npmDepsHash = "sha256-zqkrtqQccy08htx24MRoYFglLziDSnr0fldq1uYL5cI=";
 
   makeCacheWritable = true;
 

pkgs/by-name/ce/ceph-csi/package.nix

@@ -8,13 +8,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ceph-csi";
-  version = "3.16.0";
+  version = "3.16.1";
 
   src = fetchFromGitHub {
     owner = "ceph";
     repo = "ceph-csi";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dVSztcnfofPkd4lv/WBZQNS6POHWdAeNqMta1p7G51c=";
+    hash = "sha256-dp/dSZG+kaX2S78KxreSNERZJ2BmF0oSknA62U9UT78=";
   };
 
   preConfigure = ''

pkgs/by-name/ch/chirpstack-concentratord/package.nix

@@ -10,16 +10,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "chirpstack-concentratord";
-  version = "4.5.3";
+  version = "4.6.0";
 
   src = fetchFromGitHub {
     owner = "chirpstack";
     repo = "chirpstack-concentratord";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-D/zp3stjV0EUnUZlEVQ7YwFlczTxG0f0ABPban0JhPM=";
+    hash = "sha256-7wTXotxf9tFSyIrBqn6EVpQJpz5XAPNxJMeaYN7k/so=";
   };
 
-  cargoHash = "sha256-7l/42l1rFX7HXdhgA34FXWpQjksGCnHeARC5YupA2nE=";
+  cargoHash = "sha256-QYmAFJEHLcgFuq34r9XLEwlpbzjAr4CpfluDW5MbfT0=";
 
   buildInputs = [
     libloragw-2g4

pkgs/by-name/cm/cmctl/package.nix

@@ -9,16 +9,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "cmctl";
-  version = "2.3.0";
+  version = "2.4.0";
 
   src = fetchFromGitHub {
     owner = "cert-manager";
     repo = "cmctl";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-yX3A63MU1PaFQmAemp62F5sHlgWpkInhbIIZx7HfdEc=";
+    hash = "sha256-wOtpaohPjBWQkaZbA1Fbh97kVxMTEGuqCtIhviJGOrU=";
   };
 
-  vendorHash = "sha256-LDmhlSWa6/Z4KyXnF9OFVkgTksV7TL+m1os0NW89ZpY=";
+  vendorHash = "sha256-ocQDysrJUbCDnWZ2Ul3kDqPTpvmpgA3Wz+L5/fIkrh4=";
 
   ldflags = [
     "-s"

pkgs/by-name/co/codipack/package.nix

@@ -9,13 +9,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "codipack";
-  version = "3.0.0";
+  version = "3.1.0";
 
   src = fetchFromGitHub {
     owner = "SciCompKL";
     repo = "CoDiPack";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-dGzLPU8YOrBdXPwUnEElqfxzbUdkAQxtv2+7+itNsyI=";
+    hash = "sha256-dHJvCR5IJ7Q/T94XcpbvXuXL41OrCNepqAmDVJ/7m6U=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/di/diffoscope/package.nix

@@ -108,12 +108,12 @@ in
 # Note: when upgrading this package, please run the list-missing-tools.sh script as described below!
 python.pkgs.buildPythonApplication rec {
   pname = "diffoscope";
-  version = "309";
+  version = "312";
   pyproject = true;
 
   src = fetchurl {
     url = "https://diffoscope.org/archive/diffoscope-${version}.tar.bz2";
-    hash = "sha256-VB7CBvHKIJWHanuDnoobSnvGcdxMFTUGLxRZgsNoLbQ=";
+    hash = "sha256-bILLE0MwPYHQtkvIQibbkZ0dENySbshaWX1oWDGQmu8=";
   };
 
   outputs = [

pkgs/by-name/di/discordo/package.nix

@@ -11,16 +11,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "discordo";
-  version = "0-unstable-2026-02-01";
+  version = "0-unstable-2026-02-09";
 
   src = fetchFromGitHub {
     owner = "ayn2op";
     repo = "discordo";
-    rev = "5f884cdf288d9950c9ef4bbced100458af89ca46";
-    hash = "sha256-+6jfxVLJxGzDnIJD1P8dGOKf3DJKwoYCYhycrNXrJtg=";
+    rev = "4c61e7c67a78d0906ffa77794deeb45e53d659d2";
+    hash = "sha256-3UHQJDi+9TW7yD2yWfD+1hr8iSvyd1HLGqbtk0iYlVg=";
   };
 
-  vendorHash = "sha256-IGPQkfM/wNsgbyUtwGhjJNfTbpa/Xge5/wU0Rj/QZZY=";
+  vendorHash = "sha256-8Le/d6sXXH0dCORWLOFUjHlbGcKr0yqQ2l8GQzLaYt0=";
 
   env.CGO_ENABLED = 1;
 

pkgs/by-name/do/dotool/package.nix

@@ -10,13 +10,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "dotool";
-  version = "1.5";
+  version = "1.6";
 
   src = fetchFromSourcehut {
     owner = "~geb";
     repo = "dotool";
     rev = finalAttrs.version;
-    hash = "sha256-4QmTHeU3TnpRATKIvilkIA3i2hDjM5zQwSvmRvoWuNE=";
+    hash = "sha256-KI3vA45/MvFRV8Fr3Q4yd/argDy1PpFHCT3KA9VDP80=";
   };
 
   vendorHash = "sha256-IQ847LHDYJPboWL/6lQNJ4vPPD/+xkrGI2LSZ7kBnp4=";

pkgs/by-name/fa/fanficfare/package.nix

@@ -6,12 +6,12 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "fanficfare";
-  version = "4.53.0";
+  version = "4.54.0";
   pyproject = true;
 
   src = fetchPypi {
     inherit (finalAttrs) pname version;
-    hash = "sha256-lUeMP7wWs5+ZzP4pEr0BUvzAIo+NKAqs4bGSGcSmi/k=";
+    hash = "sha256-Pypts27ksSx8r+nLo3wup2ltbcayJ91VyF2+JchrE2c=";
   };
 
   nativeBuildInputs = with python3Packages; [

pkgs/by-name/ga/gammu/package.nix

@@ -15,7 +15,7 @@
   dialog,
   dbiSupport ? false,
   libdbi ? null,
-  libdbiDrivers ? null,
+  libdbi-drivers ? null,
   postgresSupport ? false,
   libpq ? null,
 }:
@@ -63,7 +63,7 @@ stdenv.mkDerivation (finalAttrs: {
   ]
   ++ lib.optionals dbiSupport [
     libdbi
-    libdbiDrivers
+    libdbi-drivers
   ]
   ++ lib.optionals postgresSupport [ libpq ];
 

pkgs/by-name/gi/git-wt/package.nix

@@ -7,16 +7,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "git-wt";
-  version = "0.14.2";
+  version = "0.17.0";
 
   src = fetchFromGitHub {
     owner = "k1LoW";
     repo = "git-wt";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/wzaLLR8lReWmZB6TWwDiaVdcyVdIpnQYJWI4yEAMys=";
+    hash = "sha256-gZO3SAIrOQ+wEKf1VAg+e5bLVDt2/s73INZougMXH4k=";
   };
 
-  vendorHash = "sha256-K5geAvG+mvnKeixOyZt0C1T5ojSBFmx2K/Msol0HsSg=";
+  vendorHash = "sha256-LkyH7czzBkiyAYGrKuPSeB4pNAZLmgwXgp6fmYBps6s=";
 
   nativeCheckInputs = [ git ];
 

pkgs/by-name/gn/gnucash/package.nix

@@ -15,7 +15,7 @@
   gwenhywfar,
   icu,
   libdbi,
-  libdbiDrivers,
+  libdbi-drivers,
   libofx,
   libsecret,
   libxml2,
@@ -61,7 +61,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   env = {
     # https://github.com/Gnucash/gnucash/commit/e680a87a66b8ec17132f186e222cbc94ad52b3d0
-    GNC_DBD_DIR = "${libdbiDrivers}/lib/dbd";
+    GNC_DBD_DIR = "${libdbi-drivers}/lib/dbd";
 
     # this needs to be an environment variable and not a cmake flag to suppress
     # guile warning
@@ -85,7 +85,7 @@ stdenv.mkDerivation (finalAttrs: {
     gwenhywfar
     icu
     libdbi
-    libdbiDrivers
+    libdbi-drivers
     libofx
     libsecret
     libxml2
@@ -117,7 +117,7 @@ stdenv.mkDerivation (finalAttrs: {
     find . -name '._*' -type f -delete
 
     substituteInPlace bindings/python/__init__.py \
-      --subst-var-by gnc_dbd_dir "${libdbiDrivers}/lib/dbd" \
+      --subst-var-by gnc_dbd_dir "${libdbi-drivers}/lib/dbd" \
       --subst-var-by gsettings_schema_dir ${glib.makeSchemaPath "$out" "gnucash-${finalAttrs.version}"};
   '';
 
@@ -152,7 +152,7 @@ stdenv.mkDerivation (finalAttrs: {
       # documentation
       --prefix XDG_DATA_DIRS : ${finalAttrs.passthru.docs}/share
       # db drivers location
-      --set GNC_DBD_DIR ${libdbiDrivers}/lib/dbd
+      --set GNC_DBD_DIR ${libdbi-drivers}/lib/dbd
       # gsettings schema location on Nix
       --set GSETTINGS_SCHEMA_DIR ${glib.makeSchemaPath "$out" "gnucash-${finalAttrs.version}"}
     )

pkgs/by-name/go/google-lighthouse/package.nix

@@ -9,21 +9,22 @@
   yarnInstallHook,
   nodejs,
   makeWrapper,
+  nix-update-script,
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "google-lighthouse";
-  version = "12.8.2";
+  version = "13.0.2";
 
   src = fetchFromGitHub {
     owner = "GoogleChrome";
     repo = "lighthouse";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-pluMFOyW352tEWjz28jhI4AZcKDB5jhoWIzTWyLxwGY=";
+    hash = "sha256-jbyp8RJChX6CjXucQLcvRwkUJWptUer3xNNbwaB8vi4=";
   };
 
   yarnOfflineCache = fetchYarnDeps {
     yarnLock = "${finalAttrs.src}/yarn.lock";
-    hash = "sha256-yQT2JUsu/3ttJU8zUdtlhzUscepISNUr3wlxKHLaz3I=";
+    hash = "sha256-Tm9MgjeIxGRY89EiflttJSEaotMHAo4V7oaw6+6Dzco=";
   };
 
   yarnBuildScript = "build-report";
@@ -50,6 +51,9 @@ stdenv.mkDerivation (finalAttrs: {
   '';
 
   doDist = false;
+
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     description = "Automated auditing, performance metrics, and best practices for the web";
     homepage = "https://developer.chrome.com/docs/lighthouse/overview";

pkgs/by-name/go/gosec/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "gosec";
-  version = "2.22.11";
+  version = "2.23.0";
 
   src = fetchFromGitHub {
     owner = "securego";
     repo = "gosec";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-xCCZUM88z6sSFEo2XQJNx0fTh6KBer7oBSnBEZr3xk0=";
+    hash = "sha256-dkKpoP/Tp1I4KXlHeyyau3KKAXi6HbMSqJx3d2bIRY8=";
   };
 
-  vendorHash = "sha256-n5ORSfEcXOc2bUDArEzwlTiDo2ILu8aGte3pPOou+6c=";
+  vendorHash = "sha256-wBLk7XSept6+7eQei1hEcbiAoLNvSwaGcxQTqDVsclU=";
 
   subPackages = [
     "cmd/gosec"

pkgs/by-name/gr/grafana-image-renderer/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "grafana-image-renderer";
-  version = "5.5.0";
+  version = "5.5.1";
 
   src = fetchFromGitHub {
     owner = "grafana";
     repo = "grafana-image-renderer";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-/ZvWE8FVK9EBXo1V0AD/rCc5ZyQFea1WiQrKg1JOwt4=";
+    hash = "sha256-1SntOvAoHf0GwWG3wS2OLY9eiBXhS1mA0OEtKSFOApU=";
   };
 
   vendorHash = "sha256-kGLvstSkucM0tN5l+Vp78IP9EwDx62kukAiOwYD4Vfs=";

pkgs/by-name/gv/gvm-libs/package.nix

@@ -26,13 +26,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "gvm-libs";
-  version = "22.35.5";
+  version = "22.35.6";
 
   src = fetchFromGitHub {
     owner = "greenbone";
     repo = "gvm-libs";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-M7ER3jujYkD1ulsKJzcycWbkqKeTvNhK0EhkzKL+R6A=";
+    hash = "sha256-oXfxgoFxInx3MyolVxzwRP3EpMsa35G5sdt1GxBUmUU=";
   };
 
   postPatch = ''

pkgs/by-name/hu/hugo/package.nix

@@ -11,16 +11,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "hugo";
-  version = "0.155.2";
+  version = "0.155.3";
 
   src = fetchFromGitHub {
     owner = "gohugoio";
     repo = "hugo";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-NOyvw9uFm4lk1bUtEbzE8+vIiIo9bvHU9VZL11EvIvk=";
+    hash = "sha256-2TvzM7veSAGDqomWXHuEnYX8bGVxAxTto0Xzc+vypDY=";
   };
 
-  vendorHash = "sha256-hN2szev0heiaQMB3DXiPPVoG5nbXSahcdielz1xtXSg=";
+  vendorHash = "sha256-Fh38o7wD6/gL4szvT4UmA4lzIStqITjgjulsIQlPmHU=";
 
   checkFlags =
     let

pkgs/by-name/in/inputplumber/package.nix

@@ -10,16 +10,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "inputplumber";
-  version = "0.72.0";
+  version = "0.73.0";
 
   src = fetchFromGitHub {
     owner = "ShadowBlip";
     repo = "InputPlumber";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-bzIrP6bUxEEgQ+lCKV3jpdyBNMAanCYXiMCr8ypUkUY=";
+    hash = "sha256-0MVgWAta0mXuBSs06ZSSvtnqyqIzmB79WmHhJAbowwM=";
   };
 
-  cargoHash = "sha256-DP4Qe9bzDkuE36RldYPYNeGrQWVqBewU5GUt8zw3GAA=";
+  cargoHash = "sha256-W0hKTZUdbVaO02L6PZlsPAKLpLG8dmCWzwDauGZ18Ls=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/iw/iwd/package.nix

@@ -15,12 +15,12 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "iwd";
-  version = "3.10";
+  version = "3.11";
 
   src = fetchgit {
     url = "https://git.kernel.org/pub/scm/network/wireless/iwd.git";
     tag = finalAttrs.version;
-    hash = "sha256-qzqBNGy67/VvRZh7n0W2ZPYwoyX/lP6k1sF57lL6v7c=";
+    hash = "sha256-H8kyj5RTY20wwRUJIYJF8lIQ367biItJpHYZeMcNHSE=";
   };
 
   patches = [

pkgs/by-name/jb/jbang/package.nix

@@ -9,12 +9,12 @@
 }:
 
 stdenv.mkDerivation rec {
-  version = "0.135.1";
+  version = "0.136.0";
   pname = "jbang";
 
   src = fetchzip {
     url = "https://github.com/jbangdev/jbang/releases/download/v${version}/${pname}-${version}.tar";
-    sha256 = "sha256-7MUiUi7Q4tTCN8RUkO0FM9ZwIqAnTD6yJqUr3199FKQ=";
+    sha256 = "sha256-MsP4iLquOwJWlV7EPxSuAPWuyTv1PPSyQCrVdq4lPlM=";
   };
 
   nativeBuildInputs = [ makeWrapper ];

pkgs/by-name/li/libargs/package.nix

@@ -7,13 +7,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "args";
-  version = "6.4.7";
+  version = "6.4.8";
 
   src = fetchFromGitHub {
     owner = "Taywee";
     repo = "args";
     rev = finalAttrs.version;
-    sha256 = "sha256-IQzhbXl1CfEV164EjulKrOUdCTZNZAFgVyzxk4rTNlU=";
+    sha256 = "sha256-FUM2QXKveESKTL4svgCw/SpwHypsF7DCW+RMoTBnh3c=";
   };
 
   nativeBuildInputs = [ cmake ];

pkgs/by-name/li/libdbi-drivers/package.nix

@@ -3,10 +3,12 @@
   stdenv,
   fetchurl,
   libdbi,
-  # TODO: migrate away from overriding packages to null
-  libmysqlclient ? null,
-  sqlite ? null,
-  libpq ? null,
+  withMysql ? true,
+  libmysqlclient,
+  withSqlite ? true,
+  sqlite,
+  withLibpg ? true,
+  libpq,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -22,7 +24,7 @@ stdenv.mkDerivation (finalAttrs: {
     libdbi
     sqlite
   ]
-  ++ lib.optional (libmysqlclient != null) libmysqlclient;
+  ++ lib.optional withMysql libmysqlclient;
 
   patches = [
     # https://sourceforge.net/p/libdbi-drivers/libdbi-drivers/ci/24f48b86c8988ee3aaebc5f303d71e9d789f77b6
@@ -47,17 +49,17 @@ stdenv.mkDerivation (finalAttrs: {
     "--with-dbi-incdir=${libdbi}/include"
     "--with-dbi-libdir=${libdbi}/lib"
   ]
-  ++ lib.optionals (libmysqlclient != null) [
+  ++ lib.optionals withMysql [
     "--with-mysql"
     "--with-mysql-incdir=${lib.getDev libmysqlclient}/include/mysql"
     "--with-mysql-libdir=${libmysqlclient}/lib/mysql"
   ]
-  ++ lib.optionals (sqlite != null) [
+  ++ lib.optionals withSqlite [
     "--with-sqlite3"
     "--with-sqlite3-incdir=${sqlite.dev}/include/sqlite"
     "--with-sqlite3-libdir=${sqlite.out}/lib/sqlite"
   ]
-  ++ lib.optionals (libpq != null) [
+  ++ lib.optionals withLibpg [
     "--with-pgsql"
     "--with-pgsql-incdir=${libpq.dev}/include"
     "--with-pgsql-libdir=${libpq}/lib/"

pkgs/by-name/lo/lockbook/package.nix

@@ -12,16 +12,16 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "lockbook";
-  version = "26.1.31";
+  version = "26.2.11";
 
   src = fetchFromGitHub {
     owner = "lockbook";
     repo = "lockbook";
     tag = finalAttrs.version;
-    hash = "sha256-Bx84e5/foF4XxRZJve0YhiikZJa3mqxOHuk9bsPxjag=";
+    hash = "sha256-LW7BQLnnrTLKee+znznn5r77LHLbk1V7aYjerNQY/5c=";
   };
 
-  cargoHash = "sha256-D4U58OssBiLnw8KIIaWzYLCS+VoeNk0CCFRFAIO6Ays=";
+  cargoHash = "sha256-rTpSVAGvbmHgSsn0IrkR8+VsbIjUX/tRpYUkuskb99w=";
 
   doCheck = false; # there are no cli tests
   cargoBuildFlags = [

pkgs/by-name/ma/materia-kde-theme/package.nix

@@ -6,13 +6,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "materia-kde-theme";
-  version = "20220714";
+  version = "20220823";
 
   src = fetchFromGitHub {
     owner = "PapirusDevelopmentTeam";
     repo = "materia-kde";
     rev = finalAttrs.version;
-    sha256 = "sha256-/LA+H2ekxuO1RpfaPJruRGeWPVopA0rZUxU4Mh7YQ0s=";
+    sha256 = "sha256-/O+/L6C9WjxhfWZ8RzIeimNU+8sjKvbDvQwNlvVOjU4=";
   };
 
   makeFlags = [ "PREFIX=$(out)" ];

pkgs/by-name/ma/material-symbols/package.nix

@@ -7,13 +7,13 @@
 }:
 stdenvNoCC.mkDerivation {
   pname = "material-symbols";
-  version = "4.0.0-unstable-2025-09-18";
+  version = "4.0.0-unstable-2026-02-06";
 
   src = fetchFromGitHub {
     owner = "google";
     repo = "material-design-icons";
-    rev = "bb04090f930e272697f2a1f0d7b352d92dfeee43";
-    hash = "sha256-aFKG8U4OBqh2hoHYm1n/L4bK7wWPs6o0rYVhNC7QEpI=";
+    rev = "310de998d61fc253a6df21e708a54c1d18338cab";
+    hash = "sha256-ALnp0WxWjSthibSxkLfYSVbQyI4btj4hayAUNxLAwu4=";
     sparseCheckout = [ "variablefont" ];
   };
 

pkgs/by-name/me/mediagoblin/package.nix

@@ -2,7 +2,6 @@
   lib,
   buildNpmPackage,
   fetchFromSourcehut,
-  fetchpatch,
   gobject-introspection,
   gst_all_1,
   poppler-utils,
@@ -11,41 +10,20 @@
 }:
 
 let
-  python = python3.override {
-    packageOverrides = final: prev: {
-      celery = prev.celery.overridePythonAttrs {
-        doCheck = false;
-      };
+  python = python3;
 
-      kombu = prev.kombu.overridePythonAttrs {
-        # avoid conflicts with test only dependencies
-        doCheck = false;
-      };
-
-      sqlalchemy = prev.sqlalchemy_1_4;
-    };
-  };
-
-  version = "0.14.0";
+  version = "0.15.0";
   src = fetchFromSourcehut {
     owner = "~mediagoblin";
     repo = "mediagoblin";
     rev = "v${version}";
     fetchSubmodules = true;
-    hash = "sha256-Y1VnXLHEl6TR8nt+vKSfoCwleQ+oA2WPMN9q4fW9R3s=";
+    hash = "sha256-9zfSRFyf9Sw+r7ATlZVl2dymWjOO2JQZGsBLQPYT0rs=";
   };
 
-  patches = [
-    (fetchpatch {
-      url = "https://git.sr.ht/~mediagoblin/mediagoblin/commit/95a591bb2ffdeed059b926059155fd0802e6b1e6.patch";
-      excludes = [ "docs/source/siteadmin/relnotes.rst" ];
-      hash = "sha256-Coff02bewl6E9bHeMy/6tA2dngKcw/c33xk9nmMl/Bk=";
-    })
-  ];
-
   extlib = buildNpmPackage {
     name = "mediagoblin-extlib";
-    inherit src patches;
+    inherit src;
 
     npmDepsHash = "sha256-wtk5MgsWEpuz3V/EcozEAMOa8UeCgdjhR5wxaiaMugY=";
 
@@ -60,7 +38,7 @@ in
 python.pkgs.buildPythonApplication rec {
   format = "setuptools";
   pname = "mediagoblin";
-  inherit version src patches;
+  inherit version src;
 
   postPatch = ''
     # https://git.sr.ht/~mediagoblin/mediagoblin/tree/bf61d38df21748aadb480c53fdd928647285e35f/item/.guix/modules/mediagoblin-package.scm#L60-62
@@ -87,6 +65,7 @@ python.pkgs.buildPythonApplication rec {
     alembic
     babel
     bcrypt
+    bleach
     celery
     certifi
     configobj
@@ -96,7 +75,6 @@ python.pkgs.buildPythonApplication rec {
     itsdangerous
     jinja2
     jsonschema
-    lxml-html-clean
     markdown
     oauthlib
     pastescript

pkgs/by-name/me/mercure/package.nix

@@ -9,18 +9,18 @@
 
 buildGoModule (finalAttrs: {
   pname = "mercure";
-  version = "0.21.7";
+  version = "0.21.8";
 
   src = fetchFromGitHub {
     owner = "dunglas";
     repo = "mercure";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-Dns8rzZJTnALhP8O9HDSjRfdesNYH3Qt/xrK4dMCGS4=";
+    hash = "sha256-M/RzcR0FPkjBCRw0faRHF2ML25vzxcmNbAnnSWo+NFU=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/caddy";
 
-  vendorHash = "sha256-UcCtK7qcwvc54wXr9DpfeMWzqrVz5zdEy4Mv2Qc+PNw=";
+  vendorHash = "sha256-KtjKrCqu+MAJpSL/HbLipxKbLOqDvzPOA5QN9ppu2aY=";
 
   subPackages = [ "mercure" ];
   excludedPackages = [ "../cmd/mercure" ];

pkgs/by-name/me/mesos-dns/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "mesos-dns";
-  version = "0.9.4";
+  version = "0.10.0";
 
   src = fetchFromGitHub {
     owner = "m3scluster";
     repo = "mesos-dns";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-InUuEJjfZTRToCGiC3QYDK7UY8vje0T8RQ2YElIkb2w=";
+    hash = "sha256-o0I+pTgN9fb//Q1s9UfpVLUzq5DQVR/qKsr6CYypvsc=";
   };
 
   vendorHash = "sha256-l1y3CaGG1ykJnGit81D+E+jB4RUYneQzRMTvOPCH+jk=";

pkgs/by-name/mi/micronaut/package.nix

@@ -9,11 +9,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "micronaut";
-  version = "4.10.7";
+  version = "4.10.8";
 
   src = fetchzip {
     url = "https://github.com/micronaut-projects/micronaut-starter/releases/download/v${finalAttrs.version}/micronaut-cli-${finalAttrs.version}.zip";
-    hash = "sha256-2iYCcqZqpQ5v6VGtGiPYx+97VDuC61F8Vl4MLVh+vc0=";
+    hash = "sha256-sI4K0wvpOS/dwW4/NzM/cPJRKlU/uxFdl3flnZXo684=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/mi/misconfig-mapper/package.nix

@@ -6,16 +6,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "misconfig-mapper";
-  version = "1.15.0";
+  version = "1.15.2";
 
   src = fetchFromGitHub {
     owner = "intigriti";
     repo = "misconfig-mapper";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-CSUE6M8sT1kWR3jkbPtXUIvkqlmDJ3XPFD3yHGJZ/ic=";
+    hash = "sha256-pHVa/K9zVLpo/3KKyJfLgYXISRpUE1GbiSQoTrfCxqA=";
   };
 
-  vendorHash = "sha256-N0lFTfHtzOH1zJIYXRzKJ8KNpcMgUBuVrsr+RzzylKY=";
+  vendorHash = "sha256-K3qHMeB+gYWjallt3JurVMC0aK3g9sXYxCgiGUU3OjM=";
 
   ldflags = [
     "-s"

pkgs/by-name/mi/mistral-vibe/package.nix

@@ -12,14 +12,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "mistral-vibe";
-  version = "2.0.2";
+  version = "2.1.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mistralai";
     repo = "mistral-vibe";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-eZqNxibJ0Ps65tHT6msaizRxvUPNNq0OZ++aAYvUi0E=";
+    hash = "sha256-Xeb16Ravk60DXAjRs1OcCl8axCRwTf9yqXWnva9VQro=";
   };
 
   build-system = with python3Packages; [
@@ -29,16 +29,21 @@ python3Packages.buildPythonApplication (finalAttrs: {
   ];
 
   pythonRelaxDeps = [
-    "agent-client-protocol"
+    "gitpython"
     "mistralai"
     "pydantic"
     "pydantic-settings"
     "watchfiles"
+    "zstandard"
   ];
   dependencies = with python3Packages; [
     agent-client-protocol
     anyio
+    cryptography
+    gitpython
+    giturlparse
     httpx
+    keyring
     mcp
     mistralai
     packaging
@@ -51,10 +56,11 @@ python3Packages.buildPythonApplication (finalAttrs: {
     rich
     textual
     textual-speedups
+    tomli-w
     tree-sitter
     tree-sitter-grammars.tree-sitter-bash
-    tomli-w
     watchfiles
+    zstandard
   ];
 
   pythonImportsCheck = [ "vibe" ];

pkgs/by-name/oc/ocserv/package.nix

@@ -23,13 +23,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "ocserv";
-  version = "1.3.0";
+  version = "1.4.0";
 
   src = fetchFromGitLab {
     owner = "openconnect";
     repo = "ocserv";
     tag = finalAttrs.version;
-    hash = "sha256-oZ1t1BTCdsq1jpa7LfzRGwQNTROHH9/lLBT2WAvj5h4=";
+    hash = "sha256-u6gk1foCmx88iw7vMB9If0zHpd1xpzGsfHx2SxgXSX0=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/om/omnictl/package.nix

@@ -8,13 +8,13 @@
 
 buildGoModule rec {
   pname = "omnictl";
-  version = "1.4.8";
+  version = "1.4.9";
 
   src = fetchFromGitHub {
     owner = "siderolabs";
     repo = "omni";
     rev = "v${version}";
-    hash = "sha256-u2gjwOzpbkqI0gSlld3ZDG7v8S1ul/RRaQXx4cocBYY=";
+    hash = "sha256-oArRGnw4/goAlcw6skw7SRBoPlWAMYHv92Wu7qtBSEQ=";
   };
 
   vendorHash = "sha256-lVUe1XQr46uzx3kfj7KmoiGFUGEb7UT16IQSI8In8RU=";

pkgs/by-name/pa/paretosecurity/package.nix

@@ -17,13 +17,13 @@ buildGoModule (finalAttrs: {
     webkitgtk_4_1
   ];
   pname = "paretosecurity";
-  version = "0.3.13";
+  version = "0.3.14";
 
   src = fetchFromGitHub {
     owner = "ParetoSecurity";
     repo = "agent";
     rev = finalAttrs.version;
-    hash = "sha256-ETKKcEeTLK+srVmIDRC2hYGOKWxNzc18DPn03hc86Bs=";
+    hash = "sha256-Exl1PGTf1i5DKDcU5XOwYE6rEbrD+1wPnjB4rcz3lhA=";
   };
 
   vendorHash = "sha256-jAcUf4VjtKB/Q2wHOVnCgcmPp5XNMqV8Ei9kpWoGO4Q=";

pkgs/by-name/pr/pragtical/package.nix

@@ -23,7 +23,7 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pragtical";
-  version = "3.8.1";
+  version = "3.8.2";
   pluginManagerVersion = "1.4.7.1";
   linenoiseRev = "e78e236c8d85c078fdd9fc4e1f08716058aa1a42";
 
@@ -50,7 +50,7 @@ stdenv.mkDerivation (finalAttrs: {
       find subprojects -type d -name .git -prune -execdir rm -r {} +
     '';
 
-    hash = "sha256-b4qbNkqwyu4Ofaz3hof8lheOKYoerA2hfKMSNsTpHVY=";
+    hash = "sha256-qdOiwn9ThF5LXFNVzvr3MXVRax57bB5T5jDkm/NpgkA=";
   };
 
   strictDeps = true;

pkgs/by-name/pr/prismlauncher/package.nix

@@ -6,6 +6,7 @@
   glfw3-minecraft,
   jdk17,
   jdk21,
+  jdk25,
   jdk8,
   kdePackages,
   lib,
@@ -34,6 +35,7 @@
   controllerSupport ? stdenv.hostPlatform.isLinux,
   gamemodeSupport ? stdenv.hostPlatform.isLinux,
   jdks ? [
+    jdk25
     jdk21
     jdk17
     jdk8

pkgs/by-name/pr/proton-pass/package.nix

@@ -9,11 +9,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "proton-pass";
-  version = "1.33.5";
+  version = "1.34.2";
 
   src = fetchurl {
     url = "https://proton.me/download/pass/linux/x64/proton-pass_${finalAttrs.version}_amd64.deb";
-    hash = "sha256-2H8zqo9UQubz2x7Pt1NG8OK14/ThvVS9Q0s73oTgbhs=";
+    hash = "sha256-i5QQ1uzQ2tSDX4I/APL60QcHh9Ovc7ciueRnz7cZUuE=";
   };
 
   dontConfigure = true;

pkgs/by-name/pu/pulumi-esc/package.nix

@@ -6,13 +6,13 @@
 
 buildGoModule (finalAttrs: {
   pname = "pulumi-esc";
-  version = "0.21.0";
+  version = "0.22.0";
 
   src = fetchFromGitHub {
     owner = "pulumi";
     repo = "esc";
     rev = "v${finalAttrs.version}";
-    hash = "sha256-oTCCPwdepaZif2LJfJtBuw4jQDUwDU+wGNgl+mB52Ko=";
+    hash = "sha256-ogLlcF8KJAhyaRJGv6BMxmwTfy6okFGaD3h825bJ7ls=";
   };
 
   subPackages = "cmd/esc";

pkgs/by-name/pu/pure-prompt/package.nix

@@ -6,13 +6,13 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "pure-prompt";
-  version = "1.26.0";
+  version = "1.27.0";
 
   src = fetchFromGitHub {
     owner = "sindresorhus";
     repo = "pure";
     rev = "v${finalAttrs.version}";
-    sha256 = "sha256-AZSxP2g6BWoxyiSQH7yzbbbfGcwD8jgnXPPfcYwJUL0=";
+    sha256 = "sha256-+X3JehQOKaWKz2jTfWiEUIFc2/+z81sox1dWU+jXiz8=";
   };
 
   strictDeps = true;

pkgs/by-name/py/pyhanko-cli/package.nix

@@ -2,18 +2,19 @@
   lib,
   fetchFromGitHub,
   python3Packages,
+  versionCheckHook,
   nix-update-script,
 }:
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "pyhanko-cli";
-  version = "0.2.0";
+  version = "0.2.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "MatthiasValvekens";
     repo = "pyhanko";
     tag = "pyhanko-cli/v${finalAttrs.version}";
-    hash = "sha256-ZDHAcI2yoiVifYt05V85lz8mJmoyi10g4XoLQ+LhLHE=";
+    hash = "sha256-UyJ9odchy63CcCkJVtBgraRQuD2fxqCciwLuhN4+8aw=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/pkgs/pyhanko-cli";
@@ -40,13 +41,21 @@ python3Packages.buildPythonApplication (finalAttrs: {
     ]
     ++ lib.concatAttrValues pyhanko.optional-dependencies;
 
-  nativeCheckInputs = with python3Packages; [
+  nativeCheckInputs = [
+    versionCheckHook
+  ]
+  ++ (with python3Packages; [
     pytestCheckHook
     pyhanko.testData
     requests-mock
     freezegun
     certomancer
     aiohttp
+  ]);
+
+  disabledTestPaths = [
+    # ImportError: cannot import name 'SOFTHSM' from 'test_utils.signing_commons'
+    "tests/test_cli_signing_pkcs11.py"
   ];
 
   passthru.updateScript = nix-update-script {

pkgs/by-name/ra/rattler-build/package.nix

@@ -14,16 +14,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rattler-build";
-  version = "0.55.1";
+  version = "0.57.2";
 
   src = fetchFromGitHub {
     owner = "prefix-dev";
     repo = "rattler-build";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-H0cEyr0iLkbviYnY/xHrFwiQjzX7w5qQ4O0MhQFghuM=";
+    hash = "sha256-N8sNK/twsDQQt4WQh+4jB6yUX7Aj7kyIt3T0vabzv6U=";
   };
 
-  cargoHash = "sha256-P6KTDVhBlOdvs4CIQDZJWwh8uCQeZo3atmpo6zVEA/Q=";
+  cargoHash = "sha256-3uGrCDvaKZCusdHtqyAQ+9T6K6ZWovgBB4z/ZsrviU0=";
 
   doCheck = false; # test requires network access
 

pkgs/by-name/rc/rclone-ui/package.nix

@@ -20,26 +20,26 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "rclone-ui";
-  version = "3.4.0";
+  version = "3.4.1";
 
   src = fetchFromGitHub {
     owner = "rclone-ui";
     repo = "rclone-ui";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-hG3AOPvLyqNYB/GGAB/b7inDoml7E7tsRi6hMp57t3Q=";
+    hash = "sha256-d4qJtb8eDZ2txeZxGuweK4tuZaq7E7cRNW5wHdNBalY=";
   };
 
   npmDeps = fetchNpmDeps {
     name = "${finalAttrs.pname}-${finalAttrs.version}-npm-deps";
     inherit (finalAttrs) src;
     forceGitDeps = true;
-    hash = "sha256-4m5hVdaF0jQHe4PEWi5dej60SPxAhUVAyX88wLzCT8Y=";
+    hash = "sha256-xnF7c3g3CpMlW3s1UbJHN+R5K+dzV9/IFZ8T/LoT3fk=";
   };
 
   cargoRoot = "src-tauri";
   buildAndTestSubdir = finalAttrs.cargoRoot;
 
-  cargoHash = "sha256-L+2x6XdlxviGveBMVRFLANHrWQvIY2J6NpYayuLKWQY=";
+  cargoHash = "sha256-lemjmsxZsplfC1/nFn84be0JXuKcub5ORkQLL5HQCHY=";
 
   # Disable tauri bundle updater, can be removed when #389107 is merged
   patches = [ ./remove_updater.patch ];

pkgs/by-name/sc/scipopt-gcg/package.nix

@@ -13,13 +13,13 @@
 
 stdenv.mkDerivation rec {
   pname = "scipopt-gcg";
-  version = "4.0.0";
+  version = "4.0.1";
 
   src = fetchFromGitHub {
     owner = "scipopt";
     repo = "gcg";
     tag = "v${version}";
-    hash = "sha256-HMhb35Zkjt3yzYk6X1OfigZjJrLuelrkQyCBs/UpFjc=";
+    hash = "sha256-eu7JHtG10/4rzr4xSdoFJjGQ+X5OeWelkEWJOO7QQmE=";
   };
 
   nativeBuildInputs = [

pkgs/by-name/sc/scipopt-ug/package.nix

@@ -11,15 +11,15 @@
 
 stdenv.mkDerivation rec {
   pname = "scipopt-ug";
-  version = "1.0.0";
+  version = "1.0.1";
 
   # To correlate scipVersion and version, check: https://scipopt.org/#news
-  scipVersion = "10.0.0";
+  scipVersion = "10.0.1";
 
   # Take the SCIPOptSuite source since no other source exists publicly.
   src = fetchzip {
     url = "https://github.com/scipopt/scip/releases/download/v${scipVersion}/scipoptsuite-${scipVersion}.tgz";
-    hash = "sha256-Nskb8quLsox7igz1UZCfd+VjR9Q8/oa8dZBYjAdc1EU=";
+    hash = "sha256-U5tbgGCzUkDL/22RwQLQmvCjSAhxehJe0P5rwNupW6Q=";
   };
 
   sourceRoot = "${src.name}/ug";

pkgs/by-name/si/sickgear/package.nix

@@ -17,13 +17,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
   pname = "sickgear";
-  version = "3.34.10";
+  version = "3.34.11";
 
   src = fetchFromGitHub {
     owner = "SickGear";
     repo = "SickGear";
     tag = "release_${finalAttrs.version}";
-    hash = "sha256-+m5KM1QSIxGr+iCpPjiWRAVeGhp/UGTLF9ZOyfHRqZc=";
+    hash = "sha256-7Jfm/NM5ij/YofU1bpQ8npX6exR1/W6PxvPpulauoMw=";
   };
 
   dontBuild = true;

pkgs/by-name/sm/sm64coopdx/package.nix

@@ -40,13 +40,14 @@ in
 # note: there is a generic builder in pkgs/games/sm64ex/generic.nix that is meant to help build sm64ex and its forks; however sm64coopdx has departed significantly enough in its build that it doesn't make sense to use that other than the baseRom derivation
 stdenv.mkDerivation (finalAttrs: {
   pname = "sm64coopdx";
-  version = "1.4";
+  version = "1.4.1";
 
   src = fetchFromGitHub {
     owner = "coop-deluxe";
     repo = "sm64coopdx";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-ct7X6LCitk1QID00guvYOMfIwnZccMeXqXwUB3ioKh8=";
+    # Replace with `tag = "v${finalAttrs.version}";` in the next version. The upstream repository tagged the wrong commit.
+    rev = "6092488d1c4fc741b16a0789ef9c08ec0279333f";
+    hash = "sha256-BIdKKIp6q9Vp2DByXzT9CJzOszFhjriiWBEqFwUT28M=";
   };
 
   patches = [ ./no-update-check.patch ];
@@ -71,7 +72,7 @@ stdenv.mkDerivation (finalAttrs: {
   desktopItems = [
     (makeDesktopItem {
       name = finalAttrs.pname;
-      desktopName = "Super Mario 64 Coop Deluxe";
+      desktopName = "sm64coopdx";
       exec = "sm64coopdx";
       icon = finalAttrs.pname;
       categories = [ "Game" ];
@@ -142,7 +143,7 @@ stdenv.mkDerivation (finalAttrs: {
     maintainers = [ lib.maintainers.shelvacu ];
     mainProgram = "sm64coopdx";
     homepage = "https://sm64coopdx.com/";
-    changelog = "https://github.com/coop-deluxe/sm64coopdx/releases/tag/v1.3";
+    changelog = "https://github.com/coop-deluxe/sm64coopdx/releases/tag/${finalAttrs.version}";
     sourceProvenance = with lib.sourceTypes; [
       fromSource
       # The lua engine, discord sdk, and coopnet library are vendored pre-built. See https://github.com/coop-deluxe/sm64coopdx/tree/v1.0.3/lib

pkgs/by-name/te/termshot/package.nix

@@ -8,16 +8,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "termshot";
-  version = "0.6.0";
+  version = "0.6.1";
 
   src = fetchFromGitHub {
     owner = "homeport";
     repo = "termshot";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-utaQhUBpFUpxqE+cEJqlQHyJXSo/4UzrA2uqUd88uaM=";
+    hash = "sha256-YYN5ccfWkzthnwLjZAGgH8nm98Oci+KNYij8MS0/XY0=";
   };
 
-  vendorHash = "sha256-3fUvl772pscrQv2wJkRX5wBhAt9fmfIPI7FGq7h7Fqw=";
+  vendorHash = "sha256-fLbRo8f2tNN1vZGsriZ8cL4gU+wa/SfCUBrDLGXd70M=";
 
   ldflags = [
     "-s"

pkgs/by-name/ti/tidal-hifi/electron.nix

@@ -21,7 +21,10 @@ in
       name = "castlabs-electron-${version}";
       inherit version;
       pname = "castlabs-electron";
-      passthru.dist = final.finalPackage.outPath;
+      passthru = {
+        dist = final.finalPackage.outPath;
+        src = final.finalPackage;
+      };
 
       meta = {
         license = lib.licenses.unfreeRedistributable;

pkgs/by-name/ti/tidal-hifi/package.nix

@@ -42,13 +42,16 @@
   libsecret,
   libpulseaudio,
   speechd-minimal,
+  writeShellScript,
+  yq,
+  curl,
+  nix-update,
+  common-updater-scripts,
 
   castlabs-electron ? callPackage ./electron.nix { },
 }:
 
 let
-  version = "6.0.1";
-
   electronLibPath = lib.makeLibraryPath [
     alsa-lib
     at-spi2-atk
@@ -89,13 +92,13 @@ let
 in
 buildNpmPackage (finalAttrs: {
   pname = "tidal-hifi";
-  inherit version;
+  version = "6.1.0";
 
   src = fetchFromGitHub {
     owner = "Mastermindzh";
     repo = "tidal-hifi";
-    tag = version;
-    hash = "sha256-wc8KsZGNjaIG9sijVGEzoJ7ZTmu4xX8b/ETjlMkNyDs=";
+    tag = finalAttrs.version;
+    hash = "sha256-wNYcjFbePWhtkPqR4byGE+FlRNEUv2/EoTYQE2JRAyE=";
   };
 
   nativeBuildInputs = [
@@ -104,7 +107,7 @@ buildNpmPackage (finalAttrs: {
     copyDesktopItems
   ];
 
-  npmDepsHash = "sha256-lec3XcdZc+lcp/b175m/4dgBPLJCvlUPN8Ttqdehgw4=";
+  npmDepsHash = "sha256-OTETAe9RW3tBkGS7AlboxX/hUiGax7lxbtdXwRnr9X8=";
   forceGitDeps = true;
   makeCacheWritable = true;
 
@@ -187,8 +190,30 @@ buildNpmPackage (finalAttrs: {
       "''${gappsWrapperArgs[@]}"
   '';
 
+  passthru = {
+    inherit castlabs-electron;
+    updateScript = writeShellScript "update" ''
+      set -xeuo pipefail
+      export PATH="${
+        lib.makeBinPath [
+          nix-update
+          yq
+          curl
+          common-updater-scripts
+        ]
+      }:$PATH"
+
+      nix-update 'tidal-hifi'
+
+      TIDAL_VERSION="$(nix-instantiate --eval --raw -A 'tidal-hifi.version')"
+      NEW_VERSION="$(curl --silent "https://raw.githubusercontent.com/Mastermindzh/tidal-hifi/refs/tags/$TIDAL_VERSION/build/electron-builder.base.yml" | yq -r '.electronVersion')"
+
+      NIXPKGS_ALLOW_UNFREE=1 update-source-version tidal-hifi.castlabs-electron "$NEW_VERSION"
+    '';
+  };
+
   meta = {
-    changelog = "https://github.com/Mastermindzh/tidal-hifi/releases/tag/${version}";
+    changelog = "https://github.com/Mastermindzh/tidal-hifi/releases/tag/${finalAttrs.version}";
     description = "Web version of Tidal running in Electron with Hi-Fi support thanks to Widevine";
     homepage = "https://github.com/Mastermindzh/tidal-hifi";
     license = lib.licenses.mit;

pkgs/by-name/vu/vue-language-server/package.nix

@@ -46,7 +46,7 @@ stdenv.mkDerivation (finalAttrs: {
     find packages.dontpruneme/**/node_modules -xtype l -delete
     mv packages.dontpruneme packages
 
-    find -type f \( -name "*.ts" -o -name "*.map" \) -exec rm -rf {} +
+    find -type f \( -name "*.ts" ! -name "*.d.ts" -o -name "*.map" \) -exec rm -rf {} +
 
     # https://github.com/pnpm/pnpm/issues/3645
     find node_modules packages/language-server/node_modules -xtype l -delete

pkgs/by-name/wa/wayvr/package.nix

@@ -25,16 +25,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "wayvr";
-  version = "26.2.0";
+  version = "26.2.1";
 
   src = fetchFromGitHub {
     owner = "wlx-team";
     repo = "wayvr";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-RjZ9CmTHacw50TVxl53z4E2Yp/XW/sgf4WjYL6pd1s8=";
+    hash = "sha256-v1Wkelru825KV+ciXD9esLq39oTyMm/Z4rRbN+jjviY=";
   };
 
-  cargoHash = "sha256-xv6l+zCp3tkJs0c10f+omcwY8/wd2HWlZeFHDiUfkso=";
+  cargoHash = "sha256-d6iRaOHq+4j90L76bx7+EwCLOY4MxPeqm3ELJ5H9O+8=";
 
   nativeBuildInputs = [
     pkg-config

pkgs/by-name/we/websurfx/package.nix

@@ -6,7 +6,7 @@
   pkg-config,
 }:
 let
-  version = "1.24.46";
+  version = "1.24.47";
 in
 rustPlatform.buildRustPackage {
   pname = "websurfx";
@@ -16,7 +16,7 @@ rustPlatform.buildRustPackage {
     owner = "neon-mmd";
     repo = "websurfx";
     tag = "v${version}";
-    hash = "sha256-UEhnexMiMIheM5+paythCUjNdbOf9BDUN1Kd/Fn5RbM=";
+    hash = "sha256-CIGq1uQl5RcxzoX7mnruFDNlgP5RlVLT6/e2ClGaQGE=";
   };
 
   nativeBuildInputs = [
@@ -27,7 +27,7 @@ rustPlatform.buildRustPackage {
     openssl
   ];
 
-  cargoHash = "sha256-tPOv+sXFz9wOrw9jp2UIOD1pxOhrxew1M/ZcKK40+R0=";
+  cargoHash = "sha256-8zp8qsD2D9wSaeXY2JQuP4evXFDASOwMeOYe3HbHYp4=";
 
   postPatch = ''
     substituteInPlace src/handler.rs \

pkgs/by-name/xp/xpipe/package.nix

@@ -39,7 +39,7 @@ let
 
   hash =
     {
-      x86_64-linux = "sha256-s+o4nSCjLvbJZBb6quh8DkfQxTZ7erSCJhC/DLiyNCc=";
+      x86_64-linux = "sha256-inyq4HXw5vU9vCK6sVJq7GrpkRh/BdfsSlb8Ekx0xGI=";
     }
     .${system} or throwSystem;
 
@@ -48,7 +48,7 @@ let
 in
 stdenvNoCC.mkDerivation rec {
   pname = "xpipe";
-  version = "20.3";
+  version = "21.0";
 
   src = fetchzip {
     url = "https://github.com/xpipe-io/xpipe/releases/download/${version}/xpipe-portable-linux-${arch}.tar.gz";

pkgs/by-name/za/zapzap/package.nix

@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "zapzap";
-  version = "6.2.9";
+  version = "6.2.10.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "rafatosta";
     repo = "zapzap";
     tag = finalAttrs.version;
-    hash = "sha256-UEnl76QnxDtcdHFoP/RLUAqkZCBer6qqcIjGWVZGVdg=";
+    hash = "sha256-dNHDR9sZWPetdwpS5u0UCn5sCkDMEw5YoE4QBerU2Sg=";
   };
 
   nativeBuildInputs = [

pkgs/development/interpreters/erlang/29.nix

@@ -0,0 +1,6 @@
+genericBuilder:
+
+genericBuilder {
+  version = "29.0-rc1";
+  hash = "sha256-3AR2NbOT6pUHRCRgVK5IGl1jqPydim50dH0fy46SMX0=";
+}

pkgs/development/libraries/mesa/common.nix

@@ -5,14 +5,14 @@
 # nix build .#legacyPackages.x86_64-darwin.mesa .#legacyPackages.aarch64-darwin.mesa
 rec {
   pname = "mesa";
-  version = "25.3.5";
+  version = "26.0.0";
 
   src = fetchFromGitLab {
     domain = "gitlab.freedesktop.org";
     owner = "mesa";
     repo = "mesa";
     rev = "mesa-${version}";
-    hash = "sha256-IihkUQU5eY4UNjuUVGwTt9mPcH7LXphgUOR2Qc4ZmTc=";
+    hash = "sha256-CUJi0qWmxjC6MxmXDKrza6bOjYwbh//NcTTI2Z165lI=";
   };
 
   meta = {

pkgs/development/ocaml-modules/ocplib-simplex/0_4.nix

@@ -0,0 +1,41 @@
+{
+  lib,
+  fetchFromGitHub,
+  stdenv,
+  autoreconfHook,
+  ocaml,
+  findlib,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "ocplib-simplex";
+  version = "0.4.1";
+
+  src = fetchFromGitHub {
+    owner = "OCamlPro";
+    repo = finalAttrs.pname;
+    rev = "v${finalAttrs.version}";
+    hash = "sha256-bhlTBpJg031x2lUjwuVrhQgOGmDLW/+0naN8wRjv6i4=";
+  };
+
+  nativeBuildInputs = [
+    autoreconfHook
+    ocaml
+    findlib
+  ];
+
+  preInstall = ''
+    mkdir -p $out/lib/ocaml/${ocaml.version}/site-lib/
+  '';
+
+  postInstall = ''
+    mv $out/lib/${finalAttrs.pname} $out/lib/ocaml/${ocaml.version}/site-lib
+  '';
+
+  meta = {
+    description = "OCaml library implementing a simplex algorithm, in a functional style, for solving systems of linear inequalities";
+    homepage = "https://github.com/OCamlPro/ocplib-simplex";
+    license = lib.licenses.lgpl21Only;
+    maintainers = with lib.maintainers; [ redianthus ];
+  };
+})

pkgs/development/python-modules/agent-client-protocol/default.nix

@@ -17,16 +17,16 @@
   pytestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "agent-client-protocol";
-  version = "0.7.1";
+  version = "0.8.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "agentclientprotocol";
     repo = "python-sdk";
-    tag = version;
-    hash = "sha256-pUOs6TUc0qmY+/AWTtm5kKouHKL8cLMhJ+nZT4r+6sI=";
+    tag = finalAttrs.version;
+    hash = "sha256-MFfHr0bPBSMxb6HMndbrw/Aidd8TXUKwFam6+TroXkI=";
   };
 
   build-system = [
@@ -56,11 +56,13 @@ buildPythonPackage rec {
     "test_spawn_agent_process_roundtrip"
   ];
 
+  __darwinAllowLocalNetworking = true;
+
   meta = {
     description = "Python SDK for ACP clients and agents";
     homepage = "https://github.com/agentclientprotocol/python-sdk";
-    changelog = "https://github.com/agentclientprotocol/python-sdk/releases/tag/${src.tag}";
+    changelog = "https://github.com/agentclientprotocol/python-sdk/releases/tag/${finalAttrs.src.tag}";
     license = lib.licenses.asl20;
     maintainers = with lib.maintainers; [ GaetanLepage ];
   };
-}
+})

pkgs/development/python-modules/asdf-coordinates-schemas/default.nix

@@ -10,14 +10,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "asdf-coordinates-schemas";
-  version = "0.5.0";
+  version = "0.5.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "asdf-format";
     repo = "asdf-coordinates-schemas";
     tag = finalAttrs.version;
-    hash = "sha256-gz4SmhPHevcn+40ODcSEdmzlGQFSQaoME64dWCNJKFI=";
+    hash = "sha256-GkYbUCuyDW2t8boYi+dknQ+0Pt6MjvU1PxOYcPfbFLw=";
   };
 
   build-system = [

pkgs/development/python-modules/awswrangler/default.nix

@@ -25,14 +25,14 @@
 
 buildPythonPackage rec {
   pname = "awswrangler";
-  version = "3.15.0";
+  version = "3.15.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "aws";
     repo = "aws-sdk-pandas";
     tag = version;
-    hash = "sha256-y/sVpg5ch7B2EPXNOwCB0BHjkgEe8Nkfu4gXahrLdNI=";
+    hash = "sha256-fwiYuT3ICk5PAeCVAGiBj4eyVgLOFvbzkYWUPVX+YtE=";
   };
 
   pythonRelaxDeps = [

pkgs/development/python-modules/boto3-stubs/default.nix

@@ -358,13 +358,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "boto3-stubs";
-  version = "1.42.45";
+  version = "1.42.46";
   pyproject = true;
 
   src = fetchPypi {
     pname = "boto3_stubs";
     inherit (finalAttrs) version;
-    hash = "sha256-UWHrEHrDnfWI0kTZBfU35C+V7Q3eLTuVc1NAZmCq1gs=";
+    hash = "sha256-o5iSlgn8jNf3vE+xfur2EtcqeoJk7H8YtXnKSY5JLQA=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/claude-agent-sdk/default.nix

@@ -13,14 +13,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "claude-agent-sdk";
-  version = "0.1.33";
+  version = "0.1.35";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "anthropics";
     repo = "claude-agent-sdk-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-AnwkyP5qTL+pYfrFvjCNPsy15whfj8dJjZC9Qma03+c=";
+    hash = "sha256-vk8X9yt3GCTL3cGEEAf5CShtMTvDNKU3UrNHvhnaLto=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/cohere/default.nix

@@ -20,14 +20,14 @@
 
 buildPythonPackage rec {
   pname = "cohere";
-  version = "5.20.3";
+  version = "5.20.4";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "cohere-ai";
     repo = "cohere-python";
     tag = version;
-    hash = "sha256-KHuUsZYg3k0YogjAC9kCnj59isUOnkIJ2e8M4ZcWAnY=";
+    hash = "sha256-rIyiqlh8gnkHGJQs9EqNruVTvaScFwoEtF5YaEPzhXQ=";
   };
 
   build-system = [ poetry-core ];

pkgs/development/python-modules/facedancer/default.nix

@@ -2,10 +2,12 @@
   lib,
   buildPythonPackage,
   fetchFromGitHub,
+  pythonAtLeast,
   pyusb,
   pyserial,
   prompt-toolkit,
   libusb1,
+  hid-parser,
   setuptools,
 }:
 
@@ -36,6 +38,7 @@ buildPythonPackage rec {
     pyserial
     prompt-toolkit
     libusb1
+    hid-parser
   ];
 
   pythonImportsCheck = [
@@ -51,5 +54,7 @@ buildPythonPackage rec {
       mog
       carlossless
     ];
+    # https://github.com/greatscottgadgets/facedancer/issues/172
+    broken = pythonAtLeast "3.14";
   };
 }

pkgs/development/python-modules/fastcore/default.nix

@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "fastcore";
-  version = "1.12.11";
+  version = "1.12.12";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "fastai";
     repo = "fastcore";
     tag = finalAttrs.version;
-    hash = "sha256-oClLlBtGFG5ZjkL09HoAvejXamP97a03+kmi9UxpjEc=";
+    hash = "sha256-RWcYZ8sEJ+J+gIHJ7IxJ3AKXxNHQbsRKtkksp8yQb5o=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/formulae/default.nix

@@ -19,14 +19,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "formulae";
-  version = "0.6.1";
+  version = "0.6.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "bambinos";
     repo = "formulae";
     tag = finalAttrs.version;
-    hash = "sha256-RrG0jkQAGq04cQ1MY5W0j76++tu7NerLC/HHpVVa5xQ=";
+    hash = "sha256-Q+oHt9euUBQs/D5TlJeeUN76HwQkmGHC1cTzmAQx+2M=";
   };
 
   build-system = [

pkgs/development/python-modules/google-cloud-vision/default.nix

@@ -13,13 +13,13 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "google-cloud-vision";
-  version = "3.12.0";
+  version = "3.12.1";
   pyproject = true;
 
   src = fetchPypi {
     pname = "google_cloud_vision";
     inherit (finalAttrs) version;
-    hash = "sha256-MACaIsl5s7D1LBBYprYbsZo+qPJoYRRm/L8wm3T/RzQ=";
+    hash = "sha256-+ZuDr3WI0w5wi4fgn/c+Q+OASX/oLHmbnwXgPzEAJ8g=";
   };
 
   build-system = [ setuptools ];

pkgs/development/python-modules/hdfury/default.nix

@@ -8,14 +8,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "hdfury";
-  version = "1.4.2";
+  version = "1.5.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "glenndehaan";
     repo = "python-hdfury";
     tag = finalAttrs.version;
-    hash = "sha256-prqaH868nC5b7+1TrVRDxCcAt4v1dyF3bQAnkQgjKx0=";
+    hash = "sha256-UVJgmCwsvtx/Zq2qqTI8E1DmC4ayoWWI7duaommUQ2I=";
   };
 
   build-system = [ hatchling ];

pkgs/development/python-modules/helium/default.nix

@@ -15,14 +15,14 @@
 
 buildPythonPackage rec {
   pname = "helium";
-  version = "6.0.0";
+  version = "7.0.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mherrmann";
     repo = "helium";
     tag = "v${version}";
-    hash = "sha256-d64nzFB8nzLZ7nmhh+xcui3jPFAbyAF+diRksnujzGU=";
+    hash = "sha256-SGLxP2OOzosLpZn/DgIJN3BnbUeg8cXE1HhKBF4EpyM=";
   };
 
   build-system = [

pkgs/development/python-modules/hid/default.nix

@@ -8,12 +8,12 @@
 
 buildPythonPackage rec {
   pname = "hid";
-  version = "1.0.8";
+  version = "1.0.9";
   pyproject = true;
 
   src = fetchPypi {
     inherit pname version;
-    hash = "sha256-XKEpp7lDSs5ePkKcEJKhZ5L+/68Geka2ZunFhocs3P4=";
+    hash = "sha256-9EcfEfDhdtGwyxskPlVJjMkDR6Ou3nNWVTBDlWlKwYI=";
   };
 
   postPatch = ''