diff --git a/pkgs/by-name/kr/kryoptic/0001-Add-Cargo.lock.patch b/pkgs/by-name/kr/kryoptic/0001-Add-Cargo.lock.patch
index 4cfd9a099ca2..7c4d7cfd9426 100644
--- a/pkgs/by-name/kr/kryoptic/0001-Add-Cargo.lock.patch
+++ b/pkgs/by-name/kr/kryoptic/0001-Add-Cargo.lock.patch
@@ -1,36 +1,24 @@
-From 9c18bc06ee221eaf53d6cf9ffc58a8dacb001e47 Mon Sep 17 00:00:00 2001
+From 4379e80d653061cad4de9ec1104573933aacc2a6 Mon Sep 17 00:00:00 2001
 From: Morgan Jones <me@numin.it>
-Date: Sun, 25 Jan 2026 16:48:38 -0800
+Date: Mon, 10 Nov 2025 23:25:00 -0800
 Subject: [PATCH] Add Cargo.lock
 
 ---
- Cargo.lock | 1049 ++++++++++++++++++++++++++++++++++++++++++++++++++++
- 1 file changed, 1049 insertions(+)
+ Cargo.lock | 1231 ++++++++++++++++++++++++++++++++++++++++++++++++++++
+ 1 file changed, 1231 insertions(+)
  create mode 100644 Cargo.lock
 
 diff --git a/Cargo.lock b/Cargo.lock
 new file mode 100644
-index 0000000..d137ab5
+index 0000000..da8925d
 --- /dev/null
 +++ b/Cargo.lock
-@@ -0,0 +1,1049 @@
+@@ -0,0 +1,1231 @@
 +# This file is automatically @generated by Cargo.
 +# It is not intended for manual editing.
 +version = 4
 +
 +[[package]]
-+name = "ahash"
-+version = "0.8.12"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
-+dependencies = [
-+ "cfg-if",
-+ "once_cell",
-+ "version_check",
-+ "zerocopy",
-+]
-+
-+[[package]]
 +name = "aho-corasick"
 +version = "1.1.4"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
@@ -46,10 +34,16 @@ index 0000000..d137ab5
 +checksum = "5192cca8006f1fd4f7237516f40fa183bb07f8fbdfedaa0036de5ea9b0b45e78"
 +
 +[[package]]
-+name = "asn1"
-+version = "0.21.3"
++name = "anyhow"
++version = "1.0.102"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "2d9c3502a6f1b50a2c69b97b71638a81ad3b21b9874604880401b9b2b0bf758f"
++checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
++
++[[package]]
++name = "asn1"
++version = "0.22.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "df42c2b01c5e1060b8281f67b4e5fb858260694916a667345a7305cd11e5dbfa"
 +dependencies = [
 + "asn1_derive",
 + "itoa",
@@ -57,9 +51,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "asn1_derive"
-+version = "0.21.3"
++version = "0.22.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "1766ebcb519d8dd186d60dfa912571edcaa2c1f995e2e56643a261a87df69a61"
++checksum = "cdccf849b54365e3693e9a90ad36e4482b79937e6373ac8e2cf229c985187b21"
 +dependencies = [
 + "proc-macro2",
 + "quote",
@@ -80,11 +74,11 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "bindgen"
-+version = "0.71.1"
++version = "0.72.1"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "5f58bf3d7db68cfbac37cfc485a8d711e87e064c3d0fe0435b92f7a407f9d6b3"
++checksum = "993776b509cfb49c750f11b8f07a46fa23e0a1386ffc01fb1e7d343efc387895"
 +dependencies = [
-+ "bitflags 2.10.0",
++ "bitflags",
 + "cexpr",
 + "clang-sys",
 + "itertools 0.13.0",
@@ -100,27 +94,21 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "bitflags"
-+version = "1.3.2"
++version = "2.11.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
-+
-+[[package]]
-+name = "bitflags"
-+version = "2.10.0"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "812e12b5285cc515a9c72a5c1d3b6d46a19dac5acfef5265968c166106e31dd3"
++checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af"
 +
 +[[package]]
 +name = "bumpalo"
-+version = "3.19.1"
++version = "3.20.2"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
++checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb"
 +
 +[[package]]
 +name = "cc"
-+version = "1.2.54"
++version = "1.2.56"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "6354c81bbfd62d9cfa9cb3c773c2b7b2a3a482d569de977fd0e961f6e7c00583"
++checksum = "aebf35691d1bfb0ac386a69bac2fde4dd276fb618cf8bf4f5318fe285e821bb2"
 +dependencies = [
 + "find-msvc-tools",
 + "shlex",
@@ -154,9 +142,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "clap"
-+version = "4.5.54"
++version = "4.5.60"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "c6e6ff9dcd79cff5cd969a17a545d79e84ab086e444102a591e288a8aa3ce394"
++checksum = "2797f34da339ce31042b27d23607e051786132987f595b02ba4f6a6dffb7030a"
 +dependencies = [
 + "clap_builder",
 + "clap_derive",
@@ -164,9 +152,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "clap_builder"
-+version = "4.5.54"
++version = "4.5.60"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "fa42cf4d2b7a41bc8f663a7cab4031ebafa1bf3875705bfaf8466dc60ab52c00"
++checksum = "24a241312cea5059b13574bb9b3861cabf758b879c15190b37b6d6fd63ab6876"
 +dependencies = [
 + "anstyle",
 + "clap_lex",
@@ -174,9 +162,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "clap_derive"
-+version = "4.5.49"
++version = "4.5.55"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "2a0b5487afeab2deb2ff4e03a807ad1a03ac532ff5a2cee5d86884440c7f7671"
++checksum = "a92793da1a46a5f2a02a6f4c46c6496b28c43638adea8306fcb0caa1634f24e5"
 +dependencies = [
 + "heck",
 + "proc-macro2",
@@ -186,35 +174,34 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "clap_lex"
-+version = "0.7.7"
++version = "1.0.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "c3e64b0cc0439b12df2fa678eae89a1c56a529fd067a9115f7827f1fffd22b32"
++checksum = "3a822ea5bc7590f9d40f1ba12c0dc3c2760f3482c6984db1573ad11031420831"
 +
 +[[package]]
 +name = "constant_time_eq"
-+version = "0.3.1"
++version = "0.4.2"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "7c74b8349d32d297c9134b8c88677813a227df8f779daa29bfc29c183fe3dca6"
++checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
 +
 +[[package]]
 +name = "cryptoki"
-+version = "0.10.0"
++version = "0.12.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "781357a7779a8e92ea985121bbf379a9adf0777f44ab6392efc6abd5aa9b67db"
++checksum = "ff765b99fc49f3116c9a908484486a2b92fd73c48da45c3a69716471c6cc56c6"
 +dependencies = [
-+ "bitflags 1.3.2",
++ "bitflags",
 + "cryptoki-sys",
 + "libloading",
 + "log",
-+ "paste",
 + "secrecy",
 +]
 +
 +[[package]]
 +name = "cryptoki-sys"
-+version = "0.4.0"
++version = "0.5.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "753e27d860277930ae9f394c119c8c70303236aab0ffab1d51f3d207dbb2bc4b"
++checksum = "f1fd850498411e4057f1cba79e6e2bc7cbe960544c1046ab46d4685c403a1121"
 +dependencies = [
 + "libloading",
 +]
@@ -227,9 +214,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "deranged"
-+version = "0.5.5"
++version = "0.5.8"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "ececcb659e7ba858fb4f10388c250a7252eb0a27373f1a72b8748afdd248e587"
++checksum = "7cd812cc2bc1d69d4764bd80df88b4317eaef9e773c75226407d9bc0876b211c"
 +dependencies = [
 + "powerfmt",
 +]
@@ -241,6 +228,12 @@ index 0000000..d137ab5
 +checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
 +
 +[[package]]
++name = "equivalent"
++version = "1.0.2"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
++
++[[package]]
 +name = "fallible-iterator"
 +version = "0.3.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
@@ -254,21 +247,33 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "find-msvc-tools"
-+version = "0.1.8"
++version = "0.1.9"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "8591b0bcc8a98a64310a2fae1bb3e9b8564dd10e381e6e28010fde8e8e8568db"
++checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
++
++[[package]]
++name = "foldhash"
++version = "0.1.5"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
++
++[[package]]
++name = "foldhash"
++version = "0.2.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
 +
 +[[package]]
 +name = "futures-core"
-+version = "0.3.31"
++version = "0.3.32"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e"
++checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
 +
 +[[package]]
 +name = "futures-executor"
-+version = "0.3.31"
++version = "0.3.32"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f"
++checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
 +dependencies = [
 + "futures-core",
 + "futures-task",
@@ -277,33 +282,33 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "futures-task"
-+version = "0.3.31"
++version = "0.3.32"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988"
++checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
 +
 +[[package]]
 +name = "futures-util"
-+version = "0.3.31"
++version = "0.3.32"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81"
++checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
 +dependencies = [
 + "futures-core",
 + "futures-task",
 + "pin-project-lite",
-+ "pin-utils",
 + "slab",
 +]
 +
 +[[package]]
 +name = "getrandom"
-+version = "0.3.4"
++version = "0.4.2"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
++checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
 +dependencies = [
 + "cfg-if",
 + "libc",
 + "r-efi",
 + "wasip2",
++ "wasip3",
 +]
 +
 +[[package]]
@@ -314,20 +319,29 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "hashbrown"
-+version = "0.14.5"
++version = "0.15.5"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
++checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
 +dependencies = [
-+ "ahash",
++ "foldhash 0.1.5",
++]
++
++[[package]]
++name = "hashbrown"
++version = "0.16.1"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
++dependencies = [
++ "foldhash 0.2.0",
 +]
 +
 +[[package]]
 +name = "hashlink"
-+version = "0.9.1"
++version = "0.11.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "6ba4ff7128dee98c7dc9794b6a411377e1404dba1c97deb8d1a55297bd25d8af"
++checksum = "ea0b22561a9c04a7cb1a302c013e0259cd3b4bb619f145b32f72b8b4bcbed230"
 +dependencies = [
-+ "hashbrown",
++ "hashbrown 0.16.1",
 +]
 +
 +[[package]]
@@ -343,6 +357,24 @@ index 0000000..d137ab5
 +checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
 +
 +[[package]]
++name = "id-arena"
++version = "2.3.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "3d3067d79b975e8844ca9eb072e16b31c3c1c36928edf9c6789548c524d0d954"
++
++[[package]]
++name = "indexmap"
++version = "2.13.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "7714e70437a7dc3ac8eb7e6f8df75fd8eb422675fc7678aff7364301092b1017"
++dependencies = [
++ "equivalent",
++ "hashbrown 0.16.1",
++ "serde",
++ "serde_core",
++]
++
++[[package]]
 +name = "itertools"
 +version = "0.13.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
@@ -368,9 +400,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "js-sys"
-+version = "0.3.85"
++version = "0.3.91"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "8c942ebf8e95485ca0d52d97da7c5a2c387d0e7f0ba4c35e93bfcaee045955b3"
++checksum = "b49715b7073f385ba4bc528e5747d02e66cb39c6146efb66b781f131f0fb399c"
 +dependencies = [
 + "once_cell",
 + "wasm-bindgen",
@@ -378,22 +410,24 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "kryoptic"
-+version = "1.4.0"
++version = "1.5.0"
 +dependencies = [
++ "cryptoki",
 + "kryoptic-lib",
 + "ossl",
 +]
 +
 +[[package]]
 +name = "kryoptic-lib"
-+version = "1.4.0"
++version = "1.5.0"
 +dependencies = [
 + "asn1",
 + "bimap",
 + "bindgen",
-+ "bitflags 2.10.0",
++ "bitflags",
 + "constant_time_eq",
 + "data-encoding",
++ "getrandom",
 + "hex",
 + "itertools 0.14.0",
 + "libc",
@@ -409,11 +443,12 @@ index 0000000..d137ab5
 + "simplelog",
 + "toml",
 + "uuid",
++ "vsprintf",
 +]
 +
 +[[package]]
 +name = "kryoptic-tools"
-+version = "1.4.0"
++version = "1.5.0"
 +dependencies = [
 + "clap",
 + "cryptoki",
@@ -426,10 +461,16 @@ index 0000000..d137ab5
 +]
 +
 +[[package]]
-+name = "libc"
-+version = "0.2.180"
++name = "leb128fmt"
++version = "0.1.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "bcc35a38544a891a5f7c865aca548a982ccb3b8650a5b06d0fd33a10283c56fc"
++checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2"
++
++[[package]]
++name = "libc"
++version = "0.2.183"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "b5b646652bf6661599e1da8901b3b9522896f01e736bad5f723fe7a3a27f899d"
 +
 +[[package]]
 +name = "libloading"
@@ -443,9 +484,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "libsqlite3-sys"
-+version = "0.28.0"
++version = "0.36.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "0c10584274047cb335c23d3e61bcef8e323adae7c5c8c760540f73610177fc3f"
++checksum = "95b4103cffefa72eb8428cb6b47d6627161e51c2739fc5e3b734584157bc642a"
 +dependencies = [
 + "cc",
 + "pkg-config",
@@ -469,9 +510,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "memchr"
-+version = "2.7.6"
++version = "2.8.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "f52b00d39961fc5b2736ea853c9cc86238e165017a493d1d5c8eac6bdc4cc273"
++checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
 +
 +[[package]]
 +name = "minimal-lexical"
@@ -531,11 +572,10 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "ossl"
-+version = "1.4.0"
++version = "1.5.0"
 +dependencies = [
 + "bindgen",
 + "cfg-if",
-+ "getrandom",
 + "hex",
 + "libc",
 + "log",
@@ -568,22 +608,10 @@ index 0000000..d137ab5
 +]
 +
 +[[package]]
-+name = "paste"
-+version = "1.0.15"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
-+
-+[[package]]
 +name = "pin-project-lite"
-+version = "0.2.16"
++version = "0.2.17"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
-+
-+[[package]]
-+name = "pin-utils"
-+version = "0.1.0"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
++checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
 +
 +[[package]]
 +name = "pkg-config"
@@ -628,18 +656,18 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "quote"
-+version = "1.0.44"
++version = "1.0.45"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "21b2ebcf727b7760c461f091f9f0f539b77b8e87f2fd88131e7f1b433b3cece4"
++checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
 +dependencies = [
 + "proc-macro2",
 +]
 +
 +[[package]]
 +name = "r-efi"
-+version = "5.3.0"
++version = "6.0.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
++checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 +
 +[[package]]
 +name = "redox_syscall"
@@ -647,14 +675,14 @@ index 0000000..d137ab5
 +source = "registry+https://github.com/rust-lang/crates.io-index"
 +checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
 +dependencies = [
-+ "bitflags 2.10.0",
++ "bitflags",
 +]
 +
 +[[package]]
 +name = "regex"
-+version = "1.12.2"
++version = "1.12.3"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "843bc0191f75f3e22651ae5f1e72939ab2f72a4bc30fa80a066bd66edefc24d4"
++checksum = "e10754a14b9137dd7b1e3e5b0493cc9171fdd105e0ab477f51b72e7f3ac0e276"
 +dependencies = [
 + "aho-corasick",
 + "memchr",
@@ -664,9 +692,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "regex-automata"
-+version = "0.4.13"
++version = "0.4.14"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "5276caf25ac86c8d810222b3dbb938e512c55c6831a10f3e6ed1c93b84041f1c"
++checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
 +dependencies = [
 + "aho-corasick",
 + "memchr",
@@ -675,22 +703,33 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "regex-syntax"
-+version = "0.8.8"
++version = "0.8.10"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "7a2d987857b319362043e95f5353c0535c1f58eec5336fdfcf626430af7def58"
++checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
++
++[[package]]
++name = "rsqlite-vfs"
++version = "0.1.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "a8a1f2315036ef6b1fbacd1972e8ee7688030b0a2121edfc2a6550febd41574d"
++dependencies = [
++ "hashbrown 0.16.1",
++ "thiserror",
++]
 +
 +[[package]]
 +name = "rusqlite"
-+version = "0.31.0"
++version = "0.38.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "b838eba278d213a8beaf485bd313fd580ca4505a00d5871caeb1457c55322cae"
++checksum = "f1c93dd1c9683b438c392c492109cb702b8090b2bfc8fed6f6e4eb4523f17af3"
 +dependencies = [
-+ "bitflags 2.10.0",
++ "bitflags",
 + "fallible-iterator",
 + "fallible-streaming-iterator",
 + "hashlink",
 + "libsqlite3-sys",
 + "smallvec",
++ "sqlite-wasm-rs",
 +]
 +
 +[[package]]
@@ -728,14 +767,20 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "secrecy"
-+version = "0.8.0"
++version = "0.10.3"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "9bd1c54ea06cfd2f6b63219704de0b9b4f72dcc2b8fdef820be6cd799780e91e"
++checksum = "e891af845473308773346dc847b2c23ee78fe442e0472ac50e22a18a93d3ae5a"
 +dependencies = [
 + "zeroize",
 +]
 +
 +[[package]]
++name = "semver"
++version = "1.0.27"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
++
++[[package]]
 +name = "serde"
 +version = "1.0.228"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
@@ -789,9 +834,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "serial_test"
-+version = "3.3.1"
++version = "3.4.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "0d0b343e184fc3b7bb44dff0705fffcf4b3756ba6aff420dddd8b24ca145e555"
++checksum = "911bd979bf1070a3f3aa7b691a3b3e9968f339ceeec89e08c280a8a22207a32f"
 +dependencies = [
 + "futures-executor",
 + "futures-util",
@@ -804,9 +849,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "serial_test_derive"
-+version = "3.3.1"
++version = "3.4.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "6f50427f258fb77356e4cd4aa0e87e2bd2c66dbcee41dc405282cae2bfc26c83"
++checksum = "0a7d91949b85b0d2fb687445e448b40d322b6b3e4af6b44a29b21d9a5f33e6d9"
 +dependencies = [
 + "proc-macro2",
 + "quote",
@@ -831,9 +876,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "slab"
-+version = "0.4.11"
++version = "0.4.12"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "7a2ae44ef20feb57a68b23d846850f861394c2e02dc425a50098ae8c90267589"
++checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
 +
 +[[package]]
 +name = "smallvec"
@@ -842,10 +887,22 @@ index 0000000..d137ab5
 +checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
 +
 +[[package]]
-+name = "syn"
-+version = "2.0.114"
++name = "sqlite-wasm-rs"
++version = "0.5.2"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a"
++checksum = "2f4206ed3a67690b9c29b77d728f6acc3ce78f16bf846d83c94f76400320181b"
++dependencies = [
++ "cc",
++ "js-sys",
++ "rsqlite-vfs",
++ "wasm-bindgen",
++]
++
++[[package]]
++name = "syn"
++version = "2.0.117"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
 +dependencies = [
 + "proc-macro2",
 + "quote",
@@ -853,10 +910,30 @@ index 0000000..d137ab5
 +]
 +
 +[[package]]
-+name = "time"
-+version = "0.3.46"
++name = "thiserror"
++version = "2.0.18"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "9da98b7d9b7dad93488a84b8248efc35352b0b2657397d4167e7ad67e5d535e5"
++checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
++dependencies = [
++ "thiserror-impl",
++]
++
++[[package]]
++name = "thiserror-impl"
++version = "2.0.18"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
++dependencies = [
++ "proc-macro2",
++ "quote",
++ "syn",
++]
++
++[[package]]
++name = "time"
++version = "0.3.47"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "743bd48c283afc0388f9b8827b976905fb217ad9e647fae3a379a9283c4def2c"
 +dependencies = [
 + "deranged",
 + "itoa",
@@ -875,9 +952,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "time-macros"
-+version = "0.2.26"
++version = "0.2.27"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "78cc610bac2dcee56805c99642447d4c5dbde4d01f752ffea0199aee1f601dc4"
++checksum = "2e70e4c5a0e0a8a4823ad65dfe1a6930e4f4d756dcd9dd7939022b5e8c501215"
 +dependencies = [
 + "num-conv",
 + "time-core",
@@ -885,9 +962,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "toml"
-+version = "0.9.11+spec-1.1.0"
++version = "1.0.6+spec-1.1.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "f3afc9a848309fe1aaffaed6e1546a7a14de1f935dc9d89d32afd9a44bab7c46"
++checksum = "399b1124a3c9e16766831c6bba21e50192572cdd98706ea114f9502509686ffc"
 +dependencies = [
 + "serde_core",
 + "serde_spanned",
@@ -899,18 +976,18 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "toml_datetime"
-+version = "0.7.5+spec-1.1.0"
++version = "1.0.0+spec-1.1.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
++checksum = "32c2555c699578a4f59f0cc68e5116c8d7cabbd45e1409b989d4be085b53f13e"
 +dependencies = [
 + "serde_core",
 +]
 +
 +[[package]]
 +name = "toml_parser"
-+version = "1.0.6+spec-1.1.0"
++version = "1.0.9+spec-1.1.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "a3198b4b0a8e11f09dd03e133c0280504d0801269e9afa46362ffde1cbeebf44"
++checksum = "702d4415e08923e7e1ef96cd5727c0dfed80b4d2fa25db9647fe5eb6f7c5a4c4"
 +dependencies = [
 + "winnow",
 +]
@@ -923,15 +1000,21 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "unicode-ident"
-+version = "1.0.22"
++version = "1.0.24"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5"
++checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
++
++[[package]]
++name = "unicode-xid"
++version = "0.2.6"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
 +
 +[[package]]
 +name = "uuid"
-+version = "1.20.0"
++version = "1.22.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "ee48d38b119b0cd71fe4141b30f5ba9c7c5d9f4e7a3a8b4a674e4b6ef789976f"
++checksum = "a68d3c8f01c0cfa54a75291d83601161799e4a89a39e0929f4b0354d88757a37"
 +dependencies = [
 + "getrandom",
 + "js-sys",
@@ -945,12 +1028,6 @@ index 0000000..d137ab5
 +checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426"
 +
 +[[package]]
-+name = "version_check"
-+version = "0.9.5"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
-+
-+[[package]]
 +name = "vsprintf"
 +version = "2.0.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
@@ -970,10 +1047,19 @@ index 0000000..d137ab5
 +]
 +
 +[[package]]
-+name = "wasm-bindgen"
-+version = "0.2.108"
++name = "wasip3"
++version = "0.4.0+wasi-0.3.0-rc-2026-01-06"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "64024a30ec1e37399cf85a7ffefebdb72205ca1c972291c51512360d90bd8566"
++checksum = "5428f8bf88ea5ddc08faddef2ac4a67e390b88186c703ce6dbd955e1c145aca5"
++dependencies = [
++ "wit-bindgen",
++]
++
++[[package]]
++name = "wasm-bindgen"
++version = "0.2.114"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "6532f9a5c1ece3798cb1c2cfdba640b9b3ba884f5db45973a6f442510a87d38e"
 +dependencies = [
 + "cfg-if",
 + "once_cell",
@@ -984,9 +1070,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "wasm-bindgen-macro"
-+version = "0.2.108"
++version = "0.2.114"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "008b239d9c740232e71bd39e8ef6429d27097518b6b30bdf9086833bd5b6d608"
++checksum = "18a2d50fcf105fb33bb15f00e7a77b772945a2ee45dcf454961fd843e74c18e6"
 +dependencies = [
 + "quote",
 + "wasm-bindgen-macro-support",
@@ -994,9 +1080,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "wasm-bindgen-macro-support"
-+version = "0.2.108"
++version = "0.2.114"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "5256bae2d58f54820e6490f9839c49780dff84c65aeab9e772f15d5f0e913a55"
++checksum = "03ce4caeaac547cdf713d280eda22a730824dd11e6b8c3ca9e42247b25c631e3"
 +dependencies = [
 + "bumpalo",
 + "proc-macro2",
@@ -1007,14 +1093,48 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "wasm-bindgen-shared"
-+version = "0.2.108"
++version = "0.2.114"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "1f01b580c9ac74c8d8f0c0e4afb04eeef2acf145458e52c03845ee9cd23e3d12"
++checksum = "75a326b8c223ee17883a4251907455a2431acc2791c98c26279376490c378c16"
 +dependencies = [
 + "unicode-ident",
 +]
 +
 +[[package]]
++name = "wasm-encoder"
++version = "0.244.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
++dependencies = [
++ "leb128fmt",
++ "wasmparser",
++]
++
++[[package]]
++name = "wasm-metadata"
++version = "0.244.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
++dependencies = [
++ "anyhow",
++ "indexmap",
++ "wasm-encoder",
++ "wasmparser",
++]
++
++[[package]]
++name = "wasmparser"
++version = "0.244.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe"
++dependencies = [
++ "bitflags",
++ "hashbrown 0.15.5",
++ "indexmap",
++ "semver",
++]
++
++[[package]]
 +name = "windows-link"
 +version = "0.2.1"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
@@ -1022,34 +1142,96 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "winnow"
-+version = "0.7.14"
++version = "0.7.15"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "5a5364e9d77fcdeeaa6062ced926ee3381faa2ee02d3eb83a5c27a8825540829"
++checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
 +
 +[[package]]
 +name = "wit-bindgen"
 +version = "0.51.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
 +checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
-+
-+[[package]]
-+name = "zerocopy"
-+version = "0.8.33"
-+source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "668f5168d10b9ee831de31933dc111a459c97ec93225beb307aed970d1372dfd"
 +dependencies = [
-+ "zerocopy-derive",
++ "wit-bindgen-rust-macro",
 +]
 +
 +[[package]]
-+name = "zerocopy-derive"
-+version = "0.8.33"
++name = "wit-bindgen-core"
++version = "0.51.0"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "2c7962b26b0a8685668b671ee4b54d007a67d4eaf05fda79ac0ecf41e32270f1"
++checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"
 +dependencies = [
++ "anyhow",
++ "heck",
++ "wit-parser",
++]
++
++[[package]]
++name = "wit-bindgen-rust"
++version = "0.51.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "b7c566e0f4b284dd6561c786d9cb0142da491f46a9fbed79ea69cdad5db17f21"
++dependencies = [
++ "anyhow",
++ "heck",
++ "indexmap",
++ "prettyplease",
++ "syn",
++ "wasm-metadata",
++ "wit-bindgen-core",
++ "wit-component",
++]
++
++[[package]]
++name = "wit-bindgen-rust-macro"
++version = "0.51.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "0c0f9bfd77e6a48eccf51359e3ae77140a7f50b1e2ebfe62422d8afdaffab17a"
++dependencies = [
++ "anyhow",
++ "prettyplease",
 + "proc-macro2",
 + "quote",
 + "syn",
++ "wit-bindgen-core",
++ "wit-bindgen-rust",
++]
++
++[[package]]
++name = "wit-component"
++version = "0.244.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2"
++dependencies = [
++ "anyhow",
++ "bitflags",
++ "indexmap",
++ "log",
++ "serde",
++ "serde_derive",
++ "serde_json",
++ "wasm-encoder",
++ "wasm-metadata",
++ "wasmparser",
++ "wit-parser",
++]
++
++[[package]]
++name = "wit-parser"
++version = "0.244.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "ecc8ac4bc1dc3381b7f59c34f00b67e18f910c2c0f50015669dde7def656a736"
++dependencies = [
++ "anyhow",
++ "id-arena",
++ "indexmap",
++ "log",
++ "semver",
++ "serde",
++ "serde_derive",
++ "serde_json",
++ "unicode-xid",
++ "wasmparser",
 +]
 +
 +[[package]]
@@ -1060,9 +1242,9 @@ index 0000000..d137ab5
 +
 +[[package]]
 +name = "zmij"
-+version = "1.0.17"
++version = "1.0.21"
 +source = "registry+https://github.com/rust-lang/crates.io-index"
-+checksum = "02aae0f83f69aafc94776e879363e9771d7ecbffe2c7fbb6c14c5e00dfe88439"
++checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
 -- 
 2.50.1
 
diff --git a/pkgs/by-name/kr/kryoptic/package.nix b/pkgs/by-name/kr/kryoptic/package.nix
index c48f562a4a55..c1871024d6c5 100644
--- a/pkgs/by-name/kr/kryoptic/package.nix
+++ b/pkgs/by-name/kr/kryoptic/package.nix
@@ -1,7 +1,6 @@
 {
   lib,
   stdenv,
-  fetchpatch,
   rustPlatform,
   fetchFromGitHub,
   nix-update-script,
@@ -15,27 +14,19 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "kryoptic";
-  version = "1.4.0";
+  version = "1.5.0";
 
   src = fetchFromGitHub {
     owner = "latchset";
     repo = "kryoptic";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-tP2BZkGCZqfLNLZ/mYAVkICWKTM1EbL7lbw+Mnx4VTk=";
+    hash = "sha256-WOihUHFNqjQGObd+pfiNnjBq5GL/9NDeBiC7VzF/ZwE=";
   };
 
-  patches = [
-    # Support additional arguments for bindgen so it can find our glibc.
-    # https://github.com/latchset/kryoptic/pull/386
-    (fetchpatch {
-      url = "https://github.com/latchset/kryoptic/commit/54b3deeb4eb84ebd7c5b52ccb9401e319fb00294.patch";
-      hash = "sha256-QChVS/MnsGp6To4OWYA8Se6kgRCGABchLLnSHfrEj1E=";
-    })
-  ];
-
   env = {
     # Pass these include paths for bindgen in via the environment.
-    OSSL_BINDGEN_CLANG_ARGS = "-I${lib.getInclude glibc}/include";
+    ${if !stdenv.hostPlatform.isDarwin then "OSSL_BINDGEN_CLANG_ARGS" else null} =
+      "-I${lib.getInclude glibc}/include";
     LIBCLANG_PATH = "${lib.getLib clang.cc}/lib";
   };
 
@@ -50,7 +41,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     ./0001-Add-Cargo.lock.patch
   ];
 
-  cargoHash = "sha256-eekiW9HCKwx7/y2WSqQH6adgAeAnQojM3QcNTc3kx2I=";
+  cargoHash = "sha256-Kr2tvxPIcWS47ljH9l0qQTacX9BIV9vMmQyE8EG6qVE=";
 
   cargoBuildFlags = [
     "--no-default-features"