Merge staging-next into staging

2025-07-13 21:50:33 +03:00 · 2025-03-17 00:16:57 +00:00 · 2025-03-17 00:16:57 +00:00 · 75c8678243
commit 75c8678243
parent 3bcd04875b 4761072df5
98 changed files with 2152 additions and 1560 deletions
--- a/nixos/doc/manual/release-notes/rl-2505.section.md
+++ b/nixos/doc/manual/release-notes/rl-2505.section.md
@ -178,6 +178,8 @@

 - [echoip](https://github.com/mpolden/echoip), a simple service for looking up your IP address. Available as [services.echoip](#opt-services.echoip.enable).

+- [LiteLLM](https://github.com/BerriAI/litellm), a LLM Gateway to provide model access, fallbacks and spend tracking across 100+ LLMs. All in the OpenAI format. Available as [services.litellm](#opt-services.litellm.enable).
+
 - [Buffyboard](https://gitlab.postmarketos.org/postmarketOS/buffybox/-/tree/master/buffyboard), a framebuffer on-screen keyboard. Available as [services.buffyboard](option.html#opt-services.buffyboard).

 - [KanBoard](https://github.com/kanboard/kanboard), a project management tool that focuses on the Kanban methodology. Available as [services.kanboard](#opt-services.kanboard.enable).
@ -192,6 +194,8 @@

 - [Limine](https://github.com/limine-bootloader/limine) a modern, advanced, portable, multiprotocol bootloader and boot manager. Available as [boot.loader.limine](#opt-boot.loader.limine.enable)

+- [Orthanc](https://orthanc.uclouvain.be/) a lightweight, RESTful DICOM server for healthcare and medical research. Available as [services.orthanc](#opt-services.orthanc.enable).
+
 <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

 ## Backward Incompatibilities {#sec-release-25.05-incompatibilities}
@ -516,6 +520,8 @@

 - `programs.clash-verge.tunMode` was deprecated and removed because now service mode is necessary to start program. Without `programs.clash-verge.enable`, clash-verge-rev will refuse to start.

+- `confluent-cli` was updated from 3.60.0 to 4.16.0, which includes several breaking changes as detailed in [Confluent's release notes](https://docs.confluent.io/confluent-cli/current/release-notes.html).
+
 - `siduck76-st` has been renamed to `st-snazzy`, like the project's [flake](https://github.com/siduck/st/blob/main/flake.nix).

 - `python3Packages.jax` now directly depends on `python3Packages.jaxlib`.
--- a/nixos/modules/image/repart-image.nix
+++ b/nixos/modules/image/repart-image.nix
@ -24,6 +24,7 @@
  # compression tools
 , zstd
 , xz
+, zeekstd

  # arguments
 , name
@ -89,11 +90,13 @@ let
  compressionPkg = {
    "zstd" = zstd;
    "xz" = xz;
+    "zstd-seekable" = zeekstd;
  }."${compression.algorithm}";

  compressionCommand = {
    "zstd" = "zstd --no-progress --threads=$NIX_BUILD_CORES -${toString compression.level}";
    "xz" = "xz --keep --verbose --threads=$NIX_BUILD_CORES -${toString compression.level}";
+    "zstd-seekable" = "zeekstd --quiet --max-frame-size 2M --compression-level ${toString compression.level}";
  }."${compression.algorithm}";
 in
  stdenvNoCC.mkDerivation (finalAttrs:
--- a/nixos/modules/image/repart.nix
+++ b/nixos/modules/image/repart.nix
@ -113,7 +113,7 @@ in
      enable = lib.mkEnableOption "Image compression";

      algorithm = lib.mkOption {
-        type = lib.types.enum [ "zstd" "xz" ];
+        type = lib.types.enum [ "zstd" "xz" "zstd-seekable" ];
        default = "zstd";
        description = "Compression algorithm";
      };
@ -274,6 +274,7 @@ in
          {
            "zstd" = ".zst";
            "xz" = ".xz";
+            "zstd-seekable" = ".zst";
          }."${cfg.compression.algorithm}";

        makeClosure = paths: pkgs.closureInfo { rootPaths = paths; };
@ -298,6 +299,7 @@ in
          level = lib.mkOptionDefault {
            "zstd" = 3;
            "xz" = 3;
+            "zstd-seekable" = 3;
          }."${cfg.compression.algorithm}";
        };

--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@ -825,6 +825,7 @@
  ./services/misc/languagetool.nix
  ./services/misc/leaps.nix
  ./services/misc/lifecycled.nix
+  ./services/misc/litellm.nix
  ./services/misc/llama-cpp.nix
  ./services/misc/logkeys.nix
  ./services/misc/mame.nix
@ -848,6 +849,7 @@
  ./services/misc/ombi.nix
  ./services/misc/omnom.nix
  ./services/misc/open-webui.nix
+  ./services/misc/orthanc.nix
  ./services/misc/osrm.nix
  ./services/misc/owncast.nix
  ./services/misc/packagekit.nix
--- a/nixos/modules/services/misc/litellm.nix
+++ b/nixos/modules/services/misc/litellm.nix
@ -0,0 +1,182 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  inherit (lib) types;
+
+  cfg = config.services.litellm;
+  settingsFormat = pkgs.formats.yaml { };
+in
+{
+  options = {
+    services.litellm = {
+      enable = lib.mkEnableOption "LiteLLM server";
+      package = lib.mkPackageOption pkgs "litellm" { };
+
+      stateDir = lib.mkOption {
+        type = types.path;
+        default = "/var/lib/litellm";
+        example = "/home/foo";
+        description = "State directory of LiteLLM.";
+      };
+
+      host = lib.mkOption {
+        type = types.str;
+        default = "127.0.0.1";
+        example = "0.0.0.0";
+        description = ''
+          The host address which the LiteLLM server HTTP interface listens to.
+        '';
+      };
+
+      port = lib.mkOption {
+        type = types.port;
+        default = 8080;
+        example = 11111;
+        description = ''
+          Which port the LiteLLM server listens to.
+        '';
+      };
+
+      settings = lib.mkOption {
+        type = types.submodule {
+          freeformType = settingsFormat.type;
+          options = {
+            model_list = lib.mkOption {
+              type = settingsFormat.type;
+              description = ''
+                List of supported models on the server, with model-specific configs.
+              '';
+              default = [ ];
+            };
+            router_settings = lib.mkOption {
+              type = settingsFormat.type;
+              description = ''
+                LiteLLM Router settings
+              '';
+              default = { };
+            };
+
+            litellm_settings = lib.mkOption {
+              type = settingsFormat.type;
+              description = ''
+                LiteLLM Module settings
+              '';
+              default = { };
+            };
+
+            general_settings = lib.mkOption {
+              type = settingsFormat.type;
+              description = ''
+                LiteLLM Server settings
+              '';
+              default = { };
+            };
+
+            environment_variables = lib.mkOption {
+              type = settingsFormat.type;
+              description = ''
+                Environment variables to pass to the Lite
+              '';
+              default = { };
+            };
+          };
+        };
+        default = { };
+        description = ''
+          Configuration for LiteLLM.
+          See <https://docs.litellm.ai/docs/proxy/configs> for more.
+        '';
+      };
+
+      environment = lib.mkOption {
+        type = types.attrsOf types.str;
+        default = {
+          SCARF_NO_ANALYTICS = "True";
+          DO_NOT_TRACK = "True";
+          ANONYMIZED_TELEMETRY = "False";
+        };
+        example = ''
+          {
+            NO_DOCS="True";
+          }
+        '';
+        description = ''
+          Extra environment variables for LiteLLM.
+        '';
+      };
+
+      environmentFile = lib.mkOption {
+        description = ''
+          Environment file to be passed to the systemd service.
+          Useful for passing secrets to the service to prevent them from being
+          world-readable in the Nix store.
+        '';
+        type = lib.types.nullOr lib.types.path;
+        default = null;
+        example = "/var/lib/secrets/liteLLMSecrets";
+      };
+
+      openFirewall = lib.mkOption {
+        type = types.bool;
+        default = false;
+        description = ''
+          Whether to open the firewall for LiteLLM.
+          This adds `services.litellm.port` to `networking.firewall.allowedTCPPorts`.
+        '';
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    systemd.services.litellm = {
+      description = "LLM Gateway to provide model access, fallbacks and spend tracking across 100+ LLMs.";
+      wantedBy = [ "multi-user.target" ];
+      after = [ "network.target" ];
+
+      environment = cfg.environment;
+
+      serviceConfig =
+        let
+          configFile = settingsFormat.generate "config.yaml" cfg.settings;
+        in
+        {
+          ExecStart = "${lib.getExe cfg.package} --host \"${cfg.host}\" --port ${toString cfg.port} --config ${configFile}";
+          EnvironmentFile = lib.optional (cfg.environmentFile != null) cfg.environmentFile;
+          WorkingDirectory = cfg.stateDir;
+          StateDirectory = "litellm";
+          RuntimeDirectory = "litellm";
+          RuntimeDirectoryMode = "0755";
+          PrivateTmp = true;
+          DynamicUser = true;
+          DevicePolicy = "closed";
+          LockPersonality = true;
+          PrivateUsers = true;
+          ProtectHome = true;
+          ProtectHostname = true;
+          ProtectKernelLogs = true;
+          ProtectKernelModules = true;
+          ProtectKernelTunables = true;
+          ProtectControlGroups = true;
+          RestrictNamespaces = true;
+          RestrictRealtime = true;
+          SystemCallArchitectures = "native";
+          UMask = "0077";
+          RestrictAddressFamilies = [
+            "AF_INET"
+            "AF_INET6"
+            "AF_UNIX"
+          ];
+          ProtectClock = true;
+          ProtectProc = "invisible";
+        };
+    };
+
+    networking.firewall = lib.mkIf cfg.openFirewall { allowedTCPPorts = [ cfg.port ]; };
+  };
+
+  meta.maintainers = with lib.maintainers; [ drupol ];
+}
--- a/nixos/modules/services/misc/orthanc.nix
+++ b/nixos/modules/services/misc/orthanc.nix
@ -0,0 +1,134 @@
+{
+  config,
+  options,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  inherit (lib) types;
+
+  cfg = config.services.orthanc;
+  opt = options.services.orthanc;
+
+  settingsFormat = pkgs.formats.json { };
+in
+{
+  options = {
+    services.orthanc = {
+      enable = lib.mkEnableOption "Orthanc server";
+      package = lib.mkPackageOption pkgs "orthanc" { };
+
+      stateDir = lib.mkOption {
+        type = types.path;
+        default = "/var/lib/orthanc";
+        example = "/home/foo";
+        description = "State directory of Orthanc.";
+      };
+
+      environment = lib.mkOption {
+        type = types.attrsOf types.str;
+        default = {
+        };
+        example = ''
+          {
+            ORTHANC_NAME = "Orthanc server";
+          }
+        '';
+        description = ''
+          Extra environment variables
+          For more details see <https://orthanc.uclouvain.be/book/users/configuration.html>
+        '';
+      };
+
+      environmentFile = lib.mkOption {
+        description = ''
+          Environment file to be passed to the systemd service.
+          Useful for passing secrets to the service to prevent them from being
+          world-readable in the Nix store.
+        '';
+        type = lib.types.nullOr lib.types.path;
+        default = null;
+        example = "/var/lib/secrets/orthancSecrets";
+      };
+
+      settings = lib.mkOption {
+        type = lib.types.submodule {
+          freeformType = settingsFormat.type;
+        };
+        default = {
+          HttpPort = lib.mkDefault 8042;
+          IndexDirectory = lib.mkDefault "/var/lib/orthanc/";
+          StorageDirectory = lib.mkDefault "/var/lib/orthanc/";
+        };
+        example = {
+          Name = "My Orthanc Server";
+          HttpPort = 12345;
+        };
+        description = ''
+          Configuration written to a json file that is read by orthanc.
+          See <https://orthanc.uclouvain.be/book/index.html> for more.
+        '';
+      };
+
+      openFirewall = lib.mkOption {
+        type = types.bool;
+        default = false;
+        description = ''
+          Whether to open the firewall for Orthanc.
+          This adds `services.orthanc.settings.HttpPort` to `networking.firewall.allowedTCPPorts`.
+        '';
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.orthanc.settings = options.services.orthanc.settings.default;
+
+    systemd.services.orthanc = {
+      description = "Orthanc is a lightweight, RESTful DICOM server for healthcare and medical research";
+      wantedBy = [ "multi-user.target" ];
+      after = [ "network.target" ];
+
+      environment = cfg.environment;
+
+      serviceConfig =
+        let
+          config-json = settingsFormat.generate "orthanc-config.json" (cfg.settings);
+        in
+        {
+          ExecStart = "${lib.getExe cfg.package} ${config-json}";
+          EnvironmentFile = lib.optional (cfg.environmentFile != null) cfg.environmentFile;
+          WorkingDirectory = cfg.stateDir;
+          BindReadOnlyPaths = [
+            "-/etc/localtime"
+          ];
+          StateDirectory = "orthanc";
+          RuntimeDirectory = "orthanc";
+          RuntimeDirectoryMode = "0755";
+          PrivateTmp = true;
+          DynamicUser = true;
+          DevicePolicy = "closed";
+          LockPersonality = true;
+          PrivateUsers = true;
+          ProtectHome = true;
+          ProtectHostname = true;
+          ProtectKernelLogs = true;
+          ProtectKernelModules = true;
+          ProtectKernelTunables = true;
+          ProtectControlGroups = true;
+          RestrictNamespaces = true;
+          RestrictRealtime = true;
+          SystemCallArchitectures = "native";
+          UMask = "0077";
+        };
+    };
+
+    networking.firewall = lib.mkIf cfg.openFirewall { allowedTCPPorts = [ cfg.settings.HttpPort ]; };
+
+    # Orthanc requires /etc/localtime to be present
+    time.timeZone = lib.mkDefault "UTC";
+  };
+
+  meta.maintainers = with lib.maintainers; [ drupol ];
+}
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@ -634,6 +634,7 @@ in {
  limesurvey = handleTest ./limesurvey.nix {};
  limine = import ./limine { inherit runTest; };
  listmonk = handleTestOn [ "x86_64-linux" "aarch64-linux" ] ./listmonk.nix {};
+  litellm = runTest ./litellm.nix;
  litestream = handleTest ./litestream.nix {};
  lldap = handleTest ./lldap.nix {};
  localsend = handleTest ./localsend.nix {};
@ -874,6 +875,7 @@ in {
  opentelemetry-collector = handleTest ./opentelemetry-collector.nix {};
  open-web-calendar = handleTest ./web-apps/open-web-calendar.nix {};
  ocsinventory-agent = handleTestOn [ "x86_64-linux" "aarch64-linux" ] ./ocsinventory-agent.nix {};
+  orthanc = runTest ./orthanc.nix;
  owncast = handleTest ./owncast.nix {};
  outline = handleTest ./outline.nix {};
  image-contents = handleTest ./image-contents.nix {};
--- a/nixos/tests/glance.nix
+++ b/nixos/tests/glance.nix
@ -1,4 +1,4 @@
-{ lib, ... }:
+{ config, lib, ... }:

 {
  name = "glance";
@ -22,7 +22,15 @@
      };
  };

+  extraPythonPackages =
+    p: with p; [
+      beautifulsoup4
+      types-beautifulsoup4
+    ];
+
  testScript = ''
+    from bs4 import BeautifulSoup
+
    machine_default.start()
    machine_default.wait_for_unit("glance.service")
    machine_default.wait_for_open_port(8080)
@ -30,6 +38,10 @@
    machine_custom_port.start()
    machine_custom_port.wait_for_unit("glance.service")
    machine_custom_port.wait_for_open_port(5678)
+
+    soup = BeautifulSoup(machine_default.succeed("curl http://localhost:8080"))
+    expected_version = "${config.nodes.machine_default.services.glance.package.version}"
+    assert any(a.text == expected_version for a in soup.select(".footer a"))
  '';

  meta.maintainers = [ lib.maintainers.drupol ];
--- a/nixos/tests/litellm.nix
+++ b/nixos/tests/litellm.nix
@ -0,0 +1,27 @@
+{ lib, ... }:
+let
+  mainPort = "8080";
+in
+{
+  name = "litellm";
+
+  nodes = {
+    machine =
+      { ... }:
+      {
+        services.litellm = {
+          enable = true;
+        };
+      };
+  };
+
+  testScript = ''
+    machine.start()
+    machine.wait_for_unit("litellm.service")
+    machine.wait_for_open_port(${mainPort})
+  '';
+
+  meta = with lib.maintainers; {
+    maintainers = [ drupol ];
+  };
+}
--- a/nixos/tests/orthanc.nix
+++ b/nixos/tests/orthanc.nix
@ -0,0 +1,27 @@
+{ lib, ... }:
+
+{
+  name = "orthanc";
+
+  nodes = {
+    machine =
+      { pkgs, ... }:
+      {
+        services.orthanc = {
+          enable = true;
+          settings = {
+            HttpPort = 12345;
+          };
+        };
+      };
+  };
+
+  testScript = ''
+    machine.start()
+    machine.wait_for_unit("orthanc.service")
+    machine.wait_for_open_port(12345)
+    machine.wait_for_open_port(4242)
+  '';
+
+  meta.maintainers = [ lib.maintainers.drupol ];
+}
--- a/pkgs/applications/misc/survex/default.nix
+++ b/pkgs/applications/misc/survex/default.nix
@ -21,11 +21,11 @@

 stdenv.mkDerivation rec {
  pname = "survex";
-  version = "1.4.15";
+  version = "1.4.16";

  src = fetchurl {
    url = "https://survex.com/software/${version}/${pname}-${version}.tar.gz";
-    hash = "sha256-8RuVHVugJmTP3CBYXzxxZGe5GYGUxJrlkzxXFRakkWI=";
+    hash = "sha256-kiRXld0FwXU2zPgMPSR/KQSdoZFLTvd9Y/n97/YJlcA=";
  };

  nativeBuildInputs = [
--- a/pkgs/applications/networking/p2p/tremotesf/default.nix
+++ b/pkgs/applications/networking/p2p/tremotesf/default.nix
@ -4,51 +4,46 @@
  cmake,
  pkg-config,
  fetchFromGitHub,
-  qtbase,
-  qttools,
-  kwidgetsaddons,
-  kwindowsystem,
  fmt,
  libpsl,
  cxxopts,
-  wrapQtAppsHook,
+  kdePackages,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "tremotesf";
-  version = "2.6.0";
+  version = "2.7.5";

  src = fetchFromGitHub {
    owner = "equeim";
    repo = "tremotesf2";
-    rev = finalAttrs.version;
-    hash = "sha256-9iV4UsKZWaIxhqtRZXTFHgjOKVFJE2bCJOD2O/qL+DY=";
+    tag = finalAttrs.version;
+    hash = "sha256-LJ73ZynofPOMS5rSohJSY94vSQvGfNiNFRyGu6LPfU0=";
    # We need this for src/libtremotesf
    fetchSubmodules = true;
  };

-  buildInputs = [
-    qtbase
-    qttools
-    fmt
-    libpsl
-    kwidgetsaddons
-    kwindowsystem
-    cxxopts
-  ];
-
  nativeBuildInputs = [
    cmake
    pkg-config
+    kdePackages.wrapQtAppsHook
  ];

-  propagatedBuildInputs = [ wrapQtAppsHook ];
+  buildInputs = [
+    kdePackages.qtbase
+    kdePackages.qttools
+    fmt
+    libpsl
+    kdePackages.kwidgetsaddons
+    kdePackages.kwindowsystem
+    cxxopts
+  ];

-  meta = with lib; {
+  meta = {
    description = "Remote GUI for transmission-daemon";
    mainProgram = "tremotesf";
-    license = licenses.gpl3Plus;
+    license = lib.licenses.gpl3Plus;
    homepage = "https://github.com/equeim/tremotesf2";
-    maintainers = with maintainers; [ sochotnicky ];
+    maintainers = with lib.maintainers; [ sochotnicky ];
  };
 })
--- a/pkgs/by-name/ab/abcmidi/package.nix
+++ b/pkgs/by-name/ab/abcmidi/package.nix
@ -6,13 +6,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "abcmidi";
-  version = "2025.02.07";
+  version = "2025.02.16";

  src = fetchFromGitHub {
    owner = "sshlien";
    repo = "abcmidi";
    tag = finalAttrs.version;
-    hash = "sha256-oX+k8eJH3E3AqPFbiWMYilIvhlPn6kxZbZfqxUksCxE=";
+    hash = "sha256-/woeQ5JyoEfDxMclWNeiqHR/I/iWocp1MWXwB3cvxbo=";
  };

  meta = {
--- a/pkgs/by-name/ad/adminer/package.nix
+++ b/pkgs/by-name/ad/adminer/package.nix
@ -8,13 +8,13 @@
 }:

 stdenv.mkDerivation (finalAttrs: {
-  version = "4.17.1";
+  version = "5.0.5";
  pname = "adminer";

  # not using fetchFromGitHub as the git repo relies on submodules that are included in the tar file
  src = fetchurl {
    url = "https://github.com/vrana/adminer/releases/download/v${finalAttrs.version}/adminer-${finalAttrs.version}.zip";
-    hash = "sha256-g9iVdSO2OAIFPDwSeeWLHUa5tV7As/ptTuL1gXfzDJA=";
+    hash = "sha256-7VAy9bE9dUZpkKtRMUa/boA6NlfZ7tBT/2x1POtazoM=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/al/altair/package.nix
+++ b/pkgs/by-name/al/altair/package.nix
@ -7,11 +7,11 @@

 let
  pname = "altair";
-  version = "8.1.5";
+  version = "8.2.1";

  src = fetchurl {
    url = "https://github.com/imolorhe/altair/releases/download/v${version}/altair_${version}_x86_64_linux.AppImage";
-    sha256 = "sha256-GbUVn0NnUUBoKS+RsIiasr2kdO8Jsb2TMtQ6GxUbArI=";
+    sha256 = "sha256-DO4T/NgLSxZIxVK4oEz6QNsQJRacF8KRcwAvWToxIy8=";
  };

  appimageContents = appimageTools.extract { inherit pname version src; };
--- a/pkgs/by-name/ch/changedetection-io/package.nix
+++ b/pkgs/by-name/ch/changedetection-io/package.nix
@ -6,14 +6,14 @@

 python3.pkgs.buildPythonApplication rec {
  pname = "changedetection-io";
-  version = "0.49.3";
+  version = "0.49.4";
  format = "setuptools";

  src = fetchFromGitHub {
    owner = "dgtlmoon";
    repo = "changedetection.io";
    tag = version;
-    hash = "sha256-QYghHpT78hlCZvliPsTdDE9bdSlr0kJn5xxwi3mnP/w=";
+    hash = "sha256-EmtJ8XXPb75W4VPj4Si9fdzVLDKVfm+8P6UZZlMpMdI=";
  };

  pythonRelaxDeps = true;
--- a/pkgs/by-name/cl/clang-uml/package.nix
+++ b/pkgs/by-name/cl/clang-uml/package.nix
@ -17,13 +17,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "clang-uml";
-  version = "0.6.0";
+  version = "0.6.1";

  src = fetchFromGitHub {
    owner = "bkryza";
    repo = "clang-uml";
    rev = finalAttrs.version;
-    hash = "sha256-xTM4mrQFEMhyfHLJ8mRd9IwXphbB5ceMXEKMlGuppsU=";
+    hash = "sha256-mY6kJnwWLgCeKXSquNTxsnr4S3bKwedgiRixzyLWTK8=";
  };

  nativeBuildInputs =
--- a/pkgs/by-name/co/cockpit/package.nix
+++ b/pkgs/by-name/co/cockpit/package.nix
@ -122,7 +122,9 @@ stdenv.mkDerivation (finalAttrs: {
      # some files substituteInPlace report as missing and it's safe to ignore them
      substituteInPlace "$(realpath "$f")" \
        --replace-quiet '"/usr/bin/' '"' \
-        --replace-quiet '"/bin/' '"' || true
+        --replace-quiet '"/bin/' '"' \
+        --replace-quiet ' /bin/' ' ' \
+        || true
    done

    substituteInPlace src/common/Makefile-common.am \
--- a/pkgs/by-name/co/confluent-cli/package.nix
+++ b/pkgs/by-name/co/confluent-cli/package.nix
@ -7,7 +7,7 @@

 stdenv.mkDerivation rec {
  pname = "confluent-cli";
-  version = "3.60.0";
+  version = "4.16.0";

  # To get the latest version:
  # curl -L https://cnfl.io/cli | sh -s -- -l | grep -v latest | sort -V | tail -n1
@ -15,19 +15,19 @@ stdenv.mkDerivation rec {
    {
      x86_64-linux = fetchurl {
        url = "https://s3-us-west-2.amazonaws.com/confluent.cloud/confluent-cli/archives/${version}/confluent_${version}_linux_amd64.tar.gz";
-        hash = "sha256-GYA7T2yRcSNStvd9ZqI2iTJC3d6ymH9Dg5FVkIsM1f0=";
+        hash = "sha256-OFmbIqyDnZxymutdObzPvyuHJnfW353e+ChjDLfhQvI=";
      };
      aarch64-linux = fetchurl {
        url = "https://s3-us-west-2.amazonaws.com/confluent.cloud/confluent-cli/archives/${version}/confluent_${version}_linux_arm64.tar.gz";
-        hash = "sha256-BJJaZtRInKT6S0W22f96RCM8H18dIpOTP5lu357zh18=";
+        hash = "sha256-EZ+3WYIkmP5Aw3yg4fKUs805W58OFrILjp+Z18G6jjQ=";
      };
      x86_64-darwin = fetchurl {
        url = "https://s3-us-west-2.amazonaws.com/confluent.cloud/confluent-cli/archives/${version}/confluent_${version}_darwin_amd64.tar.gz";
-        hash = "sha256-94ur/FXxQWL4EOkEI1FSoWduRaMaY7DCNMiucpNC0B0=";
+        hash = "sha256-ogqrGn0I34L+UIzA+9Q+3LlcVoDlYnPRUqkn9oasCG8=";
      };
      aarch64-darwin = fetchurl {
        url = "https://s3-us-west-2.amazonaws.com/confluent.cloud/confluent-cli/archives/${version}/confluent_${version}_darwin_arm64.tar.gz";
-        hash = "sha256-aEIKSrO0/6dJCAyzwBH2ZDAmwvURugx6jTzaepbRvH8=";
+        hash = "sha256-CQNGs8tFSUH3okFufVPUQqHTrVB3kyrbbgT9mFGmkYc=";
      };
    }
    .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
--- a/pkgs/by-name/co/copywrite/package.nix
+++ b/pkgs/by-name/co/copywrite/package.nix
@ -5,24 +5,25 @@
  fetchFromGitHub,
  installShellFiles,
  versionCheckHook,
+  writeScript,
 }:

 let
-  commitHash = "6ed520a710166c6094098b786c63f212604654a4"; # matches tag release
+  commitHash = "9d021bf61a094a5eac6ae3084ceed2dda4700a73"; # matches tag release
  shortCommitHash = builtins.substring 0 7 commitHash;
 in
 buildGoModule rec {
  pname = "copywrite";
-  version = "0.19.0";
+  version = "0.21.0";

  src = fetchFromGitHub {
    owner = "hashicorp";
    repo = "copywrite";
    tag = "v${version}";
-    hash = "sha256-DmlPioaw/wMk8GoBYNG24P4J1C6h0bjVjjOuMYW6Tgo=";
+    hash = "sha256-TGis7rreRen+vk3tUDehRkyas4xrBBxKlA70+VqoGWY=";
  };

-  vendorHash = "sha256-ZIu0/fue3xi+YVE9GFsVjCNs8t3c3TWH8O0xUzJdim8=";
+  vendorHash = "sha256-Qxp6BwN/Y6Xb1BwFGT/T8WYsXGPgN27mzoTE0i6cS1Q=";

  ldflags = [
    "-s"
@ -44,6 +45,22 @@ buildGoModule rec {
  nativeInstallCheckInputs = [ versionCheckHook ];
  doInstallCheck = true;

+  passthru.updateScript = writeScript "update-copywrite" ''
+    #!/usr/bin/env nix-shell
+    #!nix-shell -i bash -p curl jq nix-update
+
+    set -eu -o pipefail
+
+    gh_metadata="$(curl -sS https://api.github.com/repos/hashicorp/copywrite/tags)"
+    version="$(echo "$gh_metadata" | jq -r '.[] | .name' | sort --version-sort | tail -1)"
+    commit_hash="$(echo "$gh_metadata" | jq -r --arg ver "$version" '.[] | select(.name == $ver).commit.sha')"
+
+    filename="$(nix-instantiate --eval -E "with import ./. {}; (builtins.unsafeGetAttrPos \"version\" copywrite).file" | tr -d '"')"
+    sed -i "s/commitHash = \"[^\"]*\"/commitHash = \"$commit_hash\"/" $filename
+
+    nix-update copywrite
+  '';
+
  meta = {
    description = "Automate copyright headers and license files at scale";
    mainProgram = "copywrite";
--- a/pkgs/by-name/db/dbmate/package.nix
+++ b/pkgs/by-name/db/dbmate/package.nix
@ -5,16 +5,16 @@

 buildGoModule rec {
  pname = "dbmate";
-  version = "2.25.0";
+  version = "2.26.0";

  src = fetchFromGitHub {
    owner = "amacneil";
    repo = "dbmate";
    tag = "v${version}";
-    hash = "sha256-bXiLg3l9Uj1QdEyF6JfKqHMZP7Zi1Q88SsvrX2CueM4=";
+    hash = "sha256-fxlarxb0HAUPDFI0dtnRTKkLoRS/dfs6ZaNPU0UKS4Y=";
  };

-  vendorHash = "sha256-PpEWupCSyxzei8faGzJzWyfcrvgF9IiPRyjxasJ2XlM=";
+  vendorHash = "sha256-a7EUZXCth2lj172xwyNldoEKHnZrncX4RetAUNAZsrg=";

  doCheck = false;

--- a/pkgs/by-name/do/door-knocker/package.nix
+++ b/pkgs/by-name/do/door-knocker/package.nix
@ -15,14 +15,14 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "door-knocker";
-  version = "0.6.0";
+  version = "0.7.0";

  src = fetchFromGitea {
    domain = "codeberg.org";
    owner = "tytan652";
    repo = "door-knocker";
    rev = finalAttrs.version;
-    hash = "sha256-n25Bcn1SJuTTRhl8u4M0DF5bAuWV2KVkFfMU65+np78=";
+    hash = "sha256-6QHjmjR2ioR0I6JXtJ0Q+9Dl1fcTnQCGgWlcyFt9WoA=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/er/erofs-utils/package.nix
+++ b/pkgs/by-name/er/erofs-utils/package.nix
@ -9,10 +9,10 @@
  lz4,
  xz,
  zlib,
+  zstd,
  libselinux,
  fuseSupport ? stdenv.hostPlatform.isLinux,
  selinuxSupport ? false,
-  lzmaSupport ? false,
 }:

 stdenv.mkDerivation (finalAttrs: {
@ -37,16 +37,16 @@ stdenv.mkDerivation (finalAttrs: {
      util-linux
      lz4
      zlib
+      xz
+      zstd
    ]
    ++ lib.optionals fuseSupport [ fuse ]
-    ++ lib.optionals selinuxSupport [ libselinux ]
-    ++ lib.optionals lzmaSupport [ xz ];
+    ++ lib.optionals selinuxSupport [ libselinux ];

  configureFlags =
    [ "MAX_BLOCK_SIZE=4096" ]
    ++ lib.optional fuseSupport "--enable-fuse"
-    ++ lib.optional selinuxSupport "--with-selinux"
-    ++ lib.optional lzmaSupport "--enable-lzma";
+    ++ lib.optional selinuxSupport "--with-selinux";

  meta = with lib; {
    homepage = "https://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs-utils.git/about/";
--- a/pkgs/by-name/fo/foxmarks/package.nix
+++ b/pkgs/by-name/fo/foxmarks/package.nix
@ -7,17 +7,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "foxmarks";
-  version = "2.1.0";
+  version = "2.1.1";

  src = fetchFromGitHub {
    owner = "zer0-x";
    repo = "foxmarks";
    rev = "v${version}";
-    hash = "sha256-tkmmu6A7vqK4yO9zHjVEeACaOHP3+hJQLBK7p/Svn7Q=";
+    hash = "sha256-6lJ9acVo444RMxc3wUakBz4zT74oNUpwoP69rdf2mmE=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-/B8T5OZMKQIj92PWWehzkO3iiI/lr5gl6jwXeglN9EU=";
+  cargoHash = "sha256-BAUqH2RVpLLXvN43J67xqtrQZT3OgNA9ot+joOB70DY=";

  buildInputs = [ sqlite ];

--- a/pkgs/by-name/ge/geist-font/package.nix
+++ b/pkgs/by-name/ge/geist-font/package.nix
@ -4,22 +4,22 @@
  fetchzip,
 }:

-stdenvNoCC.mkDerivation rec {
+stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "geist-font";
-  version = "1.1.0";
+  version = "1.4.01";

  srcs = [
    (fetchzip {
      name = "geist-mono";
-      url = "https://github.com/vercel/geist-font/releases/download/${version}/Geist.Mono.zip";
+      url = "https://github.com/vercel/geist-font/releases/download/${finalAttrs.version}/GeistMono-${finalAttrs.version}.zip";
      stripRoot = false;
-      hash = "sha256-8I4O2+bJAlUiDIhbyXzAcwXP5qpmHoh4IfrFio7IZN8=";
+      hash = "sha256-NVPSG2Flm78X5+KXUqlTiGrquD/FGuI1C3PFcIqdyl8=";
    })
    (fetchzip {
      name = "geist-sans";
-      url = "https://github.com/vercel/geist-font/releases/download/${version}/Geist.zip";
+      url = "https://github.com/vercel/geist-font/releases/download/${finalAttrs.version}/Geist-v${finalAttrs.version}.zip";
      stripRoot = false;
-      hash = "sha256-nSN+Ql5hTd230w/u6VZyAZaPtFSaHGmMc6T1fgGTCME=";
+      hash = "sha256-r3Ix+UhxL/UosCLsWl52N55D+rGonQK9TIRfu4hGiwE=";
    })
  ];

@ -28,7 +28,7 @@ stdenvNoCC.mkDerivation rec {
  installPhase = ''
    runHook preInstall

-    install -Dm444 geist-{mono,sans}/*/*.otf -t $out/share/fonts/opentype
+    install -D geist-{mono,sans}/*/otf/*.otf -t $out/share/fonts/opentype

    runHook postInstall
  '';
@ -41,4 +41,4 @@ stdenvNoCC.mkDerivation rec {
    platforms = lib.platforms.all;
    sourceProvenance = with lib.sourceTypes; [ binaryBytecode ];
  };
-}
+})
--- a/pkgs/by-name/gi/git-chain/package.nix
+++ b/pkgs/by-name/gi/git-chain/package.nix
@ -12,13 +12,13 @@

 rustPlatform.buildRustPackage {
  pname = "git-chain";
-  version = "0-unstable-2024-11-16";
+  version = "0-unstable-2025-03-10";

  src = fetchFromGitHub {
    owner = "dashed";
    repo = "git-chain";
-    rev = "90165393a9e78b1e0837b8ad0c6acd8b1253731a";
-    hash = "sha256-hRBymc4wmmniD4IwmgxSw1EIkT6omoqdrnwr+Eaa/yg=";
+    rev = "d06b022b7bccf612fc5651c7ae119b37f69ac4ca";
+    hash = "sha256-lfiwRJSzOlWdj9BfPfb/Vnd2NtzyK7HAHhERKFYOjM8=";
  };

  useFetchCargoVendor = true;
--- a/pkgs/by-name/gi/gitu/package.nix
+++ b/pkgs/by-name/gi/gitu/package.nix
@ -13,17 +13,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "gitu";
-  version = "0.28.2";
+  version = "0.29.0";

  src = fetchFromGitHub {
    owner = "altsem";
    repo = "gitu";
    rev = "v${version}";
-    hash = "sha256-zjA+jPkvR4lAZjVSBY/4V9w+0IQ17yUTSt/skW6owo0=";
+    hash = "sha256-c2YVcE+a/9Z6qTLEbcSFE6393SEeudyvdbzCRJfszcc=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-gg30wrHDyCqrUAUw0NGpEpGROOrigkC2KxA6Q8BcNqA=";
+  cargoHash = "sha256-+tSNUtsDFKqx5W8+cuxyFsG1etm44eYgoYuoUt5tw3E=";

  nativeBuildInputs = [
    pkg-config
--- a/pkgs/by-name/gl/glance/package.nix
+++ b/pkgs/by-name/gl/glance/package.nix
@ -8,17 +8,23 @@

 buildGoModule rec {
  pname = "glance";
-  version = "0.7.3";
+  version = "0.7.6";

  src = fetchFromGitHub {
    owner = "glanceapp";
    repo = "glance";
-    rev = "v${version}";
-    hash = "sha256-kQ4XVO6sotsIjIhkECn6FYik3ITYOZcDKyzk3I8JvkU=";
+    tag = "v${version}";
+    hash = "sha256-1DIngje7UT86eI3ZJWd71BkbAvHJ2JC0LUHAQXz0rfc=";
  };

  vendorHash = "sha256-lURRHlZoxbuW1SXxrxy2BkMndcEllGFmVCB4pXBad8Q=";

+  ldflags = [
+    "-s"
+    "-w"
+    "-X github.com/glanceapp/glance/internal/glance.buildVersion=${version}"
+  ];
+
  excludedPackages = [ "scripts/build-and-ship" ];

  passthru = {
@ -34,6 +40,9 @@ buildGoModule rec {
    description = "Self-hosted dashboard that puts all your feeds in one place";
    mainProgram = "glance";
    license = lib.licenses.agpl3Only;
-    maintainers = with lib.maintainers; [ dvn0 ];
+    maintainers = with lib.maintainers; [
+      dvn0
+      defelo
+    ];
  };
 }
--- a/pkgs/by-name/hm/hmcl/package.nix
+++ b/pkgs/by-name/hm/hmcl/package.nix
@ -14,6 +14,7 @@
 , libglvnd
 , alsa-lib
 , wayland
+, vulkan-loader
 , libpulseaudio
 , gobject-introspection
 }:
@ -75,6 +76,7 @@ stdenv.mkDerivation (finalAttrs: {
          glib
          openal
          libglvnd
+          vulkan-loader
        ] ++ lib.optionals stdenv.hostPlatform.isLinux [
          xorg.libX11
          xorg.libXxf86vm
--- a/pkgs/by-name/jo/joplin-desktop/package.nix
+++ b/pkgs/by-name/jo/joplin-desktop/package.nix
@ -38,7 +38,7 @@ let
    '';
    homepage = "https://joplinapp.org";
    license = licenses.agpl3Plus;
-    maintainers = with maintainers; [ hugoreeves qjoly ];
+    maintainers = with maintainers; [ hugoreeves qjoly yajo ];
    platforms = [ "x86_64-linux" "x86_64-darwin" "aarch64-darwin" ];
  };

--- a/pkgs/by-name/ke/keen4/package.nix
+++ b/pkgs/by-name/ke/keen4/package.nix
@ -1,56 +1,43 @@
 {
-  lib,
-  stdenv,
-  fetchurl,
  dosbox,
-  unzip,
+  fetchzip,
+  lib,
+  writeShellApplication,
 }:

-stdenv.mkDerivation {
+let
+  zip = fetchzip {
+    name = "keen4.zip";
+    url = "https://archive.org/download/msdos_Commander_Keen_4_-_Secret_of_the_Oracle_1991/Commander_Keen_4_-_Secret_of_the_Oracle_1991.zip";
+    hash = "sha256-vVfBQArNH1JPUxM5suMe8NK54a+NAMnDhLKxVUOzUgA=";
+  };
+in
+writeShellApplication {
  name = "keen4";

-  src = fetchurl {
-    url = "http://tarballs.nixos.org/keen4.zip";
-    sha256 = "12rnc9ksl7v6l8wsxvr26ylkafzq80dbsa7yafzw9pqc8pafkhx1";
-  };
+  runtimeInputs = [ dosbox ];

-  nativeBuildInputs = [ unzip ];
+  # Game wants to write in the current directory, but of course we can't
+  # let it write in the Nix store.  So create symlinks to the game files
+  # in ~/.keen4 and execute game from there.
+  text = ''
+    mkdir -p "''${HOME:-.}/.keen4"
+    cd "''${HOME:-.}/.keen4"
+    # avoid linking CONFIG.CK4, which must be writable
+    ln -sft . ${zip}/{AUDIO.CK4,EGAGRAPH.CK4,GAMEMAPS.CK4,KEEN4E.EXE}
+    trap 'find . -type l -delete' EXIT

-  installPhase = ''
-    mkdir -p $out/share/keen4
-    mv * $out/share/keen4
-
-    mkdir -p $out/bin
-    cat > $out/bin/keen4 <<EOF
-    #! $SHELL -e
-    if test -z "\$HOME"; then
-        echo "HOME directory not set"
-        exit 1
-    fi
-
-    # Game wants to write in the current directory, but of course we can't
-    # let it write in the Nix store.  So create symlinks to the game files
-    # in ~/.keen4 and execute game from there.
-    mkdir -p \$HOME/.keen4
-    cd \$HOME/.keen4
-
-    ln -sf $out/share/keen4/* .
-
-    ${dosbox}/bin/dosbox ./KEEN4E.EXE -fullscreen -exit || true
-
-    # Cleanup the symlinks.
-    for i in *; do
-        if test -L "\$i"; then
-            rm "\$i"
-        fi
-    done
-    EOF
-    chmod +x $out/bin/keen4
+    dosbox ./KEEN4E.EXE -fullscreen -exit
  '';

  meta = {
    description = "Commander Keen Episode 4: Secret of the Oracle";
-    license = lib.licenses.unfree;
-    maintainers = [ ];
+    homepage = "https://web.archive.org/web/20141013080934/http://www.3drealms.com/keen4/index.html";
+    downloadPage = "https://archive.org/details/msdos_Commander_Keen_4_-_Secret_of_the_Oracle_1991";
+    license = lib.licenses.unfreeRedistributable;
+    platforms = dosbox.meta.platforms;
+    sourceProvenance = with lib.sourceTypes; [ binaryBytecode ]; # emulated by dosbox, so "bytecode" in a way
+    maintainers = with lib.maintainers; [ wolfgangwalther ];
+    mainProgram = "keen4";
  };
 }
--- a/pkgs/by-name/li/libcpr/package.nix
+++ b/pkgs/by-name/li/libcpr/package.nix
@ -8,7 +8,7 @@
 }:

 let
-  version = "1.11.1";
+  version = "1.11.2";
 in
 stdenv.mkDerivation {
  pname = "libcpr";
@ -23,7 +23,7 @@ stdenv.mkDerivation {
    owner = "libcpr";
    repo = "cpr";
    rev = version;
-    hash = "sha256-RIRqkb2Id3cyz35LM4bYftMv1NGyDyFP4fL4L5mHV8A=";
+    hash = "sha256-nKX9AYVC4e3B+vOzXWZu8S4I5BNpKnqkFJ2e8bVAUE4=";
  };

  nativeBuildInputs = [ cmake ];
--- a/pkgs/by-name/li/libxmp/package.nix
+++ b/pkgs/by-name/li/libxmp/package.nix
@ -6,7 +6,7 @@

 stdenv.mkDerivation rec {
  pname = "libxmp";
-  version = "4.6.1";
+  version = "4.6.2";

  meta = with lib; {
    description = "Extended module player library";
@ -22,6 +22,6 @@ stdenv.mkDerivation rec {

  src = fetchurl {
    url = "mirror://sourceforge/xmp/libxmp/${pname}-${version}.tar.gz";
-    sha256 = "sha256-r2Becsg7JKuvAyaTR+JOvD/AbNe0lWUqLGGcH1FLxcs=";
+    sha256 = "sha256-rKwXBb4sT7TS1w3AV1mFO6aqt0eoPeV2sIJ4TUb1pLk=";
  };
 }
--- a/pkgs/by-name/li/litellm/package.nix
+++ b/pkgs/by-name/li/litellm/package.nix
@ -0,0 +1,13 @@
+{ python3Packages }:
+
+let
+  litellm = python3Packages.litellm;
+in
+python3Packages.toPythonApplication (
+  litellm.overridePythonAttrs (oldAttrs: {
+    dependencies =
+      (oldAttrs.dependencies or [ ])
+      ++ litellm.optional-dependencies.proxy
+      ++ litellm.optional-dependencies.extra_proxy;
+  })
+)
--- a/pkgs/by-name/lo/lovely-injector/package.nix
+++ b/pkgs/by-name/lo/lovely-injector/package.nix
@ -2,6 +2,9 @@
  fetchFromGitHub,
  rustPlatform,
  lib,
+  versionCheckHook,
+  writeShellScript,
+  lua,
 }:
 let
  version = "0.7.1";
@ -13,14 +16,26 @@ rustPlatform.buildRustPackage {
    owner = "ethangreen-dev";
    repo = "lovely-injector";
    tag = "v${version}";
-    hash = "sha256-fzkuuu6pmvqeJa7qlX8jhtCLC4oYRLUm1hqHTRiYEX8=";
+    hash = "sha256-j03/DOnLFfFYTwGGh+7BalS779jyg+p0UqtcTTyHgv4=";
  };
  useFetchCargoVendor = true;
-  cargoHash = "sha256-Mkmj+ENdUge1V1cVAQOV2K01sYKEyhxTse0f5o6H6Xc=";
+  cargoHash = "sha256-hHq26kSKcqEldxUb6bn1laTpKGFplP9/2uogsal8T5A=";
  # no tests
  doCheck = false;
  # lovely-injector depends on nightly rust features
  env.RUSTC_BOOTSTRAP = 1;
+  nativeBuildInputs = [
+    lua
+  ];
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+  versionCheckProgramArg = [ "${placeholder "out"}" ];
+  versionCheckProgram = writeShellScript "lovely-version-check" ''
+    export LD_PRELOAD="$1/lib/liblovely.so"
+    exec ${lua}/bin/lua < /dev/null
+  '';

  meta = {
    description = "Runtime lua injector for games built with LÖVE";
--- a/pkgs/by-name/ma/mackerel-agent/package.nix
+++ b/pkgs/by-name/ma/mackerel-agent/package.nix
@ -10,13 +10,13 @@

 buildGoModule rec {
  pname = "mackerel-agent";
-  version = "0.84.0";
+  version = "0.84.1";

  src = fetchFromGitHub {
    owner = "mackerelio";
    repo = pname;
    rev = "v${version}";
-    sha256 = "sha256-kLrZ+oTb27g2Lzb65cVyxu1Ou5wGXXMSUvod+IBnoPA=";
+    sha256 = "sha256-gBpqBmqq9c37JzKwJKZZxP67BFWISZgVm5Vp8v+D3K0=";
  };

  nativeBuildInputs = [ makeWrapper ];
--- a/pkgs/by-name/my/myks/package.nix
+++ b/pkgs/by-name/my/myks/package.nix
@ -9,16 +9,16 @@

 buildGoModule rec {
  pname = "myks";
-  version = "4.4.2";
+  version = "4.6.0";

  src = fetchFromGitHub {
    owner = "mykso";
    repo = "myks";
    tag = "v${version}";
-    hash = "sha256-95vqUViXUdLLnpsX81bwS1/EAiJA4XzOCIEd43E4wIQ=";
+    hash = "sha256-qtBE0kNNhCQ4o3NY/ylhA/AKCoIpCMXlWReONV1klm0=";
  };

-  vendorHash = "sha256-cTRyQu3lXrIrBHtEYYQIdv0F705KrgyXgDS8meHVRJw=";
+  vendorHash = "sha256-U4mHGkbl5nygQfakIRmyS5z85bulO7+MjKhbQmv9ZB8=";

  subPackages = ".";

--- a/pkgs/by-name/no/node-red/package-lock.json
+++ b/pkgs/by-name/no/node-red/package-lock.json
@ -1,12 +1,12 @@
 {
    "name": "node-red",
-    "version": "4.0.8",
+    "version": "4.0.9",
    "lockfileVersion": 3,
    "requires": true,
    "packages": {
        "": {
            "name": "node-red",
-            "version": "4.0.8",
+            "version": "4.0.9",
            "license": "Apache-2.0",
            "dependencies": {
                "acorn": "8.12.1",
@ -110,23 +110,23 @@
            }
        },
        "node_modules/@antfu/install-pkg": {
-            "version": "0.4.1",
-            "resolved": "https://registry.npmjs.org/@antfu/install-pkg/-/install-pkg-0.4.1.tgz",
-            "integrity": "sha512-T7yB5QNG29afhWVkVq7XeIMBa5U/vs9mX69YqayXypPRmYzUmzwnYltplHmPtZ4HPCn+sQKeXW8I47wCbuBOjw==",
+            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/@antfu/install-pkg/-/install-pkg-1.0.0.tgz",
+            "integrity": "sha512-xvX6P/lo1B3ej0OsaErAjqgFYzYVcJpamjLAFLYh9vRJngBrMoUG7aVnrGTeqM7yxbyTD5p3F2+0/QUEh8Vzhw==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
-                "package-manager-detector": "^0.2.0",
-                "tinyexec": "^0.3.0"
+                "package-manager-detector": "^0.2.8",
+                "tinyexec": "^0.3.2"
            },
            "funding": {
                "url": "https://github.com/sponsors/antfu"
            }
        },
        "node_modules/@antfu/utils": {
-            "version": "0.7.10",
-            "resolved": "https://registry.npmjs.org/@antfu/utils/-/utils-0.7.10.tgz",
-            "integrity": "sha512-+562v9k4aI80m1+VuMHehNJWLOFjBnXn3tdOitzD0il5b7smkSBal4+a3oKiQTbrwMmN/TBUMDvbdoWDehgOww==",
+            "version": "8.1.1",
+            "resolved": "https://registry.npmjs.org/@antfu/utils/-/utils-8.1.1.tgz",
+            "integrity": "sha512-Mex9nXf9vR6AhcXmMrlz/HVgYYZpVGJ6YlPgwl7UnaFpnshXs6EK/oa5Gpf3CzENMjkvEx2tQtntGnb7UtSTOQ==",
            "dev": true,
            "license": "MIT",
            "funding": {
@ -149,14 +149,14 @@
            }
        },
        "node_modules/@babel/generator": {
-            "version": "7.26.3",
-            "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.26.3.tgz",
-            "integrity": "sha512-6FF/urZvD0sTeO7k6/B15pMLC4CHUv1426lzr3N01aHJTl046uCAh9LXW/fzeXXjPNCJ6iABW5XaWOsIZB93aQ==",
+            "version": "7.26.9",
+            "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.26.9.tgz",
+            "integrity": "sha512-kEWdzjOAUMW4hAyrzJ0ZaTOu9OmpyDIQicIh0zg0EEcEkYXZb2TjtBhnHi2ViX7PKwZqF4xwqfAm299/QMP3lg==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
-                "@babel/parser": "^7.26.3",
-                "@babel/types": "^7.26.3",
+                "@babel/parser": "^7.26.9",
+                "@babel/types": "^7.26.9",
                "@jridgewell/gen-mapping": "^0.3.5",
                "@jridgewell/trace-mapping": "^0.3.25",
                "jsesc": "^3.0.2"
@ -186,13 +186,13 @@
            }
        },
        "node_modules/@babel/parser": {
-            "version": "7.26.3",
-            "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.26.3.tgz",
-            "integrity": "sha512-WJ/CvmY8Mea8iDXo6a7RK2wbmJITT5fN3BEkRuFlxVyNx8jOKIIhmC4fSkTcPcf8JyavbBwIe6OpiCOBXt/IcA==",
+            "version": "7.26.9",
+            "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.26.9.tgz",
+            "integrity": "sha512-81NWa1njQblgZbQHxWHpxxCzNsa3ZwvFqpUg7P+NNUU6f3UU2jBEg4OlF/J6rl8+PQGh1q6/zWScd001YwcA5A==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
-                "@babel/types": "^7.26.3"
+                "@babel/types": "^7.26.9"
            },
            "bin": {
                "parser": "bin/babel-parser.js"
@ -202,9 +202,9 @@
            }
        },
        "node_modules/@babel/runtime": {
-            "version": "7.26.0",
-            "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.26.0.tgz",
-            "integrity": "sha512-FDSOghenHTiToteC/QRlv2q3DhPZ/oOXTBoirfWNx1Cx3TMVcGWQtMMmQcSvb/JjpNeGzx8Pq/b4fKEJuWm1sw==",
+            "version": "7.26.9",
+            "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.26.9.tgz",
+            "integrity": "sha512-aA63XwOkcl4xxQa3HjPMqOP6LiK0ZDv3mUPYEFXkpHbaFjtGggE1A61FjFzJnB+p7/oy2gA8E+rcBNl/zC1tMg==",
            "license": "MIT",
            "dependencies": {
                "regenerator-runtime": "^0.14.0"
@ -214,32 +214,32 @@
            }
        },
        "node_modules/@babel/template": {
-            "version": "7.25.9",
-            "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.25.9.tgz",
-            "integrity": "sha512-9DGttpmPvIxBb/2uwpVo3dqJ+O6RooAFOS+lB+xDqoE2PVCE8nfoHMdZLpfCQRLwvohzXISPZcgxt80xLfsuwg==",
+            "version": "7.26.9",
+            "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.26.9.tgz",
+            "integrity": "sha512-qyRplbeIpNZhmzOysF/wFMuP9sctmh2cFzRAZOn1YapxBsE1i9bJIY586R/WBLfLcmcBlM8ROBiQURnnNy+zfA==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
-                "@babel/code-frame": "^7.25.9",
-                "@babel/parser": "^7.25.9",
-                "@babel/types": "^7.25.9"
+                "@babel/code-frame": "^7.26.2",
+                "@babel/parser": "^7.26.9",
+                "@babel/types": "^7.26.9"
            },
            "engines": {
                "node": ">=6.9.0"
            }
        },
        "node_modules/@babel/traverse": {
-            "version": "7.26.4",
-            "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.26.4.tgz",
-            "integrity": "sha512-fH+b7Y4p3yqvApJALCPJcwb0/XaOSgtK4pzV6WVjPR5GLFQBRI7pfoX2V2iM48NXvX07NUxxm1Vw98YjqTcU5w==",
+            "version": "7.26.9",
+            "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.26.9.tgz",
+            "integrity": "sha512-ZYW7L+pL8ahU5fXmNbPF+iZFHCv5scFak7MZ9bwaRPLUhHh7QQEMjZUg0HevihoqCM5iSYHN61EyCoZvqC+bxg==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
                "@babel/code-frame": "^7.26.2",
-                "@babel/generator": "^7.26.3",
-                "@babel/parser": "^7.26.3",
-                "@babel/template": "^7.25.9",
-                "@babel/types": "^7.26.3",
+                "@babel/generator": "^7.26.9",
+                "@babel/parser": "^7.26.9",
+                "@babel/template": "^7.26.9",
+                "@babel/types": "^7.26.9",
                "debug": "^4.3.1",
                "globals": "^11.1.0"
            },
@ -283,9 +283,9 @@
            "license": "MIT"
        },
        "node_modules/@babel/types": {
-            "version": "7.26.3",
-            "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.26.3.tgz",
-            "integrity": "sha512-vN5p+1kl59GVKMvTHt55NzzmYVxprfJD+ql7U9NFIfKCBkYE55LYtS+WtPlaYOyzydrKI8Nezd+aZextrd+FMA==",
+            "version": "7.26.9",
+            "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.26.9.tgz",
+            "integrity": "sha512-Y3IR1cRnOxOCDvMmNiym7XpXQ93iGDDPHx+Zj+NM+rg0fBaShfQLkg+hKPaZCEvg5N/LeCo4+Rj/i3FuJsIQaw==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
@ -386,20 +386,20 @@
            "license": "MIT"
        },
        "node_modules/@iconify/utils": {
-            "version": "2.2.1",
-            "resolved": "https://registry.npmjs.org/@iconify/utils/-/utils-2.2.1.tgz",
-            "integrity": "sha512-0/7J7hk4PqXmxo5PDBDxmnecw5PxklZJfNjIVG9FM0mEfVrvfudS22rYWsqVk6gR3UJ/mSYS90X4R3znXnqfNA==",
+            "version": "2.3.0",
+            "resolved": "https://registry.npmjs.org/@iconify/utils/-/utils-2.3.0.tgz",
+            "integrity": "sha512-GmQ78prtwYW6EtzXRU1rY+KwOKfz32PD7iJh6Iyqw68GiKuoZ2A6pRtzWONz5VQJbp50mEjXh/7NkumtrAgRKA==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
-                "@antfu/install-pkg": "^0.4.1",
-                "@antfu/utils": "^0.7.10",
+                "@antfu/install-pkg": "^1.0.0",
+                "@antfu/utils": "^8.1.0",
                "@iconify/types": "^2.0.0",
                "debug": "^4.4.0",
-                "globals": "^15.13.0",
+                "globals": "^15.14.0",
                "kolorist": "^1.8.0",
-                "local-pkg": "^0.5.1",
-                "mlly": "^1.7.3"
+                "local-pkg": "^1.0.0",
+                "mlly": "^1.7.4"
            }
        },
        "node_modules/@iconify/utils/node_modules/debug": {
@ -612,9 +612,9 @@
            }
        },
        "node_modules/@napi-rs/wasm-runtime": {
-            "version": "0.2.6",
-            "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-0.2.6.tgz",
-            "integrity": "sha512-z8YVS3XszxFTO73iwvFDNpQIzdMmSDTP/mB3E/ucR37V3Sx57hSExcXyMoNwaucWxnsWf4xfbZv0iZ30jr0M4Q==",
+            "version": "0.2.7",
+            "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-0.2.7.tgz",
+            "integrity": "sha512-5yximcFK5FNompXfJFoWanu5l8v1hNGqNHh9du1xETp9HWk/B/PzvchX55WYOPaIeNglG8++68AAiauBAtbnzw==",
            "license": "MIT",
            "optional": true,
            "dependencies": {
@ -1050,9 +1050,9 @@
            "license": "MIT"
        },
        "node_modules/@types/node": {
-            "version": "22.10.2",
-            "resolved": "https://registry.npmjs.org/@types/node/-/node-22.10.2.tgz",
-            "integrity": "sha512-Xxr6BBRCAOQixvonOye19wnzyDiUtTeqldOOmj3CkeblonbccA12PFwlufvRdrpjXxqnmUaeiU5EOA+7s5diUQ==",
+            "version": "22.13.5",
+            "resolved": "https://registry.npmjs.org/@types/node/-/node-22.13.5.tgz",
+            "integrity": "sha512-+lTU0PxZXn0Dr1NBtC7Y8cR21AJr87dLLU953CWA6pMxxv/UDc7jYAY90upcrie1nRcD6XNG5HOYEDtgW5TxAg==",
            "license": "MIT",
            "dependencies": {
                "undici-types": "~6.20.0"
@ -1069,9 +1069,9 @@
            }
        },
        "node_modules/@types/ws": {
-            "version": "8.5.13",
-            "resolved": "https://registry.npmjs.org/@types/ws/-/ws-8.5.13.tgz",
-            "integrity": "sha512-osM/gWBTPKgHV8XkTunnegTRIsvF6owmf5w+JtAfOw472dptdm0dlGv4xCt6GwQRcC2XVOvvRE/0bAoQcL2QkA==",
+            "version": "8.5.14",
+            "resolved": "https://registry.npmjs.org/@types/ws/-/ws-8.5.14.tgz",
+            "integrity": "sha512-bd/YFLW+URhBzMXurx7lWByOu+xzU9+kb3RboOteXYDfW+tr+JZa99OyNmPINEGB/ahzKrEuc8rcv4gnpJmxTw==",
            "license": "MIT",
            "dependencies": {
                "@types/node": "*"
@ -1628,9 +1628,9 @@
            }
        },
        "node_modules/bl": {
-            "version": "6.0.16",
-            "resolved": "https://registry.npmjs.org/bl/-/bl-6.0.16.tgz",
-            "integrity": "sha512-V/kz+z2Mx5/6qDfRCilmrukUXcXuCoXKg3/3hDvzKKoSUx8CJKudfIoT29XZc3UE9xBvxs5qictiHdprwtteEg==",
+            "version": "6.0.19",
+            "resolved": "https://registry.npmjs.org/bl/-/bl-6.0.19.tgz",
+            "integrity": "sha512-4Ay3A3oDfGg3GGirhl4s62ebtnk0pJZA5mLp672MPKOQXsWvXjEF4dqdXySjJIs7b9OVr/O8aOo0Lm+xdjo2JA==",
            "license": "MIT",
            "dependencies": {
                "@types/readable-stream": "^4.0.0",
@ -1640,9 +1640,9 @@
            }
        },
        "node_modules/bl/node_modules/readable-stream": {
-            "version": "4.6.0",
-            "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.6.0.tgz",
-            "integrity": "sha512-cbAdYt0VcnpN2Bekq7PU+k363ZRsPwJoEEJOEtSJQlJXzwaxt3FIo/uL+KeDSGIjJqtkwyge4KQgD2S2kd+CQw==",
+            "version": "4.7.0",
+            "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.7.0.tgz",
+            "integrity": "sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==",
            "license": "MIT",
            "dependencies": {
                "abort-controller": "^3.0.0",
@ -1918,9 +1918,9 @@
            }
        },
        "node_modules/call-bind-apply-helpers": {
-            "version": "1.0.1",
-            "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.1.tgz",
-            "integrity": "sha512-BhYE+WDaywFg2TBWYNXAE+8B1ATnThNBqXHP5nQu0jWJdVvY2hvkpyB3qOmtmDePiS5/BDQ8wASEWGMWRG148g==",
+            "version": "1.0.2",
+            "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+            "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
            "license": "MIT",
            "dependencies": {
                "es-errors": "^1.3.0",
@ -2670,9 +2670,9 @@
            }
        },
        "node_modules/cytoscape": {
-            "version": "3.30.4",
-            "resolved": "https://registry.npmjs.org/cytoscape/-/cytoscape-3.30.4.tgz",
-            "integrity": "sha512-OxtlZwQl1WbwMmLiyPSEBuzeTIQnwZhJYYWFzZ2PhEHVFwpeaqNIkUzSiso00D98qk60l8Gwon2RP304d3BJ1A==",
+            "version": "3.31.0",
+            "resolved": "https://registry.npmjs.org/cytoscape/-/cytoscape-3.31.0.tgz",
+            "integrity": "sha512-zDGn1K/tfZwEnoGOcHc0H4XazqAAXAuDpcYw9mUnUjATjqljyCNGJv8uEvbvxGaGHaVshxMecyl6oc6uKzRfbw==",
            "dev": true,
            "license": "MIT",
            "engines": {
@ -3645,9 +3645,9 @@
            }
        },
        "node_modules/es-object-atoms": {
-            "version": "1.0.0",
-            "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.0.0.tgz",
-            "integrity": "sha512-MZ4iQ6JwHOBQjahnjwaC1ZtIBH+2ohjamzAO3oaHcXYup7qxjF2fixyH+Q71voWHeOkI2q/TnJao/KfXYIZWbw==",
+            "version": "1.1.1",
+            "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
+            "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==",
            "license": "MIT",
            "dependencies": {
                "es-errors": "^1.3.0"
@ -3930,15 +3930,25 @@
            }
        },
        "node_modules/fast-uri": {
-            "version": "3.0.3",
-            "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.3.tgz",
-            "integrity": "sha512-aLrHthzCjH5He4Z2H9YZ+v6Ujb9ocRuW6ZzkJQOrTxleEijANq4v1TsaPaVG1PZcuurEzrLcWRyYBYXD5cEiaw==",
+            "version": "3.0.6",
+            "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.0.6.tgz",
+            "integrity": "sha512-Atfo14OibSv5wAp4VWNsFYE1AchQRTv9cBGWET4pZWHzYshFSS9NQI6I57rdKn9croWVMbYFbLhJ+yJvmZIIHw==",
+            "funding": [
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/fastify"
+                },
+                {
+                    "type": "opencollective",
+                    "url": "https://opencollective.com/fastify"
+                }
+            ],
            "license": "BSD-3-Clause"
        },
        "node_modules/fastq": {
-            "version": "1.18.0",
-            "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.18.0.tgz",
-            "integrity": "sha512-QKHXPW0hD8g4UET03SdOdunzSouc9N4AuHdsX8XNcTsuz+yYFILVNIX4l9yHABMhiEI9Db0JTTIpu0wB+Y1QQw==",
+            "version": "1.19.0",
+            "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.19.0.tgz",
+            "integrity": "sha512-7SFSRCNjBQIZH/xZR3iy5iQYR8aGBE0h3VG6/cwlbrpdciNYBMotQav8c1XI3HjHH+NikUpP53nPdlZSdWmFzA==",
            "dev": true,
            "license": "ISC",
            "dependencies": {
@ -4375,21 +4385,21 @@
            }
        },
        "node_modules/get-intrinsic": {
-            "version": "1.2.6",
-            "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.2.6.tgz",
-            "integrity": "sha512-qxsEs+9A+u85HhllWJJFicJfPDhRmjzoYdl64aMWW9yRIJmSyxdn8IEkuIM530/7T+lv0TIHd8L6Q/ra0tEoeA==",
+            "version": "1.2.7",
+            "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.2.7.tgz",
+            "integrity": "sha512-VW6Pxhsrk0KAOqs3WEd0klDiF/+V7gQOpAvY1jVU/LHmaD/kQO4523aiJuikX/QAKYiW6x8Jh+RJej1almdtCA==",
            "license": "MIT",
            "dependencies": {
                "call-bind-apply-helpers": "^1.0.1",
-                "dunder-proto": "^1.0.0",
                "es-define-property": "^1.0.1",
                "es-errors": "^1.3.0",
                "es-object-atoms": "^1.0.0",
                "function-bind": "^1.1.2",
+                "get-proto": "^1.0.0",
                "gopd": "^1.2.0",
                "has-symbols": "^1.1.0",
                "hasown": "^2.0.2",
-                "math-intrinsics": "^1.0.0"
+                "math-intrinsics": "^1.1.0"
            },
            "engines": {
                "node": ">= 0.4"
@ -4398,6 +4408,19 @@
                "url": "https://github.com/sponsors/ljharb"
            }
        },
+        "node_modules/get-proto": {
+            "version": "1.0.1",
+            "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+            "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+            "license": "MIT",
+            "dependencies": {
+                "dunder-proto": "^1.0.1",
+                "es-object-atoms": "^1.0.0"
+            },
+            "engines": {
+                "node": ">= 0.4"
+            }
+        },
        "node_modules/get-stream": {
            "version": "6.0.1",
            "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz",
@ -4500,9 +4523,9 @@
            }
        },
        "node_modules/globals": {
-            "version": "15.14.0",
-            "resolved": "https://registry.npmjs.org/globals/-/globals-15.14.0.tgz",
-            "integrity": "sha512-OkToC372DtlQeje9/zHIo5CT8lRP/FUgEOKBEhU4e0abL7J7CD24fD9ohiLN5hagG/kWCYj4K5oaxxtj2Z0Dig==",
+            "version": "15.15.0",
+            "resolved": "https://registry.npmjs.org/globals/-/globals-15.15.0.tgz",
+            "integrity": "sha512-7ACyT3wmyp3I61S4fG682L0VA2RGD9otkqGJIwNUMF1SWUombIIk+af1unuDYgMm082aHYwD+mzJvv9Iu8dsgg==",
            "dev": true,
            "license": "MIT",
            "engines": {
@ -5352,9 +5375,9 @@
            }
        },
        "node_modules/http-parser-js": {
-            "version": "0.5.8",
-            "resolved": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.5.8.tgz",
-            "integrity": "sha512-SGeBX54F94Wgu5RH3X5jsDtf4eHyRogWX1XGT3b4HuW3tQPM4AaBzoUji/4AAJNXCEOWZ5O0DgZmJw1947gD5Q==",
+            "version": "0.5.9",
+            "resolved": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.5.9.tgz",
+            "integrity": "sha512-n1XsPy3rXVxlqxVioEWdC+0+M+SQw0DpJynwtOPo1X+ZlvdzTLtDBIJJlDQTnwZIFJrZSzSGmIOUdP8tu+SgLw==",
            "dev": true,
            "license": "MIT"
        },
@ -5487,9 +5510,9 @@
            "license": "MIT"
        },
        "node_modules/import-fresh": {
-            "version": "3.3.0",
-            "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.0.tgz",
-            "integrity": "sha512-veYYhQa+D1QBKznvhUHxb8faxlrwUnxseDAbAp457E0wLNio2bOSKnjYDhMj+YiAq61xrMGhQk9iXVk5FzgQMw==",
+            "version": "3.3.1",
+            "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.1.tgz",
+            "integrity": "sha512-TR3KfrTZTYLPB6jUjfx6MF9WcWrHL9su5TObK4ZkYgBdWKPOFoSoQIdEuTuR82pmtxH2spWG9h6etwfr1pLBqQ==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
@ -6414,9 +6437,9 @@
            "license": "MIT"
        },
        "node_modules/katex": {
-            "version": "0.16.18",
-            "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.18.tgz",
-            "integrity": "sha512-LRuk0rPdXrecAFwQucYjMiIs0JFefk6N1q/04mlw14aVIVgxq1FO0MA9RiIIGVaKOB5GIP5GH4aBBNraZERmaQ==",
+            "version": "0.16.21",
+            "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.21.tgz",
+            "integrity": "sha512-XvqR7FgOHtWupfMiigNzmh+MgUVmDGU2kXZm899ZkPfcuoPuFxyHmXsgATDpFZDAXCI8tvinaVcDo8PIIJSo4A==",
            "dev": true,
            "funding": [
                "https://opencollective.com/katex",
@ -6663,14 +6686,14 @@
            }
        },
        "node_modules/local-pkg": {
-            "version": "0.5.1",
-            "resolved": "https://registry.npmjs.org/local-pkg/-/local-pkg-0.5.1.tgz",
-            "integrity": "sha512-9rrA30MRRP3gBD3HTGnC6cDFpaE1kVDWxWgqWJUN0RvDNAo+Nz/9GxB+nHOH0ifbVFy0hSA1V6vFDvnx54lTEQ==",
+            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/local-pkg/-/local-pkg-1.0.0.tgz",
+            "integrity": "sha512-bbgPw/wmroJsil/GgL4qjDzs5YLTBMQ99weRsok1XCDccQeehbHA/I1oRvk2NPtr7KGZgT/Y5tPRnAtMqeG2Kg==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
                "mlly": "^1.7.3",
-                "pkg-types": "^1.2.1"
+                "pkg-types": "^1.3.0"
            },
            "engines": {
                "node": ">=14"
@ -6754,6 +6777,7 @@
            "version": "4.4.2",
            "resolved": "https://registry.npmjs.org/lodash.get/-/lodash.get-4.4.2.tgz",
            "integrity": "sha512-z+Uw/vLuy6gQe8cfaFWD7p0wVv8fJl3mbzXh33RS+0oW2wvUqiRXiQ69gLWSLpgB5/6sU+r6BlQR0MBILadqTQ==",
+            "deprecated": "This package is deprecated. Use the optional chaining (?.) operator instead.",
            "dev": true,
            "license": "MIT"
        },
@ -6768,6 +6792,7 @@
            "version": "4.5.0",
            "resolved": "https://registry.npmjs.org/lodash.omit/-/lodash.omit-4.5.0.tgz",
            "integrity": "sha512-XeqSp49hNGmlkj2EJlfrQFIzQ6lXdNro9sddtQzcJY8QaoC2GO0DT7xaIokHeyM+mIT0mPMlPvkYzg2xCuHdZg==",
+            "deprecated": "This package is deprecated. Use destructuring assignment syntax instead.",
            "dev": true,
            "license": "MIT"
        },
@ -7315,15 +7340,15 @@
            "license": "MIT"
        },
        "node_modules/mlly": {
-            "version": "1.7.3",
-            "resolved": "https://registry.npmjs.org/mlly/-/mlly-1.7.3.tgz",
-            "integrity": "sha512-xUsx5n/mN0uQf4V548PKQ+YShA4/IW0KI1dZhrNrPCLG+xizETbHTkOa1f8/xut9JRPp8kQuMnz0oqwkTiLo/A==",
+            "version": "1.7.4",
+            "resolved": "https://registry.npmjs.org/mlly/-/mlly-1.7.4.tgz",
+            "integrity": "sha512-qmdSIPC4bDJXgZTCR7XosJiNKySV7O215tsPtDN9iEO/7q/76b/ijtgRu/+epFXSJhijtTCCGp3DWS549P3xKw==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
                "acorn": "^8.14.0",
-                "pathe": "^1.1.2",
-                "pkg-types": "^1.2.1",
+                "pathe": "^2.0.1",
+                "pkg-types": "^1.3.0",
                "ufo": "^1.5.4"
            }
        },
@ -7621,9 +7646,9 @@
            "license": "MIT"
        },
        "node_modules/mqtt/node_modules/readable-stream": {
-            "version": "4.6.0",
-            "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.6.0.tgz",
-            "integrity": "sha512-cbAdYt0VcnpN2Bekq7PU+k363ZRsPwJoEEJOEtSJQlJXzwaxt3FIo/uL+KeDSGIjJqtkwyge4KQgD2S2kd+CQw==",
+            "version": "4.7.0",
+            "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.7.0.tgz",
+            "integrity": "sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==",
            "license": "MIT",
            "dependencies": {
                "abort-controller": "^3.0.0",
@ -7637,9 +7662,9 @@
            }
        },
        "node_modules/mqtt/node_modules/ws": {
-            "version": "8.18.0",
-            "resolved": "https://registry.npmjs.org/ws/-/ws-8.18.0.tgz",
-            "integrity": "sha512-8VbfWfHLbbwu3+N6OKsOMpBdT4kXPDDB9cJk2bJ6mh9ucxdlnNvH1e+roYkKmN9Nxw2yjz7VzeO9oOz2zJ04Pw==",
+            "version": "8.18.1",
+            "resolved": "https://registry.npmjs.org/ws/-/ws-8.18.1.tgz",
+            "integrity": "sha512-RKW2aJZMXeMxVpnZ6bck+RswznaxmzdULiBr6KY7XkTnW8uvt0iT9H5DkHUChXrc+uurzwa0rVI16n/Xzjdz1w==",
            "license": "MIT",
            "engines": {
                "node": ">=10.0.0"
@ -8556,9 +8581,9 @@
            "license": "MIT"
        },
        "node_modules/object-inspect": {
-            "version": "1.13.3",
-            "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.3.tgz",
-            "integrity": "sha512-kDCGIbxkDSXE3euJZZXzc6to7fCrKHNI/hSRQnRuQ+BWjFNzZwiFF8fj/6o2t2G9/jTj8PSIYTfCLelLZEeRpA==",
+            "version": "1.13.4",
+            "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+            "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
            "license": "MIT",
            "engines": {
                "node": ">= 0.4"
@ -8770,9 +8795,9 @@
            "license": "BlueOak-1.0.0"
        },
        "node_modules/package-manager-detector": {
-            "version": "0.2.8",
-            "resolved": "https://registry.npmjs.org/package-manager-detector/-/package-manager-detector-0.2.8.tgz",
-            "integrity": "sha512-ts9KSdroZisdvKMWVAVCXiKqnqNfXz4+IbrBG8/BWx/TR5le+jfenvoBuIZ6UWM9nz47W7AbD9qYfAwfWMIwzA==",
+            "version": "0.2.9",
+            "resolved": "https://registry.npmjs.org/package-manager-detector/-/package-manager-detector-0.2.9.tgz",
+            "integrity": "sha512-+vYvA/Y31l8Zk8dwxHhL3JfTuHPm6tlxM2A3GeQyl7ovYnSp1+mzAxClxaOr0qO1TtPxbQxetI7v5XqKLJZk7Q==",
            "dev": true,
            "license": "MIT"
        },
@ -9048,9 +9073,9 @@
            }
        },
        "node_modules/pathe": {
-            "version": "1.1.2",
-            "resolved": "https://registry.npmjs.org/pathe/-/pathe-1.1.2.tgz",
-            "integrity": "sha512-whLdWMYL2TwI08hn8/ZqAbrVemu0LNaNNJZX73O6qaIdCTfXutsLhMkjdENX0qhsQ9uIimo4/aQOmXkoon2nDQ==",
+            "version": "2.0.3",
+            "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
+            "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
            "dev": true,
            "license": "MIT"
        },
@ -9169,15 +9194,15 @@
            }
        },
        "node_modules/pkg-types": {
-            "version": "1.2.1",
-            "resolved": "https://registry.npmjs.org/pkg-types/-/pkg-types-1.2.1.tgz",
-            "integrity": "sha512-sQoqa8alT3nHjGuTjuKgOnvjo4cljkufdtLMnO2LBP/wRwuDlo1tkaEdMxCRhyGRPacv/ztlZgDPm2b7FAmEvw==",
+            "version": "1.3.1",
+            "resolved": "https://registry.npmjs.org/pkg-types/-/pkg-types-1.3.1.tgz",
+            "integrity": "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==",
            "dev": true,
            "license": "MIT",
            "dependencies": {
                "confbox": "^0.1.8",
-                "mlly": "^1.7.2",
-                "pathe": "^1.1.2"
+                "mlly": "^1.7.4",
+                "pathe": "^2.0.1"
            }
        },
        "node_modules/points-on-curve": {
@ -10446,9 +10471,9 @@
            }
        },
        "node_modules/spdx-license-ids": {
-            "version": "3.0.20",
-            "resolved": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.20.tgz",
-            "integrity": "sha512-jg25NiDV/1fLtSgEgyvVyDunvaNHbuwF9lfNV17gSmPFAlYzdfNBlLtLzXTevwkPj7DhGbmN9VnmJIgLnhvaBw==",
+            "version": "3.0.21",
+            "resolved": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.21.tgz",
+            "integrity": "sha512-Bvg/8F5XephndSK3JffaRqdT+gyhfqIPwDHpX80tJrF8QQRYMo8sNMeaZ2Dp5+jhwKnUmIOyFFQfHRkjJm5nXg==",
            "dev": true,
            "license": "CC0-1.0"
        },
@ -10663,9 +10688,9 @@
            }
        },
        "node_modules/stylis": {
-            "version": "4.3.4",
-            "resolved": "https://registry.npmjs.org/stylis/-/stylis-4.3.4.tgz",
-            "integrity": "sha512-osIBl6BGUmSfDkyH2mB7EFvCJntXDrLhKjHTRj/rK6xLH0yuPrHULDRQzKokSOD4VoorhtKpfcfW1GAntu8now==",
+            "version": "4.3.6",
+            "resolved": "https://registry.npmjs.org/stylis/-/stylis-4.3.6.tgz",
+            "integrity": "sha512-yQ3rwFWRfwNUY7H5vpU0wfdkNSnvnJinhF9830Swlaxl03zsOjCfmX0ugac+3LtK0lYSgwL/KXc8oYL3mG4YFQ==",
            "dev": true,
            "license": "MIT"
        },
@ -11021,28 +11046,28 @@
            "license": "MIT"
        },
        "node_modules/tinyexec": {
-            "version": "0.3.1",
-            "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-0.3.1.tgz",
-            "integrity": "sha512-WiCJLEECkO18gwqIp6+hJg0//p23HXp4S+gGtAKu3mI2F2/sXC4FvHvXvB0zJVVaTPhx1/tOwdbRsa1sOBIKqQ==",
+            "version": "0.3.2",
+            "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-0.3.2.tgz",
+            "integrity": "sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA==",
            "dev": true,
            "license": "MIT"
        },
        "node_modules/tldts": {
-            "version": "6.1.69",
-            "resolved": "https://registry.npmjs.org/tldts/-/tldts-6.1.69.tgz",
-            "integrity": "sha512-Oh/CqRQ1NXNY7cy9NkTPUauOWiTro0jEYZTioGbOmcQh6EC45oribyIMJp0OJO3677r13tO6SKdWoGZUx2BDFw==",
+            "version": "6.1.78",
+            "resolved": "https://registry.npmjs.org/tldts/-/tldts-6.1.78.tgz",
+            "integrity": "sha512-fSgYrW0ITH0SR/CqKMXIruYIPpNu5aDgUp22UhYoSrnUQwc7SBqifEBFNce7AAcygUPBo6a/gbtcguWdmko4RQ==",
            "license": "MIT",
            "dependencies": {
-                "tldts-core": "^6.1.69"
+                "tldts-core": "^6.1.78"
            },
            "bin": {
                "tldts": "bin/cli.js"
            }
        },
        "node_modules/tldts-core": {
-            "version": "6.1.69",
-            "resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-6.1.69.tgz",
-            "integrity": "sha512-nygxy9n2PBUFQUtAXAc122gGo+04/j5qr5TGQFZTHafTKYvmARVXt2cA5rgero2/dnXUfkdPtiJoKmrd3T+wdA==",
+            "version": "6.1.78",
+            "resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-6.1.78.tgz",
+            "integrity": "sha512-jS0svNsB99jR6AJBmfmEWuKIgz91Haya91Z43PATaeHJ24BkMoNRb/jlaD37VYjb0mYf6gRL/HOnvS1zEnYBiw==",
            "license": "MIT"
        },
        "node_modules/to-regex-range": {
@ -11078,9 +11103,9 @@
            }
        },
        "node_modules/tough-cookie": {
-            "version": "5.0.0",
-            "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-5.0.0.tgz",
-            "integrity": "sha512-FRKsF7cz96xIIeMZ82ehjC3xW2E+O2+v11udrDYewUbszngYhsGa8z6YUMMzO9QJZzzyd0nGGXnML/TReX6W8Q==",
+            "version": "5.1.1",
+            "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-5.1.1.tgz",
+            "integrity": "sha512-Ek7HndSVkp10hmHP9V4qZO1u+pn1RU5sI0Fw+jCU3lyvuMZcgqsNgc6CmJJZyByK4Vm/qotGRJlfgAX8q+4JiA==",
            "license": "BSD-3-Clause",
            "dependencies": {
                "tldts": "^6.1.32"
--- a/pkgs/by-name/no/node-red/package.nix
+++ b/pkgs/by-name/no/node-red/package.nix
@ -8,16 +8,16 @@

 buildNpmPackage rec {
  pname = "node-red";
-  version = "4.0.8";
+  version = "4.0.9";

  src = fetchFromGitHub {
    owner = "node-red";
    repo = "node-red";
    tag = version;
-    hash = "sha256-94U2233d81Rlu8kQF9KXLxSiGIF1Er4kRvH/XTwNm80=";
+    hash = "sha256-gv9ZjTouYzuDz+nv8wPHrk8xENbO4ySDdy3DMUDZlQA=";
  };

-  npmDepsHash = "sha256-YQuMbgTVhNdWAeCeV9Yj35RhlpKrb9PG/SPiepmGsvU=";
+  npmDepsHash = "sha256-J6d6lutqClRN/QK32civgDQHL8gCQHHs3EZYegdpQaI=";

  postPatch =
    let
--- a/pkgs/by-name/no/notion-app/info.json
+++ b/pkgs/by-name/no/notion-app/info.json
@ -1,12 +1,12 @@
 {
  "x86_64-darwin": {
-    "version": "4.5.0",
-    "url": "https://desktop-release.notion-static.com/Notion-4.5.0.zip",
-    "hash": "sha512-Baznq09QdCRsIpZFU7ySDHFNCiZD1v6st4HykBRhObXWY3xG2Hkwy9K+UD2ud0tyXesyMSqpnuO/4OTKNUeyAg=="
+    "version": "4.6.3",
+    "url": "https://desktop-release.notion-static.com/Notion-4.6.3.zip",
+    "hash": "sha512-8MVCebWFInBLh8PEnm2hcCW95tncOvaIPx+MxC0xCr377fEpCAU9IlCjhUokKxw/u3sljU7Vfkxhwk/kXjh+PQ=="
  },
  "aarch64-darwin": {
-    "version": "4.5.0",
-    "url": "https://desktop-release.notion-static.com/Notion-arm64-4.5.0.zip",
-    "hash": "sha512-2DgGe4G0N4dXCeu1H/FIv1Vi3aY27G5QYyv5pGa0g8p8OvMSIwN5vjKEAmD98q3prPM7rMiTgnPyjO7qpSLfzw=="
+    "version": "4.6.3",
+    "url": "https://desktop-release.notion-static.com/Notion-arm64-4.6.3.zip",
+    "hash": "sha512-aNMx/tZ26KXz0Wb3kajRER6Ni9raItflCCt+aQTKMz3v4SN+wkoad/aKbIugrNB30+4cxeVRJISOZMNWmQryOA=="
  }
 }
--- a/pkgs/by-name/nu/numbat/package.nix
+++ b/pkgs/by-name/nu/numbat/package.nix
@ -9,17 +9,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "numbat";
-  version = "1.15.0";
+  version = "1.16.0";

  src = fetchFromGitHub {
    owner = "sharkdp";
    repo = "numbat";
    tag = "v${version}";
-    hash = "sha256-5XsrOAvBrmCG6k7YRwGZZtBP/o1jVVtBBTrwIT5CDX8=";
+    hash = "sha256-1CAUl9NB1QjduXgwOIcMclXA6SpaTP+kd3j25BK5Q/8=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-GYdg4LkGyKfu22C++ZkwkTGR11++hrX2Wnvb7Skn8NY=";
+  cargoHash = "sha256-EBfhi7puB2To/1GLbXW6Tz1zazDswvh+NqqBkeqRtAI=";

  env.NUMBAT_SYSTEM_MODULE_PATH = "${placeholder "out"}/share/numbat/modules";

--- a/pkgs/by-name/or/orthanc/add-missing-include.patch
+++ b/pkgs/by-name/or/orthanc/add-missing-include.patch
@ -0,0 +1,10 @@
+diff -r cba3e8ca3a87 OrthancServer/Sources/OrthancInitialization.cpp
+--- a/Sources/OrthancInitialization.cpp   Tue Mar 11 10:46:15 2025 +0100
+++ b/Sources/OrthancInitialization.cpp   Thu Mar 13 18:20:00 2025 +0100
+@@ -59,6 +59,7 @@
+ #    undef __FILE__
+ #    define __FILE__ __ORTHANC_FILE__
+ #  endif
+#  include <google/protobuf/stubs/common.h>
+ #  include <google/protobuf/any.h>
+ #endif
--- a/pkgs/by-name/or/orthanc/package.nix
+++ b/pkgs/by-name/or/orthanc/package.nix
@ -0,0 +1,120 @@
+{
+  lib,
+  stdenv,
+  fetchhg,
+  boost,
+  charls,
+  civetweb,
+  cmake,
+  curl,
+  dcmtk,
+  gtest,
+  jsoncpp,
+  libjpeg,
+  libpng,
+  libuuid,
+  log4cplus,
+  lua,
+  openssl,
+  protobuf,
+  pugixml,
+  python3,
+  sqlite,
+  unzip,
+  versionCheckHook,
+  nixosTests,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "orthanc";
+  version = "1.12.6";
+
+  src = fetchhg {
+    url = "https://orthanc.uclouvain.be/hg/orthanc/";
+    rev = "Orthanc-${finalAttrs.version}";
+    hash = "sha256-1ztA95PiCGL1oD6zVfsEhwrwGNID13/NcyZDD3eHYv0=";
+  };
+
+  patches = [
+    # Without this patch, the build fails to find `GOOGLE_PROTOBUF_VERIFY_VERSION`
+    # The patch has been included upstream, it need to be removed in the next release.
+    ./add-missing-include.patch
+  ];
+
+  sourceRoot = "${finalAttrs.src.name}/OrthancServer";
+
+  nativeBuildInputs = [
+    cmake
+    protobuf
+    python3
+    unzip
+  ];
+
+  buildInputs = [
+    protobuf
+    boost
+    charls
+    civetweb
+    curl
+    dcmtk
+    gtest
+    jsoncpp
+    libjpeg
+    libpng
+    libuuid
+    log4cplus
+    lua
+    openssl
+    pugixml
+    sqlite
+  ];
+
+  strictDeps = true;
+
+  enableParallelBuilding = true;
+
+  cmakeFlags = [
+    (lib.cmakeFeature "DCMTK_DICTIONARY_DIR_AUTO" "${dcmtk}/share/dcmtk-${dcmtk.version}")
+    (lib.cmakeFeature "DCMTK_LIBRARIES" "dcmjpls;oflog;ofstd")
+    (lib.cmakeFeature "CMAKE_BUILD_TYPE" "Release")
+
+    (lib.cmakeBool "BUILD_CONNECTIVITY_CHECKS" false)
+    (lib.cmakeBool "UNIT_TESTS_WITH_HTTP_CONNEXIONS" false)
+    (lib.cmakeBool "STANDALONE_BUILD" true)
+    (lib.cmakeBool "USE_SYSTEM_BOOST" true)
+    (lib.cmakeBool "USE_SYSTEM_CIVETWEB" true)
+    (lib.cmakeBool "USE_SYSTEM_DCMTK" true)
+    (lib.cmakeBool "USE_SYSTEM_GOOGLE_TEST" true)
+    (lib.cmakeBool "USE_SYSTEM_JSONCPP" true)
+    (lib.cmakeBool "USE_SYSTEM_LIBICONV" true)
+    (lib.cmakeBool "USE_SYSTEM_LIBJPEG" true)
+    (lib.cmakeBool "USE_SYSTEM_LIBPNG" true)
+    (lib.cmakeBool "USE_SYSTEM_LUA" true)
+    (lib.cmakeBool "USE_SYSTEM_OPENSSL" true)
+    (lib.cmakeBool "USE_SYSTEM_PROTOBUF" true)
+    (lib.cmakeBool "USE_SYSTEM_PUGIXML" true)
+    (lib.cmakeBool "USE_SYSTEM_SQLITE" true)
+    (lib.cmakeBool "USE_SYSTEM_UUID" true)
+    (lib.cmakeBool "USE_SYSTEM_ZLIB" true)
+  ];
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgram = "${placeholder "out"}/bin/${finalAttrs.meta.mainProgram}";
+  versionCheckProgramArg = "--version";
+  doInstallCheck = true;
+
+  passthru.tests = {
+    inherit (nixosTests) orthanc;
+  };
+
+  meta = {
+    description = "Orthanc is a lightweight, RESTful DICOM server for healthcare and medical research";
+    homepage = "https://www.orthanc-server.com/";
+    license = lib.licenses.gpl3Plus;
+    mainProgram = "Orthanc";
+    maintainers = with lib.maintainers; [ drupol ];
+    platforms = lib.platforms.linux;
+  };
+})
--- a/pkgs/by-name/pd/pdfium-binaries/package.nix
+++ b/pkgs/by-name/pd/pdfium-binaries/package.nix
@ -6,7 +6,7 @@
 }:
 let
  # also update rev of headers in python3Packages.pypdfium2
-  version = "6996";
+  version = "7047";
  src =
    let
      inherit (stdenv.hostPlatform) system;
@ -18,10 +18,10 @@ let
        aarch64-darwin = "mac-arm64";
      };
      hash = selectSystem {
-        x86_64-linux = "sha256-DAu9t7PA8R3F2BotYaoPLoQFMkDIdJOnf4ljkJYMXxI=";
-        aarch64-linux = "sha256-pNXBX0t6+ShaXGTSmM6J1UWaTLW/ZXoyfF7/gWl7rhc=";
-        x86_64-darwin = "sha256-GlEoDifWTVC2tAVoHmkRpVdV+V6vsPUkZZVYP15oeXc=";
-        aarch64-darwin = "sha256-OtUpNxo7HvrEIWSdCWC6MVf0fLQL2vqovhtRMzrrb5I=";
+        x86_64-linux = "sha256-cBhGagmFHH3SNW+w4yzm5GUnQqApRjp6iWzilDIgtiU=";
+        aarch64-linux = "sha256-b0XRtz9tdUpBqRqRGJNGv6fTvAiRnNbNQAqIKNjByg0=";
+        x86_64-darwin = "sha256-shvCpikbRgvHW8Z6ALwPZ5zYy46DcDmYum86xrSRozM=";
+        aarch64-darwin = "sha256-dglnL8OpkAXPdANeOFJU9HY/1RtinFeSdA4FO/PJiP4=";
      };
    in
    fetchzip {
--- a/pkgs/by-name/pr/projectm-sdl-cpp/package.nix
+++ b/pkgs/by-name/pr/projectm-sdl-cpp/package.nix
@ -12,13 +12,13 @@

 stdenv.mkDerivation {
  pname = "projectm-sdl-cpp";
-  version = "0-unstable-2024-08-07";
+  version = "0-unstable-2025-02-28";

  src = fetchFromGitHub {
    owner = "projectM-visualizer";
    repo = "frontend-sdl-cpp";
-    rev = "df6bfb51d7be335b4c258e2085f13d14e27f14a9";
-    hash = "sha256-WcQMwI0i7hON31FpgBSSUoqqlENj6SUwKTXfl7i6jn4=";
+    rev = "9d93ead331553738568fb789d5e95bfb2388e953";
+    hash = "sha256-ubylUiVVs7GqirWgawY3ruL/yyZIy8QNJ3wEdTc+4Pc=";
    fetchSubmodules = true;
  };

--- a/pkgs/by-name/qr/qrcp/package.nix
+++ b/pkgs/by-name/qr/qrcp/package.nix
@ -8,16 +8,16 @@

 buildGoModule rec {
  pname = "qrcp";
-  version = "0.11.4";
+  version = "0.11.6";

  src = fetchFromGitHub {
    owner = "claudiodangelis";
    repo = "qrcp";
    tag = "v${version}";
-    hash = "sha256-Ueow5lFnLLeJxk1+hcH4bhwrNu17pgJ50CXd2Adswvg=";
+    hash = "sha256-OLoGM9kG5k8iyCBQ8PW0i8WiSOASkW9S8YI1iRSb0Ic=";
  };

-  vendorHash = "sha256-0x35Ds3v5youpSBapgkP8R7YW3FuninFM5pyd2PJRP4=";
+  vendorHash = "sha256-BkR+hIbxIFuf3b4kHVkfC5Ex6/O7CVaFolKlcDPJ7YY=";

  subPackages = [ "." ];

--- a/pkgs/by-name/re/revpfw3/package.nix
+++ b/pkgs/by-name/re/revpfw3/package.nix
@ -6,18 +6,18 @@
 }:
 rustPlatform.buildRustPackage rec {
  pname = "revpfw3";
-  version = "0.4.3";
+  version = "0.5.0";

  passthru.updateScript = nix-update-script { };

  src = fetchgit {
    url = "https://git.tudbut.de/tudbut/revpfw3";
    rev = "v${version}";
-    hash = "sha256-7MnYTY/7PWu+VvxABtSLUnJ4FPzd9QCfrUBcSxcXUso=";
+    hash = "sha256-oqBzRpfL5sMxE29HwVXW4rdnf5cfNCn2pUqZiYDhHDk=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-2tpaTVCJJ0c4SyBQU2FjGvCYbdNLXxwIXv8O0+Uibrs=";
+  cargoHash = "sha256-F9ngyKWAdm3GyN6cSErtHoMN/u6A3ML7OMFP1QIaH9c=";

  meta = {
    description = "Reverse proxy to bypass the need for port forwarding";
--- a/pkgs/by-name/sc/scitokens-cpp/package.nix
+++ b/pkgs/by-name/sc/scitokens-cpp/package.nix
@ -12,14 +12,14 @@

 stdenv.mkDerivation {
  pname = "scitokens-cpp";
-  version = "1.1.2";
+  version = "1.1.3";

  src = fetchFromGitHub {
    owner = "scitokens";
    repo = "scitokens-cpp";

-    rev = "v1.1.2";
-    hash = "sha256-87mV1hyoUI/pWzRXaI051H3+FN5TXcachhgAPTtQYHg=";
+    rev = "v1.1.3";
+    hash = "sha256-5EVN/Q4/veNsIdTKcULdKJ+BmRodelfo+CTdrfvkkK8=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/sh/shallot/package.nix
+++ b/pkgs/by-name/sh/shallot/package.nix
@ -1,55 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchFromGitHub,
-  fetchpatch,
-  openssl,
-}:
-
-stdenv.mkDerivation rec {
-  pname = "shallot";
-  version = "0.0.3";
-
-  src = fetchFromGitHub {
-    owner = "katmagic";
-    repo = "Shallot";
-    rev = "shallot-${version}";
-    sha256 = "0cjafdxvjkwb9vyifhh11mw0la7yfqswqwqmrfp1fy9jl7m0il9k";
-  };
-
-  buildInputs = [ openssl ];
-
-  patches = [
-    (fetchpatch {
-      url = "https://github.com/katmagic/Shallot/commit/c913088dfaaaf249494514f20a62f2a17b5c6606.patch";
-      sha256 = "19l1ppbxpdb0736f7plhybj08wh6rqk1lr3bxsp8jpzpnkh114b2";
-    })
-    (fetchpatch {
-      url = "https://github.com/katmagic/Shallot/commit/cd6628d97b981325e700a38f408a43df426fd569.patch";
-      sha256 = "1gaffp5wp1l5p2qdk0ix3i5fhzpx4xphl0haa6ajhqn8db7hbr9y";
-    })
-    (fetchpatch {
-      url = "https://github.com/katmagic/Shallot/commit/5c7c1ccecbbad5a121c50ba7153cbbee7ee0ebf9.patch";
-      sha256 = "1zmll4iqz39zwk8vj40n1dpvyq3403l64p2127gsjgh2l2v91s4k";
-    })
-  ];
-
-  # Workaround build failure on -fno-common toolchains like upstream
-  # gcc-10. Otherwise build fails as:
-  #   ld: src/shallot.o:(.bss+0x8): multiple definition of `lucky_thread'; src/error.o:(.bss+0x8): first defined here
-  env.NIX_CFLAGS_COMPILE = "-fcommon";
-
-  installPhase = ''
-    mkdir -p $out/bin
-    cp ./shallot $out/bin/
-  '';
-
-  meta = {
-    description = "Allows you to create customized .onion addresses for your hidden service";
-
-    license = lib.licenses.mit;
-    homepage = "https://github.com/katmagic/Shallot";
-    platforms = lib.platforms.linux;
-    mainProgram = "shallot";
-  };
-}
--- a/pkgs/by-name/sp/spicetify-cli/package.nix
+++ b/pkgs/by-name/sp/spicetify-cli/package.nix
@ -8,13 +8,13 @@

 buildGoModule rec {
  pname = "spicetify-cli";
-  version = "2.39.3";
+  version = "2.39.5";

  src = fetchFromGitHub {
    owner = "spicetify";
    repo = "cli";
    rev = "v${version}";
-    hash = "sha256-w4wrXgrsUNO3dUfzgx1Xua2heyrfxLFXB1hGwOcNAEs=";
+    hash = "sha256-vqif3oLDm9SUrkY+qEYHUEmHN+psoK6GNUB+kA6sQ4Q=";
  };

  vendorHash = "sha256-3U/qV81UXS/Xh3K6OnMUyRKeMSBQUHLP64EOQl6TfMY=";
--- a/pkgs/by-name/sp/spire/package.nix
+++ b/pkgs/by-name/sp/spire/package.nix
@ -6,7 +6,7 @@

 buildGoModule rec {
  pname = "spire";
-  version = "1.11.1";
+  version = "1.11.2";

  outputs = [
    "out"
@ -18,10 +18,10 @@ buildGoModule rec {
    owner = "spiffe";
    repo = pname;
    rev = "v${version}";
-    sha256 = "sha256-rwtXPR97MvNTjAsEb8lxkHhhbqX/TTryVc5ZBnDb3GM=";
+    sha256 = "sha256-aLAJbNnFd7fcxLJ/htoFacU5NjPnnrlC6/LiT/sVHwk=";
  };

-  vendorHash = "sha256-ldMzKLxhnN5h7JqtdAAnAV1ILDce+D1MYIjIthbcl6Q=";
+  vendorHash = "sha256-QE0+3TzJQ9Ue6V1QjNJzkrleXPZrd17lY+KqcPf/Hwg=";

  subPackages = [
    "cmd/spire-agent"
--- a/pkgs/by-name/st/stevenblack-blocklist/package.nix
+++ b/pkgs/by-name/st/stevenblack-blocklist/package.nix
@ -6,13 +6,13 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "stevenblack-blocklist";
-  version = "3.15.20";
+  version = "3.15.24";

  src = fetchFromGitHub {
    owner = "StevenBlack";
    repo = "hosts";
    tag = finalAttrs.version;
-    hash = "sha256-NReJCA379CGPRsIy5xifVz0xtBOJ+XrPaAhDKIGV9Ik=";
+    hash = "sha256-34JVDJ6X1naRj+eFbuWSRxdfF5GX8FCTSFXNe78q1S8=";
  };

  outputs = [
--- a/pkgs/by-name/st/stormlib/package.nix
+++ b/pkgs/by-name/st/stormlib/package.nix
@ -1,27 +1,29 @@
 {
  lib,
+  stdenv,
  bzip2,
  cmake,
  darwin,
  fetchFromGitHub,
  libtomcrypt,
-  stdenv,
  zlib,
+  pkg-config,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "stormlib";
-  version = "9.23";
+  version = "9.30";

  src = fetchFromGitHub {
    owner = "ladislav-zezula";
    repo = "StormLib";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-8JDMqZ5BWslH4+Mfo5lnWTmD2QDaColwBOLzcuGZciY=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-gW3jR9XnBo5uEORu12TpGsUMFAS4w5snWPA/bIUt9UY=";
  };

  nativeBuildInputs = [
    cmake
+    pkg-config
  ];

  buildInputs =
@ -50,7 +52,7 @@ stdenv.mkDerivation (finalAttrs: {

  postPatch = ''
    substituteInPlace CMakeLists.txt \
-      --replace "FRAMEWORK DESTINATION /Library/Frameworks" "FRAMEWORK DESTINATION Library/Frameworks"
+      --replace-fail "FRAMEWORK DESTINATION /Library/Frameworks" "FRAMEWORK DESTINATION Library/Frameworks"
  '';

  meta = {
--- a/pkgs/by-name/su/suitesparse-graphblas/package.nix
+++ b/pkgs/by-name/su/suitesparse-graphblas/package.nix
@ -8,7 +8,7 @@

 stdenv.mkDerivation rec {
  pname = "suitesparse-graphblas";
-  version = "9.4.5";
+  version = "10.0.1";

  outputs = [
    "out"
@ -19,7 +19,7 @@ stdenv.mkDerivation rec {
    owner = "DrTimothyAldenDavis";
    repo = "GraphBLAS";
    rev = "v${version}";
-    hash = "sha256-z8BCnhqjKIekJvKx9cW3UdedjMlVS1u/Gowky52rnuU=";
+    hash = "sha256-YQ/yLM6hSlgAsYWyYd+7OsZd5Nxl/TqJjxam8+ug2BY=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/te/termshot/package.nix
+++ b/pkgs/by-name/te/termshot/package.nix
@ -5,14 +5,15 @@
  versionCheckHook,
  nix-update-script,
 }:
-buildGoModule rec {
+
+buildGoModule (finalAttrs: {
  pname = "termshot";
  version = "0.4.1";

  src = fetchFromGitHub {
    owner = "homeport";
    repo = "termshot";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
    hash = "sha256-vkxOUo1RyzZBN2+wRn8yWV930HrKRJnPwpHnxza5GNE=";
  };

@ -21,7 +22,7 @@ buildGoModule rec {
  ldflags = [
    "-s"
    "-w"
-    "-X github.com/homeport/termshot/internal/cmd.version=${version}"
+    "-X github.com/homeport/termshot/internal/cmd.version=${finalAttrs.version}"
  ];

  checkFlags = [ "-skip=^TestPtexec$" ];
@ -35,9 +36,9 @@ buildGoModule rec {
  meta = {
    description = "Creates screenshots based on terminal command output";
    homepage = "https://github.com/homeport/termshot";
-    changelog = "https://github.com/homeport/termshot/releases/tag/v${version}";
+    changelog = "https://github.com/homeport/termshot/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ defelo ];
    mainProgram = "termshot";
  };
-}
+})
--- a/pkgs/by-name/ty/typescript/package.nix
+++ b/pkgs/by-name/ty/typescript/package.nix
@ -2,20 +2,20 @@

 buildNpmPackage rec {
  pname = "typescript";
-  version = "5.7.3";
+  version = "5.8.2";

  src = fetchFromGitHub {
    owner = "microsoft";
    repo = "TypeScript";
    rev = "v${version}";
-    hash = "sha256-Lm7p27DgRWKY+auH6LIz8SIUfvPyQpel0xvkXgzlCzU=";
+    hash = "sha256-fOA5IblxUd+C9ST3oI8IUmTTRL3exC63MPqW5hoWN0M=";
  };

  patches = [
    ./disable-dprint-dstBundler.patch
  ];

-  npmDepsHash = "sha256-4w2CzEMrbfiSveTc/IH6O1twG9vkBkOxAIxJ8swXgNU=";
+  npmDepsHash = "sha256-ytdkxIjAd3UsU90o9IFZa5lGEv39zblBmgTTseVRGKQ=";

  passthru.tests = {
    version = testers.testVersion {
--- a/pkgs/by-name/un/uniex/package.nix
+++ b/pkgs/by-name/un/uniex/package.nix
@ -7,13 +7,13 @@

 buildGoModule rec {
  pname = "uniex";
-  version = "0.1.6";
+  version = "0.1.7";

  src = fetchFromGitHub {
    owner = "paepckehh";
    repo = "uniex";
    tag = "v${version}";
-    hash = "sha256-LakiFi+4uYaDsLWAq4VXDoZMQU5MRLdFmsdBOglubzQ=";
+    hash = "sha256-PoGDvnF+P8iUYdW98BT3Gcayf0JSgK257W377yFz5j4=";
  };

  vendorHash = "sha256-QLjeMSdvFSxnmnsKwTg4SDkc7xqx4csxTWJKOsRzcBI=";
--- a/pkgs/by-name/vk/vkmark/package.nix
+++ b/pkgs/by-name/vk/vkmark/package.nix
@ -14,20 +14,25 @@
  assimp,
  libxcb,
  xcbutilwm,
-  unstableGitUpdater,
+  nix-update-script,
 }:

-stdenv.mkDerivation {
+stdenv.mkDerivation (finalAttrs: {
  pname = "vkmark";
-  version = "2017.08-unstable-2023-04-12";
+  version = "2025.01";

  src = fetchFromGitHub {
    owner = "vkmark";
    repo = "vkmark";
-    rev = "ab6e6f34077722d5ae33f6bd40b18ef9c0e99a15";
-    sha256 = "sha256-X1Y2U1aJymKrv3crJLN7tvXHG2W+w0W5gB2g00y4yvc=";
+    rev = finalAttrs.version;
+    sha256 = "sha256-Rjpjqe7htwlhDdwELm74MvSzHzXLhRD/P8IES7nz/VY=";
  };

+  postPatch = ''
+    substituteInPlace src/meson.build \
+      --replace-fail "vulkan_dep.get_pkgconfig_variable('prefix')" "'${vulkan-headers}'"
+  '';
+
  nativeBuildInputs = [
    meson
    ninja
@ -45,14 +50,14 @@ stdenv.mkDerivation {
    wayland-protocols
  ];

-  passthru.updateScript = unstableGitUpdater { };
+  passthru.updateScript = nix-update-script { };

-  meta = with lib; {
+  meta = {
    description = "Extensible Vulkan benchmarking suite";
    homepage = "https://github.com/vkmark/vkmark";
-    license = with licenses; [ lgpl21Plus ];
-    platforms = platforms.linux;
-    maintainers = with maintainers; [ muscaln ];
+    license = with lib.licenses; [ lgpl21Plus ];
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ muscaln ];
    mainProgram = "vkmark";
  };
-}
+})
--- a/pkgs/by-name/vo/voicevox-engine/package.nix
+++ b/pkgs/by-name/vo/voicevox-engine/package.nix
@ -91,16 +91,6 @@ python3Packages.buildPythonApplication rec {
    mv test_character_info resources/character_info
  '';

-  disabledTests = [
-    # this test checks the behaviour of openapi
-    # one of the functions returns a slightly different output due to openapi version differences
-    "test_OpenAPIの形が変わっていないことを確認"
-
-    # these tests fail due to some tiny floating point discrepancies
-    "test_upspeak_voiced_last_mora"
-    "test_upspeak_voiced_N_last_mora"
-  ];
-
  nativeCheckInputs = with python3Packages; [
    pytestCheckHook
    syrupy
--- a/pkgs/by-name/wv/wvkbd/package.nix
+++ b/pkgs/by-name/wv/wvkbd/package.nix
@ -26,11 +26,12 @@ stdenv.mkDerivation rec {

  postPatch = ''
    substituteInPlace Makefile \
-      --replace "pkg-config" "$PKG_CONFIG"
+      --replace-fail "pkg-config" "$PKG_CONFIG"
  '';

  nativeBuildInputs = [
    pkg-config
+    scdoc
    wayland-scanner
  ];
  buildInputs = [
@ -40,10 +41,11 @@ stdenv.mkDerivation rec {
    libxkbcommon
    pango
    wayland
-    scdoc
  ];
  installFlags = [ "PREFIX=$(out)" ];

+  strictDeps = true;
+
  meta = with lib; {
    homepage = "https://github.com/jjsullivan5196/wvkbd";
    description = "On-screen keyboard for wlroots";
--- a/pkgs/by-name/ze/zeekstd/package.nix
+++ b/pkgs/by-name/ze/zeekstd/package.nix
@ -0,0 +1,28 @@
+{
+  fetchFromGitHub,
+  lib,
+  rustPlatform,
+}:
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "zeekstd";
+  version = "0.2.2";
+
+  src = fetchFromGitHub {
+    owner = "rorosen";
+    repo = "zeekstd";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Blyp5GpnytB3S4k6lp2fAwXueaUtXqPW+WLEmFNPZc0=";
+  };
+
+  useFetchCargoVendor = true;
+  cargoHash = "sha256-bbl0zHxd2HYkctX029mtxDciC2tnPVTlHxYyetmtuw0=";
+
+  meta = {
+    description = "CLI tool that works with the zstd seekable format";
+    homepage = "https://github.com/rorosen/zeekstd";
+    changelog = "https://github.com/rorosen/zeekstd/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.bsd2;
+    maintainers = [ lib.maintainers.rorosen ];
+    mainProgram = "zeekstd";
+  };
+})
--- a/pkgs/development/cuda-modules/cuda/extension.nix
+++ b/pkgs/development/cuda-modules/cuda/extension.nix
@ -19,7 +19,7 @@ let
    "12.4" = "12.4.1";
    "12.5" = "12.5.1";
    "12.6" = "12.6.3";
-    "12.8" = "12.8.0";
+    "12.8" = "12.8.1";
  };

  # Check if the current CUDA version is supported.
--- a/pkgs/development/cuda-modules/cuda/manifests/feature_12.8.1.json
+++ b/pkgs/development/cuda-modules/cuda/manifests/feature_12.8.1.json
@ -1140,7 +1140,7 @@
  "libnvidia_nscq": {
    "linux-sbsa": {
      "outputs": {
-        "bin": false,
+        "bin": true,
        "dev": false,
        "doc": false,
        "lib": true,
@ -1150,7 +1150,7 @@
    },
    "linux-x86_64": {
      "outputs": {
-        "bin": false,
+        "bin": true,
        "dev": false,
        "doc": false,
        "lib": true,
--- a/pkgs/development/cuda-modules/cuda/manifests/redistrib_12.8.0.json
+++ b/pkgs/development/cuda-modules/cuda/manifests/redistrib_12.8.0.json
--- a/pkgs/development/cuda-modules/cuda/manifests/redistrib_12.8.1.json
+++ b/pkgs/development/cuda-modules/cuda/manifests/redistrib_12.8.1.json
--- a/pkgs/development/cuda-modules/cudatoolkit/releases.nix
+++ b/pkgs/development/cuda-modules/cudatoolkit/releases.nix
@ -107,8 +107,8 @@
  };

  "12.8" = {
-    version = "12.8.0";
-    url = "https://developer.download.nvidia.com/compute/cuda/12.8.0/local_installers/cuda_12.8.0_570.86.10_linux.run";
-    sha256 = "sha256-YQhn3NbZTE42xJJPHQG52yjsCBZOivbHZPIbhCAGlfg=";
+    version = "12.8.1";
+    url = "https://developer.download.nvidia.com/compute/cuda/12.8.1/local_installers/cuda_12.8.1_570.124.06_linux.run";
+    sha256 = "sha256-Io9ryvW3YY0DKTn0MZFPyS0OXtOevjcJiiRQLyahl5c=";
  };
 }
--- a/pkgs/development/cuda-modules/nccl/default.nix
+++ b/pkgs/development/cuda-modules/nccl/default.nix
@ -65,9 +65,16 @@ backendStdenv.mkDerivation (finalAttrs: {

  env.NIX_CFLAGS_COMPILE = toString [ "-Wno-unused-function" ];

-  postPatch = ''
-    patchShebangs ./src/device/generate.py
-  '';
+  postPatch =
+    ''
+      patchShebangs ./src/device/generate.py
+    ''
+    # CUDA 12.8 uses GCC 14 and we need to bump C++ standard to C++14
+    # in order to work with new constexpr handling
+    + lib.optionalString (cudaAtLeast "12.8") ''
+      substituteInPlace ./makefiles/common.mk \
+        --replace-fail "-std=c++11" "-std=c++14"
+    '';

  makeFlags =
    [
--- a/pkgs/development/interpreters/luajit/default.nix
+++ b/pkgs/development/interpreters/luajit/default.nix
@ -159,6 +159,7 @@ stdenv.mkDerivation (finalAttrs: {
        "riscv64-linux" # See https://github.com/LuaJIT/LuaJIT/issues/628
        "powerpc64le-linux" # `#error "No support for PPC64"`
      ];
+      mainProgram = "lua";
      maintainers = with maintainers; [
        thoughtpolice
        smironov
--- a/pkgs/development/libraries/ngtcp2/default.nix
+++ b/pkgs/development/libraries/ngtcp2/default.nix
@ -7,13 +7,13 @@

 stdenv.mkDerivation rec {
  pname = "ngtcp2";
-  version = "1.10.0";
+  version = "1.11.0";

  src = fetchFromGitHub {
    owner = "ngtcp2";
    repo = pname;
    rev = "v${version}";
-    hash = "sha256-W9DLG9PXXuXe3rdtrbAvZZU2d7WsZ9vw/A6c3cFHBFM=";
+    hash = "sha256-ize2i2kx9spAWOq3joTZGiAd01cwmBmFXF6jBtyjPWc=";
    fetchSubmodules = true;
  };

--- a/pkgs/development/ocaml-modules/owee/default.nix
+++ b/pkgs/development/ocaml-modules/owee/default.nix
@ -5,13 +5,13 @@
 }:

 buildDunePackage rec {
-  minimalOCamlVersion = "4.06";
+  minimalOCamlVersion = "4.08";
  pname = "owee";
-  version = "0.7";
+  version = "0.8";

  src = fetchurl {
    url = "https://github.com/let-def/owee/releases/download/v${version}/owee-${version}.tbz";
-    hash = "sha256-9FXcmddHg5mk5UWgYd4kTPOLOY/p6A/OBuvfas4elUA=";
+    hash = "sha256-Bk9iRfWZXV0vTx+cbSmS4v2+Pd4ygha67Hz6vUhXlA0=";
  };

  meta = with lib; {
--- a/pkgs/development/python-modules/asana/default.nix
+++ b/pkgs/development/python-modules/asana/default.nix
@ -14,7 +14,7 @@

 buildPythonPackage rec {
  pname = "asana";
-  version = "5.0.15";
+  version = "5.1.0";
  pyproject = true;

  disabled = pythonOlder "3.7";
@ -23,7 +23,7 @@ buildPythonPackage rec {
    owner = "asana";
    repo = "python-asana";
    tag = "v${version}";
-    hash = "sha256-+4RGaeUgTiHOt2F1oSu06USbDh0ZrILsZAPwBUsFnJE=";
+    hash = "sha256-TYZi/cjwAHuluHpunfStlfPg0SSyaKKWtkJhTun/hQ0=";
  };

  build-system = [ setuptools ];
@ -48,7 +48,7 @@ buildPythonPackage rec {
  meta = with lib; {
    description = "Python client library for Asana";
    homepage = "https://github.com/asana/python-asana";
-    changelog = "https://github.com/Asana/python-asana/releases/tag/v${version}";
+    changelog = "https://github.com/Asana/python-asana/releases/tag/${src.tag}";
    license = licenses.mit;
    maintainers = [ ];
  };
--- a/pkgs/development/python-modules/azure-mgmt-netapp/default.nix
+++ b/pkgs/development/python-modules/azure-mgmt-netapp/default.nix
@ -11,7 +11,7 @@

 buildPythonPackage rec {
  pname = "azure-mgmt-netapp";
-  version = "13.3.0";
+  version = "13.4.0";
  pyproject = true;

  disabled = pythonOlder "3.8";
@ -19,7 +19,7 @@ buildPythonPackage rec {
  src = fetchPypi {
    pname = "azure_mgmt_netapp";
    inherit version;
-    hash = "sha256-N0Fnnigw6sk5M2Cx9T2CtMAe0S64WN73shukkWMkiEk=";
+    hash = "sha256-w095/AskU8P+jNAnkL+a8Fe6SqhP3Wd22I6GCjeRL6I=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/azure-mgmt-resource/default.nix
+++ b/pkgs/development/python-modules/azure-mgmt-resource/default.nix
@ -12,7 +12,7 @@

 buildPythonPackage rec {
  pname = "azure-mgmt-resource";
-  version = "23.2.0";
+  version = "23.3.0";
  pyproject = true;

  disabled = pythonOlder "3.7";
@ -20,7 +20,7 @@ buildPythonPackage rec {
  src = fetchPypi {
    pname = "azure_mgmt_resource";
    inherit version;
-    hash = "sha256-dHt1DfevI6sw5T0/NiR6sMFt4eJn1maxpQd8OaQpJSk=";
+    hash = "sha256-/E8f2Laq0j+K9O0fkT319ckt8RdEncNU/qaAKigp/qQ=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/captcha/default.nix
+++ b/pkgs/development/python-modules/captcha/default.nix
@ -10,7 +10,7 @@

 buildPythonPackage rec {
  pname = "captcha";
-  version = "0.6.0";
+  version = "0.7.1";
  pyproject = true;

  disabled = pythonOlder "3.8";
@ -19,7 +19,7 @@ buildPythonPackage rec {
    owner = "lepture";
    repo = "captcha";
    tag = "v${version}";
-    hash = "sha256-5d5gts+BXS5OKVziR9cLczsD2QMXZ/n31sPEq+gPlxk=";
+    hash = "sha256-wMnfPkHexiRprtDL6Kkmh9dms4NtW3u37DKtDMPb2ZI=";
  };

  dependencies = [ pillow ];
--- a/pkgs/development/python-modules/clarifai-grpc/default.nix
+++ b/pkgs/development/python-modules/clarifai-grpc/default.nix
@ -12,7 +12,7 @@

 buildPythonPackage rec {
  pname = "clarifai-grpc";
-  version = "11.0.2";
+  version = "11.2.0";
  pyproject = true;

  disabled = pythonOlder "3.8";
@ -21,7 +21,7 @@ buildPythonPackage rec {
    owner = "Clarifai";
    repo = "clarifai-python-grpc";
    tag = version;
-    hash = "sha256-28V47bMjVvDQvTuTQSd51ppIsLqB8JcJvBp/UrGFvAE=";
+    hash = "sha256-FBeGGEHIhio32v45t0YHja9YebAnhd3hnVIvKgPlQdE=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/clarifai/default.nix
+++ b/pkgs/development/python-modules/clarifai/default.nix
@ -79,6 +79,8 @@ buildPythonPackage rec {
    # Tests require network access and API key
    "tests/cli/test_compute_orchestration.py"
    "tests/runners/test_anymodel.py"
+    "tests/runners/test_download_checkpoints.py"
+    "tests/runners/test_runners.py"
    "tests/runners/test_textmodel.py"
    "tests/runners/test_url_fetcher.py"
    "tests/test_app.py"
--- a/pkgs/development/python-modules/dploot/default.nix
+++ b/pkgs/development/python-modules/dploot/default.nix
@ -12,14 +12,14 @@

 buildPythonPackage rec {
  pname = "dploot";
-  version = "3.1.0";
+  version = "3.1.2";
  pyproject = true;

  disabled = pythonOlder "3.10";

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-DlMaEkgbDHQb5BV0mI8qjTBGpmRX7bP67MZO4g+I1uI=";
+    hash = "sha256-WY6SEBmvsvLtn6+KE4upL2n39kuGO4aK3cyGFOd9xIo=";
  };

  pythonRelaxDeps = [
--- a/pkgs/development/python-modules/draftjs-exporter/default.nix
+++ b/pkgs/development/python-modules/draftjs-exporter/default.nix
@ -10,14 +10,14 @@

 buildPythonPackage rec {
  pname = "draftjs-exporter";
-  version = "5.0.0";
+  version = "5.1.0";
  format = "setuptools";

  src = fetchFromGitHub {
    repo = "draftjs_exporter";
    owner = "springload";
    tag = "v${version}";
-    sha256 = "sha256-4MmCVRx350p6N9XqTZSo8ROI/OJ0s4aKSYH9+Oxgvf4=";
+    sha256 = "sha256-AR8CK75UdtEThE68WSE6DFSqryI509GTW1fBl1SL29w=";
  };

  optional-dependencies = {
@ -43,7 +43,7 @@ buildPythonPackage rec {
  meta = with lib; {
    description = "Library to convert Draft.js ContentState to HTML";
    homepage = "https://github.com/springload/draftjs_exporter";
-    changelog = "https://github.com/springload/draftjs_exporter/blob/v${version}/CHANGELOG.md";
+    changelog = "https://github.com/springload/draftjs_exporter/blob/${src.tag}/CHANGELOG.md";
    license = licenses.mit;
    maintainers = with maintainers; [ sephi ];
  };
--- a/pkgs/development/python-modules/drf-writable-nested/default.nix
+++ b/pkgs/development/python-modules/drf-writable-nested/default.nix
@ -10,14 +10,14 @@

 buildPythonPackage rec {
  pname = "drf-writable-nested";
-  version = "0.7.1";
+  version = "0.7.2";
  format = "setuptools";

  src = fetchFromGitHub {
    owner = "beda-software";
    repo = "drf-writable-nested";
    tag = "v${version}";
-    hash = "sha256-+I5HsqkjCrkF9MV90NGQuUhmLcDVsv20QIyDK9WxwdQ=";
+    hash = "sha256-VkQ3Di3vXxQAmvuMP8KpGVVdx7LMYcQFEF4ZsuA9KeA=";
  };

  propagatedBuildInputs = [
--- a/pkgs/development/python-modules/flowmc/default.nix
+++ b/pkgs/development/python-modules/flowmc/default.nix
@ -1,48 +1,59 @@
 {
  lib,
  buildPythonPackage,
-  pythonOlder,
  fetchFromGitHub,

  # build-system
-  setuptools,
+  hatchling,

  # dependencies
-  corner,
+  chex,
+  coveralls,
  equinox,
-  evosax,
  jax,
-  jaxlib,
+  jaxtyping,
  optax,
+  scikit-learn,
  tqdm,

-  # checks
+  # tests
  pytestCheckHook,
 }:

 buildPythonPackage rec {
  pname = "flowmc";
-  version = "0.3.4";
+  version = "0.4.0";
  pyproject = true;

-  disabled = pythonOlder "3.10";
-
  src = fetchFromGitHub {
    owner = "kazewong";
    repo = "flowMC";
    tag = "flowMC-${version}";
-    hash = "sha256-unvbNs0AOzW4OI+9y6KxoBC5yEjEz+q0PZblQLXCC/Y=";
+    hash = "sha256-ambi2BMFjWAggeJ3PdlRpdKVmZeePe5LbvuKzCgNV/k=";
  };

-  build-system = [ setuptools ];
+  build-system = [ hatchling ];
+
+  pythonRelaxDeps = [
+    "jax"
+  ];
+
+  pythonRemoveDeps = [
+    # Not actual runtime dependencies
+    "pre-commit"
+    "pyright"
+    "pytest"
+    "ruff"
+  ];

  dependencies = [
-    corner
+    chex
+    coveralls
    equinox
-    evosax
    jax
-    jaxlib
+    jaxtyping
    optax
+    scikit-learn
    tqdm
  ];

--- a/pkgs/development/python-modules/google-cloud-translate/default.nix
+++ b/pkgs/development/python-modules/google-cloud-translate/default.nix
@ -17,7 +17,7 @@

 buildPythonPackage rec {
  pname = "google-cloud-translate";
-  version = "3.20.0";
+  version = "3.20.1";
  pyproject = true;

  disabled = pythonOlder "3.7";
@ -25,7 +25,7 @@ buildPythonPackage rec {
  src = fetchPypi {
    pname = "google_cloud_translate";
    inherit version;
-    hash = "sha256-3Qr2qhpUKeFaGvepErDd0XSweKp5V3ZZrcZWKL6aDPQ=";
+    hash = "sha256-g6KO+XxK8nRKy9/mYkOXKHQaVtiVSFIrT6sAhmPJGQE=";
  };

  build-system = [ setuptools ];
@ -64,8 +64,8 @@ buildPythonPackage rec {

  meta = with lib; {
    description = "Google Cloud Translation API client library";
-    homepage = "https://github.com/googleapis/python-translate";
-    changelog = "https://github.com/googleapis/python-translate/blob/v${version}/CHANGELOG.md";
+    homepage = "https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-translate";
+    changelog = "https://github.com/googleapis/google-cloud-python/blob/google-cloud-translate-v${version}/packages/google-cloud-translate/CHANGELOG.md";
    license = licenses.asl20;
    maintainers = [ ];
  };
--- a/pkgs/development/python-modules/keke/default.nix
+++ b/pkgs/development/python-modules/keke/default.nix
@ -9,12 +9,12 @@

 buildPythonPackage rec {
  pname = "keke";
-  version = "0.1.4";
+  version = "0.2.0";
  pyproject = true;

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-qGU7fZk23a4I0eosKY5eNqUOs3lwXj90qwix9q44MaA=";
+    hash = "sha256-H0U6DgZOHKtkPnF/xSNqBGPnD4BViP0JBKpehKKTTzs=";
  };

  installCheckPhase = ''
--- a/pkgs/development/python-modules/litellm/default.nix
+++ b/pkgs/development/python-modules/litellm/default.nix
@ -35,6 +35,7 @@
  tokenizers,
  uvloop,
  uvicorn,
+  nixosTests,
 }:

 buildPythonPackage rec {
@ -99,12 +100,16 @@ buildPythonPackage rec {
  # access network
  doCheck = false;

-  meta = with lib; {
+  passthru.tests = {
+    inherit (nixosTests) litellm;
+  };
+
+  meta = {
    description = "Use any LLM as a drop in replacement for gpt-3.5-turbo. Use Azure, OpenAI, Cohere, Anthropic, Ollama, VLLM, Sagemaker, HuggingFace, Replicate (100+ LLMs)";
    mainProgram = "litellm";
    homepage = "https://github.com/BerriAI/litellm";
    changelog = "https://github.com/BerriAI/litellm/releases/tag/${src.tag}";
-    license = licenses.mit;
-    maintainers = with maintainers; [ happysalada ];
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ happysalada ];
  };
 }
--- a/pkgs/development/python-modules/llm/default.nix
+++ b/pkgs/development/python-modules/llm/default.nix
@ -22,7 +22,7 @@
 let
  llm = buildPythonPackage rec {
    pname = "llm";
-    version = "0.22";
+    version = "0.23";
    pyproject = true;

    build-system = [ setuptools ];
@ -33,7 +33,7 @@ let
      owner = "simonw";
      repo = "llm";
      tag = version;
-      hash = "sha256-l4tFBCIey5cOUvJ8IXLOjslc1zy9MnuiwFFP275S/Bg=";
+      hash = "sha256-jUWhdLZLHgrIP7trHvLBETQ764+k4ze5Swt2HYMqg4E=";
    };

    patches = [ ./001-disable-install-uninstall-commands.patch ];
--- a/pkgs/development/python-modules/pypdfium2/default.nix
+++ b/pkgs/development/python-modules/pypdfium2/default.nix
@ -17,8 +17,8 @@ let
  headers = fetchgit {
    url = "https://pdfium.googlesource.com/pdfium";
    # The latest revision on the chromium/${pdfiumVersion} branch
-    rev = "f6da7d235728aeaff6586d2190badfb4290a9979";
-    hash = "sha256-xUylu//APbwpI+k6cQ7OrPCwDXp9qw0ZVaCba/d5zVg=";
+    rev = "9afffebfa895ea6cdcc05516908c50bd7fe72797";
+    hash = "sha256-n7Xio1hEZqZX2FFKWqjVXEcOWPpkcVfBKXGPxDUL4cs=";
    sparseCheckout = [
      "public"
    ];
--- a/pkgs/development/python-modules/pyspark/default.nix
+++ b/pkgs/development/python-modules/pyspark/default.nix
@ -11,14 +11,14 @@

 buildPythonPackage rec {
  pname = "pyspark";
-  version = "3.5.4";
+  version = "3.5.5";
  format = "setuptools";

  disabled = pythonOlder "3.7";

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-HCkm1jAgkCFj9YIiRmrfb4AW9sQ8HzGbjnpx26oF/FE=";
+    hash = "sha256-bv/Jzpjt8jH01oP9FPcnBim/hFjGKNaiYg3tS7NPPLk=";
  };

  # pypandoc is broken with pandoc2, so we just lose docs.
--- a/pkgs/development/python-modules/rjsmin/default.nix
+++ b/pkgs/development/python-modules/rjsmin/default.nix
@ -7,14 +7,14 @@

 buildPythonPackage rec {
  pname = "rjsmin";
-  version = "1.2.3";
+  version = "1.2.4";
  format = "setuptools";

  disabled = pythonOlder "3.7";

  src = fetchPypi {
    inherit pname version;
-    hash = "sha256-E4i1JJOkwE+8lwotdXwwH6BaPDdkAxTCzp38jYpzDMY=";
+    hash = "sha256-/8vgTg36w5zqj7vLQcOLLgcjXOIYi8oV6ZjaHTSKeGA=";
  };

  # The package does not ship tests, and the setup machinery confuses
--- a/pkgs/development/python-modules/ropgadget/default.nix
+++ b/pkgs/development/python-modules/ropgadget/default.nix
@ -9,7 +9,7 @@

 buildPythonPackage rec {
  pname = "ropgadget";
-  version = "7.5";
+  version = "7.6";
  pyproject = true;

  disabled = pythonOlder "3.7";
@ -18,7 +18,7 @@ buildPythonPackage rec {
    owner = "JonathanSalwan";
    repo = "ROPgadget";
    tag = "v${version}";
-    hash = "sha256-n7nVtR2HMAZeeSX/hNtDzmpEsnHbgDNO5gdzmPrgSuk=";
+    hash = "sha256-vh5UYaIOQw+QJ+YT6dMi/YFCpQfY0w6ouuUWmJJMusA=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/spatialmath-python/default.nix
+++ b/pkgs/development/python-modules/spatialmath-python/default.nix
@ -16,7 +16,7 @@

 buildPythonPackage rec {
  pname = "spatialmath-python";
-  version = "1.1.13";
+  version = "1.1.14";
  pyproject = true;

  disabled = pythonOlder "3.7";
@ -24,7 +24,7 @@ buildPythonPackage rec {
  src = fetchPypi {
    pname = "spatialmath_python";
    inherit version;
-    hash = "sha256-BhIB4VapnARkzyhps8xRWnQTAlRB8aVPDpNuN/FNezo=";
+    hash = "sha256-DI5+aSmAlOSbUSPPOrnMoSDBG+xp4zxURSGtZbsv5X4=";
  };

  build-system = [
--- a/pkgs/development/python-modules/torchaudio/default.nix
+++ b/pkgs/development/python-modules/torchaudio/default.nix
@ -3,6 +3,7 @@
  symlinkJoin,
  buildPythonPackage,
  fetchFromGitHub,
+  fetchpatch,

  # nativeBuildInputs
  cmake,
@ -86,7 +87,17 @@ buildPythonPackage rec {
    hash = "sha256-BRn4EZ7bIujGA6b/tdMu9yDqJNEaf/f1Kj45aLHC/JI=";
  };

-  patches = [ ./0001-setup.py-propagate-cmakeFlags.patch ];
+  patches = [
+    ./0001-setup.py-propagate-cmakeFlags.patch
+
+    # fix missing FLT_MAX symbol (dropped in CUDA 12.5)
+    # https://github.com/pytorch/audio/pull/3811
+    # drop after update to torchaudio 2.6.0
+    (fetchpatch {
+      url = "https://github.com/pytorch/audio/commit/7797f83e1d66ff78872763e1da3a5fb2f0534c40.patch";
+      hash = "sha256-mHFCWuHhveyUP9cN0Kn6GXZsC3njTcM2ONVaB/qK1zU=";
+    })
+  ];

  postPatch =
    ''
--- a/pkgs/development/tools/minizinc/default.nix
+++ b/pkgs/development/tools/minizinc/default.nix
@ -15,13 +15,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "minizinc";
-  version = "2.9.0";
+  version = "2.9.2";

  src = fetchFromGitHub {
    owner = "MiniZinc";
    repo = "libminizinc";
    rev = finalAttrs.version;
-    sha256 = "sha256-uRSAlt72+kiqJeNcJ3aI5I3Jd4EJMfAq4IlO5+TntZk=";
+    sha256 = "sha256-rR+QvRt73wvulx+T+vhSc3354Cpx1QC6+adaodEiQ7Q=";
  };

  nativeBuildInputs = [
--- a/pkgs/development/web/nodejs/v20.nix
+++ b/pkgs/development/web/nodejs/v20.nix
@ -18,8 +18,8 @@ let
 in
 buildNodejs {
  inherit enableNpm;
-  version = "20.18.3";
-  sha256 = "0674f16f3bc284c11724cd3f7c2a43f7c2c13d2eb7a872dd0db198f3d588c5f2";
+  version = "20.19.0";
+  sha256 = "5ac2516fc905b6a0bc1a33e7302937eac664a820b887cc86bd48c035fba392d7";
  patches = [
    ./configure-emulator.patch
    ./configure-armv6-vfpv2.patch
@ -50,20 +50,5 @@ buildNodejs {
      stripLen = 1;
      hash = "sha256-6y3aEqxNC4iTQEv1oewodJrhOHxjp5xZMq1P1QL94Rg=";
    })
-
-    # Backport fixes for OpenSSL 3.4
-    # FIXME: remove when merged upstream
-    (fetchpatch2 {
-      url = "https://github.com/nodejs/node/commit/e799722f1a0bf43fe4d47e4824b9524363fe0d62.patch";
-      hash = "sha256-nz95vmBx+zFPdOR9kg0HdgiAlqgTeXistOP/NLF3qW0=";
-    })
-    (fetchpatch2 {
-      url = "https://github.com/nodejs/node/commit/e6a988dbdee47b3412094a90d35d6bd8207c750d.patch";
-      hash = "sha256-UJ8alA54PrhHXK9u120HvBgm0scuEDBwCRuuVYVa/Ng=";
-    })
-    (fetchpatch2 {
-      url = "https://github.com/nodejs/node/commit/7895b8eae9e4f2919028fe81e38790af07b4cc92.patch";
-      hash = "sha256-S2PmFw/e0/DY71UJb2RYXu9Qft/rBFC50K0Ex7v/9QE=";
-    })
  ] ++ gypPatches;
 }
--- a/pkgs/games/black-hole-solver/default.nix
+++ b/pkgs/games/black-hole-solver/default.nix
@ -12,11 +12,11 @@

 stdenv.mkDerivation rec {
  pname = "black-hole-solver";
-  version = "1.12.0";
+  version = "1.14.0";

  src = fetchurl {
    url = "https://fc-solve.shlomifish.org/downloads/fc-solve/${pname}-${version}.tar.xz";
-    sha256 = "sha256-0y8yU291cykliPQbsNha5C1WE3bCGNxKtrrf5JBKN6c=";
+    sha256 = "sha256-XEe9CT27Fg9LCQ/WcKt8ErQ3HTmxezu9jGxKEpdVV8A=";
  };

  nativeBuildInputs = [
--- a/pkgs/games/shattered-pixel-dungeon/default.nix
+++ b/pkgs/games/shattered-pixel-dungeon/default.nix
@ -6,13 +6,13 @@

 callPackage ./generic.nix rec {
  pname = "shattered-pixel-dungeon";
-  version = "3.0.0";
+  version = "3.0.1";

  src = fetchFromGitHub {
    owner = "00-Evan";
    repo = "shattered-pixel-dungeon";
    rev = "v${version}";
-    hash = "sha256-6t6ernRLKFQS57wzLERnx9QDA0pxRzj35n0vhR//WyA=";
+    hash = "sha256-49T+CW7cRe2RPcfk6dAHUoiD6ZnP8s5UyaqPsLwa8Ho=";
  };

  depsPath = ./deps.json;
--- a/pkgs/games/shattered-pixel-dungeon/rkpd2/default.nix
+++ b/pkgs/games/shattered-pixel-dungeon/rkpd2/default.nix
@ -5,13 +5,13 @@

 callPackage ../generic.nix rec {
  pname = "rkpd2";
-  version = "2.0.7";
+  version = "2.0.8";

  src = fetchFromGitHub {
    owner = "Zrp200";
    repo = "rkpd2";
    rev = "v${version}";
-    hash = "sha256-JtfnIT8NJUHTCt1zGHqMwq9nlZNls+PrtTpOhuV1BJ4=";
+    hash = "sha256-jM4CtC3AVXXBjHAfeDp4dFomDpRl76DhD+q9vIAeEhA=";
  };

  desktopName = "Rat King Pixel Dungeon 2";
--- a/pkgs/tools/games/minecraft/optifine/versions.json
+++ b/pkgs/tools/games/minecraft/optifine/versions.json
@ -1,4 +1,8 @@
 {
+    "optifine_1_21_4": {
+        "version": "1.21.4_HD_U_J3",
+        "sha256": "1lz1gc2f4l5fzy4zgi1i279v7gccqwjswsbviyp8jgybir81r2nv"
+    },
    "optifine_1_21_3": {
        "version": "1.21.3_HD_U_J2",
        "sha256": "0yv6f6vaxsqxkc4hh4kvfdr7gxi197gzv82w7pwi927xyvgsl5ir"
@ -160,7 +164,7 @@
        "sha256": "18lzyh639mi7r2hzwnmxv0a6v1ay7dk9bzasvwff82dxq0y9zi7m"
    },
    "optifine-latest": {
-        "version": "1.21.3_HD_U_J2",
-        "sha256": "0yv6f6vaxsqxkc4hh4kvfdr7gxi197gzv82w7pwi927xyvgsl5ir"
+        "version": "1.21.4_HD_U_J3",
+        "sha256": "1lz1gc2f4l5fzy4zgi1i279v7gccqwjswsbviyp8jgybir81r2nv"
    }
 }
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@ -1387,6 +1387,7 @@ mapAliases {
  session-desktop-appimage = session-desktop;
  sequoia = sequoia-sq; # Added 2023-06-26
  sexp = sexpp; # Added 2023-07-03
+  shallot = throw "'shallot' has been removed as it is broken and the upstream repository was removed. Consider using 'mkp224o'"; # Added 2025-03-16
  inherit (libsForQt5.mauiPackages) shelf; # added 2022-05-17
  shell-hist = throw "'shell-hist' has been removed due to lack of upstream maintenance"; # Added 2025-01-25
  shipyard = jumppad; # Added 2023-06-06
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@ -18135,7 +18135,7 @@ with pkgs;

  duden = python3Packages.toPythonApplication python3Packages.duden;

-  tremotesf = libsForQt5.callPackage ../applications/networking/p2p/tremotesf { };
+  tremotesf = callPackage ../applications/networking/p2p/tremotesf { };

  yazi-unwrapped = callPackage ../by-name/ya/yazi-unwrapped/package.nix { inherit (darwin.apple_sdk.frameworks) Foundation; };