Merge master into staging-next

2025-06-10 19:55:41 +03:00 · 2025-05-15 12:07:04 +00:00 · 2025-05-15 12:07:04 +00:00 · d1034e4a8a
commit d1034e4a8a
parent e813564e79 ae4459d5c9
102 changed files with 1032 additions and 709 deletions
--- a/nixos/doc/manual/redirects.json
+++ b/nixos/doc/manual/redirects.json
@ -1874,6 +1874,9 @@
  "test-opt-meta.platforms": [
    "index.html#test-opt-meta.platforms"
  ],
+  "test-opt-meta.hydraPlatforms": [
+    "index.html#test-opt-meta.hydraPlatforms"
+  ],
  "test-opt-meta.timeout": [
    "index.html#test-opt-meta.timeout"
  ],
--- a/nixos/lib/testing/default.nix
+++ b/nixos/lib/testing/default.nix
@ -9,15 +9,13 @@ let
    };
  runTest =
    module:
-    # Infra issue: virtualization on darwin doesn't seem to work yet.
-    lib.addMetaAttrs { hydraPlatforms = lib.platforms.linux; }
-      (evalTest (
-        { config, ... }:
-        {
-          imports = [ module ];
-          result = config.test;
-        }
-      )).config.result;
+    (evalTest (
+      { config, ... }:
+      {
+        imports = [ module ];
+        result = config.test;
+      }
+    )).config.result;

  testModules = [
    ./call-test.nix
--- a/nixos/lib/testing/meta.nix
+++ b/nixos/lib/testing/meta.nix
@ -1,50 +1,61 @@
 { lib, ... }:
 let
-  inherit (lib) types mkOption;
+  inherit (lib) types mkOption literalMD;
 in
 {
  options = {
-    meta = lib.mkOption {
+    meta = mkOption {
      description = ''
        The [`meta`](https://nixos.org/manual/nixpkgs/stable/#chap-meta) attributes that will be set on the returned derivations.

        Not all [`meta`](https://nixos.org/manual/nixpkgs/stable/#chap-meta) attributes are supported, but more can be added as desired.
      '';
      apply = lib.filterAttrs (k: v: v != null);
-      type = types.submodule {
-        options = {
-          maintainers = lib.mkOption {
-            type = types.listOf types.raw;
-            default = [ ];
-            description = ''
-              The [list of maintainers](https://nixos.org/manual/nixpkgs/stable/#var-meta-maintainers) for this test.
-            '';
+      type = types.submodule (
+        { config, ... }:
+        {
+          options = {
+            maintainers = mkOption {
+              type = types.listOf types.raw;
+              default = [ ];
+              description = ''
+                The [list of maintainers](https://nixos.org/manual/nixpkgs/stable/#var-meta-maintainers) for this test.
+              '';
+            };
+            timeout = mkOption {
+              type = types.nullOr types.int;
+              default = 3600; # 1 hour
+              description = ''
+                The [{option}`test`](#test-opt-test)'s [`meta.timeout`](https://nixos.org/manual/nixpkgs/stable/#var-meta-timeout) in seconds.
+              '';
+            };
+            broken = mkOption {
+              type = types.bool;
+              default = false;
+              description = ''
+                Sets the [`meta.broken`](https://nixos.org/manual/nixpkgs/stable/#var-meta-broken) attribute on the [{option}`test`](#test-opt-test) derivation.
+              '';
+            };
+            platforms = mkOption {
+              type = types.listOf types.raw;
+              default = lib.platforms.linux ++ lib.platforms.darwin;
+              description = ''
+                Sets the [`meta.platforms`](https://nixos.org/manual/nixpkgs/stable/#var-meta-platforms) attribute on the [{option}`test`](#test-opt-test) derivation.
+              '';
+            };
+            hydraPlatforms = mkOption {
+              type = types.listOf types.raw;
+              # Ideally this would default to `platforms` again:
+              # default = config.platforms;
+              default = lib.platforms.linux;
+              defaultText = literalMD "`lib.platforms.linux` only, as the `hydra.nixos.org` build farm does not currently support virtualisation on Darwin.";
+              description = ''
+                Sets the [`meta.hydraPlatforms`](https://nixos.org/manual/nixpkgs/stable/#var-meta-hydraPlatforms) attribute on the [{option}`test`](#test-opt-test) derivation.
+              '';
+            };
          };
-          timeout = lib.mkOption {
-            type = types.nullOr types.int;
-            default = 3600; # 1 hour
-            description = ''
-              The [{option}`test`](#test-opt-test)'s [`meta.timeout`](https://nixos.org/manual/nixpkgs/stable/#var-meta-timeout) in seconds.
-            '';
-          };
-          broken = lib.mkOption {
-            type = types.bool;
-            default = false;
-            description = ''
-              Sets the [`meta.broken`](https://nixos.org/manual/nixpkgs/stable/#var-meta-broken) attribute on the [{option}`test`](#test-opt-test) derivation.
-            '';
-          };
-          platforms = lib.mkOption {
-            type = types.listOf types.raw;
-            # darwin could be added, but it would add VM tests that don't work on Hydra.nixos.org (so far)
-            # see https://github.com/NixOS/nixpkgs/pull/303597#issuecomment-2128782362
-            default = lib.platforms.linux;
-            description = ''
-              Sets the [`meta.platforms`](https://nixos.org/manual/nixpkgs/stable/#var-meta-platforms) attribute on the [{option}`test`](#test-opt-test) derivation.
-            '';
-          };
-        };
-      };
+        }
+      );
      default = { };
    };
  };
--- a/nixos/modules/services/networking/headscale.nix
+++ b/nixos/modules/services/networking/headscale.nix
@ -164,7 +164,7 @@ in
                '';
              };

-              auto_update_enable = lib.mkOption {
+              auto_update_enabled = lib.mkOption {
                type = lib.types.bool;
                default = true;
                description = ''
@ -493,7 +493,11 @@ in
  imports = with lib; [
    (mkRenamedOptionModule
      [ "services" "headscale" "derp" "autoUpdate" ]
-      [ "services" "headscale" "settings" "derp" "auto_update_enable" ]
+      [ "services" "headscale" "settings" "derp" "auto_update_enabled" ]
+    )
+    (mkRenamedOptionModule
+      [ "services" "headscale" "derp" "auto_update_enable" ]
+      [ "services" "headscale" "settings" "derp" "auto_update_enabled" ]
    )
    (mkRenamedOptionModule
      [ "services" "headscale" "derp" "paths" ]
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@ -1424,10 +1424,6 @@ in
    imports = [ ./varnish.nix ];
    _module.args.package = pkgs.varnish60;
  };
-  varnish76 = runTest {
-    imports = [ ./varnish.nix ];
-    _module.args.package = pkgs.varnish76;
-  };
  varnish77 = runTest {
    imports = [ ./varnish.nix ];
    _module.args.package = pkgs.varnish77;
--- a/nixos/tests/web-apps/netbox-upgrade.nix
+++ b/nixos/tests/web-apps/netbox-upgrade.nix
@ -1,8 +1,18 @@
 import ../make-test-python.nix (
  { lib, pkgs, ... }:
  let
-    oldNetbox = pkgs.netbox_3_7;
-    newNetbox = pkgs.netbox_4_1;
+    oldNetbox = "netbox_4_1";
+    newNetbox = "netbox_4_2";
+
+    apiVersion =
+      version:
+      lib.pipe version [
+        (lib.splitString ".")
+        (lib.take 2)
+        (lib.concatStringsSep ".")
+      ];
+    oldApiVersion = apiVersion pkgs."${oldNetbox}".version;
+    newApiVersion = apiVersion pkgs."${newNetbox}".version;
  in
  {
    name = "netbox-upgrade";
@ -15,12 +25,14 @@ import ../make-test-python.nix (
    };

    nodes.machine =
-      { config, ... }:
+      { config, pkgs, ... }:
      {
        virtualisation.memorySize = 2048;
        services.netbox = {
          enable = true;
-          package = oldNetbox;
+          # Pick the NetBox package from this config's "pkgs" argument,
+          # so that `nixpkgs.config.permittedInsecurePackages` works
+          package = pkgs."${oldNetbox}";
          secretKeyFile = pkgs.writeText "secret" ''
            abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
          '';
@ -42,22 +54,13 @@ import ../make-test-python.nix (

        networking.firewall.allowedTCPPorts = [ 80 ];

-        specialisation.upgrade.configuration.services.netbox.package = lib.mkForce newNetbox;
+        nixpkgs.config.permittedInsecurePackages = [ pkgs."${oldNetbox}".name ];
+
+        specialisation.upgrade.configuration.services.netbox.package = lib.mkForce pkgs."${newNetbox}";
      };

    testScript =
      { nodes, ... }:
-      let
-        apiVersion =
-          version:
-          lib.pipe version [
-            (lib.splitString ".")
-            (lib.take 2)
-            (lib.concatStringsSep ".")
-          ];
-        oldApiVersion = apiVersion oldNetbox.version;
-        newApiVersion = apiVersion newNetbox.version;
-      in
      ''
        start_all()
        machine.wait_for_unit("netbox.target")
--- a/pkgs/applications/editors/vscode/extensions/ms-dotnettools.csharp/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/ms-dotnettools.csharp/default.nix
@ -17,19 +17,19 @@ let
    {
      x86_64-linux = {
        arch = "linux-x64";
-        hash = "sha256-pMcUrsIVpb0lYhonEKB/5pZG+08OhL/Py7wmkmlXWgo=";
+        hash = "sha256-yJ4bAxIg3yfQJPWJcl6jUMwQ/ssHkstJWuEp3wr0dDA=";
      };
      aarch64-linux = {
        arch = "linux-arm64";
-        hash = "sha256-dJilgYVLkx5JVHk3e3mZjW7qpWrviuB4OhtzV1DkmrI=";
+        hash = "sha256-EpWHwansBwBD0aYoW2ek7iWFbp+s7ZH6ug3ejoSRG5U=";
      };
      x86_64-darwin = {
        arch = "darwin-x64";
-        hash = "sha256-DyueVd+G67P48Oo0+HTC3Sg0/en/bRBV+F8mKuz66RY=";
+        hash = "sha256-345hK47tyMGMJDKiujwpECDHMbRpLi17x2lH2rMX9Lg=";
      };
      aarch64-darwin = {
        arch = "darwin-arm64";
-        hash = "sha256-yk6bSeaEivx8kc3fqpSJBTMxUDsJGVwMoRxPPwaHgtc=";
+        hash = "sha256-u/vflQd285SuZ41ASd8nJgs+lN6892J3x6lPgWqVY+Y=";
      };
    }
    .${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}")
@ -39,7 +39,7 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "csharp";
    publisher = "ms-dotnettools";
-    version = "2.72.34";
+    version = "2.76.27";
    inherit (extInfo) hash arch;
  };

@ -134,8 +134,6 @@ vscode-utils.buildVscodeMarketplaceExtension {
    )
  '';

-  passthru.updateScript = ./update.sh;
-
  meta = {
    description = "Official C# support for Visual Studio Code";
    homepage = "https://github.com/dotnet/vscode-csharp";
--- a/pkgs/applications/editors/vscode/extensions/ms-dotnettools.csharp/update.sh
+++ b/pkgs/applications/editors/vscode/extensions/ms-dotnettools.csharp/update.sh
@ -1,46 +0,0 @@
-#!/usr/bin/env nix-shell
-#!nix-shell -I nixpkgs=./. -i bash -p curl jq nix common-updater-scripts
-# shellcheck shell=bash
-set -euo pipefail
-
-export LC_ALL=C
-
-PUBLISHER=ms-dotnettools
-EXTENSION=csharp
-
-response=$(curl -s 'https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery' \
-    -H 'accept: application/json;api-version=3.0-preview.1' \
-    -H 'content-type: application/json' \
-    --data-raw '{"filters":[{"criteria":[{"filterType":7,"value":"'"$PUBLISHER.$EXTENSION"'"}]}],"flags":16}')
-
-# Find the latest version compatible with stable vscode version
-latest_version=$(jq --raw-output '
-.results[0].extensions[0].versions
-| map(select(has("properties")))
-| map(select(.properties | map(select(.key == "Microsoft.VisualStudio.Code.Engine")) | .[0].value | test("\\^[0-9.]+$")))
-| map(select(.properties | map(select(.key == "Microsoft.VisualStudio.Code.PreRelease")) | .[0].value != "true"))
-| .[0].version' <<<"$response")
-
-getDownloadUrl() {
-    nix-instantiate \
-        --eval \
-        --strict \
-        --json \
-        'pkgs/applications/editors/vscode/extensions/mktplcExtRefToFetchArgs.nix' \
-        --attr url \
-        --argstr publisher $PUBLISHER \
-        --argstr name $EXTENSION \
-        --argstr version "$latest_version" \
-        --argstr arch "$1" | jq . --raw-output
-}
-
-update_hash() {
-    local hash
-    hash=$(nix hash convert --hash-algo sha256 "$(nix-prefetch-url --type sha256 "$(getDownloadUrl "$2")")")
-    update-source-version vscode-extensions.$PUBLISHER.$EXTENSION "$latest_version" "$hash" --system="$1" --ignore-same-version
-}
-
-update_hash x86_64-linux linux-x64
-update_hash aarch64-linux linux-arm64
-update_hash x86_64-darwin darwin-x64
-update_hash aarch64-darwin darwin-arm64
--- a/pkgs/by-name/an/anubis-xess/package.nix
+++ b/pkgs/by-name/an/anubis-xess/package.nix
@ -0,0 +1,35 @@
+{ buildNpmPackage, anubis }:
+
+buildNpmPackage {
+  pname = "${anubis.pname}-xess";
+  inherit (anubis) version src;
+
+  npmDepsHash = "sha256-hTKTTBmfMGv6I+4YbWrOt6F+qD6ysVYi+DEC1konBFk=";
+
+  buildPhase = ''
+    runHook preBuild
+
+    npx postcss ./xess/xess.css -o xess.min.css
+
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    install -Dm644 xess.min.css $out/xess.min.css
+
+    runHook postInstall
+  '';
+
+  meta = anubis.meta // {
+    description = "Xess files for Anubis";
+    longDescription = ''
+      This package is consumed by the main `anubis` package to render the final
+      styling for the bot check page.
+
+      **It is not supposed to be used as a standalone package**, and it exists to
+      ensure Anubis' styling is override-able by downstreams.
+    '';
+  };
+}
--- a/pkgs/by-name/an/anubis/package.nix
+++ b/pkgs/by-name/an/anubis/package.nix
@ -1,50 +1,28 @@
 {
  lib,
  buildGoModule,
-  buildNpmPackage,
  fetchFromGitHub,
-  nix-update-script,
  nixosTests,
  stdenv,

+  anubis-xess,
+
  esbuild,
  brotli,
  zstd,
 }:
-let
+
+buildGoModule (finalAttrs: {
  pname = "anubis";
  version = "1.18.0";

  src = fetchFromGitHub {
    owner = "TecharoHQ";
    repo = "anubis";
-    tag = "v${version}";
+    tag = "v${finalAttrs.version}";
    hash = "sha256-grtzkNxgShbldjm+lnANbKVhkUrbwseAT1NaBL85mHg=";
  };

-  anubisXess = buildNpmPackage {
-    inherit version src;
-    pname = "${pname}-xess";
-
-    npmDepsHash = "sha256-hTKTTBmfMGv6I+4YbWrOt6F+qD6ysVYi+DEC1konBFk=";
-
-    buildPhase = ''
-      runHook preBuild
-      npx postcss ./xess/xess.css -o xess.min.css
-      runHook postBuild
-    '';
-
-    installPhase = ''
-      runHook preInstall
-      mkdir -p $out
-      cp xess.min.css $out
-      runHook postInstall
-    '';
-  };
-in
-buildGoModule (finalAttrs: {
-  inherit pname version src;
-
  vendorHash = "sha256-EOT/sdVINj9oO1jZHPYB3jQ+XApf9eCUKuMY0tV+vpg=";

  nativeBuildInputs = [
@ -72,27 +50,25 @@ buildGoModule (finalAttrs: {
  '';

  preBuild = ''
-    go generate ./... && ./web/build.sh && cp -r ${anubisXess}/xess.min.css ./xess
+    go generate ./... && ./web/build.sh && cp -r ${anubis-xess}/xess.min.css ./xess
  '';

  preCheck = ''
    export DONT_USE_NETWORK=1
  '';

-  passthru = {
-    tests = { inherit (nixosTests) anubis; };
-    updateScript = nix-update-script { };
-  };
+  passthru.tests = { inherit (nixosTests) anubis; };

  meta = {
    description = "Weighs the soul of incoming HTTP requests using proof-of-work to stop AI crawlers";
-    homepage = "https://github.com/TecharoHQ/anubis/";
+    homepage = "https://anubis.techaro.lol/";
    changelog = "https://github.com/TecharoHQ/anubis/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [
      knightpp
      soopyc
      ryand56
+      sigmasquadron
    ];
    mainProgram = "anubis";
  };
--- a/pkgs/by-name/au/augeas/package.nix
+++ b/pkgs/by-name/au/augeas/package.nix
@ -45,7 +45,8 @@ stdenv.mkDerivation rec {
    libxml2
  ];

-  enableParallelBuilding = true;
+  # Makefile doesn't specify dependencies on parser.h correctly
+  enableParallelBuilding = false;

  doCheck = true;

--- a/pkgs/by-name/bi/bic/package.nix
+++ b/pkgs/by-name/bi/bic/package.nix
@ -5,44 +5,59 @@
  readline,
  autoreconfHook,
  autoconf-archive,
+  gcc,
  gmp,
  flex,
  bison,
+  libffi,
+  makeWrapper,
+  pkg-config,
 }:

 stdenv.mkDerivation rec {
  pname = "bic";
-  version = "1.0.0";
+  version = "1.0.0-unstable-2022-02-16";

  src = fetchFromGitHub {
    owner = "hexagonal-sun";
    repo = "bic";
-    rev = "v${version}";
-    sha256 = "1ws46h1ngzk14dspmsggj9535yl04v9wh8v4gb234n34rdkdsyyw";
+    rev = "b224d2776fdfe84d02eb96a21880a9e4ceeb3065";
+    hash = "sha256-6na7/kCXhHN7utbvXvTWr3QG4YhDww9AkilyKf71HlM=";
  };

  buildInputs = [
    readline
+    gcc
    gmp
  ];
+
  nativeBuildInputs = [
    autoreconfHook
    autoconf-archive
    bison
    flex
+    gcc
+    libffi
+    makeWrapper
+    pkg-config
  ];

-  meta = with lib; {
+  postInstall = ''
+    wrapProgram $out/bin/bic \
+      --prefix PATH : ${lib.makeBinPath [ gcc ]}
+  '';
+
+  meta = {
    description = "C interpreter and API explorer";
    mainProgram = "bic";
    longDescription = ''
      bic This a project that allows developers to explore and test C-APIs using a
      read eval print loop, also known as a REPL.
    '';
-    license = with licenses; [ gpl2Plus ];
+    license = with lib.licenses; [ gpl2Plus ];
    homepage = "https://github.com/hexagonal-sun/bic";
-    platforms = platforms.unix;
-    maintainers = with maintainers; [ hexagonal-sun ];
+    platforms = lib.platforms.unix;
+    maintainers = with lib.maintainers; [ hexagonal-sun ];
    # never built on aarch64-darwin since first introduction in nixpkgs
    broken = stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64;
  };
--- a/pkgs/by-name/br/brave/package.nix
+++ b/pkgs/by-name/br/brave/package.nix
@ -3,24 +3,24 @@

 let
  pname = "brave";
-  version = "1.77.101";
+  version = "1.78.97";

  allArchives = {
    aarch64-linux = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_arm64.deb";
-      hash = "sha256-/JY1eBLw3xTxeAinctlpTSbwk6QibPdMVhZcBkbe7G4=";
+      hash = "sha256-7j03rArdHXYlB8g72DeXivnPVhmCjPd3rtbTsH4nAiU=";
    };
    x86_64-linux = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-browser_${version}_amd64.deb";
-      hash = "sha256-mRbRGCsvkrNVfwYrlfgGyU94dEezFTI/ittkbVynp7Q=";
+      hash = "sha256-SjaYmLCV/od2J6HFNyhh43/swQupl+rXfU8B1VvNXf8=";
    };
    aarch64-darwin = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-v${version}-darwin-arm64.zip";
-      hash = "sha256-tn5HdMLoVRY1oLAYc/O2v2mVblb6KYud53yoHloEQ44=";
+      hash = "sha256-12z9MMUkSOZn7vg7VZ8i/dVdxHGTRcVe4M8ryInEdHw=";
    };
    x86_64-darwin = {
      url = "https://github.com/brave/brave-browser/releases/download/v${version}/brave-v${version}-darwin-x64.zip";
-      hash = "sha256-HJel3HVz5MoOWXGTEH8Gu+Fq2Xur7xHXeZTUmWcWksk=";
+      hash = "sha256-UMwwpn+ag9dDU0/YHr21a1494wTahsHdyjDnme88m7Q=";
    };
  };

--- a/pkgs/by-name/ch/cherry-studio/package.nix
+++ b/pkgs/by-name/ch/cherry-studio/package.nix
@ -18,13 +18,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "cherry-studio";
-  version = "1.3.0";
+  version = "1.3.2";

  src = fetchFromGitHub {
    owner = "CherryHQ";
    repo = "cherry-studio";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-/cj4wMYPWjO5tJxIDdP7GkciWLVZBiDivEIHiOxpk0s=";
+    hash = "sha256-Tgd8MvxsiCDp2pdtz2MeCnTGY4Butw9V/UoTw0XEaIg=";
  };

  postPatch = ''
--- a/pkgs/by-name/dd/ddnet/package.nix
+++ b/pkgs/by-name/dd/ddnet/package.nix
@ -32,13 +32,13 @@

 stdenv.mkDerivation rec {
  pname = "ddnet";
-  version = "19.0";
+  version = "19.2";

  src = fetchFromGitHub {
    owner = "ddnet";
    repo = "ddnet";
    tag = version;
-    hash = "sha256-R9LXcYM96fibHzpXDWIOSASKIbh+GeiGyz7xVvV2v1Q=";
+    hash = "sha256-7moxTdoUTOpAHDT0LNNG6ccHeXKxd6ND+GRcgchWVSI=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
--- a/pkgs/by-name/dn/dnsdist/package.nix
+++ b/pkgs/by-name/dn/dnsdist/package.nix
@ -20,11 +20,11 @@

 stdenv.mkDerivation rec {
  pname = "dnsdist";
-  version = "1.9.8";
+  version = "1.9.9";

  src = fetchurl {
    url = "https://downloads.powerdns.com/releases/dnsdist-${version}.tar.bz2";
-    hash = "sha256-9mT3Opao1zQ9MmlqzLcP2LHtQyjXPNsKYnpWHW4v2Z4=";
+    hash = "sha256-6GvGNtTS3IusGA7Iza+/5fNSKbYAXsFddRD7b1i0n1o=";
  };

  patches = [
--- a/pkgs/by-name/gu/gui-for-clash/bridge.patch
+++ b/pkgs/by-name/gu/gui-for-clash/bridge.patch
@ -1,39 +1,31 @@
 --- a/bridge/bridge.go	2024-12-25 20:53:45.504021585 +0000
 +++ b/bridge/bridge.go	2024-12-25 21:02:20.318422528 +0000
-@@ -38,11 +38,6 @@
- 
- func InitBridge(fs embed.FS) {
- 	// step1: Set Env
+@@ -41,13 +41,13 @@
+ }
+
+ func CreateApp(fs embed.FS) *App {
 -	exePath, err := os.Executable()
 -	if err != nil {
 -		panic(err)
-	}
-
- 	for _, v := range os.Args {
- 		if v == "tasksch" {
- 			Env.FromTaskSch = true
-@@ -50,8 +45,13 @@
- 		}
- 	}
- 
-	Env.BasePath = filepath.Dir(exePath)
-	Env.AppName = filepath.Base(exePath)
 +	Env.AppName = "GUI.for.Clash"
 +	xdgDataHome := os.Getenv("XDG_DATA_HOME")
 +	if xdgDataHome == "" {
 +		homeDir, _ := os.UserHomeDir()
 +		xdgDataHome = filepath.Join(homeDir, ".local", "share")
-+	}
+ 	}
+-
+-	Env.BasePath = filepath.Dir(exePath)
+-	Env.AppName = filepath.Base(exePath)
 +	Env.BasePath = filepath.Join(xdgDataHome, Env.AppName)
- 
- 	// step2: Create a persistent data symlink
- 	if Env.OS == "darwin" {
-@@ -128,7 +128,7 @@
+
+ 	if slices.Contains(os.Args, "tasksch") {
+ 		Env.FromTaskSch = true
+@@ -76,7 +76,7 @@
 }
- 
+
 func (a *App) RestartApp() FlagResult {
 -	exePath := Env.BasePath + "/" + Env.AppName
 +	exePath := "@basepath@/bin" + "/" + Env.AppName
- 
+
 	cmd := exec.Command(exePath)
- 	HideExecWindow(cmd)
+ 	SetCmdWindowHidden(cmd)
--- a/pkgs/by-name/gu/gui-for-clash/package.nix
+++ b/pkgs/by-name/gu/gui-for-clash/package.nix
@ -1,10 +1,10 @@
 {
+  lib,
  stdenv,
  nodejs,
  pnpm_9,
  fetchFromGitHub,
  buildGoModule,
-  lib,
  wails,
  webkitgtk_4_0,
  pkg-config,
@ -17,13 +17,13 @@

 let
  pname = "gui-for-clash";
-  version = "1.9.5";
+  version = "1.9.7";

  src = fetchFromGitHub {
    owner = "GUI-for-Cores";
    repo = "GUI.for.Clash";
    tag = "v${version}";
-    hash = "sha256-XQbiric4iAxvWRLKCCZtDrpFpPCylQlwnCm9dHSq/KM=";
+    hash = "sha256-Ij9zyBzYpAfDEjJXqOiPxun+5e1T5j3juYudpvraBcQ=";
  };

  metaCommon = {
@ -43,7 +43,7 @@ let
    pnpmDeps = pnpm_9.fetchDeps {
      inherit (finalAttrs) pname version src;
      sourceRoot = "${finalAttrs.src.name}/frontend";
-      hash = "sha256-5SVu8eCyN89k6BvNEqgs4hOrP5IjvjUZrzrVuDwtYCk=";
+      hash = "sha256-5tz1FItH9AvZhJjka8i5Kz22yf/tEmRPkDhz6iswZzc=";
    };

    sourceRoot = "${finalAttrs.src.name}/frontend";
@ -81,7 +81,7 @@ buildGoModule {
      --replace-fail '@basepath@' "$out"
  '';

-  vendorHash = "sha256-Zt3We+Ai8oEqof2eQvcaIkocH85goeldmPf4mmDX17o=";
+  vendorHash = "sha256-Coq8GtaIS7ClmOTFw6PSgGDFW/CpGpKPvXgNw8qz3Hs=";

  nativeBuildInputs = [
    wails
@ -114,12 +114,8 @@ buildGoModule {
      icon = "gui-for-clash";
      genericName = "GUI.for.Clash";
      desktopName = "GUI.for.Clash";
-      categories = [
-        "Network"
-      ];
-      keywords = [
-        "Proxy"
-      ];
+      categories = [ "Network" ];
+      keywords = [ "Proxy" ];
    })
  ];

--- a/pkgs/by-name/gu/gui-for-singbox/bridge.patch
+++ b/pkgs/by-name/gu/gui-for-singbox/bridge.patch
@ -1,39 +1,31 @@
--- a/bridge/bridge.go	2024-12-25 20:53:45.504021585 +0000
-+++ b/bridge/bridge.go	2024-12-25 21:02:20.318422528 +0000
-@@ -38,11 +38,6 @@
- 
- func InitBridge(fs embed.FS) {
- 	// step1: Set Env
+--- a/bridge/bridge.go	2025-05-13 07:36:58.578038227 +0000
+++ b/bridge/bridge.go	2025-05-13 07:39:01.667180229 +0000
+@@ -41,13 +41,13 @@
+ }
+
+ func CreateApp(fs embed.FS) *App {
 -	exePath, err := os.Executable()
 -	if err != nil {
 -		panic(err)
-	}
-
- 	for _, v := range os.Args {
- 		if v == "tasksch" {
- 			Env.FromTaskSch = true
-@@ -50,8 +45,13 @@
- 		}
- 	}
- 
-	Env.BasePath = filepath.Dir(exePath)
-	Env.AppName = filepath.Base(exePath)
 +	Env.AppName = "GUI.for.SingBox"
 +	xdgDataHome := os.Getenv("XDG_DATA_HOME")
 +	if xdgDataHome == "" {
 +		homeDir, _ := os.UserHomeDir()
 +		xdgDataHome = filepath.Join(homeDir, ".local", "share")
-+	}
+ 	}
+-
+-	Env.BasePath = filepath.Dir(exePath)
+-	Env.AppName = filepath.Base(exePath)
 +	Env.BasePath = filepath.Join(xdgDataHome, Env.AppName)
- 
- 	// step2: Create a persistent data symlink
- 	if Env.OS == "darwin" {
-@@ -128,7 +128,7 @@
+
+ 	if slices.Contains(os.Args, "tasksch") {
+ 		Env.FromTaskSch = true
+@@ -76,7 +76,7 @@
 }
- 
+
 func (a *App) RestartApp() FlagResult {
 -	exePath := Env.BasePath + "/" + Env.AppName
 +	exePath := "@basepath@/bin" + "/" + Env.AppName
- 
+
 	cmd := exec.Command(exePath)
- 	HideExecWindow(cmd)
+ 	SetCmdWindowHidden(cmd)
--- a/pkgs/by-name/gu/gui-for-singbox/package.nix
+++ b/pkgs/by-name/gu/gui-for-singbox/package.nix
@ -1,10 +1,10 @@
 {
+  lib,
  stdenv,
  nodejs,
  pnpm_9,
  fetchFromGitHub,
  buildGoModule,
-  lib,
  wails,
  webkitgtk_4_0,
  pkg-config,
@ -17,13 +17,13 @@

 let
  pname = "gui-for-singbox";
-  version = "1.9.6";
+  version = "1.9.7";

  src = fetchFromGitHub {
    owner = "GUI-for-Cores";
    repo = "GUI.for.SingBox";
    tag = "v${version}";
-    hash = "sha256-qmYZWLzGAjUlbORhr67KqhTTeOxskAb7/HO+pPZ6uQE=";
+    hash = "sha256-2wmg0qPXFRuVd5jU1RT9QuqEaG/h2R+VSNeniVZELLk=";
  };

  metaCommon = {
@ -45,7 +45,7 @@ let
    pnpmDeps = pnpm_9.fetchDeps {
      inherit (finalAttrs) pname version src;
      sourceRoot = "${finalAttrs.src.name}/frontend";
-      hash = "sha256-RIkdnDyHjl5C0+Hdtne1NYEh46+yylW7Q/agT7AtDBo=";
+      hash = "sha256-5tz1FItH9AvZhJjka8i5Kz22yf/tEmRPkDhz6iswZzc=";
    };

    sourceRoot = "${finalAttrs.src.name}/frontend";
@ -81,7 +81,7 @@ buildGoModule {
      --replace-fail '@basepath@' "$out"
  '';

-  vendorHash = "sha256-4MPKAI1/F/sgfUORulhcpKJYHX7LpLknlzZx4DqnCfY=";
+  vendorHash = "sha256-Coq8GtaIS7ClmOTFw6PSgGDFW/CpGpKPvXgNw8qz3Hs=";

  nativeBuildInputs = [
    wails
@ -114,12 +114,8 @@ buildGoModule {
      icon = "gui-for-singbox";
      genericName = "GUI.for.SingBox";
      desktopName = "GUI.for.SingBox";
-      categories = [
-        "Network"
-      ];
-      keywords = [
-        "Proxy"
-      ];
+      categories = [ "Network" ];
+      keywords = [ "Proxy" ];
    })
  ];

--- a/pkgs/by-name/hu/hugo/package.nix
+++ b/pkgs/by-name/hu/hugo/package.nix
@ -84,7 +84,6 @@ buildGoModule (finalAttrs: {
      schneefux
      Br1ght0ne
      Frostman
-      kachick
      federicoschonborn
    ];
  };
--- a/pkgs/by-name/hy/hypseus-singe/package.nix
+++ b/pkgs/by-name/hy/hypseus-singe/package.nix
@ -20,13 +20,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "hypseus-singe";
-  version = "2.11.4";
+  version = "2.11.5";

  src = fetchFromGitHub {
    owner = "DirtBagXon";
    repo = "hypseus-singe";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-04WC0fO/eNUz4muwDAbjDy5AA53QPpX5dq5Xgt8qeBI=";
+    hash = "sha256-K/U/cx1y8mbC81qYNHz+AqT/hsc108NCHo0MoDhQqvs=";
  };

  patches = [ ./use-shared-mpeg2.patch ];
--- a/pkgs/by-name/ja/jasper-gtk-theme/package.nix
+++ b/pkgs/by-name/ja/jasper-gtk-theme/package.nix
@ -0,0 +1,102 @@
+{
+  lib,
+  stdenvNoCC,
+  fetchFromGitHub,
+  gnome-themes-extra,
+  gtk-engine-murrine,
+  jdupes,
+  sassc,
+  themeVariants ? [ ], # default: teal
+  colorVariants ? [ ], # default: all
+  sizeVariants ? [ ], # default: standard
+  tweaks ? [ ],
+}:
+
+let
+  pname = "jasper-gtk-theme";
+
+in
+lib.checkListOfEnum "${pname}: theme variants"
+  [
+    "default"
+    "purple"
+    "pink"
+    "red"
+    "orange"
+    "yellow"
+    "green"
+    "blue"
+    "grey"
+    "all"
+  ]
+  themeVariants
+  lib.checkListOfEnum
+  "${pname}: color variants"
+  [ "standard" "light" "dark" ]
+  colorVariants
+  lib.checkListOfEnum
+  "${pname}: size variants"
+  [ "standard" "compact" ]
+  sizeVariants
+  lib.checkListOfEnum
+  "${pname}: tweaks"
+  [
+    "nord"
+    "dracula"
+    "black"
+    "macos"
+  ]
+  tweaks
+
+  stdenvNoCC.mkDerivation
+  rec {
+    inherit pname;
+    version = "0-unstable-2025-04-02";
+
+    src = fetchFromGitHub {
+      owner = "vinceliuice";
+      repo = "Jasper-gtk-theme";
+      rev = "71cb99a6618d839b1058cb8e6660a3b2f63aca70";
+      hash = "sha256-ZWPUyVszDPUdzttAJuIA9caDpP4SQ7mIbCoczxwvsus=";
+    };
+
+    nativeBuildInputs = [
+      jdupes
+      sassc
+    ];
+
+    buildInputs = [
+      gnome-themes-extra
+    ];
+
+    propagatedUserEnvPkgs = [
+      gtk-engine-murrine
+    ];
+
+    postPatch = ''
+      patchShebangs install.sh
+    '';
+
+    installPhase = ''
+      runHook preInstall
+
+      name= HOME="$TMPDIR" ./install.sh \
+        ${lib.optionalString (themeVariants != [ ]) "--theme " + builtins.toString themeVariants} \
+        ${lib.optionalString (colorVariants != [ ]) "--color " + builtins.toString colorVariants} \
+        ${lib.optionalString (sizeVariants != [ ]) "--size " + builtins.toString sizeVariants} \
+        ${lib.optionalString (tweaks != [ ]) "--tweaks " + builtins.toString tweaks} \
+        --dest $out/share/themes
+
+      jdupes --quiet --link-soft --recurse $out/share
+
+      runHook postInstall
+    '';
+
+    meta = {
+      description = "Modern and clean Gtk theme";
+      homepage = "https://github.com/vinceliuice/Jasper-gtk-theme";
+      license = lib.licenses.gpl3Only;
+      platforms = lib.platforms.unix;
+      maintainers = [ lib.maintainers.romildo ];
+    };
+  }
--- a/pkgs/by-name/ko/komac/package.nix
+++ b/pkgs/by-name/ko/komac/package.nix
@ -77,7 +77,6 @@ rustPlatform.buildRustPackage (finalAttrs: {
    changelog = "https://github.com/russellbanks/Komac/releases/tag/v${finalAttrs.version}";
    license = lib.licenses.gpl3Plus;
    maintainers = with lib.maintainers; [
-      kachick
      HeitorAugustoLN
    ];
    mainProgram = "komac";
--- a/pkgs/by-name/li/libigl/package.nix
+++ b/pkgs/by-name/li/libigl/package.nix
@ -6,13 +6,13 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "libigl";
-  version = "2.5.0";
+  version = "2.6.0";

  src = fetchFromGitHub {
    owner = "libigl";
    repo = "libigl";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-OpjkQGRiuc7kNlwgCeM4dcotTb5J+6LUn4IOe9bFbW4=";
+    hash = "sha256-7Cvz/yOb5kQaIceUwyijBNplXvok5reJoJsTnvKWt4M=";
  };

  # We could also properly use CMake, but we would have to heavily patch it
--- a/pkgs/by-name/li/librechat/package.nix
+++ b/pkgs/by-name/li/librechat/package.nix
@ -10,13 +10,13 @@

 buildNpmPackage rec {
  pname = "librechat";
-  version = "0.7.7";
+  version = "0.7.8";

  src = fetchFromGitHub {
    owner = "danny-avila";
    repo = "LibreChat";
    tag = "v${version}";
-    hash = "sha256-U0yIoJt7wE4a7WbryN7hheLRFTRVol5qawIrmKte41M=";
+    hash = "sha256-bo26EzpRjE2hbbx6oUo0tDsLMdVpWcazCIzA5sm5L34=";
  };

  patches = [
@ -37,7 +37,7 @@ buildNpmPackage rec {
    ./0003-upload-paths.patch
  ];

-  npmDepsHash = "sha256-r06Hcdxa7pYMqIvNWP4VclJ4woiPd9kJxEmQO88i8J8=";
+  npmDepsHash = "sha256-knmS2I6AiSdV2bSnNBThbVHdkpk6iXiRuk4adciDK1M=";

  nativeBuildInputs = [
    pkg-config
--- a/pkgs/by-name/ma/mathemagix/package.nix
+++ b/pkgs/by-name/ma/mathemagix/package.nix
@ -12,12 +12,12 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "mathemagix";
-  version = "11126";
+  version = "11229";

  src = fetchsvn {
    url = "https://subversion.renater.fr/anonscm/svn/mmx/";
    rev = finalAttrs.version;
-    hash = "sha256-AFnYd5oFg/wgaHPjfZmqXNljEpoFW4h6f3UG+KZauEs=";
+    hash = "sha256-JSjgvbOjV/66wjFpLGI1vCTvNGdYX48JTGGvWdBzQm8=";
  };

  strictDeps = true;
--- a/pkgs/by-name/mo/morgen/package.nix
+++ b/pkgs/by-name/mo/morgen/package.nix
@ -16,12 +16,12 @@

 stdenv.mkDerivation rec {
  pname = "morgen";
-  version = "3.6.12";
+  version = "3.6.13";

  src = fetchurl {
    name = "morgen-${version}.deb";
    url = "https://dl.todesktop.com/210203cqcj00tw1/versions/${version}/linux/deb";
-    hash = "sha256-1shqINMYy+yoMsI99+tvJcqWs8dScmmV7X9QTYZ9EfA=";
+    hash = "sha256-a7IkEHRAwa7SnsPcK6psho6E+o1aOlQPPFHaDPrrXxw=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ne/netbox_4_1/package.nix
+++ b/pkgs/by-name/ne/netbox_4_1/package.nix
@ -127,6 +127,9 @@ py.pkgs.buildPythonApplication rec {
    description = "IP address management (IPAM) and data center infrastructure management (DCIM) tool";
    mainProgram = "netbox";
    license = lib.licenses.asl20;
+    knownVulnerabilities = [
+      "Netbox version ${version} is EOL; please upgrade by following the current release notes instructions."
+    ];
    maintainers = with lib.maintainers; [
      minijackson
      raitobezarius
--- a/pkgs/by-name/ne/netbox_4_2/package.nix
+++ b/pkgs/by-name/ne/netbox_4_2/package.nix
@ -4,6 +4,7 @@
  python3,
  plugins ? _ps: [ ],
  nixosTests,
+  nix-update-script,
 }:
 let
  py = python3.override {
@ -14,7 +15,7 @@ let
 in
 py.pkgs.buildPythonApplication rec {
  pname = "netbox";
-  version = "4.2.7";
+  version = "4.2.9";

  format = "other";

@ -22,7 +23,7 @@ py.pkgs.buildPythonApplication rec {
    owner = "netbox-community";
    repo = "netbox";
    tag = "v${version}";
-    hash = "sha256-SZES80hdoP+k6o5ablMnwaFrsVGE8Baew44eX2ZCk/Y=";
+    hash = "sha256-uVe4YTZoxRMBfvItFa9SMHu4AaVvygfAg9GDB115TFc=";
  };

  patches = [
@ -112,6 +113,7 @@ py.pkgs.buildPythonApplication rec {
      netbox = nixosTests.netbox_4_2;
      inherit (nixosTests) netbox-upgrade;
    };
+    updateScript = nix-update-script { };
  };

  meta = {
--- a/pkgs/by-name/nw/nwg-hello/package.nix
+++ b/pkgs/by-name/nw/nwg-hello/package.nix
@ -10,14 +10,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "nwg-hello";
-  version = "0.3.1";
+  version = "0.4.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "nwg-piotr";
    repo = "nwg-hello";
    tag = "v${version}";
-    hash = "sha256-ZqZikkwV3UVA0e9VCFHjXAAIegvz3I6CNURZSP4owmU=";
+    hash = "sha256-yevcHctVnUWuPsdB+KN+Uuxg+iGdzP7WOOTMUvVmuEY=";
  };

  nativeBuildInputs = [
@ -39,15 +39,15 @@ python3Packages.buildPythonApplication rec {
  postPatch = ''
    # hard coded paths
    substituteInPlace nwg_hello/main.py \
-      --replace '/etc/nwg-hello' "$out/etc/nwg-hello" \
-      --replace "/usr/share/xsessions" "/run/current-system/sw/share/xsessions" \
-      --replace "/usr/share/wayland-sessions" "/run/current-system/sw/share/wayland-sessions"
+      --replace-fail '/etc/nwg-hello' "$out/etc/nwg-hello" \
+      --replace-fail "/usr/share/xsessions" "/run/current-system/sw/share/xsessions" \
+      --replace-fail "/usr/share/wayland-sessions" "/run/current-system/sw/share/wayland-sessions"

    substituteInPlace nwg-hello-default.json \
-      --replace "/usr/share/xsessions" "/run/current-system/sw/share/xsessions" \
-      --replace "/usr/share/wayland-sessions" "/run/current-system/sw/share/wayland-sessions"
+      --replace-fail "/usr/share/xsessions" "/run/current-system/sw/share/xsessions" \
+      --replace-fail "/usr/share/wayland-sessions" "/run/current-system/sw/share/wayland-sessions"

-    substituteInPlace nwg_hello/ui.py --replace '/usr/share/nwg-hello' "$out/share/nwg-hello"
+    substituteInPlace nwg_hello/ui.py --replace-fail '/usr/share/nwg-hello' "$out/share/nwg-hello"
  '';

  postInstall = ''
--- a/pkgs/by-name/ou/outfieldr/package.nix
+++ b/pkgs/by-name/ou/outfieldr/package.nix
@ -0,0 +1,34 @@
+{
+  lib,
+  fetchFromGitLab,
+  stdenv,
+  zig_0_14,
+}:
+
+let
+  zig = zig_0_14;
+in
+stdenv.mkDerivation (finalAttrs: {
+  pname = "outfieldr";
+  version = "1.1.0";
+
+  src = fetchFromGitLab {
+    owner = "ve-nt";
+    repo = "outfieldr";
+    rev = finalAttrs.version;
+    hash = "sha256-Xz5BxwPWrZfDsWnvVR9KvHidbUdPsxy7b2ONiSZY+uk=";
+  };
+
+  nativeBuildInputs = [
+    zig.hook
+  ];
+
+  meta = {
+    description = "TLDR client written in Zig";
+    homepage = "https://gitlab.com/ve-nt/outfieldr";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ hasnep ];
+    mainProgram = "tldr";
+    inherit (zig.meta) platforms;
+  };
+})
--- a/pkgs/by-name/pa/pantheon-tweaks/package.nix
+++ b/pkgs/by-name/pa/pantheon-tweaks/package.nix
@ -18,13 +18,13 @@

 stdenv.mkDerivation rec {
  pname = "pantheon-tweaks";
-  version = "2.2.1";
+  version = "2.3.0";

  src = fetchFromGitHub {
    owner = "pantheon-tweaks";
    repo = pname;
    rev = version;
-    hash = "sha256-85Yfhh6otNWhRqLeM6UMBiCf/omn0FyY5hdK1ZjjgmM=";
+    hash = "sha256-+dkjmeY4WJfXwgNR8HlRaVfvS/2icbi8eSAkiB9x7uI=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ph/photoqt/package.nix
+++ b/pkgs/by-name/ph/photoqt/package.nix
@ -17,11 +17,11 @@

 stdenv.mkDerivation rec {
  pname = "photoqt";
-  version = "4.9";
+  version = "4.9.1";

  src = fetchurl {
    url = "https://photoqt.org/pkgs/photoqt-${version}.tar.gz";
-    hash = "sha256-Kd8h6JFJ02JH+IKMltvKT/mgnhz9jOJAFXMnNmI1BYA=";
+    hash = "sha256-dAqAM9zsFWPiGF7njhy7SM6f/5S19jMyTv57JadgHu8=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/po/pocket-id/package.nix
+++ b/pkgs/by-name/po/pocket-id/package.nix
@ -12,13 +12,13 @@

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "pocket-id";
-  version = "0.51.1";
+  version = "0.53.0";

  src = fetchFromGitHub {
    owner = "pocket-id";
    repo = "pocket-id";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-L+Mmgyeiv/AoboGN1ux4BDhEyVQ8w7IMR8Z34eM8tSU=";
+    hash = "sha256-3lW4jPh9YElgpBcIooGQ2zZbNwC/rz7CABsp7ScTxyQ=";
  };

  backend = buildGoModule {
@ -27,7 +27,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {

    sourceRoot = "${finalAttrs.src.name}/backend";

-    vendorHash = "sha256-0LAlltXd7YNQu7ymdjUSy75hMBz6MpvmUtgct43BU7M=";
+    vendorHash = "sha256-wOrYIhOrUxz22Ay2A26FTrPJA8YRgdRihP78Ls8VgNM=";

    preFixup = ''
      mv $out/bin/cmd $out/bin/pocket-id-backend
--- a/pkgs/by-name/ro/roddhjav-apparmor-rules/package.nix
+++ b/pkgs/by-name/ro/roddhjav-apparmor-rules/package.nix
@ -7,13 +7,13 @@

 stdenvNoCC.mkDerivation {
  pname = "roddhjav-apparmor-rules";
-  version = "0-unstable-2025-05-03";
+  version = "0-unstable-2025-05-14";

  src = fetchFromGitHub {
    owner = "roddhjav";
    repo = "apparmor.d";
-    rev = "6d8eda6b8735626d5c2d25a810fb7600a4e3d60e";
-    hash = "sha256-y0qdiijSZligYPpt5qbK36KAt+q6mHN03lOqq6HPSRA=";
+    rev = "877452519d3138bd4a98dc7ef3cd3dec78a5b9dc";
+    hash = "sha256-uqtCB636qAe6c/dokLsbbTGw3oeo+93YhnGfPUwg7WI=";
  };

  dontConfigure = true;
--- a/pkgs/by-name/ru/rundeck/package.nix
+++ b/pkgs/by-name/ru/rundeck/package.nix
@ -12,11 +12,11 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "rundeck";
-  version = "5.11.1-20250415";
+  version = "5.12.0-20250512";

  src = fetchurl {
    url = "https://packagecloud.io/pagerduty/rundeck/packages/java/org.rundeck/rundeck-${finalAttrs.version}.war/artifacts/rundeck-${finalAttrs.version}.war/download?distro_version_id=167";
-    hash = "sha256-WOxY2GGtll+2xkSbJUKOvgsr408nIvRcEuBULcawijc=";
+    hash = "sha256-LsKxMj+XCKTAMC3aIRnJcJkc2jytfTfu/gi0omGkMEk=";
  };

  nativeBuildInputs = [ makeWrapper ];
--- a/pkgs/by-name/sa/saber/package.nix
+++ b/pkgs/by-name/sa/saber/package.nix
@ -17,13 +17,13 @@

 flutter329.buildFlutterApplication rec {
  pname = "saber";
-  version = "0.25.5";
+  version = "0.25.6";

  src = fetchFromGitHub {
    owner = "saber-notes";
    repo = "saber";
    tag = "v${version}";
-    hash = "sha256-iZy/Eb3BUe8Zs52gw7+hpncEqUwcgKFAgzB8VIsFv/E=";
+    hash = "sha256-OknqEbWAYLlxSTDWcggM6GP2V8cdKIAksbm7TmKzjKY=";
  };

  gitHashes = {
--- a/pkgs/by-name/sa/saber/pubspec.lock.json
+++ b/pkgs/by-name/sa/saber/pubspec.lock.json
@ -44,11 +44,11 @@
      "dependency": "direct main",
      "description": {
        "name": "archive",
-        "sha256": "a7f37ff061d7abc2fcf213554b9dcaca713c5853afa5c065c44888bc9ccaf813",
+        "sha256": "2fde1607386ab523f7a36bb3e7edb43bd58e6edaf2ffb29d8a6d578b297fdbbd",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "4.0.6"
+      "version": "4.0.7"
    },
    "args": {
      "dependency": "direct main",
@ -64,11 +64,11 @@
      "dependency": "transitive",
      "description": {
        "name": "asn1lib",
-        "sha256": "e02d018628c870ef2d7f03e33f9ad179d89ff6ec52ca6c56bcb80bcef979867f",
+        "sha256": "0511d6be23b007e95105ae023db599aea731df604608978dada7f9faf2637623",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "1.6.2"
+      "version": "1.6.4"
    },
    "assorted_layout_widgets": {
      "dependency": "transitive",
@ -194,11 +194,11 @@
      "dependency": "direct main",
      "description": {
        "name": "bson",
-        "sha256": "9071b154b5cd96482c2e116b015e87acfdc8412630cc8f3aba60c539a8ef5442",
+        "sha256": "f8c80be7a62a88f4add7c48cc83567c36a77532de107224df8328ef71f125045",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "5.0.5"
+      "version": "5.0.7"
    },
    "built_collection": {
      "dependency": "transitive",
@ -404,11 +404,11 @@
      "dependency": "direct main",
      "description": {
        "name": "device_info_plus",
-        "sha256": "306b78788d1bb569edb7c55d622953c2414ca12445b41c9117963e03afc5c513",
+        "sha256": "0c6396126421b590089447154c5f98a5de423b70cfb15b1578fd018843ee6f53",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "11.3.3"
+      "version": "11.4.0"
    },
    "device_info_plus_platform_interface": {
      "dependency": "transitive",
@ -514,11 +514,11 @@
      "dependency": "direct main",
      "description": {
        "name": "file_picker",
-        "sha256": "8986dec4581b4bcd4b6df5d75a2ea0bede3db802f500635d05fa8be298f9467f",
+        "sha256": "a222f231db4f822fc49e3b753674bda630e981873c84bf8604bceeb77fce0b24",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "10.1.2"
+      "version": "10.1.7"
    },
    "file_selector_linux": {
      "dependency": "transitive",
@ -564,11 +564,11 @@
      "dependency": "direct main",
      "description": {
        "name": "flex_color_picker",
-        "sha256": "c083b79f1c57eaeed9f464368be376951230b3cb1876323b784626152a86e480",
+        "sha256": "8f753a1a026a13ea5cc5eddbae3ceb886f2537569ab2e5208efb1e3bb5af72ff",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "3.7.0"
+      "version": "3.7.1"
    },
    "flex_seed_scheme": {
      "dependency": "transitive",
@ -672,21 +672,21 @@
      "dependency": "transitive",
      "description": {
        "name": "flutter_plugin_android_lifecycle",
-        "sha256": "5a1e6fb2c0561958d7e4c33574674bda7b77caaca7a33b758876956f2902eea3",
+        "sha256": "f948e346c12f8d5480d2825e03de228d0eb8c3a737e4cdaa122267b89c022b5e",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.0.27"
+      "version": "2.0.28"
    },
    "flutter_quill": {
      "dependency": "direct main",
      "description": {
        "name": "flutter_quill",
-        "sha256": "6b9a29b5e054fd90373988f710e8060e3f44e9f875dd5e02bf0c10bc22e53133",
+        "sha256": "de019f6160023d36ad3e89343da6d740ab66ae7839875c89871fbeabcb9e8f9b",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "11.2.0"
+      "version": "11.4.0"
    },
    "flutter_quill_delta_from_html": {
      "dependency": "transitive",
@ -850,21 +850,21 @@
      "dependency": "direct main",
      "description": {
        "name": "go_router",
-        "sha256": "4cdfcc6a178632d1dbb7a728f8e84a1466211354704b9cdc03eee661d3277732",
+        "sha256": "0b1e06223bee260dee31a171fb1153e306907563a0b0225e8c1733211911429a",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "15.0.0"
+      "version": "15.1.2"
    },
    "golden_screenshot": {
      "dependency": "direct dev",
      "description": {
        "name": "golden_screenshot",
-        "sha256": "548b49cb2d7ee57664ed8cfd44df764182c59b04a437c7d695ed784e3a21569f",
+        "sha256": "0ecff8fde3eaea98d2f19449fb2becf67583cb0e98326b1a6ad47226137099a1",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "3.2.0"
+      "version": "3.2.1"
    },
    "golden_toolkit": {
      "dependency": "transitive",
@ -900,21 +900,21 @@
      "dependency": "transitive",
      "description": {
        "name": "html",
-        "sha256": "9475be233c437f0e3637af55e7702cbbe5c23a68bd56e8a5fa2d426297b7c6c8",
+        "sha256": "6d1264f2dffa1b1101c25a91dff0dc2daee4c18e87cd8538729773c073dbf602",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "0.15.5+1"
+      "version": "0.15.6"
    },
    "http": {
      "dependency": "direct main",
      "description": {
        "name": "http",
-        "sha256": "fe7ab022b76f3034adc518fb6ea04a82387620e19977665ea18d30a1cf43442f",
+        "sha256": "2c11f3f94c687ee9bad77c171151672986360b2b001d109814ee7140b2cf261b",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "1.3.0"
+      "version": "1.4.0"
    },
    "http_parser": {
      "dependency": "transitive",
@ -1336,11 +1336,11 @@
      "dependency": "transitive",
      "description": {
        "name": "path_provider_android",
-        "sha256": "0ca7359dad67fd7063cb2892ab0c0737b2daafd807cf1acecd62374c8fae6c12",
+        "sha256": "d0d310befe2c8ab9e7f393288ccbb11b60c019c6b5afc21973eeee4dda2b35e9",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.2.16"
+      "version": "2.2.17"
    },
    "path_provider_foundation": {
      "dependency": "transitive",
@ -1416,11 +1416,11 @@
      "dependency": "direct main",
      "description": {
        "name": "pdfrx",
-        "sha256": "5221e2e1567603fccbd3b1e67d6786151e04ba9d04b425a9d9d881260948d1e9",
+        "sha256": "1bde1885de38ac8ad9f8d5e4be37a57f36f23467a9bb5a586607d5e4aa153ab8",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "1.1.23"
+      "version": "1.1.28"
    },
    "perfect_freehand": {
      "dependency": "direct main",
@ -1596,11 +1596,11 @@
      "dependency": "transitive",
      "description": {
        "name": "provider",
-        "sha256": "489024f942069c2920c844ee18bb3d467c69e48955a4f32d1677f71be103e310",
+        "sha256": "4abbd070a04e9ddc287673bf5a030c7ca8b685ff70218720abab8b092f53dd84",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "6.1.4"
+      "version": "6.1.5"
    },
    "qr": {
      "dependency": "transitive",
@ -1817,21 +1817,21 @@
      "dependency": "direct main",
      "description": {
        "name": "share_plus",
-        "sha256": "fce43200aa03ea87b91ce4c3ac79f0cecd52e2a7a56c7a4185023c271fbfa6da",
+        "sha256": "b2961506569e28948d75ec346c28775bb111986bb69dc6a20754a457e3d97fa0",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "10.1.4"
+      "version": "11.0.0"
    },
    "share_plus_platform_interface": {
      "dependency": "transitive",
      "description": {
        "name": "share_plus_platform_interface",
-        "sha256": "cc012a23fc2d479854e6c80150696c4a5f5bb62cb89af4de1c505cf78d0a5d0b",
+        "sha256": "1032d392bc5d2095a77447a805aa3f804d2ae6a4d5eef5e6ebb3bd94c1bc19ef",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "5.0.2"
+      "version": "6.0.0"
    },
    "shared_preferences": {
      "dependency": "direct main",
@ -1847,11 +1847,11 @@
      "dependency": "transitive",
      "description": {
        "name": "shared_preferences_android",
-        "sha256": "c2c8c46297b5d6a80bed7741ec1f2759742c77d272f1a1698176ae828f8e1a18",
+        "sha256": "20cbd561f743a342c76c151d6ddb93a9ce6005751e7aa458baad3858bfbfb6ac",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.4.9"
+      "version": "2.4.10"
    },
    "shared_preferences_foundation": {
      "dependency": "transitive",
@ -2103,11 +2103,11 @@
      "dependency": "transitive",
      "description": {
        "name": "url_launcher_android",
-        "sha256": "1d0eae19bd7606ef60fe69ef3b312a437a16549476c42321d5dc1506c9ca3bf4",
+        "sha256": "8582d7f6fe14d2652b4c45c9b6c14c0b678c2af2d083a11b604caeba51930d79",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "6.3.15"
+      "version": "6.3.16"
    },
    "url_launcher_ios": {
      "dependency": "transitive",
@ -2153,11 +2153,11 @@
      "dependency": "transitive",
      "description": {
        "name": "url_launcher_web",
-        "sha256": "3ba963161bd0fe395917ba881d320b9c4f6dd3c4a233da62ab18a5025c85f1e9",
+        "sha256": "4bd2b7b4dc4d4d0b94e5babfffbca8eac1a126c7f3d6ecbc1a11013faa3abba2",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.4.0"
+      "version": "2.4.1"
    },
    "url_launcher_windows": {
      "dependency": "transitive",
@ -2273,11 +2273,11 @@
      "dependency": "transitive",
      "description": {
        "name": "win32",
-        "sha256": "dc6ecaa00a7c708e5b4d10ee7bec8c270e9276dfcab1783f57e9962d7884305f",
+        "sha256": "329edf97fdd893e0f1e3b9e88d6a0e627128cc17cc316a8d67fda8f1451178ba",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "5.12.0"
+      "version": "5.13.0"
    },
    "win32_registry": {
      "dependency": "transitive",
@ -2313,11 +2313,11 @@
      "dependency": "direct main",
      "description": {
        "name": "worker_manager",
-        "sha256": "086ed63e9b36266e851404ca90fd44e37c0f4c9bbf819e5f8d7c87f9741c0591",
+        "sha256": "eb8ad7013f823539e259f2452b40f8bf77c0aacc7a73f66195f1ad3166eafcf8",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "7.2.3"
+      "version": "7.2.4"
    },
    "workmanager": {
      "dependency": "direct main",
--- a/pkgs/by-name/sc/scriv/package.nix
+++ b/pkgs/by-name/sc/scriv/package.nix
@ -49,9 +49,8 @@ python3.pkgs.buildPythonApplication rec {
  disabledTests = [
    # assumes we have checked out the full repo (including remotes)
    "test_real_get_github_repos"
-    # requires a newer pandoc version (as it tests for a specific format of the
-    # error message)
-    "test_bad_convert_to_markdown"
+    # test fails due to a pandoc bug (fixed in pandoc 3.6.4)
+    "test_convert_to_markdown"
  ];

  passthru.tests = {
--- a/pkgs/by-name/sd/sdl3-ttf/package.nix
+++ b/pkgs/by-name/sd/sdl3-ttf/package.nix
@ -2,7 +2,6 @@
  lib,
  stdenv,
  fetchFromGitHub,
-  fetchpatch,
  nix-update-script,
  testers,
  validatePkgConfig,
@ -12,6 +11,7 @@
  harfbuzz,
  glib,
  ninja,
+  fixDarwinDylibNames,
 }:

 stdenv.mkDerivation (finalAttrs: {
@ -32,7 +32,7 @@ stdenv.mkDerivation (finalAttrs: {
    cmake
    ninja
    validatePkgConfig
-  ];
+  ] ++ lib.optionals stdenv.hostPlatform.isDarwin [ fixDarwinDylibNames ];

  buildInputs = [
    sdl3
--- a/pkgs/by-name/si/simplotask/package.nix
+++ b/pkgs/by-name/si/simplotask/package.nix
@ -7,13 +7,13 @@

 buildGoModule rec {
  pname = "simplotask";
-  version = "1.16.4";
+  version = "1.17.0";

  src = fetchFromGitHub {
    owner = "umputun";
    repo = "spot";
    rev = "v${version}";
-    hash = "sha256-pSYYYUzChK/GNAdCybd4KMNXwkTZo/0w6CtsYOvbKj8=";
+    hash = "sha256-uMS2Nf5Brx4hXMGMG3vTU3V2y83gLPb8vau7GA+DGak=";
  };

  vendorHash = null;
--- a/pkgs/by-name/sp/sparkle/package.nix
+++ b/pkgs/by-name/sp/sparkle/package.nix
@ -0,0 +1,91 @@
+{
+  lib,
+  stdenv,
+  fetchurl,
+  dpkg,
+  autoPatchelfHook,
+  nss,
+  nspr,
+  alsa-lib,
+  openssl,
+  webkitgtk_4_0,
+  udev,
+  libayatana-appindicator,
+  libGL,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "sparkle";
+  version = "1.6.2";
+
+  src =
+    let
+      selectSystem =
+        attrs:
+        attrs.${stdenv.hostPlatform.system} or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
+      arch = selectSystem {
+        x86_64-linux = "amd64";
+        aarch64-linux = "arm64";
+      };
+    in
+    fetchurl {
+      url = "https://github.com/xishang0128/sparkle/releases/download/${finalAttrs.version}/sparkle-linux-${finalAttrs.version}-${arch}.deb";
+      hash = selectSystem {
+        x86_64-linux = "sha256-lUsKTEtUevBKmz21gu/AEAGXCmp0zcdSafRdncLBlQk=";
+        aarch64-linux = "sha256-sdsrUnOnvZYxs9tHSFf1k4sgJ9anp9P4s3Wz4oJY5ZU=";
+      };
+    };
+
+  nativeBuildInputs = [
+    dpkg
+    autoPatchelfHook
+  ];
+
+  buildInputs = [
+    nss
+    nspr
+    alsa-lib
+    openssl
+    webkitgtk_4_0
+    (lib.getLib stdenv.cc.cc)
+  ];
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/bin
+    cp -r opt $out/opt
+    cp -r usr/share $out/share
+    substituteInPlace $out/share/applications/sparkle.desktop \
+      --replace-fail "/opt/Sparkle/sparkle" "sparkle"
+    ln -s $out/opt/Sparkle/sparkle $out/bin/sparkle
+
+    runHook postInstall
+  '';
+
+  preFixup = ''
+    patchelf --add-needed libGL.so.1 \
+      --add-rpath ${
+        lib.makeLibraryPath [
+          libGL
+          udev
+          libayatana-appindicator
+        ]
+      } $out/opt/Sparkle/sparkle
+  '';
+
+  passthru.updateScript = ./update.sh;
+
+  meta = {
+    description = "Another Mihomo GUI";
+    homepage = "https://github.com/xishang0128/sparkle";
+    mainProgram = "sparkle";
+    platforms = [
+      "aarch64-linux"
+      "x86_64-linux"
+    ];
+    license = lib.licenses.gpl3Plus;
+    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
+    maintainers = with lib.maintainers; [ emaryn ];
+  };
+})
--- a/pkgs/by-name/sp/sparkle/update.sh
+++ b/pkgs/by-name/sp/sparkle/update.sh
@ -0,0 +1,17 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p bash nix curl coreutils common-updater-scripts nix-update
+
+currentVersion=$(nix-instantiate --eval -E "with import ./. {}; sparkle.version or (lib.getVersion sparkle)" | tr -d '"')
+nix-update sparkle
+latestVersion=$(nix-instantiate --eval -E "with import ./. {}; sparkle.version or (lib.getVersion sparkle)" | tr -d '"')
+
+echo "latest  version: $latestVersion"
+echo "current version: $currentVersion"
+
+if [[ "$latestVersion" == "$currentVersion" ]]; then
+    echo "package is up-to-date"
+    exit 0
+fi
+
+hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix-instantiate --eval -E "with import ./. {}; sparkle.src.url" --system aarch64-linux | tr -d '"')))
+update-source-version sparkle $latestVersion $hash --system=aarch64-linux --ignore-same-version
--- a/pkgs/by-name/ta/taler-merchant/package.nix
+++ b/pkgs/by-name/ta/taler-merchant/package.nix
@ -11,6 +11,9 @@
  autoreconfHook,
  makeWrapper,
  jq,
+  libgcrypt,
+  texinfo,
+  curl,
 }:

 stdenv.mkDerivation (finalAttrs: {
@ -42,6 +45,8 @@ stdenv.mkDerivation (finalAttrs: {
    pkg-config
    autoreconfHook
    makeWrapper
+    libgcrypt # AM_PATH_LIBGCRYPT
+    texinfo # makeinfo
  ];

  buildInputs = taler-exchange.buildInputs ++ [
@ -51,6 +56,8 @@ stdenv.mkDerivation (finalAttrs: {
    libtool
  ];

+  strictDeps = true;
+
  propagatedBuildInputs = [ gnunet ];

  # From ./bootstrap
@ -62,6 +69,10 @@ stdenv.mkDerivation (finalAttrs: {
    popd
  '';

+  configureFlags = [
+    "ac_cv_path__libcurl_config=${lib.getDev curl}/bin/curl-config"
+  ];
+
  # NOTE: The executables that need database access fail to detect the
  # postgresql library in `$out/lib/taler`, so we need to wrap them.
  postInstall = ''
--- a/pkgs/by-name/ve/vectorcode/package.nix
+++ b/pkgs/by-name/ve/vectorcode/package.nix
@ -9,14 +9,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "vectorcode";
-  version = "0.5.6";
+  version = "0.6.7";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Davidyz";
    repo = "VectorCode";
    tag = version;
-    hash = "sha256-paFUgPf8zTtMli0qh2bXjnmny2bDQxDwWE03yn0rWUY=";
+    hash = "sha256-BDDvALeQSBVld2gEmcnlpf3GDpdEs64nFyE6cNKpeww=";
  };

  build-system = with python3Packages; [
@ -27,7 +27,9 @@ python3Packages.buildPythonApplication rec {
    with python3Packages;
    [
      chromadb
+      colorlog
      httpx
+      json5
      numpy
      pathspec
      psutil
@ -78,6 +80,8 @@ python3Packages.buildPythonApplication rec {
    # Require internet access
    "test_get_embedding_function"
    "test_get_embedding_function_fallback"
+    "test_get_reranker"
+    "test_supported_rerankers_initialization"
  ];

  meta = {
--- a/pkgs/by-name/wh/whatsapp-emoji-font/package.nix
+++ b/pkgs/by-name/wh/whatsapp-emoji-font/package.nix
@ -12,13 +12,13 @@

 stdenvNoCC.mkDerivation rec {
  pname = "whatsapp-emoji-linux";
-  version = "2.25.1.75-1";
+  version = "2.25.9.78-1";

  src = fetchFromGitHub {
    tag = version;
    owner = "dmlls";
    repo = "whatsapp-emoji-linux";
-    hash = "sha256-5k5/plT3bJMrTcJt0TpWZt0oaEJPWT8ldgIhQJay23k=";
+    hash = "sha256-QopJUT6HAgvrRNQw6adHNOSZUoJO1qiFATXsDQOUf7w=";
  };

  makeFlags = [
--- a/pkgs/by-name/wi/windsend/package.nix
+++ b/pkgs/by-name/wi/windsend/package.nix
@ -8,13 +8,13 @@

 flutter329.buildFlutterApplication rec {
  pname = "windsend";
-  version = "1.5.1";
+  version = "1.5.4";

  src = fetchFromGitHub {
    owner = "doraemonkeys";
    repo = "WindSend";
    tag = "v${version}";
-    hash = "sha256-mE2pygb4o9gRUdgX/eVsr6WtZxIadxADg+3dpQgP0Ic=";
+    hash = "sha256-A0cmjllyhKkYsMyjeuuMCax0uVnaDp9OwJPY7peDjPM=";
  };

  pubspecLock = lib.importJSON ./pubspec.lock.json;
@ -22,6 +22,7 @@ flutter329.buildFlutterApplication rec {
  gitHashes = {
    open_filex = "sha256-dKLOmk+C9Rzw0wq18I5hkR2T4VcdmT4coimmgF+GzV8=";
    media_scanner = "sha256-vlHsSmw0/bVDSwB/jwdj/flfcizDjYKHOItOb/jWQGM=";
+    receive_sharing_intent = "sha256-CmE15epEWlnClAPjM73J74EKUJ/TvwUF90VnAPZBWwc=";
  };

  sourceRoot = "${src.name}/flutter/wind_send";
--- a/pkgs/by-name/wi/windsend/pubspec.lock.json
+++ b/pkgs/by-name/wi/windsend/pubspec.lock.json
@ -1,5 +1,25 @@
 {
  "packages": {
+    "_fe_analyzer_shared": {
+      "dependency": "transitive",
+      "description": {
+        "name": "_fe_analyzer_shared",
+        "sha256": "e55636ed79578b9abca5fecf9437947798f5ef7456308b5cb85720b793eac92f",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "82.0.0"
+    },
+    "analyzer": {
+      "dependency": "transitive",
+      "description": {
+        "name": "analyzer",
+        "sha256": "904ae5bb474d32c38fb9482e2d925d5454cda04ddd0e55d2e6826bc72f6ba8c0",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "7.4.5"
+    },
    "args": {
      "dependency": "transitive",
      "description": {
@ -40,6 +60,16 @@
      "source": "hosted",
      "version": "1.4.0"
    },
+    "cli_config": {
+      "dependency": "transitive",
+      "description": {
+        "name": "cli_config",
+        "sha256": "ac20a183a07002b700f0c25e61b7ee46b23c309d76ab7b7640a028f18e4d99ec",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "0.2.0"
+    },
    "clock": {
      "dependency": "transitive",
      "description": {
@ -80,6 +110,16 @@
      "source": "hosted",
      "version": "4.0.8"
    },
+    "coverage": {
+      "dependency": "transitive",
+      "description": {
+        "name": "coverage",
+        "sha256": "802bd084fb82e55df091ec8ad1553a7331b61c08251eef19a508b6f3f3a9858d",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.13.1"
+    },
    "cross_file": {
      "dependency": "transitive",
      "description": {
@ -234,11 +274,11 @@
      "dependency": "direct main",
      "description": {
        "name": "file_picker",
-        "sha256": "16dc141db5a2ccc6520ebb6a2eb5945b1b09e95085c021d9f914f8ded7f1465c",
+        "sha256": "dd51fd20fdc45e073529c102376d54deba3e120603fe711c848ce44575b838e6",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "8.1.4"
+      "version": "10.1.8"
    },
    "fixnum": {
      "dependency": "transitive",
@ -314,6 +354,36 @@
      "source": "hosted",
      "version": "8.2.12"
    },
+    "frontend_server_client": {
+      "dependency": "transitive",
+      "description": {
+        "name": "frontend_server_client",
+        "sha256": "f64a0333a82f30b0cca061bc3d143813a486dc086b574bfb233b7c1372427694",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "4.0.0"
+    },
+    "glob": {
+      "dependency": "transitive",
+      "description": {
+        "name": "glob",
+        "sha256": "c3f1ee72c96f8f78935e18aa8cecced9ab132419e8625dc187e1c2408efc20de",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "2.1.3"
+    },
+    "http_multi_server": {
+      "dependency": "transitive",
+      "description": {
+        "name": "http_multi_server",
+        "sha256": "aa6199f908078bb1c5efb8d8638d4ae191aac11b311132c3ef48ce352fb52ef8",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "3.2.2"
+    },
    "http_parser": {
      "dependency": "transitive",
      "description": {
@ -334,6 +404,16 @@
      "source": "hosted",
      "version": "0.19.0"
    },
+    "io": {
+      "dependency": "transitive",
+      "description": {
+        "name": "io",
+        "sha256": "dfd5a80599cf0165756e3181807ed3e77daf6dd4137caaad72d0b7931597650b",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.0.5"
+    },
    "irondash_engine_context": {
      "dependency": "transitive",
      "description": {
@ -424,6 +504,16 @@
      "source": "hosted",
      "version": "2.5.0"
    },
+    "logging": {
+      "dependency": "transitive",
+      "description": {
+        "name": "logging",
+        "sha256": "c8245ada5f1717ed44271ed1c26b8ce85ca3228fd2ffdb75468ab01979309d61",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.3.0"
+    },
    "matcher": {
      "dependency": "transitive",
      "description": {
@ -479,11 +569,11 @@
      "dependency": "direct main",
      "description": {
        "name": "network_info_plus",
-        "sha256": "08f4166bbb77da9e407edef6322a33f87b18c0ca46483fb25606cb3d2bfcdd2a",
+        "sha256": "f926b2ba86aa0086a0dfbb9e5072089bc213d854135c1712f1d29fc89ba3c877",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "6.1.3"
+      "version": "6.1.4"
    },
    "network_info_plus_platform_interface": {
      "dependency": "transitive",
@ -505,6 +595,16 @@
      "source": "hosted",
      "version": "0.5.0"
    },
+    "node_preamble": {
+      "dependency": "transitive",
+      "description": {
+        "name": "node_preamble",
+        "sha256": "6e7eac89047ab8a8d26cf16127b5ed26de65209847630400f9aefd7cd5c730db",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "2.0.2"
+    },
    "open_filex": {
      "dependency": "direct main",
      "description": {
@ -516,6 +616,16 @@
      "source": "git",
      "version": "4.7.0"
    },
+    "package_config": {
+      "dependency": "transitive",
+      "description": {
+        "name": "package_config",
+        "sha256": "f096c55ebb7deb7e384101542bfba8c52696c1b56fca2eb62827989ef2353bbc",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "2.2.0"
+    },
    "path": {
      "dependency": "direct main",
      "description": {
@ -696,14 +806,35 @@
      "source": "hosted",
      "version": "4.0.0"
    },
-    "receive_sharing_intent": {
-      "dependency": "direct main",
+    "pool": {
+      "dependency": "transitive",
      "description": {
-        "name": "receive_sharing_intent",
-        "sha256": "ec76056e4d258ad708e76d85591d933678625318e411564dcb9059048ca3a593",
+        "name": "pool",
+        "sha256": "20fe868b6314b322ea036ba325e6fc0711a22948856475e2c2b6306e8ab39c2a",
        "url": "https://pub.dev"
      },
      "source": "hosted",
+      "version": "1.5.1"
+    },
+    "pub_semver": {
+      "dependency": "transitive",
+      "description": {
+        "name": "pub_semver",
+        "sha256": "5bfcf68ca79ef689f8990d1160781b4bad40a3bd5e5218ad4076ddb7f4081585",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "2.2.0"
+    },
+    "receive_sharing_intent": {
+      "dependency": "direct main",
+      "description": {
+        "path": ".",
+        "ref": "7880e3e28bcf1ec50c100f1d19b349fc9506768e",
+        "resolved-ref": "7880e3e28bcf1ec50c100f1d19b349fc9506768e",
+        "url": "https://github.com/Strime/receive_sharing_intent"
+      },
+      "source": "git",
      "version": "1.8.1"
    },
    "settings_ui": {
@ -720,21 +851,21 @@
      "dependency": "direct main",
      "description": {
        "name": "share_plus",
-        "sha256": "fce43200aa03ea87b91ce4c3ac79f0cecd52e2a7a56c7a4185023c271fbfa6da",
+        "sha256": "b2961506569e28948d75ec346c28775bb111986bb69dc6a20754a457e3d97fa0",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "10.1.4"
+      "version": "11.0.0"
    },
    "share_plus_platform_interface": {
      "dependency": "transitive",
      "description": {
        "name": "share_plus_platform_interface",
-        "sha256": "cc012a23fc2d479854e6c80150696c4a5f5bb62cb89af4de1c505cf78d0a5d0b",
+        "sha256": "1032d392bc5d2095a77447a805aa3f804d2ae6a4d5eef5e6ebb3bd94c1bc19ef",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "5.0.2"
+      "version": "6.0.0"
    },
    "shared_preferences": {
      "dependency": "direct main",
@ -806,12 +937,72 @@
      "source": "hosted",
      "version": "2.4.1"
    },
+    "shelf": {
+      "dependency": "transitive",
+      "description": {
+        "name": "shelf",
+        "sha256": "e7dd780a7ffb623c57850b33f43309312fc863fb6aa3d276a754bb299839ef12",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.4.2"
+    },
+    "shelf_packages_handler": {
+      "dependency": "transitive",
+      "description": {
+        "name": "shelf_packages_handler",
+        "sha256": "89f967eca29607c933ba9571d838be31d67f53f6e4ee15147d5dc2934fee1b1e",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "3.0.2"
+    },
+    "shelf_static": {
+      "dependency": "transitive",
+      "description": {
+        "name": "shelf_static",
+        "sha256": "c87c3875f91262785dade62d135760c2c69cb217ac759485334c5857ad89f6e3",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.1.3"
+    },
+    "shelf_web_socket": {
+      "dependency": "transitive",
+      "description": {
+        "name": "shelf_web_socket",
+        "sha256": "3632775c8e90d6c9712f883e633716432a27758216dfb61bd86a8321c0580925",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "3.0.0"
+    },
    "sky_engine": {
      "dependency": "transitive",
      "description": "flutter",
      "source": "sdk",
      "version": "0.0.0"
    },
+    "source_map_stack_trace": {
+      "dependency": "transitive",
+      "description": {
+        "name": "source_map_stack_trace",
+        "sha256": "c0713a43e323c3302c2abe2a1cc89aa057a387101ebd280371d6a6c9fa68516b",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "2.1.2"
+    },
+    "source_maps": {
+      "dependency": "transitive",
+      "description": {
+        "name": "source_maps",
+        "sha256": "190222579a448b03896e0ca6eca5998fa810fda630c1d65e2f78b3f638f54812",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "0.10.13"
+    },
    "source_span": {
      "dependency": "transitive",
      "description": {
@ -892,6 +1083,16 @@
      "source": "hosted",
      "version": "1.2.2"
    },
+    "test": {
+      "dependency": "direct dev",
+      "description": {
+        "name": "test",
+        "sha256": "301b213cd241ca982e9ba50266bd3f5bd1ea33f1455554c5abb85d1be0e2d87e",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.25.15"
+    },
    "test_api": {
      "dependency": "transitive",
      "description": {
@ -902,6 +1103,16 @@
      "source": "hosted",
      "version": "0.7.4"
    },
+    "test_core": {
+      "dependency": "transitive",
+      "description": {
+        "name": "test_core",
+        "sha256": "84d17c3486c8dfdbe5e12a50c8ae176d15e2a771b96909a9442b40173649ccaa",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "0.6.8"
+    },
    "typed_data": {
      "dependency": "transitive",
      "description": {
@ -986,11 +1197,11 @@
      "dependency": "transitive",
      "description": {
        "name": "url_launcher_web",
-        "sha256": "3ba963161bd0fe395917ba881d320b9c4f6dd3c4a233da62ab18a5025c85f1e9",
+        "sha256": "4bd2b7b4dc4d4d0b94e5babfffbca8eac1a126c7f3d6ecbc1a11013faa3abba2",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "2.4.0"
+      "version": "2.4.1"
    },
    "url_launcher_windows": {
      "dependency": "transitive",
@ -1032,6 +1243,16 @@
      "source": "hosted",
      "version": "14.3.1"
    },
+    "watcher": {
+      "dependency": "transitive",
+      "description": {
+        "name": "watcher",
+        "sha256": "69da27e49efa56a15f8afe8f4438c4ec02eff0a117df1b22ea4aad194fe1c104",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.1.1"
+    },
    "web": {
      "dependency": "transitive",
      "description": {
@ -1042,15 +1263,45 @@
      "source": "hosted",
      "version": "1.1.1"
    },
+    "web_socket": {
+      "dependency": "transitive",
+      "description": {
+        "name": "web_socket",
+        "sha256": "34d64019aa8e36bf9842ac014bb5d2f5586ca73df5e4d9bf5c936975cae6982c",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.0.1"
+    },
+    "web_socket_channel": {
+      "dependency": "transitive",
+      "description": {
+        "name": "web_socket_channel",
+        "sha256": "d645757fb0f4773d602444000a8131ff5d48c9e47adfe9772652dd1a4f2d45c8",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "3.0.3"
+    },
+    "webkit_inspection_protocol": {
+      "dependency": "transitive",
+      "description": {
+        "name": "webkit_inspection_protocol",
+        "sha256": "87d3f2333bb240704cd3f1c6b5b7acd8a10e7f0bc28c28dcf14e782014f4a572",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "1.2.1"
+    },
    "win32": {
      "dependency": "transitive",
      "description": {
        "name": "win32",
-        "sha256": "dc6ecaa00a7c708e5b4d10ee7bec8c270e9276dfcab1783f57e9962d7884305f",
+        "sha256": "329edf97fdd893e0f1e3b9e88d6a0e627128cc17cc316a8d67fda8f1451178ba",
        "url": "https://pub.dev"
      },
      "source": "hosted",
-      "version": "5.12.0"
+      "version": "5.13.0"
    },
    "win32_registry": {
      "dependency": "transitive",
@ -1081,6 +1332,16 @@
      },
      "source": "hosted",
      "version": "6.5.0"
+    },
+    "yaml": {
+      "dependency": "transitive",
+      "description": {
+        "name": "yaml",
+        "sha256": "b9da305ac7c39faa3f030eccd175340f968459dae4af175130b3fc47e40d76ce",
+        "url": "https://pub.dev"
+      },
+      "source": "hosted",
+      "version": "3.1.3"
    }
  },
  "sdks": {
--- a/pkgs/by-name/wi/windsend/update.sh
+++ b/pkgs/by-name/wi/windsend/update.sh
@ -26,9 +26,10 @@ nix-update --version=$latestVersion windsend

 export HOME="$(mktemp -d)"
 src="$(nix-build --no-link "$NIXPKGS_DIR" -A windsend.src)"
-TMPDIR="$(mktemp -d)"
-cp --recursive --no-preserve=mode "$src"/* $TMPDIR
-cd "$TMPDIR"/flutter/wind_send
+tmp="$(mktemp -d)"
+cp --recursive --no-preserve=mode "$src"/* $tmp
+pushd "$tmp"/flutter/wind_send
 flutter pub get
 yq . pubspec.lock >"$PACKAGE_DIR"/pubspec.lock.json
-rm -rf $TMPDIR
+popd
+rm -rf $tmp
--- a/pkgs/by-name/xe/xen/package.nix
+++ b/pkgs/by-name/xe/xen/package.nix
@ -16,6 +16,34 @@ buildXenPackage.override { inherit python3Packages; } {
      url = "https://xenbits.xenproject.org/xsa/xsa467.patch";
      hash = "sha256-O2IwfRo6BnXAO04xjKmOyrV6J6Q1mAVLHWNCxqIEQGU=";
    })
+    (fetchpatch {
+      url = "https://xenbits.xenproject.org/xsa/xsa469/xsa469-4.19-01.patch";
+      hash = "sha256-YUcp9QI49RM/7WCxYzpzppv+vKtyl/NvLy6rIX5hVMw=";
+    })
+    (fetchpatch {
+      url = "https://xenbits.xenproject.org/xsa/xsa469/xsa469-4.19-02.patch";
+      hash = "sha256-FTtEGAPFYxsun38hLhVMKJ1TFJOsTMK3WWPkO0R/OHg=";
+    })
+    (fetchpatch {
+      url = "https://xenbits.xenproject.org/xsa/xsa469/xsa469-4.19-03.patch";
+      hash = "sha256-UkYMSpUgFvr4GJPXLgQsCyppGkNbeiFMyCZORK5tfmA=";
+    })
+    (fetchpatch {
+      url = "https://xenbits.xenproject.org/xsa/xsa469/xsa469-4.19-04.patch";
+      hash = "sha256-lpiDPSHi+v2VfaWE9kp4+hveZKTzojD1F+RHsOtKE3A=";
+    })
+    (fetchpatch {
+      url = "https://xenbits.xenproject.org/xsa/xsa469/xsa469-4.19-05.patch";
+      hash = "sha256-EKo9a5STX0mTRopoThe3+6gCWat+3XbguLr9QgMheZs=";
+    })
+    (fetchpatch {
+      url = "https://xenbits.xenproject.org/xsa/xsa469/xsa469-4.19-06.patch";
+      hash = "sha256-HU+4apyTZNIFZ9cySOEtNh0JBJDG3LjDLwMvQYq0src=";
+    })
+    (fetchpatch {
+      url = "https://xenbits.xenproject.org/xsa/xsa469/xsa469-4.19-07.patch";
+      hash = "sha256-9S85nkQ9Nn0cMzyRe4KGrFUaLggVxXBeKhoFF4R0y78=";
+    })
  ];
  rev = "ccf400846780289ae779c62ef0c94757ff43bb60";
  hash = "sha256-s0eCBCd6ybl+kLtXCC6E1sk++w7txXn/B/Cg5acQFfY=";
--- a/pkgs/desktops/lxqt/libdbusmenu-lxqt/default.nix
+++ b/pkgs/desktops/lxqt/libdbusmenu-lxqt/default.nix
@ -10,13 +10,13 @@

 stdenv.mkDerivation rec {
  pname = "libdbusmenu-lxqt";
-  version = "0.2.0";
+  version = "0.3.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-OF12t08hOuDsl80n4lXO3AFCf29f01eDpoRcbXmI4+I=";
+    hash = "sha256-PqX8ShSu3CYN9XIRp6IjVmr/eKH+oLNhXvwiudUH660=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/libfm-qt/default.nix
+++ b/pkgs/desktops/lxqt/libfm-qt/default.nix
@ -16,7 +16,7 @@
  qttools,
  wrapQtAppsHook,
  gitUpdater,
-  version ? "2.1.0",
+  version ? "2.2.0",
  qtx11extras ? null,
 }:

@ -31,7 +31,7 @@ stdenv.mkDerivation rec {
    hash =
      {
        "1.4.0" = "sha256-QxPYSA7537K+/dRTxIYyg+Q/kj75rZOdzlUsmSdQcn4=";
-        "2.1.0" = "sha256-yH3lyOpmDWjA3bV6msjw7fShs1HnAFOmkGer2Z9N/Tg=";
+        "2.2.0" = "sha256-xLXHwrcMJ8PObZ2qWVZTf9FREcjUi5qtcCJgNHj391Q=";
      }
      ."${version}";
  };
--- a/pkgs/desktops/lxqt/liblxqt/default.nix
+++ b/pkgs/desktops/lxqt/liblxqt/default.nix
@ -16,13 +16,13 @@

 stdenv.mkDerivation rec {
  pname = "liblxqt";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-90t7jukm2vNfkgZ3326UDMXNzwJ+FIVEF3kNZ2SgNN8=";
+    hash = "sha256-04t6wssTuSKlqSuUTmcDU66NVGikWh7p2irWBngN494=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/libqtxdg/default.nix
+++ b/pkgs/desktops/lxqt/libqtxdg/default.nix
@ -2,14 +2,13 @@
  lib,
  stdenv,
  fetchFromGitHub,
-  fetchpatch,
  cmake,
  qtbase,
  qtsvg,
  lxqt-build-tools,
  wrapQtAppsHook,
  gitUpdater,
-  version ? "4.1.0",
+  version ? "4.2.0",
 }:

 stdenv.mkDerivation rec {
@ -23,20 +22,11 @@ stdenv.mkDerivation rec {
    hash =
      {
        "3.12.0" = "sha256-y+3noaHubZnwUUs8vbMVvZPk+6Fhv37QXUb//reedCU=";
-        "4.1.0" = "sha256-Efn08a8MkR459Ww0WiEb5GXKgQzJwKupIdL2TySpivE=";
+        "4.2.0" = "sha256-TSyVYlWsmB/6gxJo+CjROBQaWsmYZAwkM8BwiWP+XBI=";
      }
      ."${version}";
  };

-  # Fix build with Qt 6.9
-  # FIXME: remove in next release
-  patches = lib.optionals (version == "4.1.0") [
-    (fetchpatch {
-      url = "https://github.com/lxqt/libqtxdg/commit/35ce74f1510a9f41b2aff82fd1eda63014c3fe2b.patch";
-      hash = "sha256-udO3RQkzkcDBCxMNTIsORlDCLsZrxCbi0dXCBRuoQQQ=";
-    })
-  ];
-
  nativeBuildInputs = [
    cmake
    lxqt-build-tools
--- a/pkgs/desktops/lxqt/lximage-qt/default.nix
+++ b/pkgs/desktops/lxqt/lximage-qt/default.nix
@ -21,13 +21,13 @@

 stdenv.mkDerivation rec {
  pname = "lximage-qt";
-  version = "2.1.1";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-Y9lBXEROC4LIl1M7js0TvJBBNyO06qCWpHxvQjcYPhc=";
+    hash = "sha256-4j/5z+kePFXubYXAbIaWYVU+plJv1xEpHHI1IXqbQog=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-about/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-about/default.nix
@ -16,13 +16,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-about";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-BjtU63SD6y4LnjAr8QGMqo/aYkcQ0Y+vg3lAOf97ZY8=";
+    hash = "sha256-StPepm6XWaK1kDAspnBJ4X1/QGqHmSj48RBobJ46Sao=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-admin/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-admin/default.nix
@ -18,13 +18,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-admin";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-7RyPUv/M8mMoRO+SopFuru+bY9ZwnKz2BkiLz1cW/wg=";
+    hash = "sha256-Yne4EWP/bgWXa4XNP8oyUtkOfxBRcT4iuV8CpSq2ooY=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-archiver/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-archiver/default.nix
@ -18,13 +18,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-archiver";
-  version = "1.1.0";
+  version = "1.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = "lxqt-archiver";
    rev = version;
-    hash = "sha256-a3NdU1OZI+BqtvpUhqhwylf5upFJxeg8B+1cPTAdDr4=";
+    hash = "sha256-4xGP/3ft29PFzJ3ty/9wJbv/hqcdTw9U+4xDneKHF8g=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-build-tools/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-build-tools/default.nix
@ -9,7 +9,7 @@
  perl,
  wrapQtAppsHook,
  gitUpdater,
-  version ? "2.1.0",
+  version ? "2.2.0",
 }:

 stdenv.mkDerivation rec {
@ -23,7 +23,7 @@ stdenv.mkDerivation rec {
    hash =
      {
        "0.13.0" = "sha256-4/hVlEdqqqd6CNitCRkIzsS1R941vPJdirIklp4acXA=";
-        "2.1.0" = "sha256-fZ5DbXnYm6oWDZdwiw2DpWFQMYd7VZ4oKkGIzQkaV94=";
+        "2.2.0" = "sha256-q/VkxfC2vGRpFnAGULkjhmJ8JsdpxChROqemCyf0esE=";
      }
      ."${version}";
  };
--- a/pkgs/desktops/lxqt/lxqt-config/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-config/default.nix
@ -28,13 +28,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-config";
-  version = "2.1.1";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-Vzf+Olaxl6tn3ETEQseFIPstjo+pfdzZUgyVFqk6p3c=";
+    hash = "sha256-iyAqdAWcg94a65lPjq412slvSKdP3W62LTyyvYdWipA=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-globalkeys/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-globalkeys/default.nix
@ -16,13 +16,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-globalkeys";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-jQdr3epezQtBoyC2hyMBceiqarruZLasSMYa2gDraCI=";
+    hash = "sha256-xVirPi0UD4lzOA1+Gw7SgUvFRIc1KYFUJtljNA7xAWo=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-menu-data/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-menu-data/default.nix
@ -11,13 +11,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-menu-data";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-Q9VPPGPyMueoFrTTdAMlIR+VnWVXu0J2uXhaOlJPTAs=";
+    hash = "sha256-kFgrR7BSl08REC9SgBvLYFhJ9H++FCDQdqQaoAm5Oyw=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-notificationd/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-notificationd/default.nix
@ -18,13 +18,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-notificationd";
-  version = "2.1.1";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-L2eXab1V2t7+h51wEh0p2Uzdc3ImR4euoiXVVJ8BguA=";
+    hash = "sha256-pMBshwqfG/8tvpwuR3wCQ/N5IT1rXJl+nZfcSqxMjM0=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-openssh-askpass/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-openssh-askpass/default.nix
@ -17,13 +17,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-openssh-askpass";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-oFN4FpTBxOcXtykkkrJvaoxhvwEJKBp+eusrrSBIXIU=";
+    hash = "sha256-ktB8zlrK3ymnwoGSnWNHM6EGcwn4btdlyBQzBLQdqmY=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-panel/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-panel/default.nix
@ -23,7 +23,6 @@
  lxqt-build-tools,
  lxqt-globalkeys,
  lxqt-menu-data,
-  menu-cache,
  pcre,
  qtbase,
  qtsvg,
@ -36,13 +35,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-panel";
-  version = "2.1.4";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-WS+rPiPB/BBmg4yNkpZ2cFJG/1awdjCN0ziWtcESRP4=";
+    hash = "sha256-BMdiSm+FJXeLRGGoCdUpJjFu8JRk0+95LPZJSTFMqrM=";
  };

  nativeBuildInputs = [
@ -72,7 +71,6 @@ stdenv.mkDerivation rec {
    lm_sensors
    lxqt-globalkeys
    lxqt-menu-data
-    menu-cache
    pcre
    qtbase
    qtsvg
--- a/pkgs/desktops/lxqt/lxqt-policykit/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-policykit/default.nix
@ -20,13 +20,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-policykit";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-wj9i09F9If5JZO6W358XcZ/rawt9Oj3QwDvLLRvS2Bc=";
+    hash = "sha256-TVgrr+Qakkk0rr7qwQPQNO7p5Wx6eVW8lK2gJ/HysZY=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-powermanagement/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-powermanagement/default.nix
@ -20,13 +20,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-powermanagement";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-S60m8ixz6HnTZe0MTyvU0pXWWOS88KeXfDcQJ/I1Keo=";
+    hash = "sha256-NVyt9HcGRCLIVJFlkiiZ3OOTzGEfo3boDQlTmWythGk=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-qtplugin/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-qtplugin/default.nix
@ -13,7 +13,7 @@
  qtsvg,
  qttools,
  wrapQtAppsHook,
-  version ? "2.1.0",
+  version ? "2.2.0",
 }:

 stdenv.mkDerivation rec {
@ -27,7 +27,7 @@ stdenv.mkDerivation rec {
    hash =
      {
        "1.4.1" = "sha256-sp/LvQNfodMYQ4kNbBv4PTNfs38XjYLezuxRltZd4kc=";
-        "2.1.0" = "sha256-F171IgAhRXJ9sTt8VVDVO9hrmyHbCElsskdDmFr3HB0=";
+        "2.2.0" = "sha256-qXadz9JBk4TURAWj6ByP/lGV1u0Z6rNJ/VraBh5zY+Q=";
      }
      ."${version}";
  };
--- a/pkgs/desktops/lxqt/lxqt-runner/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-runner/default.nix
@ -9,7 +9,6 @@
  libqtxdg,
  lxqt-build-tools,
  lxqt-globalkeys,
-  menu-cache,
  muparser,
  pcre,
  pkg-config,
@ -23,13 +22,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-runner";
-  version = "2.1.2";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-AJLm6bjlM6cq9PNrM8eyvX4xN6lUxVSzgJs4+p/11ug=";
+    hash = "sha256-lvJuqwBqR/OqDsk2XdjIakxIrnOZjgWrY5DtMUV5XEM=";
  };

  nativeBuildInputs = [
@ -46,7 +45,6 @@ stdenv.mkDerivation rec {
    liblxqt
    libqtxdg
    lxqt-globalkeys
-    menu-cache
    muparser
    pcre
    qtbase
--- a/pkgs/desktops/lxqt/lxqt-session/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-session/default.nix
@ -24,13 +24,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-session";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-t3odaG9znMohROutoEquJ7JYsvPQPjPxOik+WD8WGSA=";
+    hash = "sha256-AwL7X8ygBkVINMCEcyImUrbwmk/T6/fwk0PEEu6iBb8=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-sudo/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-sudo/default.nix
@ -18,13 +18,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-sudo";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-ohB0LsEnDDe3wygRgvP5mFQ2hu1c9xv2RilSdqOQBxA=";
+    hash = "sha256-H2uprArYfiX1KyoWx3RRHkLcA0z9LKGDeghD+085VC4=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-themes/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-themes/default.nix
@ -9,13 +9,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-themes";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-TUBcYQ7mWGVZKHNi4zQh8/ogSuMr20xIAoR+IGYQE0w=";
+    hash = "sha256-oarj+byRfe9xHvtw80kifA2AspXHfigbuDwvi5xqrMQ=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/lxqt-wayland-session/default.nix
+++ b/pkgs/desktops/lxqt/lxqt-wayland-session/default.nix
@ -20,13 +20,13 @@

 stdenv.mkDerivation rec {
  pname = "lxqt-wayland-session";
-  version = "0.1.1";
+  version = "0.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = "lxqt-wayland-session";
    rev = version;
-    hash = "sha256-UMlV8LqUXM2+3ZSLj30FFgC+ZVPmt2W8uE2RrZKqCJE=";
+    hash = "sha256-VjOLw6ByS0se9jy1VY4xhBSs26yvoffFVAc1v0gMyYk=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/pavucontrol-qt/default.nix
+++ b/pkgs/desktops/lxqt/pavucontrol-qt/default.nix
@ -16,13 +16,13 @@

 stdenv.mkDerivation rec {
  pname = "pavucontrol-qt";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-V3VYwDlTRd7q7EJhC4zHcX56AbUYJdfumqXaKlkLEfg=";
+    hash = "sha256-D8x3CqzttlNqQgy6k4hfjJkD/MjAG4eeCn68TQA8NSM=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/pcmanfm-qt/default.nix
+++ b/pkgs/desktops/lxqt/pcmanfm-qt/default.nix
@ -21,13 +21,13 @@

 stdenv.mkDerivation rec {
  pname = "pcmanfm-qt";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-3LdoJLlGoUsv0MdbxIOZrzLaPnZ2hI6m+bLp4GNonng=";
+    hash = "sha256-mYjbOb9c7Qc3qhVYt1EHy50YOVguLnwg0NJg2zBgwOM=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/qps/default.nix
+++ b/pkgs/desktops/lxqt/qps/default.nix
@ -17,13 +17,13 @@

 stdenv.mkDerivation rec {
  pname = "qps";
-  version = "2.10.0";
+  version = "2.11.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-FJw1J4c8oLBo7adl1uhCuS+o/ZhJAOyLmbjUgtdt0ss=";
+    hash = "sha256-Ob9SSN7czCx2I/4fTfwEc1jPEvArpovRFjFnwQqHPUM=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/qterminal/default.nix
+++ b/pkgs/desktops/lxqt/qterminal/default.nix
@ -16,13 +16,13 @@

 stdenv.mkDerivation rec {
  pname = "qterminal";
-  version = "2.1.0";
+  version = "2.2.1";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-Nluw0waf+lqpbajsPv+HYhPD3y7XmgifSu2r7I/J4RI=";
+    hash = "sha256-H1UmPIZG8KiVNPW3GqgnSq39JsZeowiAVwwEKwCkWoM=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/qtermwidget/default.nix
+++ b/pkgs/desktops/lxqt/qtermwidget/default.nix
@ -8,7 +8,7 @@
  lxqt-build-tools,
  wrapQtAppsHook,
  gitUpdater,
-  version ? "2.1.0",
+  version ? "2.2.0",
 }:

 stdenv.mkDerivation rec {
@ -22,7 +22,7 @@ stdenv.mkDerivation rec {
    hash =
      {
        "1.4.0" = "sha256-wYUOqAiBjnupX1ITbFMw7sAk42V37yDz9SrjVhE4FgU=";
-        "2.1.0" = "sha256-I8fVggCi9qN+Jpqb/EC5/DfwuhGF55trbPESZQWPZ5M=";
+        "2.2.0" = "sha256-tzgHNGB063rgFB15lHTKQplNhwJZtrRprUhMm5H62AA=";
      }
      ."${version}";
  };
--- a/pkgs/desktops/lxqt/qtxdg-tools/default.nix
+++ b/pkgs/desktops/lxqt/qtxdg-tools/default.nix
@ -13,13 +13,13 @@

 stdenv.mkDerivation rec {
  pname = "qtxdg-tools";
-  version = "4.1.0";
+  version = "4.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-I8HV7QwyyRssWB6AjC1GswjlXoYwPJHowE74zgqghX4=";
+    hash = "sha256-hVX1UfPWa1KHMhjazSopAc1/Kk3tnUQzwtG4P7K32eE=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/screengrab/default.nix
+++ b/pkgs/desktops/lxqt/screengrab/default.nix
@ -19,13 +19,13 @@

 stdenv.mkDerivation rec {
  pname = "screengrab";
-  version = "2.9.0";
+  version = "2.10.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-V5ulRkckeSX2EsYmhmA9phVssDtix31M5oZXkOgF660=";
+    hash = "sha256-cTDGVNnnjgIiCS/KzEVmTagJvNwDKAP2UrWKwdn3WmE=";
  };

  nativeBuildInputs = [
--- a/pkgs/desktops/lxqt/xdg-desktop-portal-lxqt/default.nix
+++ b/pkgs/desktops/lxqt/xdg-desktop-portal-lxqt/default.nix
@ -16,13 +16,13 @@

 stdenv.mkDerivation rec {
  pname = "xdg-desktop-portal-lxqt";
-  version = "1.1.0";
+  version = "1.2.0";

  src = fetchFromGitHub {
    owner = "lxqt";
    repo = pname;
    rev = version;
-    hash = "sha256-uII6elLoREc/AO6NSe9QsT+jYARd2hgKSa84NCDza10=";
+    hash = "sha256-y3VqDuFagKcG8O5m5qjRGtlUZXfIXV0tclvZLChhWkg=";
  };

  nativeBuildInputs = [
--- a/pkgs/development/compilers/flutter/default.nix
+++ b/pkgs/development/compilers/flutter/default.nix
@ -87,6 +87,7 @@ let
                chmod +w $out/bin
                mkdir $out/bin/cache
                cp $out/bin/internal/engine.version $out/bin/cache/engine.stamp
+                touch $out/bin/cache/engine.realm
              '')
            else
              source
--- a/pkgs/development/compilers/flutter/versions/3_29/patches/gradle-flutter-tools-wrapper.patch
+++ b/pkgs/development/compilers/flutter/versions/3_29/patches/gradle-flutter-tools-wrapper.patch
@ -42,3 +42,14 @@ index 0000000000..b2485c94b4
 +"""
 +
 +includeBuild(dir)
+--- a/packages/flutter_tools/gradle/build.gradle.kts
+++ b/packages/flutter_tools/gradle/build.gradle.kts
+@@ -4,6 +4,8 @@
+ 
+ import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+ 
+gradle.startParameter.projectCacheDir = layout.buildDirectory.dir("cache").get().asFile
+
+ plugins {
+     `java-gradle-plugin`
+     groovy
--- a/pkgs/development/compilers/flutter/versions/3_32/data.json
+++ b/pkgs/development/compilers/flutter/versions/3_32/data.json
@ -1,73 +1,73 @@
 {
-  "version": "3.32.0-0.3.pre",
-  "engineVersion": "453dd7174cc6555e3e9eb5f006c86e6ec221a0d2",
+  "version": "3.32.0-0.4.pre",
+  "engineVersion": "38e19d01dcac654bbb941b771cc06efd4ed4a93f",
  "engineSwiftShaderHash": "sha256-ATVcuxqPHqHOWYyO7DoX9LdgUiO3INUi7m9Mc6ccc1M=",
  "engineSwiftShaderRev": "d040a5bab638bf7c226235c95787ba6288bb6416",
  "channel": "beta",
  "engineHashes": {
    "aarch64-linux": {
-      "aarch64-linux": "sha256-ql8yUGCPMhFI2+pfVtTZFXpb5WDKq8jAzhr0X6LXE7A=",
-      "x86_64-linux": "sha256-ql8yUGCPMhFI2+pfVtTZFXpb5WDKq8jAzhr0X6LXE7A="
+      "aarch64-linux": "sha256-qAibCHpb582058h/62f3/EnWrKDMrci0dUrEc2BjE6Q=",
+      "x86_64-linux": "sha256-qAibCHpb582058h/62f3/EnWrKDMrci0dUrEc2BjE6Q="
    },
    "x86_64-linux": {
-      "aarch64-linux": "sha256-JWv1aHPOcw2qBN0Jjn6kIMCF8hZYlh6ZbGLVa0GP5NE=",
-      "x86_64-linux": "sha256-JWv1aHPOcw2qBN0Jjn6kIMCF8hZYlh6ZbGLVa0GP5NE="
+      "aarch64-linux": "sha256-hekNsaCiB7cKuD9+6coKs556KfNnkcPtuOIYI5lC1NA=",
+      "x86_64-linux": "sha256-hekNsaCiB7cKuD9+6coKs556KfNnkcPtuOIYI5lC1NA="
    }
  },
-  "dartVersion": "3.8.0-278.2.beta",
+  "dartVersion": "3.8.0-278.4.beta",
  "dartHash": {
-    "x86_64-linux": "sha256-ux89ySr218exFOhscGhumXC1Eizdk6hvpWwxPTJDAFo=",
-    "aarch64-linux": "sha256-Ggc7HOytWwqimOKFUu4+CKtz0L4F09/fXY5BkeS/HAw=",
-    "x86_64-darwin": "sha256-etOXUGIDL4n7PmuH+g74ByXuuWjJ8JnT4iwGm4rPXYQ=",
-    "aarch64-darwin": "sha256-+7Eewv0x+V6gDqyfj5/z50whBU8NrvdidOWPPeaEAwE="
+    "x86_64-linux": "sha256-jyLGethyv9KGGV9IjlXnSno6oJTwUFpR8wsgVbT+UTY=",
+    "aarch64-linux": "sha256-NEYfdqLA5+Po9fI0YfAbsXPMgaEkhkDfm2XHOROU4MM=",
+    "x86_64-darwin": "sha256-09AvWYmW2LHaUe2hTv/EVGwjY6GTCV7reiqUVQKDkrM=",
+    "aarch64-darwin": "sha256-IwJJGFW+hdt7Yb86DdGxWjiEp0XJnLJUzqJvKrN9iTs="
  },
-  "flutterHash": "sha256-FqJR0PQYks2njzMgZCQSQqy2Goqp6QeN8Ej4a4EHVes=",
+  "flutterHash": "sha256-+UQNtN0BrSxEwGdnb9f63Bg46q+zKwqStYBKgIB/hic=",
  "artifactHashes": {
    "android": {
-      "aarch64-darwin": "sha256-A5AUxqKHwUYm9Mf6cqTAazCxGP+JwGpIfeMZ7vIqQUs=",
-      "aarch64-linux": "sha256-WQ7gM4i2UuaYaciT67HwYL7McBGXLYdZn748Mkghbxw=",
-      "x86_64-darwin": "sha256-A5AUxqKHwUYm9Mf6cqTAazCxGP+JwGpIfeMZ7vIqQUs=",
-      "x86_64-linux": "sha256-WQ7gM4i2UuaYaciT67HwYL7McBGXLYdZn748Mkghbxw="
+      "aarch64-darwin": "sha256-bknwCOFzj6Qj63I4VwTvuedmvLjdvCDdSpf9fFiRha0=",
+      "aarch64-linux": "sha256-tHl0+NBCDcn/JJ+XJ8Ow5yFHK3UiUIzpjCuOddgVEiE=",
+      "x86_64-darwin": "sha256-bknwCOFzj6Qj63I4VwTvuedmvLjdvCDdSpf9fFiRha0=",
+      "x86_64-linux": "sha256-tHl0+NBCDcn/JJ+XJ8Ow5yFHK3UiUIzpjCuOddgVEiE="
    },
    "fuchsia": {
-      "aarch64-darwin": "sha256-n+aperOaIbS+KxPtwBslcZT2QXTchX6TQiqM++RbCUk=",
-      "aarch64-linux": "sha256-n+aperOaIbS+KxPtwBslcZT2QXTchX6TQiqM++RbCUk=",
-      "x86_64-darwin": "sha256-n+aperOaIbS+KxPtwBslcZT2QXTchX6TQiqM++RbCUk=",
-      "x86_64-linux": "sha256-n+aperOaIbS+KxPtwBslcZT2QXTchX6TQiqM++RbCUk="
+      "aarch64-darwin": "sha256-JkxTpBlkmlq+ENnUBqRTGITVjHsicPN1p99XlGhdCPc=",
+      "aarch64-linux": "sha256-JkxTpBlkmlq+ENnUBqRTGITVjHsicPN1p99XlGhdCPc=",
+      "x86_64-darwin": "sha256-JkxTpBlkmlq+ENnUBqRTGITVjHsicPN1p99XlGhdCPc=",
+      "x86_64-linux": "sha256-JkxTpBlkmlq+ENnUBqRTGITVjHsicPN1p99XlGhdCPc="
    },
    "ios": {
-      "aarch64-darwin": "sha256-MS1rqPayx4njEHm9rNjphcKwrNv1PVgL4rkgjOj42xY=",
-      "aarch64-linux": "sha256-MS1rqPayx4njEHm9rNjphcKwrNv1PVgL4rkgjOj42xY=",
-      "x86_64-darwin": "sha256-MS1rqPayx4njEHm9rNjphcKwrNv1PVgL4rkgjOj42xY=",
-      "x86_64-linux": "sha256-MS1rqPayx4njEHm9rNjphcKwrNv1PVgL4rkgjOj42xY="
+      "aarch64-darwin": "sha256-PlFE5eoLdJOsnWR5QfENrGR0WQ0nP7ZkeBMbjpD12GU=",
+      "aarch64-linux": "sha256-PlFE5eoLdJOsnWR5QfENrGR0WQ0nP7ZkeBMbjpD12GU=",
+      "x86_64-darwin": "sha256-PlFE5eoLdJOsnWR5QfENrGR0WQ0nP7ZkeBMbjpD12GU=",
+      "x86_64-linux": "sha256-PlFE5eoLdJOsnWR5QfENrGR0WQ0nP7ZkeBMbjpD12GU="
    },
    "linux": {
-      "aarch64-darwin": "sha256-Uo+NABCVVTI2aAlhoWJ4N9M+wXUtATA0bjKOhK3df84=",
-      "aarch64-linux": "sha256-Uo+NABCVVTI2aAlhoWJ4N9M+wXUtATA0bjKOhK3df84=",
-      "x86_64-darwin": "sha256-LsBWcZtzxbULYSqsUAik3DMNX8BON88udrIownJVnDo=",
-      "x86_64-linux": "sha256-LsBWcZtzxbULYSqsUAik3DMNX8BON88udrIownJVnDo="
+      "aarch64-darwin": "sha256-GLG6kNllEwbdsF1pJ5MPZ14Pqpw2nCkadthECfk6FD8=",
+      "aarch64-linux": "sha256-GLG6kNllEwbdsF1pJ5MPZ14Pqpw2nCkadthECfk6FD8=",
+      "x86_64-darwin": "sha256-aq/yB8vH9lQwv2sbVg0PlZBuLOUTeO0ptuEqBJuUUvU=",
+      "x86_64-linux": "sha256-aq/yB8vH9lQwv2sbVg0PlZBuLOUTeO0ptuEqBJuUUvU="
    },
    "macos": {
-      "aarch64-darwin": "sha256-He/H1CfAVV2+HX2z0p9aetEyJV1lCBmsDjATtdEkSMs=",
-      "aarch64-linux": "sha256-He/H1CfAVV2+HX2z0p9aetEyJV1lCBmsDjATtdEkSMs=",
-      "x86_64-darwin": "sha256-He/H1CfAVV2+HX2z0p9aetEyJV1lCBmsDjATtdEkSMs=",
-      "x86_64-linux": "sha256-He/H1CfAVV2+HX2z0p9aetEyJV1lCBmsDjATtdEkSMs="
+      "aarch64-darwin": "sha256-XMtNe03SXtmBc9i588N7BTRg/xqLCohEjovDXHC1hpI=",
+      "aarch64-linux": "sha256-XMtNe03SXtmBc9i588N7BTRg/xqLCohEjovDXHC1hpI=",
+      "x86_64-darwin": "sha256-XMtNe03SXtmBc9i588N7BTRg/xqLCohEjovDXHC1hpI=",
+      "x86_64-linux": "sha256-XMtNe03SXtmBc9i588N7BTRg/xqLCohEjovDXHC1hpI="
    },
    "universal": {
-      "aarch64-darwin": "sha256-dIpU21J5zVQCQJWRINXleC7b480IHY5/8KZzBCi9TVc=",
-      "aarch64-linux": "sha256-/O/eAYa6KZwXG/w3sN2Egla+xBMqJ8hFAQktQjcVHxo=",
-      "x86_64-darwin": "sha256-9+I7GjB2ZX6gZsmxij1XB+iA0VYjoKJt4NFK22ooYes=",
-      "x86_64-linux": "sha256-ApqDXK7BVUDJY612PNn2SqX8fvHESYGv5pl0814+uzs="
+      "aarch64-darwin": "sha256-EocA/pXkEw7fe0fdDkC/WDk5JAVlwTJybNAQDw0/wO4=",
+      "aarch64-linux": "sha256-yIwNmd0DVsLsEUH1+W4AeJXf9l/WIC8HLbHooIZdqk0=",
+      "x86_64-darwin": "sha256-5Y5gRLoCzTYuP4JXf9APKbHXl+khuzleQIxNiWyVjbM=",
+      "x86_64-linux": "sha256-jqe3Z4caAe890CeJST9pAjgunGJsqnycGFqNvn8XNAI="
    },
    "web": {
-      "aarch64-darwin": "sha256-1VNmZdw56u0zjVl1JYom2kk6OLdxSAUEQZJKWyOieOU=",
-      "aarch64-linux": "sha256-1VNmZdw56u0zjVl1JYom2kk6OLdxSAUEQZJKWyOieOU=",
-      "x86_64-darwin": "sha256-1VNmZdw56u0zjVl1JYom2kk6OLdxSAUEQZJKWyOieOU=",
-      "x86_64-linux": "sha256-1VNmZdw56u0zjVl1JYom2kk6OLdxSAUEQZJKWyOieOU="
+      "aarch64-darwin": "sha256-CBW+e9/dI+3Osu6AyiUrMej9/viz26nh490uHP7l9JA=",
+      "aarch64-linux": "sha256-CBW+e9/dI+3Osu6AyiUrMej9/viz26nh490uHP7l9JA=",
+      "x86_64-darwin": "sha256-CBW+e9/dI+3Osu6AyiUrMej9/viz26nh490uHP7l9JA=",
+      "x86_64-linux": "sha256-CBW+e9/dI+3Osu6AyiUrMej9/viz26nh490uHP7l9JA="
    },
    "windows": {
-      "x86_64-darwin": "sha256-nSIm4HAFn+K7CPOVtD2DTGmWfXM1t2lD5GqXa3INTQQ=",
-      "x86_64-linux": "sha256-nSIm4HAFn+K7CPOVtD2DTGmWfXM1t2lD5GqXa3INTQQ="
+      "x86_64-darwin": "sha256-VUa58cPGlNstQS1QIkC8vhtdA7a/qPC9FMtFM32G2xg=",
+      "x86_64-linux": "sha256-VUa58cPGlNstQS1QIkC8vhtdA7a/qPC9FMtFM32G2xg="
    }
  },
  "pubspecLock": {
--- a/pkgs/development/compilers/flutter/versions/3_32/patches/gradle-flutter-tools-wrapper.patch
+++ b/pkgs/development/compilers/flutter/versions/3_32/patches/gradle-flutter-tools-wrapper.patch
@ -42,3 +42,14 @@ index 0000000000..b2485c94b4
 +"""
 +
 +includeBuild(dir)
+--- a/packages/flutter_tools/gradle/build.gradle.kts
+++ b/packages/flutter_tools/gradle/build.gradle.kts
+@@ -4,6 +4,8 @@
+ 
+ import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+ 
+gradle.startParameter.projectCacheDir = layout.buildDirectory.dir("cache").get().asFile
+
+ plugins {
+     `java-gradle-plugin`
+     groovy
--- a/pkgs/development/coq-modules/HoTT/default.nix
+++ b/pkgs/development/coq-modules/HoTT/default.nix
@ -14,7 +14,7 @@ mkCoqDerivation {
    with lib.versions;
    lib.switch coq.coq-version [
      {
-        case = range "8.14" "8.20";
+        case = range "8.14" "9.0";
        out = coq.coq-version;
      }
    ] null;
@ -26,6 +26,7 @@ mkCoqDerivation {
  release."8.18".sha256 = "sha256-URoUoQOsG0432wg9i6pTRomWQZ+ewutq2+V29TBrVzc=";
  release."8.19".sha256 = "sha256-igG3mhR6uPXV+SCtPH9PBw/eAtTFFry6HPT5ypWj3tQ=";
  release."8.20".sha256 = "sha256-XHAvomi0of11j4x5gpTgD5Mw53eF1FpnCyBvdbV3g6I=";
+  release."9.0".sha256 = "sha256-etdLH1qDyDc+ZM7K/65iib0MRlLhsnVmzWBCULUDD50=";

  # versions of HoTT for Coq 8.17 and onwards will use dune
  # opam-name = if lib.versions.isLe "8.17" coq.coq-version then "coq-hott" else null;
--- a/pkgs/development/ocaml-modules/junit/alcotest.nix
+++ b/pkgs/development/ocaml-modules/junit/alcotest.nix
@ -1,19 +1,20 @@
 {
  buildDunePackage,
+  lib,
+  ocaml,
  junit,
  alcotest,
 }:

-buildDunePackage ({
+buildDunePackage {
  pname = "junit_alcotest";

  inherit (junit) src version meta;
-  duneVersion = "3";

  propagatedBuildInputs = [
    junit
    alcotest
  ];

-  doCheck = false; # 2 tests fail: 1) "Test with unexpected exception"; 2) "with wrong result";
-})
+  doCheck = lib.versionAtLeast ocaml.version "4.12";
+}
--- a/pkgs/development/ocaml-modules/junit/default.nix
+++ b/pkgs/development/ocaml-modules/junit/default.nix
@ -8,11 +8,11 @@

 buildDunePackage (rec {
  pname = "junit";
-  version = "2.0.2";
+  version = "2.3.0";

  src = fetchurl {
    url = "https://github.com/Khady/ocaml-junit/releases/download/${version}/junit-${version}.tbz";
-    sha256 = "00bbx5j8vsy9fqbc04xa3lsalaxicirmbczr65bllfk1afv43agx";
+    hash = "sha256-j+4lfuQEWq8z8ik/zfA5phWqv8km+tGEzqG/63cbhTM=";
  };

  propagatedBuildInputs = [
--- a/pkgs/development/ocaml-modules/junit/ounit.nix
+++ b/pkgs/development/ocaml-modules/junit/ounit.nix
@ -1,18 +1,17 @@
 {
  buildDunePackage,
  junit,
-  ounit,
+  ounit2,
 }:

 buildDunePackage ({
  pname = "junit_ounit";

  inherit (junit) src version meta;
-  duneVersion = "3";

  propagatedBuildInputs = [
    junit
-    ounit
+    ounit2
  ];

  doCheck = true;
--- a/pkgs/development/python-modules/orderly-set/default.nix
+++ b/pkgs/development/python-modules/orderly-set/default.nix
@ -12,14 +12,14 @@

 buildPythonPackage rec {
  pname = "orderly-set";
-  version = "5.3.2";
+  version = "5.4.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "seperman";
    repo = "orderly-set";
    tag = version;
-    hash = "sha256-W42p0wJqomJdS47n3MP/BbxZmlYNLLAMnfQ/hvKn+60=";
+    hash = "sha256-0B8qnXU6oET1J933uTVDf2XIHwNzecxQ3FiP7EMnxQc=";
  };

  build-system = [
--- a/pkgs/development/python-modules/rbtools/default.nix
+++ b/pkgs/development/python-modules/rbtools/default.nix
@ -12,14 +12,14 @@

 buildPythonPackage rec {
  pname = "rbtools";
-  version = "1.0.2";
+  version = "5.2.1";
  format = "setuptools";

  disabled = !isPy3k;

  src = fetchurl {
    url = "https://downloads.reviewboard.org/releases/RBTools/${lib.versions.majorMinor version}/RBTools-${version}.tar.gz";
-    sha256 = "577c2f8bbf88f77bda84ee95af0310b59111c156f48a5aab56ca481e2f77eaf4";
+    sha256 = "f2863515ef6ff1cfcd3905d5f409ab8c4d12878b364d6f805ba848dcaecb97f2";
  };

  propagatedBuildInputs = [
--- a/pkgs/development/python-modules/rembg/default.nix
+++ b/pkgs/development/python-modules/rembg/default.nix
@ -33,14 +33,14 @@

 buildPythonPackage rec {
  pname = "rembg";
-  version = "2.0.65";
+  version = "2.0.66";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "danielgatis";
    repo = "rembg";
    tag = "v${version}";
-    hash = "sha256-o6M3DSW1GL3xvEx4lsE325J3XcmRrhhPszS5MkaynsE=";
+    hash = "sha256-MTwi9Cy9JWcI0CgUKfnPiA3MFBl/Ie0rYQOm0jqgyS4=";
  };

  build-system = [
@ -90,7 +90,7 @@ buildPythonPackage rec {
  meta = {
    description = "Tool to remove background from images";
    homepage = "https://github.com/danielgatis/rembg";
-    changelog = "https://github.com/danielgatis/rembg/releases/tag/v${version}";
+    changelog = "https://github.com/danielgatis/rembg/releases/tag/${src.tag}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ defelo ];
    mainProgram = "rembg";
--- a/pkgs/development/tools/pnpm/default.nix
+++ b/pkgs/development/tools/pnpm/default.nix
@ -16,8 +16,8 @@ let
      hash = "sha256-z4anrXZEBjldQoam0J1zBxFyCsxtk+nc6ax6xNxKKKc=";
    };
    "10" = {
-      version = "10.10.0";
-      hash = "sha256-+g9ROqgZF2TStrQyQgeIwnDwe0+ZkJm2W7IBDuxwKjA=";
+      version = "10.11.0";
+      hash = "sha256-pp6csHfaQZ1H0Y8d1S4gckWynKxuB2rO2+uL47Gme9c=";
    };
  };

--- a/pkgs/servers/varnish/default.nix
+++ b/pkgs/servers/varnish/default.nix
@ -91,17 +91,12 @@ in
 {
  # EOL (LTS) TBA
  varnish60 = common {
-    version = "6.0.13";
-    hash = "sha256-DcpilfnGnUenIIWYxBU4XFkMZoY+vUK/6wijZ7eIqbo=";
-  };
-  # EOL 2025-09-15
-  varnish76 = common {
-    version = "7.6.2";
-    hash = "sha256-OFxhDsxj3P61PXb0fMRl6J6+J9osCSJvmGHE+o6dLJo=";
+    version = "6.0.14";
+    hash = "sha256-tZlBf3ppntxxYSufEJ86ot6ujvnbfIyZOu9B3kDJ72k=";
  };
  # EOL 2026-03-15
  varnish77 = common {
-    version = "7.7.0";
-    hash = "sha256-aZSPIVEfgc548JqXFdmodQ6BEWGb1gVaPIYTFaIQtOQ=";
+    version = "7.7.1";
+    hash = "sha256-TAbFyZaApCm3KTT5/VE5Y/fhuoVTszyn7BLIWlwrdRo=";
  };
 }
--- a/pkgs/servers/varnish/modules.nix
+++ b/pkgs/servers/varnish/modules.nix
@ -55,10 +55,6 @@ in
    version = "0.15.1";
    hash = "sha256-Et/iWOk2FWJBDOpKjNXm4Nh5i1SU4zVPaID7kh+Uj9M=";
  };
-  modules25 = common {
-    version = "0.25.0";
-    hash = "sha256-m/7moizVyvoP8xnpircAFVUqCmCfTGkgVyRc6zkdVsk=";
-  };
  modules26 = common {
    version = "0.26.0";
    hash = "sha256-xKMOkqm6/GoBve0AhPqyVMQv/oh5Rtj6uCeg/yId7BU=";
--- a/pkgs/servers/varnish/packages.nix
+++ b/pkgs/servers/varnish/packages.nix
@ -2,7 +2,6 @@
  callPackages,
  callPackage,
  varnish60,
-  varnish76,
  varnish77,
 }:
 {
@ -20,10 +19,6 @@
      sha256 = "1n94slrm6vn3hpymfkla03gw9603jajclg84bjhwb8kxsk3rxpmk";
    };
  };
-  varnish76Packages = rec {
-    varnish = varnish76;
-    modules = (callPackages ./modules.nix { inherit varnish; }).modules25;
-  };
  varnish77Packages = rec {
    varnish = varnish77;
    modules = (callPackages ./modules.nix { inherit varnish; }).modules26;
--- a/pkgs/servers/web-apps/netbox/config.patch
+++ b/pkgs/servers/web-apps/netbox/config.patch
@ -1,50 +0,0 @@
-diff --git a/netbox/netbox/settings.py b/netbox/netbox/settings.py
-index 2de06dd10..00406af48 100644
--- a/netbox/netbox/settings.py
-+++ b/netbox/netbox/settings.py
-@@ -236,6 +236,7 @@ TASKS_REDIS_DATABASE = TASKS_REDIS.get('DATABASE', 0)
- TASKS_REDIS_SSL = TASKS_REDIS.get('SSL', False)
- TASKS_REDIS_SKIP_TLS_VERIFY = TASKS_REDIS.get('INSECURE_SKIP_TLS_VERIFY', False)
- TASKS_REDIS_CA_CERT_PATH = TASKS_REDIS.get('CA_CERT_PATH', False)
-+TASKS_REDIS_URL = TASKS_REDIS.get('URL')
- 
- # Caching
- if 'caching' not in REDIS:
-@@ -253,11 +254,12 @@ CACHING_REDIS_SENTINEL_SERVICE = REDIS['caching'].get('SENTINEL_SERVICE', 'defau
- CACHING_REDIS_PROTO = 'rediss' if REDIS['caching'].get('SSL', False) else 'redis'
- CACHING_REDIS_SKIP_TLS_VERIFY = REDIS['caching'].get('INSECURE_SKIP_TLS_VERIFY', False)
- CACHING_REDIS_CA_CERT_PATH = REDIS['caching'].get('CA_CERT_PATH', False)
-+CACHING_REDIS_URL = REDIS['caching'].get('URL', f'{CACHING_REDIS_PROTO}://{CACHING_REDIS_HOST}:{CACHING_REDIS_PORT}/{CACHING_REDIS_DATABASE}')
- 
- CACHES = {
-     'default': {
-         'BACKEND': 'django_redis.cache.RedisCache',
-        'LOCATION': f'{CACHING_REDIS_PROTO}://{CACHING_REDIS_USERNAME_HOST}:{CACHING_REDIS_PORT}/{CACHING_REDIS_DATABASE}',
-+        'LOCATION': CACHING_REDIS_URL,
-         'OPTIONS': {
-             'CLIENT_CLASS': 'django_redis.client.DefaultClient',
-             'PASSWORD': CACHING_REDIS_PASSWORD,
-@@ -410,7 +412,7 @@ USE_X_FORWARDED_HOST = True
- X_FRAME_OPTIONS = 'SAMEORIGIN'
- 
- # Static files (CSS, JavaScript, Images)
-STATIC_ROOT = BASE_DIR + '/static'
-+STATIC_ROOT = getattr(configuration, 'STATIC_ROOT', os.path.join(BASE_DIR, 'static')).rstrip('/')
- STATIC_URL = f'/{BASE_PATH}static/'
- STATICFILES_DIRS = (
-     os.path.join(BASE_DIR, 'project-static', 'dist'),
-@@ -640,6 +642,14 @@ if TASKS_REDIS_USING_SENTINEL:
-             'socket_connect_timeout': TASKS_REDIS_SENTINEL_TIMEOUT
-         },
-     }
-+elif TASKS_REDIS_URL:
-+    RQ_PARAMS = {
-+        'URL': TASKS_REDIS_URL,
-+        'PASSWORD': TASKS_REDIS_PASSWORD,
-+        'SSL': TASKS_REDIS_SSL,
-+        'SSL_CERT_REQS': None if TASKS_REDIS_SKIP_TLS_VERIFY else 'required',
-+        'DEFAULT_TIMEOUT': RQ_DEFAULT_TIMEOUT,
-+    }
- else:
-     RQ_PARAMS = {
-         'HOST': TASKS_REDIS_HOST,
--- a/pkgs/servers/web-apps/netbox/default.nix
+++ b/pkgs/servers/web-apps/netbox/default.nix
@ -1,25 +0,0 @@
-{
-  lib,
-  nixosTests,
-  callPackage,
-}:
-let
-  generic = import ./generic.nix;
-in
-{
-  netbox_3_7 = callPackage generic {
-    version = "3.7.8";
-    hash = "sha256-61pJbMWXNFnvWI0z9yWvsutdCAP4VydeceANNw0nKsk=";
-    extraPatches = [
-      # Allow setting the STATIC_ROOT from within the configuration and setting a custom redis URL
-      ./config.patch
-    ];
-    tests.netbox = nixosTests.netbox_3_7;
-
-    maintainers = with lib.maintainers; [
-      minijackson
-      raitobezarius
-    ];
-    eol = true;
-  };
-}
--- a/pkgs/servers/web-apps/netbox/generic.nix
+++ b/pkgs/servers/web-apps/netbox/generic.nix
@ -1,119 +0,0 @@
-{
-  lib,
-  fetchFromGitHub,
-  python3,
-  version,
-  hash,
-  plugins ? ps: [ ],
-  extraPatches ? [ ],
-  tests ? { },
-  maintainers ? [ ],
-  eol ? false,
-}:
-let
-  extraBuildInputs = plugins python3.pkgs;
-in
-python3.pkgs.buildPythonApplication rec {
-  pname = "netbox";
-  inherit version;
-
-  format = "other";
-
-  src = fetchFromGitHub {
-    owner = "netbox-community";
-    repo = pname;
-    rev = "refs/tags/v${version}";
-    inherit hash;
-  };
-
-  patches = extraPatches;
-
-  propagatedBuildInputs =
-    with python3.pkgs;
-    [
-      bleach
-      boto3
-      django_4
-      django-cors-headers
-      django-debug-toolbar
-      django-filter
-      django-graphiql-debug-toolbar
-      django-mptt
-      django-pglocks
-      django-prometheus
-      django-redis
-      django-rq
-      django-tables2
-      django-taggit
-      django-timezone-field
-      djangorestframework
-      drf-spectacular
-      drf-spectacular-sidecar
-      drf-yasg
-      dulwich
-      swagger-spec-validator # from drf-yasg[validation]
-      feedparser
-      graphene-django
-      jinja2
-      markdown
-      markdown-include
-      netaddr
-      pillow
-      psycopg2
-      pyyaml
-      requests
-      sentry-sdk
-      social-auth-core
-      social-auth-app-django
-      svgwrite
-      tablib
-      jsonschema
-    ]
-    ++ extraBuildInputs;
-
-  buildInputs = with python3.pkgs; [
-    mkdocs-material
-    mkdocs-material-extensions
-    mkdocstrings
-    mkdocstrings-python
-  ];
-
-  nativeBuildInputs = [
-    python3.pkgs.mkdocs
-  ];
-
-  postBuild = ''
-    PYTHONPATH=$PYTHONPATH:netbox/
-    python -m mkdocs build
-  '';
-
-  installPhase = ''
-    mkdir -p $out/opt/netbox
-    cp -r . $out/opt/netbox
-    chmod +x $out/opt/netbox/netbox/manage.py
-    makeWrapper $out/opt/netbox/netbox/manage.py $out/bin/netbox \
-      --prefix PYTHONPATH : "$PYTHONPATH"
-  '';
-
-  passthru = {
-    python = python3;
-    # PYTHONPATH of all dependencies used by the package
-    pythonPath = python3.pkgs.makePythonPath propagatedBuildInputs;
-    gunicorn = python3.pkgs.gunicorn;
-    inherit tests;
-  };
-
-  meta = {
-    homepage = "https://github.com/netbox-community/netbox";
-    description = "IP address management (IPAM) and data center infrastructure management (DCIM) tool";
-    mainProgram = "netbox";
-    license = lib.licenses.asl20;
-    knownVulnerabilities = (
-      lib.optional eol "Netbox version ${version} is EOL; please upgrade by following the current release notes instructions."
-    );
-    # Warning:
-    # Notice the missing `lib` in the inherit: it is using this function argument rather than a `with lib;` argument.
-    # If you replace this by `with lib;`, pay attention it does not inherit all maintainers in nixpkgs.
-    inherit maintainers;
-  };
-}
--- a/Show more
+++ b/Show more