Merge master into staging-next

2025-07-14 06:00:33 +03:00 · 2025-05-16 12:07:21 +00:00 · 2025-05-16 12:07:21 +00:00 · e6481721c4
commit e6481721c4
parent 2f214a6041 c5c594d575
87 changed files with 7753 additions and 685 deletions
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@ -8564,6 +8564,12 @@
    githubId = 21362942;
    name = "Fugi";
  };
+  fullmetalsheep = {
+    email = "fullmetalsheep@proton.me";
+    github = "fullmetalsheep";
+    githubId = 23723926;
+    name = "Dash R";
+  };
  funkeleinhorn = {
    email = "git@funkeleinhorn.com";
    github = "funkeleinhorn";
@ -24128,6 +24134,12 @@
    github = "tebriel";
    githubId = 821688;
  };
+  tebro = {
+    email = "git@tebro.simplelogin.com";
+    name = "Richard Weber";
+    github = "Tebro";
+    githubId = 3861339;
+  };
  techknowlogick = {
    email = "techknowlogick@gitea.com";
    github = "techknowlogick";
--- a/nixos/modules/module-list.nix
+++ b/nixos/modules/module-list.nix
@ -160,6 +160,7 @@
  ./programs/arp-scan.nix
  ./programs/atop.nix
  ./programs/ausweisapp.nix
+  ./programs/autoenv.nix
  ./programs/autojump.nix
  ./programs/bandwhich.nix
  ./programs/bash-my-aws.nix
--- a/nixos/modules/programs/nm-applet.nix
+++ b/nixos/modules/programs/nm-applet.nix
@ -28,6 +28,7 @@
      description = "Network manager applet";
      wantedBy = [ "graphical-session.target" ];
      partOf = [ "graphical-session.target" ];
+      after = [ "graphical-session.target" ];
      serviceConfig.ExecStart = "${pkgs.networkmanagerapplet}/bin/nm-applet ${lib.optionalString config.programs.nm-applet.indicator "--indicator"}";
    };

--- a/nixos/modules/services/web-apps/kimai.nix
+++ b/nixos/modules/services/web-apps/kimai.nix
@ -324,12 +324,14 @@ in
                ${pkg hostName cfg}/bin/console lint:yaml --parse-tags \
                  ${pkg hostName cfg}/share/php/kimai/config

-                # Run kimai:install to ensure database is created or updated.
+                # Before running any further console commands, clear cache. This
+                # avoids errors due to old cache getting used with new version
+                # of Kimai.
+                ${pkg hostName cfg}/bin/console cache:clear --env=prod
+                # Then, run kimai:install to ensure database is created or updated.
                # Note that kimai:update is an alias to kimai:install.
                ${pkg hostName cfg}/bin/console kimai:install --no-cache
-                # Clear cache and warmup cache separately, to avoid "Cannot declare
-                # class App\Entity\Timesheet" error on first init after upgrade.
-                ${pkg hostName cfg}/bin/console cache:clear --env=prod
+                # Finally, warm up cache.
                ${pkg hostName cfg}/bin/console cache:warmup --env=prod
              '';

--- a/pkgs/applications/audio/csound/default.nix
+++ b/pkgs/applications/audio/csound/default.nix
@ -85,5 +85,6 @@ stdenv.mkDerivation {
    license = licenses.lgpl21Plus;
    maintainers = [ maintainers.marcweber ];
    platforms = platforms.unix;
+    broken = stdenv.hostPlatform.isDarwin;
  };
 }
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@ -2077,40 +2077,9 @@ let
        };
      };

-      github.copilot = buildVscodeMarketplaceExtension {
-        mktplcRef = {
-          publisher = "github";
-          name = "copilot";
-          # Verify which version is available with nix run nixpkgs#vsce -- show github.copilot --json
-          version = "1.317.0";
-          hash = "sha256-w8HH1ibkOrpuKi3Yhzr+DjVIY7HWZ2L4rYzNYrHkfbc=";
-        };
+      github.copilot = callPackage ./github.copilot { };

-        meta = {
-          description = "GitHub Copilot uses OpenAI Codex to suggest code and entire functions in real-time right from your editor";
-          downloadPage = "https://marketplace.visualstudio.com/items?itemName=GitHub.copilot";
-          homepage = "https://github.com/features/copilot";
-          license = lib.licenses.unfree;
-          maintainers = [ lib.maintainers.Zimmi48 ];
-        };
-      };
-
-      github.copilot-chat = buildVscodeMarketplaceExtension {
-        mktplcRef = {
-          publisher = "github";
-          name = "copilot-chat";
-          # Verify which version is available with nix run nixpkgs#vsce -- show github.copilot-chat --json
-          version = "0.26.7"; # latest compatible with vscode ^1.98
-          hash = "sha256-aR6AGU/boDmYef0GWna5sUsyv9KYGCkugWpFIusDMNE=";
-        };
-        meta = {
-          description = "GitHub Copilot Chat is a companion extension to GitHub Copilot that houses experimental chat features";
-          downloadPage = "https://marketplace.visualstudio.com/items?itemName=GitHub.copilot-chat";
-          homepage = "https://github.com/features/copilot";
-          license = lib.licenses.unfree;
-          maintainers = [ lib.maintainers.laurent-f1z1 ];
-        };
-      };
+      github.copilot-chat = callPackage ./github.copilot-chat { };

      github.github-vscode-theme = buildVscodeMarketplaceExtension {
        mktplcRef = {
--- a/pkgs/applications/editors/vscode/extensions/github.copilot-chat/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/github.copilot-chat/default.nix
@ -0,0 +1,21 @@
+{
+  lib,
+  vscode-utils,
+}:
+
+vscode-utils.buildVscodeMarketplaceExtension {
+  mktplcRef = {
+    publisher = "github";
+    name = "copilot-chat";
+    version = "0.27.1";
+    hash = "sha256-HXzPI8B4wISly2SQNdbFO6CEREfhey+SH4HhutxH7Mg=";
+  };
+
+  meta = {
+    description = "GitHub Copilot Chat is a companion extension to GitHub Copilot that houses experimental chat features";
+    downloadPage = "https://marketplace.visualstudio.com/items?itemName=GitHub.copilot-chat";
+    homepage = "https://github.com/features/copilot";
+    license = lib.licenses.unfree;
+    maintainers = [ lib.maintainers.laurent-f1z1 ];
+  };
+}
--- a/pkgs/applications/editors/vscode/extensions/github.copilot/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/github.copilot/default.nix
@ -0,0 +1,21 @@
+{
+  lib,
+  vscode-utils,
+}:
+
+vscode-utils.buildVscodeMarketplaceExtension {
+  mktplcRef = {
+    publisher = "github";
+    name = "copilot";
+    version = "1.322.0";
+    hash = "sha256-PekZQeRqpCSSVQe+AA0XLAwC3K0LGtRMbfnN7MxfmGA=";
+  };
+
+  meta = {
+    description = "GitHub Copilot uses OpenAI Codex to suggest code and entire functions in real-time right from your editor";
+    downloadPage = "https://marketplace.visualstudio.com/items?itemName=GitHub.copilot";
+    homepage = "https://github.com/features/copilot";
+    license = lib.licenses.unfree;
+    maintainers = [ lib.maintainers.Zimmi48 ];
+  };
+}
--- a/pkgs/applications/emulators/libretro/cores/citra.nix
+++ b/pkgs/applications/emulators/libretro/cores/citra.nix
@ -9,13 +9,13 @@
 }:
 mkLibretroCore {
  core = "citra";
-  version = "0-unstable-2024-12-03";
+  version = "0-unstable-2025-05-07";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "citra";
-    rev = "a31aff7e1a3a66f525b9ea61633d2c5e5b0c8b31";
-    hash = "sha256-HlhY4AeFQSabrmPQWLygjPGTWkIh0U0Hv1Fv4YFu9xg=";
+    rev = "b1f9fe0c3d4d6c4e133a710bc172d9adcb40c706";
+    hash = "sha256-EI8N+tjA6UsEq7sKIZ/zxeugW/oyCF+cPKX2HTjVqNI=";
    fetchSubmodules = true;
  };

--- a/pkgs/by-name/ac/actual-server/package.nix
+++ b/pkgs/by-name/ac/actual-server/package.nix
@ -207,6 +207,8 @@ stdenv.mkDerivation {
    homepage = "https://actualbudget.org/";
    mainProgram = "actual-server";
    license = lib.licenses.mit;
+    # https://github.com/NixOS/nixpkgs/issues/403846
+    broken = stdenv.isDarwin;
    maintainers = [
      lib.maintainers.oddlama
      lib.maintainers.patrickdag
--- a/pkgs/by-name/au/autobase/package-lock.json
+++ b/pkgs/by-name/au/autobase/package-lock.json
--- a/pkgs/by-name/au/autobase/package.nix
+++ b/pkgs/by-name/au/autobase/package.nix
@ -0,0 +1,38 @@
+{
+  lib,
+  buildNpmPackage,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+buildNpmPackage (finalAttrs: {
+  pname = "autobase";
+  version = "7.7.0";
+
+  src = fetchFromGitHub {
+    owner = "holepunchto";
+    repo = "autobase";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-YKNb2lpSQgH4bDZmA4qJzUFSeJFHXJZseMEml/JxD+s=";
+  };
+
+  npmDepsHash = "sha256-oorYb9i/prb/5Jt/hNQcq/NPQq/kAhI2KU8d28nPv/0=";
+
+  dontNpmBuild = true;
+
+  # ERROR: Missing package-lock.json from src
+  # Copy vendored package-lock.json to src via postPatch
+  postPatch = ''
+    cp ${./package-lock.json} ./package-lock.json
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Concise multiwriter for data structures with Hypercore";
+    homepage = "https://github.com/holepunchto/autobase";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+    teams = with lib.teams; [ ngi ];
+  };
+})
--- a/pkgs/by-name/az/azure-cli/python-packages.nix
+++ b/pkgs/by-name/az/azure-cli/python-packages.nix
@ -203,6 +203,14 @@ let
      azure-mgmt-synapse =
        overrideAzureMgmtPackage super.azure-mgmt-synapse "2.1.0b5" "zip"
          "sha256-5E6Yf1GgNyNVjd+SeFDbhDxnOA6fOAG6oojxtCP4m+k=";
+
+      # Observed error during runtime:
+      # AttributeError: Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client' from
+      # '/nix/store/xxx-python3.12-msal-1.32.0/lib/python3.12/site-packages/msal/throttled_http_client.py'>.
+      # Did you mean: '_msal_public_app_kwargs'?
+      msal =
+        overrideAzureMgmtPackage super.msal "1.32.3" "tar.gz"
+          "sha256-XuoDhonHilpwyo7L4SRUWLVahXvQlu+2mJxpuhWYXTU=";
    };
  };
 in
--- a/pkgs/by-name/bi/binaryninja-free/package.nix
+++ b/pkgs/by-name/bi/binaryninja-free/package.nix
@ -19,11 +19,11 @@
 }:
 stdenv.mkDerivation rec {
  pname = "binaryninja-free";
-  version = "4.2.6455";
+  version = "5.0.7290";

  src = fetchurl {
-    url = "https://web.archive.org/web/20241209150225/https://cdn.binary.ninja/installers/binaryninja_free_linux.zip";
-    hash = "sha256-NOVuLmko8iYcJ/0fr0DNw7xPEC8EhT/SzcFWtNmjlYI=";
+    url = "https://web.archive.org/web/20250426133400/https://cdn.binary.ninja/installers/binaryninja_free_linux.zip";
+    hash = "sha256-Fzdv+454Ajj8IxmdcxvcDGePFsTmmyPpnfBXge4p8iU=";
  };

  icon = fetchurl {
@ -80,6 +80,7 @@ stdenv.mkDerivation rec {
  '';

  meta = {
+    changelog = "https://binary.ninja/changelog/#${lib.replaceStrings [ "." ] [ "-" ] version}";
    description = "Interactive decompiler, disassembler, debugger";
    homepage = "https://binary.ninja/";
    license = {
--- a/pkgs/by-name/bl/bluejay/package.nix
+++ b/pkgs/by-name/bl/bluejay/package.nix
@ -0,0 +1,51 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  cmake,
+  ninja,
+  kdePackages,
+  nix-update-script,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "bluejay";
+  version = "1.0.2";
+
+  src = fetchFromGitHub {
+    owner = "EbonJaeger";
+    repo = "bluejay";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-mt64v+TccmB/0qV4+EeXbyjPmOM8cDXPV1nIH4FvXSA=";
+  };
+
+  nativeBuildInputs = [
+    cmake
+    ninja
+    kdePackages.extra-cmake-modules
+    kdePackages.wrapQtAppsHook
+  ];
+
+  buildInputs = [
+    kdePackages.bluez-qt
+    kdePackages.kconfig
+    kdePackages.kcoreaddons
+    kdePackages.kdbusaddons
+    kdePackages.ki18n
+    kdePackages.kirigami
+    kdePackages.kirigami-addons
+    kdePackages.qtbase
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    mainProgram = "bluejay";
+    description = "Bluetooth manager written in Qt";
+    homepage = "https://github.com/EbonJaeger/bluejay";
+    changelog = "https://github.com/EbonJaeger/bluejay/releases/tag/v${finalAttrs.version}";
+    license = lib.licenses.mpl20;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ federicoschonborn ];
+  };
+})
--- a/pkgs/by-name/cl/clapgrep/package.nix
+++ b/pkgs/by-name/cl/clapgrep/package.nix
@ -10,7 +10,6 @@
  meson,
  ninja,
  rustc,
-  fetchurl,
  cargo,
  desktop-file-utils,

@ -23,29 +22,15 @@
  nix-update-script,
 }:

-let
-  poppler' = poppler.overrideAttrs (oldAttrs: rec {
-    version = "25.01.0";
-
-    src = fetchurl {
-      url = "https://poppler.freedesktop.org/poppler-${version}.tar.xz";
-      hash = "sha256-fu/BIiB7u9cqMDxeB0P0lB6K6GHiTc8FAeGM4dFBQRI=";
-    };
-
-    patches = [ ];
-
-    doCheck = false;
-  });
-in
 stdenv.mkDerivation (finalAttrs: {
  pname = "clapgrep";
-  version = "25.04";
+  version = "25.05+1";

  src = fetchFromGitHub {
    owner = "luleyleo";
    repo = "clapgrep";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-mx52z+YpHdq4zSmH1d3KlNhj3ezpoWMGB0FEr4B20sg=";
+    hash = "sha256-DL3voYSsNGjPb1CnPuJGg+7UgWYZO7cH5T2Z37BuDSE=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
@ -69,7 +54,7 @@ stdenv.mkDerivation (finalAttrs: {
    gtk4
    libadwaita
    glib
-    poppler'
+    poppler
    gtksourceview5
  ];

--- a/pkgs/by-name/co/copilot-language-server/package.nix
+++ b/pkgs/by-name/co/copilot-language-server/package.nix
@ -45,11 +45,11 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "copilot-language-server";
-  version = "1.312.0";
+  version = "1.322.0";

  src = fetchzip {
    url = "https://github.com/github/copilot-language-server-release/releases/download/${finalAttrs.version}/copilot-language-server-native-${finalAttrs.version}.zip";
-    hash = "sha256-glZR72+5lpghItwHuzDZKd/KONsCrjjCwcyNK0k9jr8=";
+    hash = "sha256-3AJTC4TI+sqTi1/B1XQZght7CClplWwIxjGmrt1E2ME=";
    stripRoot = false;
  };

--- a/pkgs/by-name/cp/cpr/package.nix
+++ b/pkgs/by-name/cp/cpr/package.nix
@ -0,0 +1,61 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  cmake,
+  pkg-config,
+  openssl,
+  curl,
+  zlib,
+  gtest,
+  cppcheck,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "cpr";
+  version = "1.11.0";
+
+  src = fetchFromGitHub {
+    owner = "libcpr";
+    repo = "cpr";
+    tag = finalAttrs.version;
+    hash = "sha256-jWyss0krj8MVFqU1LAig+4UbXO5pdcWIT+hCs9DxemM=";
+  };
+
+  nativeBuildInputs = [
+    cmake
+    pkg-config
+    gtest
+    cppcheck
+  ];
+
+  buildInputs = [
+    openssl
+    zlib
+    curl
+  ];
+
+  cmakeFlags = [
+    # NOTE: Does not build with CPPCHECK
+    # (lib.cmakeBool "CPR_ENABLE_CPPCHECK" true)
+    (lib.cmakeBool "CPR_BUILD_TEST" true)
+    (lib.cmakeBool "CURL_ZLIB" false)
+    (lib.cmakeBool "BUILD_SHARED_LIBS" true)
+    (lib.cmakeBool "CPR_USE_SYSTEM_CURL" true)
+    (lib.cmakeFeature "CMAKE_BUILD_TYPE" "Release")
+  ];
+
+  # Install headers
+  postInstall = ''
+    mkdir -p $out/include
+    cp -r $src/include/* $out/include/
+  '';
+
+  meta = {
+    description = "C++ Requests: Curl for People, a spiritual port of Python Requests";
+    homepage = "https://github.com/libcpr/cpr";
+    license = lib.licenses.mit;
+    platforms = lib.platforms.all;
+    maintainers = with lib.maintainers; [ phodina ];
+  };
+})
--- a/pkgs/by-name/cs/csvquote/package.nix
+++ b/pkgs/by-name/cs/csvquote/package.nix
@ -2,6 +2,7 @@
  lib,
  stdenv,
  fetchFromGitHub,
+  coreutils,
  patsh,
 }:

@ -25,6 +26,9 @@ stdenv.mkDerivation rec {
    patsh
  ];

+  # needed for cross
+  buildInputs = [ coreutils ];
+
  makeFlags = [
    "BINDIR=$(out)/bin"
  ];
@ -35,7 +39,7 @@ stdenv.mkDerivation rec {

  postInstall = ''
    substituteAllInPlace $out/bin/csvheader
-    patsh $out/bin/csvheader -fs ${builtins.storeDir}
+    patsh $out/bin/csvheader -fs ${builtins.storeDir} --path "$HOST_PATH"
  '';

  meta = with lib; {
--- a/pkgs/by-name/da/darkly-qt5/package.nix
+++ b/pkgs/by-name/da/darkly-qt5/package.nix
@ -0,0 +1,5 @@
+{
+  darkly,
+  libsForQt5,
+}:
+darkly.override { qtPackages = libsForQt5; }
--- a/pkgs/by-name/da/darkly/package.nix
+++ b/pkgs/by-name/da/darkly/package.nix
@ -0,0 +1,72 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  cmake,
+  ninja,
+  kdePackages,
+  qtPackages ? kdePackages,
+  gitUpdater,
+}:
+let
+  qtMajorVersion = lib.versions.major qtPackages.qtbase.version;
+in
+stdenv.mkDerivation (finalAttrs: {
+  pname = "darkly-qt${qtMajorVersion}";
+  version = "0.5.18";
+
+  src = fetchFromGitHub {
+    owner = "Bali10050";
+    repo = "Darkly";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-IwN6eZusfeGIEtdubpJpp1wrzToi0Umwi9jbXc4AF90=";
+  };
+
+  nativeBuildInputs = [
+    cmake
+    ninja
+    qtPackages.wrapQtAppsHook
+    qtPackages.extra-cmake-modules
+  ];
+
+  buildInputs =
+    with qtPackages;
+    [
+      qtbase
+      kconfig
+      kcoreaddons
+      kcmutils
+      kguiaddons
+      ki18n
+      kiconthemes
+      kwindowsystem
+    ]
+    ++ lib.optionals (qtMajorVersion == "5") [
+      kirigami2
+    ]
+    ++ lib.optionals (qtMajorVersion == "6") [
+      kcolorscheme
+      kdecoration
+      kirigami
+    ];
+
+  cmakeFlags = map (v: lib.cmakeBool "BUILD_QT${v}" (v == qtMajorVersion)) [
+    "5"
+    "6"
+  ];
+
+  passthru.updateScript = gitUpdater { rev-prefix = "v"; };
+
+  meta =
+    {
+      description = "Modern style for Qt applications (fork of Lightly)";
+      homepage = "https://github.com/Bali10050/Darkly";
+      changelog = "https://github.com/Bali10050/Darkly/releases/tag/v${finalAttrs.version}";
+      platforms = lib.platforms.linux;
+      license = with lib.licenses; [ gpl2Plus ];
+      maintainers = with lib.maintainers; [ pluiedev ];
+    }
+    // lib.optionalAttrs (qtMajorVersion == "6") {
+      mainProgram = "darkly-settings6";
+    };
+})
--- a/pkgs/by-name/do/doxygen-awesome-css/package.nix
+++ b/pkgs/by-name/do/doxygen-awesome-css/package.nix
@ -0,0 +1,31 @@
+{
+  lib,
+  stdenvNoCC,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+stdenvNoCC.mkDerivation (finalAttrs: {
+  pname = "doxygen-awesome-css";
+  version = "2.3.4";
+
+  src = fetchFromGitHub {
+    owner = "jothepro";
+    repo = "doxygen-awesome-css";
+    rev = "v${finalAttrs.version}";
+    hash = "sha256-g4Smy7BJ//4wQigAnx5fJQe5QxoLc6Aopm8O7S2lVkY=";
+  };
+
+  makeFlags = [ "PREFIX=$(out)" ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    changelog = "https://github.com/jothepro/doxygen-awesome-css/releases/tag/v${finalAttrs.version}";
+    description = "CSS theme for doxygen html-documentation with lots of customization parameters";
+    homepage = "https://github.com/jothepro/doxygen-awesome-css";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ nim65s ];
+    platforms = lib.platforms.all;
+  };
+})
--- a/pkgs/by-name/et/etherpad-lite/dont-fail-on-plugins-json.patch
+++ b/pkgs/by-name/et/etherpad-lite/dont-fail-on-plugins-json.patch
@ -0,0 +1,19 @@
+diff --git a/src/static/js/pluginfw/installer.ts b/src/static/js/pluginfw/installer.ts
+index c605378e1..27e3e487b 100644
+--- a/src/static/js/pluginfw/installer.ts
+++ b/src/static/js/pluginfw/installer.ts
+@@ -83,7 +83,13 @@ export const checkForMigration = async () => {
+   try {
+     await fs.access(installedPluginsPath, fs.constants.F_OK);
+   } catch (err) {
+-    await migratePluginsFromNodeModules();
+    logger.info(`${installedPluginsPath} not found, creating using current node modules`);
+    try {
+      await migratePluginsFromNodeModules();
+    } catch (err2) {
+      logger.warn(`unable to create ${installedPluginsPath}, skipping plugin migrations`);
+      return;
+    }
+   }
+ 
+   /*
--- a/pkgs/by-name/et/etherpad-lite/outdir.patch
+++ b/pkgs/by-name/et/etherpad-lite/outdir.patch
@ -0,0 +1,51 @@
+From e881a383b38d4d80ee28c17a14b5de58889245de Mon Sep 17 00:00:00 2001
+From: Alexandre Iooss <erdnaxe@crans.org>
+Date: Tue, 5 Nov 2024 16:30:33 +0100
+Subject: [PATCH] Use temporary directory for esbuild
+
+---
+ src/node/hooks/express/specialpages.ts | 11 +++++------
+
+diff --git a/src/node/hooks/express/specialpages.ts b/src/node/hooks/express/specialpages.ts
+index 2e26eaa0cee..31d5138e67c 100644
+--- a/src/node/hooks/express/specialpages.ts
+++ b/src/node/hooks/express/specialpages.ts
+@@ -3,6 +3,7 @@
+ import path from 'node:path';
+ const eejs = require('../../eejs')
+ import fs from 'node:fs';
+import os from 'node:os';
+ const fsp = fs.promises;
+ const toolbar = require('../../utils/toolbar');
+ const hooks = require('../../../static/js/pluginfw/hooks');
+@@ -89,7 +90,7 @@ const convertTypescript = (content: string) => {
+   const outputRaw = buildSync({
+     stdin: {
+       contents: content,
+-      resolveDir: path.join(settings.root, 'var','js'),
+      resolveDir: settings.root,
+       loader: 'js'
+     },
+     alias:{
+@@ -222,7 +223,7 @@ const convertTypescriptWatched = (content: string, cb: (output:string, hash: str
+   build({
+     stdin: {
+       contents: content,
+-      resolveDir: path.join(settings.root, 'var','js'),
+      resolveDir: settings.root,
+       loader: 'js'
+     },
+     alias:{
+@@ -276,10 +277,8 @@ exports.expressCreateServer = async (hookName: string, args: ArgsExpressType, cb
+       settings,
+     })
+ 
+-
+-
+-  const outdir = path.join(settings.root, 'var','js')
+-  // Create the outdir if it doesn't exist
+  // Create a temporary directory to store runtime-built JS files
+  const outdir = path.join(os.tmpdir(), 'js');
+   if (!fs.existsSync(outdir)) {
+     fs.mkdirSync(outdir);
+   }
--- a/pkgs/by-name/et/etherpad-lite/package.nix
+++ b/pkgs/by-name/et/etherpad-lite/package.nix
@ -0,0 +1,96 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  nix-update-script,
+  pnpm_9,
+  makeWrapper,
+  nodejs,
+}:
+
+let
+  pnpm = pnpm_9;
+in
+stdenv.mkDerivation (finalAttrs: {
+  pname = "etherpad-lite";
+  version = "2.3.0";
+
+  src = fetchFromGitHub {
+    owner = "ether";
+    repo = "etherpad-lite";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-OomZ1oziEGgLJfYyfkHZOPRHfrrWc4XLAsZA4cn0btA=";
+  };
+
+  patches = [
+    ./outdir.patch
+    # etherpad expects to read and write $out/lib/var/installed_plugins.json
+    # FIXME: this patch disables plugin support
+    ./dont-fail-on-plugins-json.patch
+  ];
+
+  pnpmDeps = pnpm.fetchDeps {
+    inherit (finalAttrs) pname version src;
+    hash = "sha256-nhiPopGLCeCHiqEQ3solwuLwkDnHTH3otbxIJmbuQAA=";
+  };
+
+  nativeBuildInputs = [
+    pnpm.configHook
+    makeWrapper
+  ];
+
+  buildInputs = [
+    nodejs
+  ];
+
+  buildPhase = ''
+    runHook preBuild
+    NODE_ENV="production" pnpm run build:etherpad
+    runHook postBuild
+  '';
+
+  preInstall = ''
+    # remove unnecessary files
+    rm node_modules/.modules.yaml
+    pnpm prune --prod --ignore-scripts
+    find -type f \( -name "*.d.ts" -o -name "*.map" \) -exec rm -rf {} +
+
+    # remove non-deterministic files
+    rm node_modules/.modules.yaml
+  '';
+
+  # Upstream scripts uses `pnpm run prod` which is equivalent to
+  # `cross-env NODE_ENV=production node --require tsx/cjs node/server.ts`
+  installPhase = ''
+    runHook preInstall
+    mkdir -p $out/{lib/etherpad-lite,bin}
+    cp -r node_modules ui src doc admin $out/lib/etherpad-lite
+    makeWrapper ${lib.getExe nodejs} $out/bin/etherpad-lite \
+      --inherit-argv0 \
+      --add-flags "--require tsx/cjs $out/lib/etherpad-lite/node_modules/ep_etherpad-lite/node/server.ts" \
+      --suffix PATH : "${lib.makeBinPath [ pnpm ]}" \
+      --set NODE_PATH "$out/lib/node_modules:$out/lib/etherpad-lite/node_modules/ep_etherpad-lite/node_modules" \
+      --set-default NODE_ENV production
+    find $out/lib -xtype l -delete
+    runHook postInstall
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Modern really-real-time collaborative document editor";
+    longDescription = ''
+      Etherpad is a real-time collaborative editor scalable to thousands of simultaneous real time users.
+      It provides full data export capabilities, and runs on your server, under your control.
+    '';
+    homepage = "https://etherpad.org/";
+    changelog = "https://github.com/ether/etherpad-lite/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    maintainers = with lib.maintainers; [
+      erdnaxe
+      f2k1de
+    ];
+    license = lib.licenses.asl20;
+    mainProgram = "etherpad-lite";
+    platforms = lib.platforms.unix;
+  };
+})
--- a/pkgs/by-name/ev/evcxr/package.nix
+++ b/pkgs/by-name/ev/evcxr/package.nix
@ -12,6 +12,9 @@
  mold,
  rustc,
  nix-update-script,
+
+  # On non-darwin, `mold` is the default linker, but it's broken on Darwin.
+  withMold ? with stdenv.hostPlatform; isUnix && !isDarwin,
 }:

 rustPlatform.buildRustPackage (finalAttrs: {
@ -67,12 +70,14 @@ rustPlatform.buildRustPackage (finalAttrs: {
      wrap = exe: ''
        wrapProgram $out/bin/${exe} \
          --prefix PATH : ${
-            lib.makeBinPath [
-              cargo
-              gcc
-              mold # fix fatal error: "unknown command line option: -run"
-              rustc # requires rust edition 2024
-            ]
+            lib.makeBinPath (
+              [
+                cargo
+                gcc
+                rustc
+              ]
+              ++ lib.optional withMold mold
+            )
          } \
          --set-default RUST_SRC_PATH "$RUST_SRC_PATH"
      '';
--- a/pkgs/by-name/fl/flake-checker/package.nix
+++ b/pkgs/by-name/fl/flake-checker/package.nix
@ -6,17 +6,17 @@

 rustPlatform.buildRustPackage rec {
  pname = "flake-checker";
-  version = "0.2.4";
+  version = "0.2.5";

  src = fetchFromGitHub {
    owner = "DeterminateSystems";
    repo = "flake-checker";
    rev = "v${version}";
-    hash = "sha256-K5E1sarWIUl4QavHBoS8sPr5Cp8ZndWjLYDLm++d7v0=";
+    hash = "sha256-Q1nC7U4SG3VHlqbJDs5NDNmsvnYN+MGpMkOH952WaKg=";
  };

  useFetchCargoVendor = true;
-  cargoHash = "sha256-FDfsA87VATJ4CpXoJ0eFoFl5z9Jtv6tPjkCf7kz6g00=";
+  cargoHash = "sha256-M+Ftovr1Czk9W904B2Cf9FjItKhxALZj6mT+Yewdf8U=";

  meta = with lib; {
    description = "Health checks for your Nix flakes";
--- a/pkgs/by-name/fl/flexget/package.nix
+++ b/pkgs/by-name/fl/flexget/package.nix
@ -7,14 +7,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "flexget";
-  version = "3.15.38";
+  version = "3.15.42";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Flexget";
    repo = "Flexget";
    tag = "v${version}";
-    hash = "sha256-quEqpF5oj1FLmQrIS4t3HwS23/m/QH/ZVijlQapt5Mc=";
+    hash = "sha256-ON0j5HYNbpHSwTMJgX/xPLjzLZXRDk1YogbhcwugxJE=";
  };

  pythonRelaxDeps = true;
--- a/pkgs/by-name/fr/freeplane/deps.json
+++ b/pkgs/by-name/fr/freeplane/deps.json
--- a/pkgs/by-name/fr/freeplane/package.nix
+++ b/pkgs/by-name/fr/freeplane/package.nix
@ -13,7 +13,7 @@

 let
  pname = "freeplane";
-  version = "1.12.8";
+  version = "1.12.10";

  jdk = jdk17;
  gradle = gradle_8;
@ -22,7 +22,7 @@ let
    owner = "freeplane";
    repo = "freeplane";
    rev = "release-${version}";
-    hash = "sha256-yzjzaobXuQH8CHz183ditL2LsCXU5xLh4+3El4Ffu20=";
+    hash = "sha256-08Rl3vhXtlylNDc1gh5aZJ9/RoxeyxpDbklmhMVJuq4=";
  };

 in
@ -37,10 +37,11 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  ];

  patches = [
-    # Plugin update to support Gradle 8.13; remove when included in a release.
+    # freeplane is using the wrong repository for a plugin
+    # remove when https://github.com/freeplane/freeplane/pull/2453 is merged and released
    (fetchpatch {
-      url = "https://github.com/freeplane/freeplane/commit/e58958783ef6f85ab00bf270c1f897093c4d7006.patch";
-      hash = "sha256-oQF/GbItl2ZEVlTKzojqk9xTWl8CVP7V3yig/py71hk=";
+      url = "https://github.com/amadejkastelic/freeplane/commit/973c49b7a73622e434bb86c8caea15383201b58a.patch";
+      hash = "sha256-iztFmISXZu8xKWqpwDYgBSl8ZSpZEtNriwM+EW1+s+Y=";
    })
  ];

--- a/pkgs/by-name/fr/freetube/package.nix
+++ b/pkgs/by-name/fr/freetube/package.nix
@ -109,6 +109,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {
      alyaeanyx
      ryand56
      sigmasquadron
+      ddogfoodd
    ];
    badPlatforms = [
      # output app is called "Electron.app" while derivation expects "FreeTube.app"
--- a/pkgs/by-name/fs/fsautocomplete/package.nix
+++ b/pkgs/by-name/fs/fsautocomplete/package.nix
@ -9,13 +9,13 @@

 buildDotnetModule (finalAttrs: {
  pname = "fsautocomplete";
-  version = "0.77.5";
+  version = "0.77.7";

  src = fetchFromGitHub {
    owner = "fsharp";
    repo = "FsAutoComplete";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-rPg4GSnxfWWBn3UzQvraH8iL3zOomvompE9Kyuxj5Z0=";
+    hash = "sha256-eyGWUSAtFT/48QOZ6k7+htLhLjGrc4scgp2VLBu3bcE=";
  };

  nugetDeps = ./deps.json;
--- a/pkgs/by-name/ge/gel/package.nix
+++ b/pkgs/by-name/ge/gel/package.nix
@ -16,19 +16,19 @@
 }:
 rustPlatform.buildRustPackage rec {
  pname = "gel";
-  version = "7.2.0";
+  version = "7.3.0";

  src = fetchFromGitHub {
    owner = "geldata";
    repo = "gel-cli";
    tag = "v${version}";
-    hash = "sha256-HqMfReKt1Gl2c7ectgcW514ARCgfNi8PaykvKJUZirY=";
+    hash = "sha256-tMbAU6tlyDcAzUQ8FK0Q0V+LgzHAazETtFuC050hObw=";
    fetchSubmodules = true;
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit pname version src;
-    hash = "sha256-rxlJQSh3CN4lBFOWFMZmdH91xgRnBbywXA/gakSKsck=";
+    hash = "sha256-IWGOh8VbE0rCIRtiAqGlFExd1u80HWyoluquWVRaQoo=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/go/google-chrome/package.nix
+++ b/pkgs/by-name/go/google-chrome/package.nix
@ -171,11 +171,11 @@ let

  linux = stdenv.mkDerivation (finalAttrs: {
    inherit pname meta passthru;
-    version = "136.0.7103.59";
+    version = "136.0.7103.113";

    src = fetchurl {
      url = "https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_${finalAttrs.version}-1_amd64.deb";
-      hash = "sha256-dki7Ci91OpqMtgS84ynsxBWoB862t+eWFlxHvZUAUjc=";
+      hash = "sha256-BnKKu7X34g+zg4rDqjVXT3Kx2E8Gn5ELqs3LQS3GCkg=";
    };

    # With strictDeps on, some shebangs were not being patched correctly
@ -274,11 +274,11 @@ let

  darwin = stdenvNoCC.mkDerivation (finalAttrs: {
    inherit pname meta passthru;
-    version = "136.0.7103.49";
+    version = "136.0.7103.114";

    src = fetchurl {
-      url = "http://dl.google.com/release2/chrome/dz4uae22obgiqcnhey5k6wspvu_136.0.7103.49/GoogleChrome-136.0.7103.49.dmg";
-      hash = "sha256-4eGfwVdts+tW4ouUKZg1EvnSYOu6CCBRMYie2hz2y00=";
+      url = "http://dl.google.com/release2/chrome/iwktnyywqpn7dye3zjzgosvevq_136.0.7103.114/GoogleChrome-136.0.7103.114.dmg";
+      hash = "sha256-myJawlgVBQlLtgBfSfCL5XfdnH8d7xd+j8JV2+2MZ/s=";
    };

    dontPatch = true;
--- a/pkgs/by-name/he/headphones-toolbox/package.nix
+++ b/pkgs/by-name/he/headphones-toolbox/package.nix
@ -1,51 +1,61 @@
 {
+  cargo-tauri,
+  fetchFromGitHub,
+  fetchYarnDeps,
  lib,
-  stdenv,
-  dpkg,
-  fetchurl,
-  autoPatchelfHook,
-  webkitgtk_4_0,
+  nix-update-script,
+  nodejs,
+  pkg-config,
+  rustPlatform,
+  webkitgtk_4_1,
+  wrapGAppsHook3,
+  yarnConfigHook,
 }:

-stdenv.mkDerivation (finalAttrs: {
-  name = "headphones-toolbox";
-  version = "0.0.5";
+rustPlatform.buildRustPackage (rec {
+  pname = "headphones-toolbox";
+  version = "0.0.7";
+  tag = "test-tauri-v2-2";

-  src = fetchurl {
-    url = "https://github.com/ploopyco/headphones-toolbox/releases/download/app-v${finalAttrs.version}/ploopy-headphones-toolbox_${finalAttrs.version}_amd64.deb";
-    hash = "sha256-lWjmpybGcL3sbBng8zCTUtwYhlrQ6cCrKkhiu+g9MsE=";
+  src = fetchFromGitHub {
+    owner = "george-norton";
+    repo = "headphones-toolbox";
+    rev = "${tag}";
+    hash = "sha256-X2HTEPxvBzbhfN1vqQVk81Qk1Z+EV+7/SpjZrDHv+fM=";
  };

+  offlineCache = fetchYarnDeps {
+    yarnLock = "${src}/yarn.lock";
+    hash = "sha256-Ln5U0KKsKm6ZLViZIWfBiBjm/mQNEIxaj4nTR55PcRg=";
+  };
+
+  useFetchCargoVendor = true;
+  cargoHash = "sha256-VgCxYYNBV45sTzouS5NE7nOUViPj0gJO7DSKlJSAT4U=";
+  cargoRoot = "src-tauri";
+  buildAndTestSubdir = cargoRoot;
+
  nativeBuildInputs = [
-    dpkg
-    autoPatchelfHook
+    cargo-tauri.hook
+    nodejs
+    pkg-config
+    wrapGAppsHook3
+    yarnConfigHook
  ];

-  buildInputs = [
-    webkitgtk_4_0
-  ];
+  buildInputs = [ webkitgtk_4_1 ];

-  installPhase = ''
-    runHook preInstall
+  passthru.updateScript = nix-update-script { };

-    mkdir -p $out/bin
-    mv usr/bin $out
-    mv usr/lib $out
-    mv usr/share $out
-
-    runHook postInstall
-  '';
-
-  meta = with lib; {
+  meta = {
    description = "UI for configuring Ploopy Headphones";
    homepage = "https://github.com/ploopyco/headphones-toolbox/";
-    maintainers = with maintainers; [
+    license = lib.licenses.gpl3Only;
+    mainProgram = "headphones-toolbox";
+    maintainers = with lib.maintainers; [
+      flacks
      knarkzel
      nyabinary
    ];
-    license = licenses.gpl3Only;
-    sourceProvenance = with sourceTypes; [ binaryNativeCode ];
-    platforms = [ "x86_64-linux" ];
-    mainProgram = "headphones-toolbox";
+    platforms = lib.platforms.linux;
  };
 })
--- a/pkgs/by-name/he/hedgemodmanager/deps.json
+++ b/pkgs/by-name/he/hedgemodmanager/deps.json
@ -0,0 +1,837 @@
+[
+  {
+    "pname": "Avalonia",
+    "version": "11.2.3",
+    "hash": "sha256-NUoyXJkIsgbkcKFVb10VRafM4ViHs801c/7vhu3ssUY="
+  },
+  {
+    "pname": "Avalonia.Angle.Windows.Natives",
+    "version": "2.1.22045.20230930",
+    "hash": "sha256-RxPcWUT3b/+R3Tu5E5ftpr5ppCLZrhm+OTsi0SwW3pc="
+  },
+  {
+    "pname": "Avalonia.BuildServices",
+    "version": "0.0.29",
+    "hash": "sha256-WPHRMNowRnYSCh88DWNBCltWsLPyOfzXGzBqLYE7tRY="
+  },
+  {
+    "pname": "Avalonia.Controls.ColorPicker",
+    "version": "11.2.3",
+    "hash": "sha256-z3ZHxVSOoOjqq+5G71jnGN1Y0i3YpAkox7cj3lNr6kg="
+  },
+  {
+    "pname": "Avalonia.Controls.DataGrid",
+    "version": "11.2.3",
+    "hash": "sha256-jIJvuYN0iym/WeOC0C7z5xj5kCZSXGoeLQ/q5qQfewM="
+  },
+  {
+    "pname": "Avalonia.Desktop",
+    "version": "11.2.3",
+    "hash": "sha256-srtZi+kDbhRtMl33l91zssBWETU5oHodKbbWyfEsb/I="
+  },
+  {
+    "pname": "Avalonia.Diagnostics",
+    "version": "11.2.3",
+    "hash": "sha256-DIGkaBff+C3BLwedw5xteR5lfzb6ecxiLt12eJVgLQc="
+  },
+  {
+    "pname": "Avalonia.Fonts.Inter",
+    "version": "11.2.3",
+    "hash": "sha256-ySsCXVpjqjCX/uYkwluSfrAoBtuq9k7fC1bFjxKC9/Q="
+  },
+  {
+    "pname": "Avalonia.FreeDesktop",
+    "version": "11.2.3",
+    "hash": "sha256-3sNemBmZE06w2ul87T5HrEeHUxXMOa9MfQhpI4AoxDY="
+  },
+  {
+    "pname": "Avalonia.HtmlRenderer",
+    "version": "11.0.0",
+    "hash": "sha256-DBD113eQJNHeEgFmx/tVRSnHxhGBQIKWVKxr1QRilr4="
+  },
+  {
+    "pname": "Avalonia.Native",
+    "version": "11.2.3",
+    "hash": "sha256-2Gp98NGWcrILqF+P5PDMPRdsMby/lZiT3eWAUskFim8="
+  },
+  {
+    "pname": "Avalonia.Remote.Protocol",
+    "version": "11.2.3",
+    "hash": "sha256-dSeu7rnTD9rIvlyro2iFS52oi0vvfeaGV3kDm90BkKw="
+  },
+  {
+    "pname": "Avalonia.Skia",
+    "version": "11.2.3",
+    "hash": "sha256-QBp8wTA92hGwbmNSVL4gsjrqA9CfwDPgdTiOEqcogGA="
+  },
+  {
+    "pname": "Avalonia.Themes.Fluent",
+    "version": "11.2.3",
+    "hash": "sha256-DRl+267mUtJDUJpreUj6BxDLGGYGkEEo5vDGtGguoC8="
+  },
+  {
+    "pname": "Avalonia.Themes.Simple",
+    "version": "11.2.3",
+    "hash": "sha256-UF15yTDzHmqd33siH3TJxmxaonA51dzga+hmCUahn1k="
+  },
+  {
+    "pname": "Avalonia.Win32",
+    "version": "11.2.3",
+    "hash": "sha256-xKFKObvqdJaQjphEktRJvzmAoDEsKg3WqlEG31V3qLE="
+  },
+  {
+    "pname": "Avalonia.X11",
+    "version": "11.2.3",
+    "hash": "sha256-SD4dmpKx4l8YOyUnrA0fnf2Bb+tHSNyARh7GAtHyg60="
+  },
+  {
+    "pname": "CommunityToolkit.Mvvm",
+    "version": "8.4.0",
+    "hash": "sha256-a0D550q+ffreU9Z+kQPdzJYPNaj1UjgyPofLzUg02ZI="
+  },
+  {
+    "pname": "HarfBuzzSharp",
+    "version": "7.3.0.3",
+    "hash": "sha256-1vDIcG1aVwVABOfzV09eAAbZLFJqibip9LaIx5k+JxM="
+  },
+  {
+    "pname": "HarfBuzzSharp.NativeAssets.Linux",
+    "version": "7.3.0.3",
+    "hash": "sha256-HW5r16wdlgDMbE/IfE5AQGDVFJ6TS6oipldfMztx+LM="
+  },
+  {
+    "pname": "HarfBuzzSharp.NativeAssets.macOS",
+    "version": "7.3.0.3",
+    "hash": "sha256-UpAVfRIYY8Wh8xD4wFjrXHiJcvlBLuc2Xdm15RwQ76w="
+  },
+  {
+    "pname": "HarfBuzzSharp.NativeAssets.WebAssembly",
+    "version": "7.3.0.3",
+    "hash": "sha256-jHrU70rOADAcsVfVfozU33t/5B5Tk0CurRTf4fVQe3I="
+  },
+  {
+    "pname": "HarfBuzzSharp.NativeAssets.Win32",
+    "version": "7.3.0.3",
+    "hash": "sha256-v/PeEfleJcx9tsEQAo5+7Q0XPNgBqiSLNnB2nnAGp+I="
+  },
+  {
+    "pname": "Markdig",
+    "version": "0.40.0",
+    "hash": "sha256-GJqbAhZZjCCnY2Cg3N4KaDVKc/IPdXgkWmTjQRvX5Jw="
+  },
+  {
+    "pname": "Material.Icons",
+    "version": "2.2.0",
+    "hash": "sha256-Gw2a7oXicf3yQKEgRdwBJ0DubMvf8iEkn6GtcLF9zJM="
+  },
+  {
+    "pname": "Material.Icons.Avalonia",
+    "version": "2.2.0",
+    "hash": "sha256-RkYaULaVMjm2HJV23gGRHomv6jI0dE/lIk1AWwkWJKA="
+  },
+  {
+    "pname": "MicroCom.Runtime",
+    "version": "0.11.0",
+    "hash": "sha256-VdwpP5fsclvNqJuppaOvwEwv2ofnAI5ZSz2V+UEdLF0="
+  },
+  {
+    "pname": "Microsoft.AspNetCore.App.Ref",
+    "version": "6.0.36",
+    "hash": "sha256-9jDkWbjw/nd8yqdzVTagCuqr6owJ/DUMi4BlUZT4hWU="
+  },
+  {
+    "pname": "Microsoft.AspNetCore.App.Runtime.linux-arm64",
+    "version": "6.0.36",
+    "hash": "sha256-JQULJyF0ivLoUU1JaFfK/HHg+/qzpN7V2RR2Cc+WlQ4="
+  },
+  {
+    "pname": "Microsoft.AspNetCore.App.Runtime.linux-x64",
+    "version": "6.0.36",
+    "hash": "sha256-zUsVIpV481vMLAXaLEEUpEMA9/f1HGOnvaQnaWdzlyY="
+  },
+  {
+    "pname": "Microsoft.CodeAnalysis.Analyzers",
+    "version": "3.3.4",
+    "hash": "sha256-qDzTfZBSCvAUu9gzq2k+LOvh6/eRvJ9++VCNck/ZpnE="
+  },
+  {
+    "pname": "Microsoft.CodeAnalysis.Common",
+    "version": "4.6.0",
+    "hash": "sha256-4koWiniIrv4ZBmS9SZb3347KaejKKh11n7CRj9fkc2M="
+  },
+  {
+    "pname": "Microsoft.CodeAnalysis.CSharp",
+    "version": "4.6.0",
+    "hash": "sha256-OCxUWSolVrmP2bs2SX9WLjb/U8Box8s1Tayk05/n2/k="
+  },
+  {
+    "pname": "Microsoft.NETCore.App.Host.linux-arm64",
+    "version": "6.0.36",
+    "hash": "sha256-9lC/LYnthYhjkWWz2kkFCvlA5LJOv11jdt59SDnpdy0="
+  },
+  {
+    "pname": "Microsoft.NETCore.App.Host.linux-x64",
+    "version": "6.0.36",
+    "hash": "sha256-VFRDzx7LJuvI5yzKdGmw/31NYVbwHWPKQvueQt5xc10="
+  },
+  {
+    "pname": "Microsoft.NETCore.App.Ref",
+    "version": "6.0.36",
+    "hash": "sha256-9LZgVoIFF8qNyUu8kdJrYGLutMF/cL2K82HN2ywwlx8="
+  },
+  {
+    "pname": "Microsoft.NETCore.App.Runtime.linux-arm64",
+    "version": "6.0.36",
+    "hash": "sha256-k3rxvUhCEU0pVH8KgEMtkPiSOibn+nBh+0zT2xIfId8="
+  },
+  {
+    "pname": "Microsoft.NETCore.App.Runtime.linux-x64",
+    "version": "6.0.36",
+    "hash": "sha256-U8wJ2snSDFqeAgDVLXjnniidC7Cr5aJ1/h/BMSlyu0c="
+  },
+  {
+    "pname": "Microsoft.NETCore.Platforms",
+    "version": "1.1.0",
+    "hash": "sha256-FeM40ktcObQJk4nMYShB61H/E8B7tIKfl9ObJ0IOcCM="
+  },
+  {
+    "pname": "Microsoft.NETCore.Targets",
+    "version": "1.1.0",
+    "hash": "sha256-0AqQ2gMS8iNlYkrD+BxtIg7cXMnr9xZHtKAuN4bjfaQ="
+  },
+  {
+    "pname": "Microsoft.Win32.Primitives",
+    "version": "4.3.0",
+    "hash": "sha256-mBNDmPXNTW54XLnPAUwBRvkIORFM7/j0D0I2SyQPDEg="
+  },
+  {
+    "pname": "Mono.Cecil",
+    "version": "0.11.5",
+    "hash": "sha256-nPFwbzW08gnCjadBdgi+16MHYhsPAXnFIliveLxGaNA="
+  },
+  {
+    "pname": "Nerdbank.GitVersioning",
+    "version": "3.6.133",
+    "hash": "sha256-AEnBQaGGPMBmZJjZrdWARq/jY4SluuPIsKBbvfNEvLE="
+  },
+  {
+    "pname": "NETStandard.Library",
+    "version": "1.6.1",
+    "hash": "sha256-iNan1ix7RtncGWC9AjAZ2sk70DoxOsmEOgQ10fXm4Pw="
+  },
+  {
+    "pname": "NETStandard.Library",
+    "version": "2.0.3",
+    "hash": "sha256-Prh2RPebz/s8AzHb2sPHg3Jl8s31inv9k+Qxd293ybo="
+  },
+  {
+    "pname": "PeNet",
+    "version": "4.1.1",
+    "hash": "sha256-TyVUt3NexLY7oDb+uYEXiZcMCpaMUmzF41UvdLWXsDk="
+  },
+  {
+    "pname": "PeNet.Asn1",
+    "version": "2.0.1",
+    "hash": "sha256-ypIptb5VOAa4GHvVdd1no1CoyiOKOegFs52tZHj435I="
+  },
+  {
+    "pname": "runtime.any.System.Collections",
+    "version": "4.3.0",
+    "hash": "sha256-4PGZqyWhZ6/HCTF2KddDsbmTTjxs2oW79YfkberDZS8="
+  },
+  {
+    "pname": "runtime.any.System.Diagnostics.Tools",
+    "version": "4.3.0",
+    "hash": "sha256-8yLKFt2wQxkEf7fNfzB+cPUCjYn2qbqNgQ1+EeY2h/I="
+  },
+  {
+    "pname": "runtime.any.System.Diagnostics.Tracing",
+    "version": "4.3.0",
+    "hash": "sha256-dsmTLGvt8HqRkDWP8iKVXJCS+akAzENGXKPV18W2RgI="
+  },
+  {
+    "pname": "runtime.any.System.Globalization",
+    "version": "4.3.0",
+    "hash": "sha256-PaiITTFI2FfPylTEk7DwzfKeiA/g/aooSU1pDcdwWLU="
+  },
+  {
+    "pname": "runtime.any.System.Globalization.Calendars",
+    "version": "4.3.0",
+    "hash": "sha256-AYh39tgXJVFu8aLi9Y/4rK8yWMaza4S4eaxjfcuEEL4="
+  },
+  {
+    "pname": "runtime.any.System.IO",
+    "version": "4.3.0",
+    "hash": "sha256-vej7ySRhyvM3pYh/ITMdC25ivSd0WLZAaIQbYj/6HVE="
+  },
+  {
+    "pname": "runtime.any.System.Reflection",
+    "version": "4.3.0",
+    "hash": "sha256-ns6f++lSA+bi1xXgmW1JkWFb2NaMD+w+YNTfMvyAiQk="
+  },
+  {
+    "pname": "runtime.any.System.Reflection.Extensions",
+    "version": "4.3.0",
+    "hash": "sha256-Y2AnhOcJwJVYv7Rp6Jz6ma0fpITFqJW+8rsw106K2X8="
+  },
+  {
+    "pname": "runtime.any.System.Reflection.Primitives",
+    "version": "4.3.0",
+    "hash": "sha256-LkPXtiDQM3BcdYkAm5uSNOiz3uF4J45qpxn5aBiqNXQ="
+  },
+  {
+    "pname": "runtime.any.System.Resources.ResourceManager",
+    "version": "4.3.0",
+    "hash": "sha256-9EvnmZslLgLLhJ00o5MWaPuJQlbUFcUF8itGQNVkcQ4="
+  },
+  {
+    "pname": "runtime.any.System.Runtime",
+    "version": "4.3.0",
+    "hash": "sha256-qwhNXBaJ1DtDkuRacgHwnZmOZ1u9q7N8j0cWOLYOELM="
+  },
+  {
+    "pname": "runtime.any.System.Runtime.Handles",
+    "version": "4.3.0",
+    "hash": "sha256-PQRACwnSUuxgVySO1840KvqCC9F8iI9iTzxNW0RcBS4="
+  },
+  {
+    "pname": "runtime.any.System.Runtime.InteropServices",
+    "version": "4.3.0",
+    "hash": "sha256-Kaw5PnLYIiqWbsoF3VKJhy7pkpoGsUwn4ZDCKscbbzA="
+  },
+  {
+    "pname": "runtime.any.System.Text.Encoding",
+    "version": "4.3.0",
+    "hash": "sha256-Q18B9q26MkWZx68exUfQT30+0PGmpFlDgaF0TnaIGCs="
+  },
+  {
+    "pname": "runtime.any.System.Text.Encoding.Extensions",
+    "version": "4.3.0",
+    "hash": "sha256-6MYj0RmLh4EVqMtO/MRqBi0HOn5iG4x9JimgCCJ+EFM="
+  },
+  {
+    "pname": "runtime.any.System.Threading.Tasks",
+    "version": "4.3.0",
+    "hash": "sha256-agdOM0NXupfHbKAQzQT8XgbI9B8hVEh+a/2vqeHctg4="
+  },
+  {
+    "pname": "runtime.any.System.Threading.Timer",
+    "version": "4.3.0",
+    "hash": "sha256-BgHxXCIbicVZtpgMimSXixhFC3V+p5ODqeljDjO8hCs="
+  },
+  {
+    "pname": "runtime.debian.8-x64.runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-LXUPLX3DJxsU1Pd3UwjO1PO9NM2elNEDXeu2Mu/vNps="
+  },
+  {
+    "pname": "runtime.fedora.23-x64.runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-qeSqaUI80+lqw5MK4vMpmO0CZaqrmYktwp6L+vQAb0I="
+  },
+  {
+    "pname": "runtime.fedora.24-x64.runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-SrHqT9wrCBsxILWtaJgGKd6Odmxm8/Mh7Kh0CUkZVzA="
+  },
+  {
+    "pname": "runtime.native.System",
+    "version": "4.3.0",
+    "hash": "sha256-ZBZaodnjvLXATWpXXakFgcy6P+gjhshFXmglrL5xD5Y="
+  },
+  {
+    "pname": "runtime.native.System.IO.Compression",
+    "version": "4.3.0",
+    "hash": "sha256-DWnXs4vlKoU6WxxvCArTJupV6sX3iBbZh8SbqfHace8="
+  },
+  {
+    "pname": "runtime.native.System.Net.Http",
+    "version": "4.3.0",
+    "hash": "sha256-c556PyheRwpYhweBjSfIwEyZHnAUB8jWioyKEcp/2dg="
+  },
+  {
+    "pname": "runtime.native.System.Security.Cryptography.Apple",
+    "version": "4.3.0",
+    "hash": "sha256-2IhBv0i6pTcOyr8FFIyfPEaaCHUmJZ8DYwLUwJ+5waw="
+  },
+  {
+    "pname": "runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-Jy01KhtcCl2wjMpZWH+X3fhHcVn+SyllWFY8zWlz/6I="
+  },
+  {
+    "pname": "runtime.opensuse.13.2-x64.runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-wyv00gdlqf8ckxEdV7E+Ql9hJIoPcmYEuyeWb5Oz3mM="
+  },
+  {
+    "pname": "runtime.opensuse.42.1-x64.runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-zi+b4sCFrA9QBiSGDD7xPV27r3iHGlV99gpyVUjRmc4="
+  },
+  {
+    "pname": "runtime.osx.10.10-x64.runtime.native.System.Security.Cryptography.Apple",
+    "version": "4.3.0",
+    "hash": "sha256-serkd4A7F6eciPiPJtUyJyxzdAtupEcWIZQ9nptEzIM="
+  },
+  {
+    "pname": "runtime.osx.10.10-x64.runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-gybQU6mPgaWV3rBG2dbH6tT3tBq8mgze3PROdsuWnX0="
+  },
+  {
+    "pname": "runtime.rhel.7-x64.runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-VsP72GVveWnGUvS/vjOQLv1U80H2K8nZ4fDAmI61Hm4="
+  },
+  {
+    "pname": "runtime.ubuntu.14.04-x64.runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-4yKGa/IrNCKuQ3zaDzILdNPD32bNdy6xr5gdJigyF5g="
+  },
+  {
+    "pname": "runtime.ubuntu.16.04-x64.runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-HmdJhhRsiVoOOCcUvAwdjpMRiyuSwdcgEv2j9hxi+Zc="
+  },
+  {
+    "pname": "runtime.ubuntu.16.10-x64.runtime.native.System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-pVFUKuPPIx0edQKjzRon3zKq8zhzHEzko/lc01V/jdw="
+  },
+  {
+    "pname": "runtime.unix.Microsoft.Win32.Primitives",
+    "version": "4.3.0",
+    "hash": "sha256-LZb23lRXzr26tRS5aA0xyB08JxiblPDoA7HBvn6awXg="
+  },
+  {
+    "pname": "runtime.unix.System.Console",
+    "version": "4.3.0",
+    "hash": "sha256-AHkdKShTRHttqfMjmi+lPpTuCrM5vd/WRy6Kbtie190="
+  },
+  {
+    "pname": "runtime.unix.System.Diagnostics.Debug",
+    "version": "4.3.0",
+    "hash": "sha256-ReoazscfbGH+R6s6jkg5sIEHWNEvjEoHtIsMbpc7+tI="
+  },
+  {
+    "pname": "runtime.unix.System.IO.FileSystem",
+    "version": "4.3.0",
+    "hash": "sha256-Pf4mRl6YDK2x2KMh0WdyNgv0VUNdSKVDLlHqozecy5I="
+  },
+  {
+    "pname": "runtime.unix.System.Net.Primitives",
+    "version": "4.3.0",
+    "hash": "sha256-pHJ+I6i16MV6m77uhTC6GPY6jWGReE3SSP3fVB59ti0="
+  },
+  {
+    "pname": "runtime.unix.System.Net.Sockets",
+    "version": "4.3.0",
+    "hash": "sha256-IvgOeA2JuBjKl5yAVGjPYMPDzs9phb3KANs95H9v1w4="
+  },
+  {
+    "pname": "runtime.unix.System.Private.Uri",
+    "version": "4.3.0",
+    "hash": "sha256-c5tXWhE/fYbJVl9rXs0uHh3pTsg44YD1dJvyOA0WoMs="
+  },
+  {
+    "pname": "runtime.unix.System.Runtime.Extensions",
+    "version": "4.3.0",
+    "hash": "sha256-l8S9gt6dk3qYG6HYonHtdlYtBKyPb29uQ6NDjmrt3V4="
+  },
+  {
+    "pname": "SharpCompress",
+    "version": "0.39.0",
+    "hash": "sha256-Me88MMn5NUiw5bugFKCKFRnFSXQKIFZJ+k97Ex6jgZE="
+  },
+  {
+    "pname": "SkiaSharp",
+    "version": "2.88.9",
+    "hash": "sha256-jZ/4nVXYJtrz9SBf6sYc/s0FxS7ReIYM4kMkrhZS+24="
+  },
+  {
+    "pname": "SkiaSharp.NativeAssets.Linux",
+    "version": "2.88.9",
+    "hash": "sha256-mQ/oBaqRR71WfS66mJCvcc3uKW7CNEHoPN2JilDbw/A="
+  },
+  {
+    "pname": "SkiaSharp.NativeAssets.macOS",
+    "version": "2.88.9",
+    "hash": "sha256-qvGuAmjXGjGKMzOPBvP9VWRVOICSGb7aNVejU0lLe/g="
+  },
+  {
+    "pname": "SkiaSharp.NativeAssets.WebAssembly",
+    "version": "2.88.9",
+    "hash": "sha256-vgFL4Pdy3O1RKBp+T9N3W4nkH9yurZ0suo8u3gPmmhY="
+  },
+  {
+    "pname": "SkiaSharp.NativeAssets.Win32",
+    "version": "2.88.9",
+    "hash": "sha256-kP5XM5GgwHGfNJfe4T2yO5NIZtiF71Ddp0pd1vG5V/4="
+  },
+  {
+    "pname": "System.AppContext",
+    "version": "4.3.0",
+    "hash": "sha256-yg95LNQOwFlA1tWxXdQkVyJqT4AnoDc+ACmrNvzGiZg="
+  },
+  {
+    "pname": "System.Buffers",
+    "version": "4.3.0",
+    "hash": "sha256-XqZWb4Kd04960h4U9seivjKseGA/YEIpdplfHYHQ9jk="
+  },
+  {
+    "pname": "System.Buffers",
+    "version": "4.5.1",
+    "hash": "sha256-wws90sfi9M7kuCPWkv1CEYMJtCqx9QB/kj0ymlsNaxI="
+  },
+  {
+    "pname": "System.Buffers",
+    "version": "4.6.0",
+    "hash": "sha256-c2QlgFB16IlfBms5YLsTCFQ/QeKoS6ph1a9mdRkq/Jc="
+  },
+  {
+    "pname": "System.Collections",
+    "version": "4.3.0",
+    "hash": "sha256-afY7VUtD6w/5mYqrce8kQrvDIfS2GXDINDh73IjxJKc="
+  },
+  {
+    "pname": "System.Collections.Concurrent",
+    "version": "4.3.0",
+    "hash": "sha256-KMY5DfJnDeIsa13DpqvyN8NkReZEMAFnlmNglVoFIXI="
+  },
+  {
+    "pname": "System.Collections.Immutable",
+    "version": "7.0.0",
+    "hash": "sha256-9an2wbxue2qrtugYES9awshQg+KfJqajhnhs45kQIdk="
+  },
+  {
+    "pname": "System.Console",
+    "version": "4.3.0",
+    "hash": "sha256-Xh3PPBZr0pDbDaK8AEHbdGz7ePK6Yi1ZyRWI1JM6mbo="
+  },
+  {
+    "pname": "System.Diagnostics.Debug",
+    "version": "4.3.0",
+    "hash": "sha256-fkA79SjPbSeiEcrbbUsb70u9B7wqbsdM9s1LnoKj0gM="
+  },
+  {
+    "pname": "System.Diagnostics.DiagnosticSource",
+    "version": "4.3.0",
+    "hash": "sha256-OFJRb0ygep0Z3yDBLwAgM/Tkfs4JCDtsNhwDH9cd1Xw="
+  },
+  {
+    "pname": "System.Diagnostics.Tools",
+    "version": "4.3.0",
+    "hash": "sha256-gVOv1SK6Ape0FQhCVlNOd9cvQKBvMxRX9K0JPVi8w0Y="
+  },
+  {
+    "pname": "System.Diagnostics.Tracing",
+    "version": "4.3.0",
+    "hash": "sha256-hCETZpHHGVhPYvb4C0fh4zs+8zv4GPoixagkLZjpa9Q="
+  },
+  {
+    "pname": "System.Globalization",
+    "version": "4.3.0",
+    "hash": "sha256-caL0pRmFSEsaoeZeWN5BTQtGrAtaQPwFi8YOZPZG5rI="
+  },
+  {
+    "pname": "System.Globalization.Calendars",
+    "version": "4.3.0",
+    "hash": "sha256-uNOD0EOVFgnS2fMKvMiEtI9aOw00+Pfy/H+qucAQlPc="
+  },
+  {
+    "pname": "System.Globalization.Extensions",
+    "version": "4.3.0",
+    "hash": "sha256-mmJWA27T0GRVuFP9/sj+4TrR4GJWrzNIk2PDrbr7RQk="
+  },
+  {
+    "pname": "System.IO",
+    "version": "4.3.0",
+    "hash": "sha256-ruynQHekFP5wPrDiVyhNiRIXeZ/I9NpjK5pU+HPDiRY="
+  },
+  {
+    "pname": "System.IO.Compression",
+    "version": "4.3.0",
+    "hash": "sha256-f5PrQlQgj5Xj2ZnHxXW8XiOivaBvfqDao9Sb6AVinyA="
+  },
+  {
+    "pname": "System.IO.Compression.ZipFile",
+    "version": "4.3.0",
+    "hash": "sha256-WQl+JgWs+GaRMeiahTFUbrhlXIHapzcpTFXbRvAtvvs="
+  },
+  {
+    "pname": "System.IO.FileSystem",
+    "version": "4.3.0",
+    "hash": "sha256-vNIYnvlayuVj0WfRfYKpDrhDptlhp1pN8CYmlVd2TXw="
+  },
+  {
+    "pname": "System.IO.FileSystem.Primitives",
+    "version": "4.3.0",
+    "hash": "sha256-LMnfg8Vwavs9cMnq9nNH8IWtAtSfk0/Fy4s4Rt9r1kg="
+  },
+  {
+    "pname": "System.IO.Pipelines",
+    "version": "8.0.0",
+    "hash": "sha256-LdpB1s4vQzsOODaxiKstLks57X9DTD5D6cPx8DE1wwE="
+  },
+  {
+    "pname": "System.Linq",
+    "version": "4.3.0",
+    "hash": "sha256-R5uiSL3l6a3XrXSSL6jz+q/PcyVQzEAByiuXZNSqD/A="
+  },
+  {
+    "pname": "System.Linq.Expressions",
+    "version": "4.3.0",
+    "hash": "sha256-+3pvhZY7rip8HCbfdULzjlC9FPZFpYoQxhkcuFm2wk8="
+  },
+  {
+    "pname": "System.Memory",
+    "version": "4.5.5",
+    "hash": "sha256-EPQ9o1Kin7KzGI5O3U3PUQAZTItSbk9h/i4rViN3WiI="
+  },
+  {
+    "pname": "System.Net.Http",
+    "version": "4.3.0",
+    "hash": "sha256-UoBB7WPDp2Bne/fwxKF0nE8grJ6FzTMXdT/jfsphj8Q="
+  },
+  {
+    "pname": "System.Net.NameResolution",
+    "version": "4.3.0",
+    "hash": "sha256-eGZwCBExWsnirWBHyp2sSSSXp6g7I6v53qNmwPgtJ5c="
+  },
+  {
+    "pname": "System.Net.Primitives",
+    "version": "4.3.0",
+    "hash": "sha256-MY7Z6vOtFMbEKaLW9nOSZeAjcWpwCtdO7/W1mkGZBzE="
+  },
+  {
+    "pname": "System.Net.Sockets",
+    "version": "4.3.0",
+    "hash": "sha256-il7dr5VT/QWDg/0cuh+4Es2u8LY//+qqiY9BZmYxSus="
+  },
+  {
+    "pname": "System.Numerics.Vectors",
+    "version": "4.4.0",
+    "hash": "sha256-auXQK2flL/JpnB/rEcAcUm4vYMCYMEMiWOCAlIaqu2U="
+  },
+  {
+    "pname": "System.ObjectModel",
+    "version": "4.3.0",
+    "hash": "sha256-gtmRkWP2Kwr3nHtDh0yYtce38z1wrGzb6fjm4v8wN6Q="
+  },
+  {
+    "pname": "System.Private.Uri",
+    "version": "4.3.0",
+    "hash": "sha256-fVfgcoP4AVN1E5wHZbKBIOPYZ/xBeSIdsNF+bdukIRM="
+  },
+  {
+    "pname": "System.Reflection",
+    "version": "4.3.0",
+    "hash": "sha256-NQSZRpZLvtPWDlvmMIdGxcVuyUnw92ZURo0hXsEshXY="
+  },
+  {
+    "pname": "System.Reflection.Emit",
+    "version": "4.3.0",
+    "hash": "sha256-5LhkDmhy2FkSxulXR+bsTtMzdU3VyyuZzsxp7/DwyIU="
+  },
+  {
+    "pname": "System.Reflection.Emit.ILGeneration",
+    "version": "4.3.0",
+    "hash": "sha256-mKRknEHNls4gkRwrEgi39B+vSaAz/Gt3IALtS98xNnA="
+  },
+  {
+    "pname": "System.Reflection.Emit.Lightweight",
+    "version": "4.3.0",
+    "hash": "sha256-rKx4a9yZKcajloSZHr4CKTVJ6Vjh95ni+zszPxWjh2I="
+  },
+  {
+    "pname": "System.Reflection.Extensions",
+    "version": "4.3.0",
+    "hash": "sha256-mMOCYzUenjd4rWIfq7zIX9PFYk/daUyF0A8l1hbydAk="
+  },
+  {
+    "pname": "System.Reflection.Metadata",
+    "version": "7.0.0",
+    "hash": "sha256-GwAKQhkhPBYTqmRdG9c9taqrKSKDwyUgOEhWLKxWNPI="
+  },
+  {
+    "pname": "System.Reflection.Primitives",
+    "version": "4.3.0",
+    "hash": "sha256-5ogwWB4vlQTl3jjk1xjniG2ozbFIjZTL9ug0usZQuBM="
+  },
+  {
+    "pname": "System.Reflection.TypeExtensions",
+    "version": "4.3.0",
+    "hash": "sha256-4U4/XNQAnddgQIHIJq3P2T80hN0oPdU2uCeghsDTWng="
+  },
+  {
+    "pname": "System.Resources.ResourceManager",
+    "version": "4.3.0",
+    "hash": "sha256-idiOD93xbbrbwwSnD4mORA9RYi/D/U48eRUsn/WnWGo="
+  },
+  {
+    "pname": "System.Runtime",
+    "version": "4.3.0",
+    "hash": "sha256-51813WXpBIsuA6fUtE5XaRQjcWdQ2/lmEokJt97u0Rg="
+  },
+  {
+    "pname": "System.Runtime.CompilerServices.Unsafe",
+    "version": "6.0.0",
+    "hash": "sha256-bEG1PnDp7uKYz/OgLOWs3RWwQSVYm+AnPwVmAmcgp2I="
+  },
+  {
+    "pname": "System.Runtime.Extensions",
+    "version": "4.3.0",
+    "hash": "sha256-wLDHmozr84v1W2zYCWYxxj0FR0JDYHSVRaRuDm0bd/o="
+  },
+  {
+    "pname": "System.Runtime.Handles",
+    "version": "4.3.0",
+    "hash": "sha256-KJ5aXoGpB56Y6+iepBkdpx/AfaJDAitx4vrkLqR7gms="
+  },
+  {
+    "pname": "System.Runtime.InteropServices",
+    "version": "4.3.0",
+    "hash": "sha256-8sDH+WUJfCR+7e4nfpftj/+lstEiZixWUBueR2zmHgI="
+  },
+  {
+    "pname": "System.Runtime.InteropServices.RuntimeInformation",
+    "version": "4.3.0",
+    "hash": "sha256-MYpl6/ZyC6hjmzWRIe+iDoldOMW1mfbwXsduAnXIKGA="
+  },
+  {
+    "pname": "System.Runtime.Numerics",
+    "version": "4.3.0",
+    "hash": "sha256-P5jHCgMbgFMYiONvzmaKFeOqcAIDPu/U8bOVrNPYKqc="
+  },
+  {
+    "pname": "System.Security.Claims",
+    "version": "4.3.0",
+    "hash": "sha256-Fua/rDwAqq4UByRVomAxMPmDBGd5eImRqHVQIeSxbks="
+  },
+  {
+    "pname": "System.Security.Cryptography.Algorithms",
+    "version": "4.3.0",
+    "hash": "sha256-tAJvNSlczYBJ3Ed24Ae27a55tq/n4D3fubNQdwcKWA8="
+  },
+  {
+    "pname": "System.Security.Cryptography.Cng",
+    "version": "4.3.0",
+    "hash": "sha256-u17vy6wNhqok91SrVLno2M1EzLHZm6VMca85xbVChsw="
+  },
+  {
+    "pname": "System.Security.Cryptography.Csp",
+    "version": "4.3.0",
+    "hash": "sha256-oefdTU/Z2PWU9nlat8uiRDGq/PGZoSPRgkML11pmvPQ="
+  },
+  {
+    "pname": "System.Security.Cryptography.Encoding",
+    "version": "4.3.0",
+    "hash": "sha256-Yuge89N6M+NcblcvXMeyHZ6kZDfwBv3LPMDiF8HhJss="
+  },
+  {
+    "pname": "System.Security.Cryptography.OpenSsl",
+    "version": "4.3.0",
+    "hash": "sha256-DL+D2sc2JrQiB4oAcUggTFyD8w3aLEjJfod5JPe+Oz4="
+  },
+  {
+    "pname": "System.Security.Cryptography.Pkcs",
+    "version": "8.0.1",
+    "hash": "sha256-KMNIkJ3yQ/5O6WIhPjyAIarsvIMhkp26A6aby5KkneU="
+  },
+  {
+    "pname": "System.Security.Cryptography.Primitives",
+    "version": "4.3.0",
+    "hash": "sha256-fnFi7B3SnVj5a+BbgXnbjnGNvWrCEU6Hp/wjsjWz318="
+  },
+  {
+    "pname": "System.Security.Cryptography.X509Certificates",
+    "version": "4.3.0",
+    "hash": "sha256-MG3V/owDh273GCUPsGGraNwaVpcydupl3EtPXj6TVG0="
+  },
+  {
+    "pname": "System.Security.Principal",
+    "version": "4.3.0",
+    "hash": "sha256-rjudVUHdo8pNJg2EVEn0XxxwNo5h2EaYo+QboPkXlYk="
+  },
+  {
+    "pname": "System.Security.Principal.Windows",
+    "version": "4.3.0",
+    "hash": "sha256-mbdLVUcEwe78p3ZnB6jYsizNEqxMaCAWI3tEQNhRQAE="
+  },
+  {
+    "pname": "System.Text.Encoding",
+    "version": "4.3.0",
+    "hash": "sha256-GctHVGLZAa/rqkBNhsBGnsiWdKyv6VDubYpGkuOkBLg="
+  },
+  {
+    "pname": "System.Text.Encoding.CodePages",
+    "version": "7.0.0",
+    "hash": "sha256-eCKTVwumD051ZEcoJcDVRGnIGAsEvKpfH3ydKluHxmo="
+  },
+  {
+    "pname": "System.Text.Encoding.Extensions",
+    "version": "4.3.0",
+    "hash": "sha256-vufHXg8QAKxHlujPHHcrtGwAqFmsCD6HKjfDAiHyAYc="
+  },
+  {
+    "pname": "System.Text.RegularExpressions",
+    "version": "4.3.0",
+    "hash": "sha256-VLCk1D1kcN2wbAe3d0YQM/PqCsPHOuqlBY1yd2Yo+K0="
+  },
+  {
+    "pname": "System.Threading",
+    "version": "4.3.0",
+    "hash": "sha256-ZDQ3dR4pzVwmaqBg4hacZaVenQ/3yAF/uV7BXZXjiWc="
+  },
+  {
+    "pname": "System.Threading.Tasks",
+    "version": "4.3.0",
+    "hash": "sha256-Z5rXfJ1EXp3G32IKZGiZ6koMjRu0n8C1NGrwpdIen4w="
+  },
+  {
+    "pname": "System.Threading.Tasks.Extensions",
+    "version": "4.3.0",
+    "hash": "sha256-X2hQ5j+fxcmnm88Le/kSavjiGOmkcumBGTZKBLvorPc="
+  },
+  {
+    "pname": "System.Threading.Tasks.Extensions",
+    "version": "4.5.4",
+    "hash": "sha256-owSpY8wHlsUXn5xrfYAiu847L6fAKethlvYx97Ri1ng="
+  },
+  {
+    "pname": "System.Threading.ThreadPool",
+    "version": "4.3.0",
+    "hash": "sha256-wW0QdvssRoaOfQLazTGSnwYTurE4R8FxDx70pYkL+gg="
+  },
+  {
+    "pname": "System.Threading.Timer",
+    "version": "4.3.0",
+    "hash": "sha256-pmhslmhQhP32TWbBzoITLZ4BoORBqYk25OWbru04p9s="
+  },
+  {
+    "pname": "System.Xml.ReaderWriter",
+    "version": "4.3.0",
+    "hash": "sha256-QQ8KgU0lu4F5Unh+TbechO//zaAGZ4MfgvW72Cn1hzA="
+  },
+  {
+    "pname": "System.Xml.XDocument",
+    "version": "4.3.0",
+    "hash": "sha256-rWtdcmcuElNOSzCehflyKwHkDRpiOhJJs8CeQ0l1CCI="
+  },
+  {
+    "pname": "Tmds.DBus.Protocol",
+    "version": "0.20.0",
+    "hash": "sha256-CRW/tkgsuBiBJfRwou12ozRQsWhHDooeP88E5wWpWJw="
+  },
+  {
+    "pname": "ValveKeyValue",
+    "version": "0.12.0.391",
+    "hash": "sha256-N7yCM2srP1SFxcqYRjk9dt4pPHdxIetfpw2UMe7kOes="
+  },
+  {
+    "pname": "ZstdSharp.Port",
+    "version": "0.8.4",
+    "hash": "sha256-4bFUNK++6yUOnY7bZQiibClSJUQjH0uIiUbQLBtPWbo="
+  }
+]
--- a/pkgs/by-name/he/hedgemodmanager/package.nix
+++ b/pkgs/by-name/he/hedgemodmanager/package.nix
@ -0,0 +1,53 @@
+{
+  lib,
+  buildDotnetModule,
+  dotnetCorePackages,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+buildDotnetModule (finalAttrs: {
+  pname = "hedgemodmanager";
+  version = "8.0.0-beta4";
+
+  src = fetchFromGitHub {
+    owner = "hedge-dev";
+    repo = "HedgeModManager";
+    tag = finalAttrs.version;
+    hash = "sha256-1uwcpeyOxwKI0fyAmchYEMqStF52wXkCZej+ZQ+aFeY=";
+  };
+
+  projectFile = "Source/HedgeModManager.UI/HedgeModManager.UI.csproj";
+  nugetDeps = ./deps.json;
+
+  dotnet-sdk = dotnetCorePackages.sdk_8_0;
+  dotnet-runtime = dotnetCorePackages.runtime_8_0;
+
+  postPatch = ''
+    substituteInPlace flatpak/hedgemodmanager.desktop --replace-fail "/app/bin/HedgeModManager.UI" "HedgeModManager.UI"
+  '';
+
+  # https://github.com/hedge-dev/HedgeModManager/blob/8.0.0-beta4/flatpak/io.github.hedge_dev.hedgemodmanager.yml#L53-L55
+  postInstall = ''
+    install -Dm644 flatpak/hedgemodmanager.png $out/share/icons/hicolor/256x256/apps/io.github.hedge_dev.hedgemodmanager.png
+    install -Dm644 flatpak/hedgemodmanager.metainfo.xml $out/share/metainfo/io.github.hedge_dev.hedgemodmanager.metainfo.xml
+    install -Dm644 flatpak/hedgemodmanager.desktop $out/share/applications/io.github.hedge_dev.hedgemodmanager.desktop
+  '';
+
+  passthru.updateScript = nix-update-script {
+    extraArgs = [
+      "--version"
+      "unstable"
+    ];
+  };
+
+  meta = {
+    mainProgram = "HedgeModManager.UI";
+    description = "Mod manager for Hedgehog Engine games";
+    homepage = "https://github.com/hedge-dev/HedgeModManager";
+    changelog = "https://github.com/hedge-dev/HedgeModManager/releases/tag/${finalAttrs.version}";
+    license = lib.licenses.mit;
+    platforms = lib.platforms.linux;
+    maintainers = with lib.maintainers; [ federicoschonborn ];
+  };
+})
--- a/pkgs/by-name/hu/hugo/package.nix
+++ b/pkgs/by-name/hu/hugo/package.nix
@ -11,13 +11,13 @@

 buildGoModule (finalAttrs: {
  pname = "hugo";
-  version = "0.147.1";
+  version = "0.147.3";

  src = fetchFromGitHub {
    owner = "gohugoio";
    repo = "hugo";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Fj/1p75uOY+Zx9F9tBOjqa8nL1mbvVZzc3N7Js0qXgQ=";
+    hash = "sha256-CLeVT44A9QmkW4OED14I5u0JbafvXFWeaJnsPDukJJ8=";
  };

  vendorHash = "sha256-/XXYKuZNwrBx+Dr4XacDIzTrdELtXYHRjOzjhcBjoK4=";
--- a/pkgs/by-name/id/idmail/package.nix
+++ b/pkgs/by-name/id/idmail/package.nix
@ -0,0 +1,81 @@
+{
+  binaryen,
+  cargo-leptos,
+  fetchFromGitHub,
+  lib,
+  rustc,
+  makeWrapper,
+  nix-update-script,
+  nodePackages,
+  rustPlatform,
+  tailwindcss_3,
+  wasm-bindgen-cli_0_2_100,
+}:
+let
+  tailwindcss = tailwindcss_3.overrideAttrs (_prev: {
+    plugins = [
+      nodePackages."@tailwindcss/aspect-ratio"
+      nodePackages."@tailwindcss/forms"
+      nodePackages."@tailwindcss/line-clamp"
+      nodePackages."@tailwindcss/typography"
+    ];
+  });
+in
+rustPlatform.buildRustPackage rec {
+  pname = "idmail";
+  version = "1.0.1";
+
+  src = fetchFromGitHub {
+    owner = "oddlama";
+    repo = "idmail";
+    tag = "v${version}";
+    hash = "sha256-9rl2UG8DeWd8hVh3N+dqyV5gO0LErok+kZ1vQZnVAe8=";
+  };
+
+  useFetchCargoVendor = true;
+  cargoHash = "sha256-UcS2gAoa2fzPu6hh8I5sXSHHbAmzsecT44Ju2CVsK0Q=";
+
+  RUSTC_BOOTSTRAP = 1;
+  RUSTFLAGS = "--cfg=web_sys_unstable_apis";
+
+  nativeBuildInputs = [
+    wasm-bindgen-cli_0_2_100
+    binaryen
+    cargo-leptos
+    rustc.llvmPackages.lld
+    tailwindcss
+    makeWrapper
+  ];
+  buildPhase = ''
+    runHook preBuild
+
+    cargo leptos build --release
+
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/bin $out/share
+    cp target/release/idmail $out/bin
+    cp -r target/site $out/share
+    wrapProgram $out/bin/idmail --set LEPTOS_SITE_ROOT $out/share/site
+
+    runHook postInstall
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Email alias and account management interface for self-hosted mailservers";
+    homepage = "https://github.com/oddlama/idmail";
+    changelog = "https://github.com/oddlama/idmail/releases/tag/v${version}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
+      oddlama
+      patrickdag
+    ];
+    mainProgram = "idmail";
+  };
+}
--- a/pkgs/by-name/is/ispc/package.nix
+++ b/pkgs/by-name/is/ispc/package.nix
@ -21,7 +21,7 @@

 stdenv.mkDerivation rec {
  pname = "ispc";
-  version = "1.26.0";
+  version = "1.27.0";

  dontFixCmake = true; # https://github.com/NixOS/nixpkgs/pull/232522#issuecomment-2133803566

@ -29,7 +29,7 @@ stdenv.mkDerivation rec {
    owner = pname;
    repo = pname;
    rev = "v${version}";
-    sha256 = "sha256-T8tFJaHkb6XpKA2s9tlNfJE7n0YJx30KTBIng+dmQ2c=";
+    sha256 = "sha256-nNiAlQ+MLkOV0/xLafsUNPV5HKCIqWCD2Fo8ChgFJMk=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ki/kimai/package.nix
+++ b/pkgs/by-name/ki/kimai/package.nix
@ -7,13 +7,13 @@

 php.buildComposerProject2 (finalAttrs: {
  pname = "kimai";
-  version = "2.31.0";
+  version = "2.33.0";

  src = fetchFromGitHub {
    owner = "kimai";
    repo = "kimai";
    tag = finalAttrs.version;
-    hash = "sha256-aVRqek8nMgos1V247ZmJenVFfAmqEpNGtYWScWHD/gg=";
+    hash = "sha256-YkACx0xl+6yN8pgH56WPdEoNAZxAxHIPLay28V1S5WQ=";
  };

  php = php.buildEnv {
@ -38,7 +38,7 @@ php.buildComposerProject2 (finalAttrs: {
    '';
  };

-  vendorHash = "sha256-uPIP3g8oJb+JnW/WnAdW/ZSLAQwyXI9X006rrA7pnKI=";
+  vendorHash = "sha256-smDAz4RnVEgPcGjsQmN0NC8kWgLw78YFuef9gbajAeQ=";

  composerNoPlugins = false;
  composerNoScripts = false;
--- a/pkgs/by-name/mi/min-ed-launcher/package.nix
+++ b/pkgs/by-name/mi/min-ed-launcher/package.nix
@ -6,13 +6,13 @@
 }:
 buildDotnetModule rec {
  pname = "min-ed-launcher";
-  version = "0.11.3";
+  version = "0.12.0";

  src = fetchFromGitHub {
    owner = "rfvgyhn";
    repo = "min-ed-launcher";
    tag = "v${version}";
-    hash = "sha256-HJIvbuTsCG51PPVieJbXGyAviqgM9/WPz0+0VhIWz9k=";
+    hash = "sha256-x3T88bhjxlf6K+COGfZGLsgwlEBSs9WR9zV+ZiTzh7g=";

    leaveDotGit = true; # During build the current commit is appended to the version
  };
--- a/pkgs/by-name/mo/molly-guard/package.nix
+++ b/pkgs/by-name/mo/molly-guard/package.nix
@ -7,26 +7,22 @@
  systemd,
 }:

-stdenv.mkDerivation (finalAttrs: {
+stdenv.mkDerivation rec {
  pname = "molly-guard";
-  version = "0.8.5";
+  version = "0.7.2";

  src = fetchurl {
-    url = "https://launchpad.net/ubuntu/+archive/primary/+files/molly-guard_${finalAttrs.version}_all.deb";
-    hash = "sha256-9CQNU+5OPmCPTN3rotyJPLcvI8eo5WJQqx0OaI7Wox4=";
+    url = "https://launchpad.net/ubuntu/+archive/primary/+files/molly-guard_${version}_all.deb";
+    sha256 = "1k6b1hn8lc4rj9n036imsl7s9lqj6ny3acdhnbnamsdkkndmxrw7";
  };

  nativeBuildInputs = [ dpkg ];

  installPhase = ''
-    runHook preInstall
-
-    sed -i "s|/lib/molly-guard|${systemd}/sbin|g" usr/lib/molly-guard/molly-guard
-    sed -i "s|run-parts|${busybox}/bin/run-parts|g" usr/lib/molly-guard/molly-guard
-    sed -i "s|/etc/molly-guard/|$out/etc/molly-guard/|g" usr/lib/molly-guard/molly-guard
-    cp -r usr $out
-
-    runHook postInstall
+    sed -i "s|/lib/molly-guard|${systemd}/sbin|g" lib/molly-guard/molly-guard
+    sed -i "s|run-parts|${busybox}/bin/run-parts|g" lib/molly-guard/molly-guard
+    sed -i "s|/etc/molly-guard/|$out/etc/molly-guard/|g" lib/molly-guard/molly-guard
+    cp -r ./ $out/
  '';

  postFixup = ''
@ -35,12 +31,12 @@ stdenv.mkDerivation (finalAttrs: {
    done;
  '';

-  meta = {
+  meta = with lib; {
    description = "Attempts to prevent you from accidentally shutting down or rebooting machines";
    homepage = "https://salsa.debian.org/debian/molly-guard";
-    license = lib.licenses.artistic2;
-    platforms = lib.platforms.linux;
-    maintainers = with lib.maintainers; [ DerTim1 ];
+    license = licenses.artistic2;
+    platforms = platforms.linux;
+    maintainers = with maintainers; [ DerTim1 ];
    priority = -10;
  };
-})
+}
--- a/pkgs/by-name/mo/moonlight/package.nix
+++ b/pkgs/by-name/mo/moonlight/package.nix
@ -8,13 +8,13 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "moonlight";
-  version = "1.3.16";
+  version = "1.3.18";

  src = fetchFromGitHub {
    owner = "moonlight-mod";
    repo = "moonlight";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-aLx/HDrnGTgcRZFs5kiiz173yi/RnARERDKIq+p4OJw=";
+    hash = "sha256-CPBdZ/1mQAw0cC36D1Yo+ml+3eDDJtfSELYNIF0fKRw=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/na/nanoboyadvance/package.nix
+++ b/pkgs/by-name/na/nanoboyadvance/package.nix
@ -37,6 +37,11 @@ stdenv.mkDerivation (finalAttrs: {
      url = "https://github.com/nba-emu/NanoBoyAdvance/commit/f5551cc1aa6a12b3d65dd56d186c73a67f3d9dd6.patch";
      hash = "sha256-TCyN0qz7o7BDhVZtaTsWCZAcKThi5oVqUM0NGmj44FI=";
    })
+    (fetchpatch {
+      name = "fix-darwin-bundle-install-path.patch";
+      url = "https://github.com/nba-emu/NanoBoyAdvance/commit/bd07a261141cd1f67b828d20f6d01a97adf91c16.patch";
+      hash = "sha256-Nqz35PGfPBZ3Lg6szez4k3R/NkgObNndvbxY8JCY40Y";
+    })
  ];

  nativeBuildInputs = [
@ -53,13 +58,24 @@ stdenv.mkDerivation (finalAttrs: {
    libunarr
  ];

-  cmakeFlags = [
-    (lib.cmakeFeature "FETCHCONTENT_SOURCE_DIR_GLAD" "${gladSrc}")
-    (lib.cmakeBool "USE_SYSTEM_FMT" true)
-    (lib.cmakeBool "USE_SYSTEM_TOML11" true)
-    (lib.cmakeBool "USE_SYSTEM_UNARR" true)
-    (lib.cmakeBool "PORTABLE_MODE" false)
-  ];
+  cmakeFlags =
+    [
+      (lib.cmakeFeature "FETCHCONTENT_SOURCE_DIR_GLAD" "${gladSrc}")
+      (lib.cmakeBool "USE_SYSTEM_FMT" true)
+      (lib.cmakeBool "USE_SYSTEM_TOML11" true)
+      (lib.cmakeBool "USE_SYSTEM_UNARR" true)
+      (lib.cmakeBool "PORTABLE_MODE" false)
+    ]
+    ++ lib.optionals stdenv.hostPlatform.isDarwin [
+      (lib.cmakeBool "MACOS_BUILD_APP_BUNDLE" true)
+      (lib.cmakeBool "MACOS_BUNDLE_QT" false)
+    ];
+
+  # Make it runnable from the terminal on Darwin
+  postInstall = lib.optionals stdenv.hostPlatform.isDarwin ''
+    mkdir "$out/bin"
+    ln -s "$out/Applications/NanoBoyAdvance.app/Contents/MacOS/NanoBoyAdvance" "$out/bin/NanoBoyAdvance"
+  '';

  meta = {
    description = "Cycle-accurate Nintendo Game Boy Advance emulator";
--- a/pkgs/by-name/na/nav/package.nix
+++ b/pkgs/by-name/na/nav/package.nix
@ -1,30 +1,27 @@
 {
  stdenv,
  lib,
-  fetchzip,
-  nix-update-script,
+  fetchurl,
  autoPatchelfHook,
  libxcrypt-legacy,
 }:

-let
-  system = stdenv.hostPlatform.parsed.cpu.name;
-  platform = "${system}-unknown-linux-gnu";
-in
 stdenv.mkDerivation rec {
  pname = "nav";
-  version = "1.2.1";
+  version = "1.3.1";

-  src = fetchzip {
-    url = "https://github.com/Jojo4GH/nav/releases/download/v${version}/nav-${platform}.tar.gz";
+  src = fetchurl {
+    url = "https://github.com/Jojo4GH/nav/releases/download/v${version}/nav-${stdenv.hostPlatform.parsed.cpu.name}-unknown-linux-gnu.tar.gz";
    sha256 =
      {
-        x86_64-linux = "sha256-ihn5wlagmujHlSfJpgojQNqa4NjLF1wk2pt8wHi60DY=";
-        aarch64-linux = "sha256-l3rKu3OU/TUUjmx3p06k9V5eN3ZDNcxbxObLqVQ2B7U=";
+        x86_64-linux = "sha256-T/gmQVetPoW+veVmQBHnv56UetiMUXUoJU7f2t9yMVE=";
+        aarch64-linux = "sha256-ueEeaiUGx+ZbTywNrCMEIZl1zNxhfmZQuN/GkYpiC1Q=";
      }
      .${stdenv.hostPlatform.system} or (throw "unsupported system ${stdenv.hostPlatform.system}");
  };

+  sourceRoot = ".";
+
  nativeBuildInputs = [ autoPatchelfHook ];
  buildInputs = [
    stdenv.cc.cc.lib
@ -40,7 +37,7 @@ stdenv.mkDerivation rec {
    runHook postInstall
  '';

-  passthru.updateScript = nix-update-script { };
+  passthru.updateScript = ./update.sh;

  meta = {
    description = "Interactive and stylish replacement for ls & cd";
--- a/pkgs/by-name/na/nav/update.sh
+++ b/pkgs/by-name/na/nav/update.sh
@ -0,0 +1,11 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p curl jq common-updater-scripts
+set -eou pipefail
+
+version=$(curl ${GITHUB_TOKEN:+-u ":$GITHUB_TOKEN"} -sfL "https://api.github.com/repos/Jojo4GH/nav/releases/latest" | jq -r .tag_name | sed 's/v//')
+
+for cpu in "x86_64" "aarch64"; do
+
+    hash=$(nix-hash --type sha256 --to-sri $(curl ${GITHUB_TOKEN:+-u ":$GITHUB_TOKEN"} -sfL "https://github.com/Jojo4GH/nav/releases/download/v$version/nav-$cpu-unknown-linux-gnu.tar.gz.sha256"))
+    update-source-version nav $version $hash --system=$cpu-linux --ignore-same-version
+done
--- a/pkgs/by-name/op/opa-envoy-plugin/package.nix
+++ b/pkgs/by-name/op/opa-envoy-plugin/package.nix
@ -14,13 +14,13 @@ assert

 buildGoModule rec {
  pname = "opa-envoy-plugin";
-  version = "1.3.0-envoy-1";
+  version = "1.4.2-envoy";

  src = fetchFromGitHub {
    owner = "open-policy-agent";
    repo = "opa-envoy-plugin";
    tag = "v${version}";
-    hash = "sha256-IJe/JKdsjJ0oJWa35UjxXHiVsm7M1mFwVx5oQ45uuSE=";
+    hash = "sha256-DRW9VaxKd+MRcC3Ay7f9sblWTY9/RUNfH76LgPEhTas=";
  };

  vendorHash = null;
--- a/pkgs/by-name/op/opensurge/package.nix
+++ b/pkgs/by-name/op/opensurge/package.nix
@ -0,0 +1,64 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  cmake,
+  ninja,
+  allegro5,
+  libglvnd,
+  surgescript,
+  physfs,
+  xorg,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "opensurge";
+  version = "0.6.1.2";
+
+  src = fetchFromGitHub {
+    owner = "alemart";
+    repo = "opensurge";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-HvpKZ62mYy7XkZOnIn7QRA2rFVREFnKO1NO83aCR76k=";
+  };
+
+  nativeBuildInputs = [
+    cmake
+    ninja
+  ];
+
+  buildInputs = [
+    allegro5
+    libglvnd
+    physfs
+    surgescript
+    xorg.libX11
+  ];
+
+  cmakeFlags = [
+    "-DGAME_BINDIR=${placeholder "out"}/bin"
+    "-DDESKTOP_ICON_PATH=${placeholder "out"}/share/pixmaps"
+    "-DDESKTOP_METAINFO_PATH=${placeholder "out"}/share/metainfo"
+    "-DDESKTOP_ENTRY_PATH=${placeholder "out"}/share/applications"
+    "-DWANT_BUILD_DATE=OFF"
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  # Darwin fails with "Critical error: required built-in appearance SystemAppearance not found"
+  doInstallCheck = !stdenv.hostPlatform.isDarwin;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    mainProgram = "opensurge";
+    description = "Fun 2D retro platformer inspired by Sonic games and a game creation system";
+    homepage = "https://opensurge2d.org/";
+    downloadPage = "https://github.com/alemart/opensurge";
+    changelog = "https://github.com/alemart/opensurge/blob/v${finalAttrs.version}/CHANGES.md";
+    license = lib.licenses.gpl3Only;
+    platforms = lib.platforms.all;
+    maintainers = with lib.maintainers; [ federicoschonborn ];
+  };
+})
--- a/pkgs/by-name/pa/paho-mqtt-cpp/package.nix
+++ b/pkgs/by-name/pa/paho-mqtt-cpp/package.nix
@ -11,13 +11,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "paho.mqtt.cpp";
-  version = "1.5.2";
+  version = "1.5.3";

  src = fetchFromGitHub {
    owner = "eclipse";
    repo = "paho.mqtt.cpp";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-3fUqtYFerjEmwn68rNvDeqGU+gly6fkWOyBPikhoFNg=";
+    hash = "sha256-vwfWcJqAWY4Em4MxZVcvOi6pzXAYYlOrKh6peMtjcXo=";
  };

  nativeBuildInputs = [ cmake ];
--- a/pkgs/by-name/po/pocket-casts/package.nix
+++ b/pkgs/by-name/po/pocket-casts/package.nix
@ -10,16 +10,16 @@

 buildNpmPackage rec {
  pname = "pocket-casts";
-  version = "0.10.2";
+  version = "0.10.3";

  src = fetchFromGitHub {
    owner = "felicianotech";
    repo = "pocket-casts-desktop-app";
    rev = "v${version}";
-    hash = "sha256-qXwLnAp8GxOBnPy5uM/Y4dKlALRLo9Hs2p8/WSJcAyE=";
+    hash = "sha256-IhH5nZ2kXVW2D8cMmVyMX4xZLnzfMAp2gwQgZgHOItY=";
  };

-  npmDepsHash = "sha256-HU+jfp+Rmw78wTSA0m9Q6EW6+bw84+MEnnSaPnKqqIo=";
+  npmDepsHash = "sha256-oLZ81SA+eO20sUc2cwba3cc6vu1Qf/lNkIfzK2CQdrw=";

  env.ELECTRON_SKIP_BINARY_DOWNLOAD = "1";

--- a/pkgs/by-name/po/posting/package.nix
+++ b/pkgs/by-name/po/posting/package.nix
@ -6,14 +6,14 @@
 }:
 python3Packages.buildPythonApplication rec {
  pname = "posting";
-  version = "2.6.0";
+  version = "2.7.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "darrenburns";
    repo = "posting";
    tag = version;
-    hash = "sha256-CEfApa1TfBovmGMSxqtHZC9aSSEGYTyVXGpRGxLI7Vo=";
+    hash = "sha256-FkeQSU/gktCsCFoKAk0igfHj16WpxQG01WyAmBYLwX4=";
  };

  pythonRelaxDeps = true;
@ -53,9 +53,12 @@ python3Packages.buildPythonApplication rec {
    description = "Modern API client that lives in your terminal";
    mainProgram = "posting";
    homepage = "https://posting.sh/";
-    changelog = "https://github.com/darrenburns/posting/releases/tag/${version}";
+    changelog = "https://github.com/darrenburns/posting/releases/tag/${src.tag}";
    license = lib.licenses.asl20;
-    maintainers = with lib.maintainers; [ jorikvanveen ];
+    maintainers = with lib.maintainers; [
+      jorikvanveen
+      fullmetalsheep
+    ];
    platforms = lib.platforms.unix;
  };
 }
--- a/pkgs/by-name/qd/qdiskinfo/package.nix
+++ b/pkgs/by-name/qd/qdiskinfo/package.nix
@ -8,6 +8,7 @@
  qt6,
  qdiskinfo,
  themeBundle ? null,
+  unstableGitUpdater,
 }:

 let
@ -33,15 +34,15 @@ assert
    && themeBundle' ? rightCharacter
  );

-stdenv.mkDerivation (finalAttrs: {
+stdenv.mkDerivation {
  pname = "qdiskinfo";
-  version = "0.3";
+  version = "0.3-unstable-2025-05-08";

  src = fetchFromGitHub {
    owner = "edisionnano";
    repo = "QDiskInfo";
-    tag = finalAttrs.version;
-    hash = "sha256-0zF3Nc5K8+K68HOSy30ieYvYP9/oSkTe0+cp0hVo9Gs=";
+    rev = "3416cc7ac19b25bb78eab135cf5e0b281e506de0";
+    hash = "sha256-loL6fzOSoZyCmrs7joHQCsCStLGgKxmMuqFmtADWTW0=";
  };

  nativeBuildInputs = [
@ -103,14 +104,18 @@ stdenv.mkDerivation (finalAttrs: {
        themeName: themeBundle:
        (qdiskinfo.override { inherit themeBundle; }).overrideAttrs { pname = "qdiskinfo-${themeName}"; }
      );
+      updateScript = unstableGitUpdater { };
    };

  meta = {
    description = "CrystalDiskInfo alternative for Linux";
    homepage = "https://github.com/edisionnano/QDiskInfo";
    license = lib.licenses.gpl3Plus;
-    maintainers = with lib.maintainers; [ roydubnium ];
+    maintainers = with lib.maintainers; [
+      roydubnium
+      ryand56
+    ];
    platforms = lib.platforms.linux;
    mainProgram = "QDiskInfo";
  };
-})
+}
--- a/pkgs/by-name/rm/rmate-sh/package.nix
+++ b/pkgs/by-name/rm/rmate-sh/package.nix
@ -4,6 +4,7 @@
  fetchFromGitHub,
  patsh,
  hostname,
+  coreutils,
 }:

 stdenv.mkDerivation rec {
@ -19,6 +20,9 @@ stdenv.mkDerivation rec {

  nativeBuildInputs = [ patsh ];

+  # needed for cross
+  buildInputs = [ coreutils ];
+
  buildPhase = ''
    runHook preBuild

@ -26,7 +30,7 @@ stdenv.mkDerivation rec {
      --replace-fail \
        'echo "hostname"' \
        'echo "${hostname}/bin/hostname"'
-    patsh -f rmate -s ${builtins.storeDir}
+    patsh -f rmate -s ${builtins.storeDir} --path "$HOST_PATH"

    runHook postBuild
  '';
--- a/pkgs/by-name/sc/script-directory/package.nix
+++ b/pkgs/by-name/sc/script-directory/package.nix
@ -4,6 +4,7 @@
  fetchFromGitHub,
  installShellFiles,
  patsh,
+  coreutils,
 }:

 stdenvNoCC.mkDerivation rec {
@ -22,10 +23,13 @@ stdenvNoCC.mkDerivation rec {
    patsh
  ];

+  # needed for cross
+  buildInputs = [ coreutils ];
+
  installPhase = ''
    runHook preInstall

-    patsh -f sd
+    patsh -f sd -s ${builtins.storeDir} --path "$HOST_PATH"
    install -Dt "$out/bin" sd
    installShellCompletion --zsh _sd

--- a/pkgs/by-name/so/sourcegit/deps.json
+++ b/pkgs/by-name/so/sourcegit/deps.json
@ -1,8 +1,8 @@
 [
  {
    "pname": "Avalonia",
-    "version": "11.2.5",
-    "hash": "sha256-DGTMzInnfvJUJWu2SXiRBercxxe1/paQkSlBHMahp4g="
+    "version": "11.2.8",
+    "hash": "sha256-GbZIXopQh6VSRLAg47TRWHvMYEl5/c7rtvNmFnlDhAo="
  },
  {
    "pname": "Avalonia.Angle.Windows.Natives",
@ -11,8 +11,8 @@
  },
  {
    "pname": "Avalonia.AvaloniaEdit",
-    "version": "11.1.0",
-    "hash": "sha256-K9+hK+4aK93dyuGytYvVU25daz605+KN54hmwQYXFF8="
+    "version": "11.2.0",
+    "hash": "sha256-AFe1jt9xR8XGq4tKkxOdUd7aQOGRSE+M2EQ8fOiV6xo="
  },
  {
    "pname": "Avalonia.BuildServices",
@ -21,43 +21,43 @@
  },
  {
    "pname": "Avalonia.Controls.ColorPicker",
-    "version": "11.2.5",
-    "hash": "sha256-gWGIqXrac0fOnmGbovcFWv5Uj14hOyC+n0l45N7owMg="
+    "version": "11.2.8",
+    "hash": "sha256-jcCErs44R9tl6zjMkRxdwU9lBxv13MOZMi9Hcm7Tals="
  },
  {
    "pname": "Avalonia.Controls.DataGrid",
-    "version": "11.2.5",
-    "hash": "sha256-eGKc+UnsO5nNiUd7+n3CQW6vIWq2qpazYvYXrVTQY7s="
+    "version": "11.2.8",
+    "hash": "sha256-bAbHI5bKyTYksXsnOS5poBBxdhYQE/HSj52YxqGvkok="
  },
  {
    "pname": "Avalonia.Desktop",
-    "version": "11.2.5",
-    "hash": "sha256-rDJ1NJM3tEqB7sRszj0AfplwkkvtE3Hvn7acrIsq+yw="
+    "version": "11.2.8",
+    "hash": "sha256-Mr2x3hm3ArlQwGlWO9MuFWUelf4EVmVPAGANm1MxM1o="
  },
  {
    "pname": "Avalonia.Diagnostics",
-    "version": "11.2.5",
-    "hash": "sha256-WsAMBmNfUKMB2II3AfM8A0klfJR/vgEtRUTGpgC6F3A="
+    "version": "11.2.8",
+    "hash": "sha256-3+88G0O1LrQSCSxI6s0aFD34nhgqTH1b3rMXBaXqY0M="
  },
  {
    "pname": "Avalonia.Fonts.Inter",
-    "version": "11.2.5",
-    "hash": "sha256-cPdNS/VWH6yZ/9Ea+U5UBx6RgC0SpkhKonBxZ6InLLU="
+    "version": "11.2.8",
+    "hash": "sha256-NEi00PZS1sMHl94FuPIdd7PvHPk/kryszT5NHBJdiyg="
  },
  {
    "pname": "Avalonia.FreeDesktop",
-    "version": "11.2.5",
-    "hash": "sha256-rLzsxUQS1LLLcLWkDR8SLLwLY53vUMqgiKoDWM6PjtM="
+    "version": "11.2.8",
+    "hash": "sha256-X9VxRmeK6Vu8c9ILtF/KyDi0B0CmjeZcTRnwouCYOWg="
  },
  {
    "pname": "Avalonia.Native",
-    "version": "11.2.5",
-    "hash": "sha256-XQQgcfbRRHPzH432M1KzkSEtLQof40yCt+KIrQREBY0="
+    "version": "11.2.8",
+    "hash": "sha256-YVjhd2fjOamYdYEh4jGGZy06xPAq3juTH2nC7cOlGOA="
  },
  {
    "pname": "Avalonia.Remote.Protocol",
-    "version": "11.2.5",
-    "hash": "sha256-Mpml6U6Fl8FUvENGQxpxuw0+pOPvoWbZXV4V1bLUS9w="
+    "version": "11.2.8",
+    "hash": "sha256-v30kDbStvHAS4IOV0wEkWYXOdh4SdjaDEcKVD+6xpzc="
  },
  {
    "pname": "Avalonia.Skia",
@ -66,38 +66,38 @@
  },
  {
    "pname": "Avalonia.Skia",
-    "version": "11.2.5",
-    "hash": "sha256-su1K1RmQ+syE6ufjrzpQR1yiUa6GEtY5QPlW0GOVKnU="
+    "version": "11.2.8",
+    "hash": "sha256-V84jNsrMNguAt9ZdSEf74F4OTC3WyXLuLrkByxfHJe4="
  },
  {
    "pname": "Avalonia.Themes.Fluent",
-    "version": "11.2.5",
-    "hash": "sha256-Wb6H3Vb5gsL8bKzmaJgFZBEsu3MI0CCdlXfO5SLisdo="
+    "version": "11.2.8",
+    "hash": "sha256-qHwn8BPAPHxNJ3Ya3xPUhEzItXVjNbI5YjEsNqQLJ8s="
  },
  {
    "pname": "Avalonia.Themes.Simple",
-    "version": "11.2.5",
-    "hash": "sha256-EjQ2XA81SS91h8oGUwVxLYewm3Lp5Sa2Lmbj0c8y8BU="
+    "version": "11.2.8",
+    "hash": "sha256-vEFjwS+X6EkxVXDFk97b4S4AjbLVjPD3dYVADrBnoXo="
  },
  {
    "pname": "Avalonia.Win32",
-    "version": "11.2.5",
-    "hash": "sha256-ljgJgXDxmHOUQ+p8z62mtaK4FTmYAI+c+6gL2lczD/8="
+    "version": "11.2.8",
+    "hash": "sha256-3XYJXXT9IMECwCNbrzV49x0pyJZx6Vbib53Vbe9Gfjg="
  },
  {
    "pname": "Avalonia.X11",
-    "version": "11.2.5",
-    "hash": "sha256-wHEHcEvOUyIBgBtQZOIs330KajSv8DSEsJP7w4M9i4E="
+    "version": "11.2.8",
+    "hash": "sha256-+m8pNxda2vyFVBR+7IhkTaQ4Zm7gqkT0XgKSp+lWWmA="
  },
  {
    "pname": "AvaloniaEdit.TextMate",
-    "version": "11.1.0",
-    "hash": "sha256-Nv52bUxA02VcsKCbMqEAkNBl46gznSivRZ3llLHrhkM="
+    "version": "11.2.0",
+    "hash": "sha256-O9uQHHMwXCf6xaK+oUNRPJUQC6+p97UmZU1OsLOeroI="
  },
  {
    "pname": "Azure.AI.OpenAI",
-    "version": "2.2.0-beta.2",
-    "hash": "sha256-piF7uZK1YsrRZ3omehi6P0DI6OF2sBsGDpOp45gnp4Y="
+    "version": "2.2.0-beta.4",
+    "hash": "sha256-aEvGCQxOBZifg5nDSDILvQhLkmcbH/iIqtUMwfclDRA="
  },
  {
    "pname": "Azure.Core",
@ -159,6 +159,11 @@
    "version": "6.0.0",
    "hash": "sha256-49+H/iFwp+AfCICvWcqo9us4CzxApPKC37Q5Eqrw+JU="
  },
+  {
+    "pname": "Microsoft.Extensions.Logging.Abstractions",
+    "version": "6.0.0",
+    "hash": "sha256-QNqcQ3x+MOK7lXbWkCzSOWa/2QyYNbdM/OEEbWN15Sw="
+  },
  {
    "pname": "Onigwrap",
    "version": "1.0.6",
@ -166,8 +171,8 @@
  },
  {
    "pname": "OpenAI",
-    "version": "2.2.0-beta.2",
-    "hash": "sha256-YpHpgovxgfI72lQ4fIDkPxwv3YkofWOBssAphrRnOyw="
+    "version": "2.2.0-beta.4",
+    "hash": "sha256-kkNb9Jp7djvE2060+HIGoqnkFpOzQ5l/PK5oH4FO3e4="
  },
  {
    "pname": "SkiaSharp",
@ -209,6 +214,11 @@
    "version": "1.2.1",
    "hash": "sha256-MNFNrCAhD+vj97gVXdJIm3QmY++y25zBZtiIXrGdQ2c="
  },
+  {
+    "pname": "System.ClientModel",
+    "version": "1.4.0-beta.1",
+    "hash": "sha256-FcIblwx2HJU2zJI5tjvMqwWVe5eJcACZt12fRPNppak="
+  },
  {
    "pname": "System.Diagnostics.DiagnosticSource",
    "version": "6.0.1",
@ -224,6 +234,11 @@
    "version": "6.0.0",
    "hash": "sha256-83/bxn3vyv17dQDDqH1L3yDpluhOxIS5XR27f4OnCEo="
  },
+  {
+    "pname": "System.Memory.Data",
+    "version": "6.0.1",
+    "hash": "sha256-RXS82gmLtIOAUaGqTc8J3bVbHTL5pnW3QFE3G+Xb5Jk="
+  },
  {
    "pname": "System.Numerics.Vectors",
    "version": "4.5.0",
--- a/pkgs/by-name/so/sourcegit/package.nix
+++ b/pkgs/by-name/so/sourcegit/package.nix
@ -19,13 +19,13 @@

 buildDotnetModule (finalAttrs: {
  pname = "sourcegit";
-  version = "2025.09";
+  version = "2025.17";

  src = fetchFromGitHub {
    owner = "sourcegit-scm";
    repo = "sourcegit";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-JjAF9y3wIb6ffI3alkj9I7kG6GLLtJEKNWLtLyVE4aE=";
+    hash = "sha256-rpgsaWpVREftEve7vhAi42mNvWWU8Bl+4fUbUwJf1M4=";
  };

  patches = [ ./fix-darwin-git-path.patch ];
--- a/pkgs/by-name/sq/sql-migrate/package.nix
+++ b/pkgs/by-name/sq/sql-migrate/package.nix
@ -0,0 +1,26 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+}:
+buildGoModule rec {
+  pname = "sql-migrate";
+  version = "1.8.0";
+
+  src = fetchFromGitHub {
+    owner = "rubenv";
+    repo = "sql-migrate";
+    tag = "v${version}";
+    hash = "sha256-zk1ryQSjmO1ziZvMeb3BOb5rvZWgbZm39Sz1N9dJ8dM=";
+  };
+
+  vendorHash = "sha256-p/7oKqvbCNWom9q6UaY89GZ4sv0hx1IuzCIw0CH1EwQ=";
+
+  meta = {
+    description = "SQL Schema migration tool for Go. Based on gorp and goose";
+    homepage = "https://github.com/rubenv/sql-migrate";
+    mainProgram = "sql-migrate";
+    license = lib.licenses.mit;
+    maintainers = [ lib.maintainers.tebro ];
+  };
+}
--- a/pkgs/by-name/su/surgescript/package.nix
+++ b/pkgs/by-name/su/surgescript/package.nix
@ -0,0 +1,42 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  cmake,
+  ninja,
+  versionCheckHook,
+  nix-update-script,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "surgescript";
+  version = "0.6.1";
+
+  src = fetchFromGitHub {
+    owner = "alemart";
+    repo = "surgescript";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-m6H9cyoUY8Mgr0FDqPb98PRJTgF7DgSa+jC+EM0TDEw=";
+  };
+
+  nativeBuildInputs = [
+    cmake
+    ninja
+  ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    mainProgram = "surgescript";
+    description = "Scripting language for games";
+    homepage = "https://docs.opensurge2d.org/";
+    downloadPage = "https://github.com/alemart/surgescript";
+    changelog = "https://github.com/alemart/surgescript/blob/v${finalAttrs.version}/CHANGES.md";
+    license = lib.licenses.asl20;
+    platforms = lib.platforms.all;
+    maintainers = with lib.maintainers; [ federicoschonborn ];
+  };
+})
--- a/pkgs/by-name/sx/sx/package.nix
+++ b/pkgs/by-name/sx/sx/package.nix
@ -4,6 +4,7 @@
  fetchFromGitHub,
  makeDesktopItem,
  patsh,
+  coreutils,
  xorg,
  nixosTests,
 }:
@ -24,12 +25,13 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  nativeBuildInputs = [ patsh ];

  buildInputs = [
+    coreutils # needed for cross
    xorg.xauth
    xorg.xorgserver
  ];

  postInstall = ''
-    patsh -f $out/bin/sx -s ${builtins.storeDir}
+    patsh -f $out/bin/sx -s ${builtins.storeDir} --path "$HOST_PATH"

    install -Dm755 -t $out/share/xsessions ${
      makeDesktopItem {
--- a/pkgs/by-name/ta/tailscale/package.nix
+++ b/pkgs/by-name/ta/tailscale/package.nix
@ -60,6 +60,7 @@ buildGoModule {
    "cmd/derpprobe"
    "cmd/tailscaled"
    "cmd/tsidp"
+    "cmd/get-authkey"
  ];

  excludedPackages = [
--- a/pkgs/by-name/ta/tauon/install_mode_true.patch
+++ b/pkgs/by-name/ta/tauon/install_mode_true.patch
@ -0,0 +1,15 @@
+diff --git a/src/tauon/__main__.py b/src/tauon/__main__.py
+index 04691586..e48afa02 100755
+--- a/src/tauon/__main__.py
+++ b/src/tauon/__main__.py
+@@ -115,8 +115,8 @@ def transfer_args_and_exit() -> None:
+ if "--no-start" in sys.argv:
+ 	transfer_args_and_exit()
+ 
+-# If we're installed, use home data locations
+-install_mode = bool(str(install_directory).startswith(("/opt/", "/usr/", "/app/", "/snap/")) or sys.platform in ("darwin", "win32"))
+# Nixpkgs install, use home data dirs.
+install_mode = True
+ 
+ # Assume that it's a classic Linux install, use standard paths
+ if str(install_directory).startswith("/usr/") and Path("/usr/share/TauonMusicBox").is_dir():
--- a/pkgs/by-name/ta/tauon/package.nix
+++ b/pkgs/by-name/ta/tauon/package.nix
@ -2,6 +2,7 @@
  lib,
  stdenv,
  fetchFromGitHub,
+  fetchPypi,
  kissfft,
  miniaudio,
  pkg-config,
@ -16,6 +17,7 @@
  librsvg,
  libsamplerate,
  libvorbis,
+  xorg,
  mpg123,
  opusfile,
  pango,
@ -26,16 +28,32 @@
  withDiscordRPC ? true,
 }:

+let
+  # fork of pypresence, to be reverted if/when there's an upstream release
+  lynxpresence = python3Packages.buildPythonPackage rec {
+    pname = "lynxpresence";
+    version = "4.4.1";
+    format = "setuptools";
+
+    src = fetchPypi {
+      inherit pname version;
+      hash = "sha256-y/KboyhEGs9RvyKayEIQu2+WaiQNOdsHDl1/pEoqEkQ=";
+    };
+
+    doCheck = false; # tests require internet connection
+    pythonImportsCheck = [ "lynxpresence" ];
+  };
+in
 python3Packages.buildPythonApplication rec {
  pname = "tauon";
-  version = "7.9.0";
+  version = "8.0.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Taiko2k";
    repo = "Tauon";
    tag = "v${version}";
-    hash = "sha256-6aEUniLoE5Qtfht3OAe+zvC9yZwjH+KpskmjGowDuuU=";
+    hash = "sha256-m94/zdlJu/u/dchIXhqB47bkl6Uej2hVr8R6RNg8Vaw=";
  };

  postUnpack = ''
@ -46,16 +64,16 @@ python3Packages.buildPythonApplication rec {
    ln -s ${miniaudio.src} source/src/phazor/miniaudio
  '';

-  postPatch = ''
-    substituteInPlace src/tauon/__main__.py \
-      --replace-fail 'install_mode = False' 'install_mode = True'
+  patches = [
+    ./install_mode_true.patch
+  ];

+  postPatch = ''
    substituteInPlace src/tauon/t_modules/t_phazor.py \
      --replace-fail 'base_path = Path(pctl.install_directory).parent.parent / "build"' 'base_path = Path("${placeholder "out"}/${python3Packages.python.sitePackages}")'
  '';

  pythonRemoveDeps = [
-    "pysdl2-dll"
    "opencc"
    "tekore"
  ];
@ -105,23 +123,26 @@ python3Packages.buildPythonApplication rec {
      pychromecast
      pylast
      pygobject3
-      pysdl2
+      pysdl3
      requests
      send2trash
      setproctitle
      tidalapi
    ]
-    ++ lib.optional withDiscordRPC pypresence
+    ++ lib.optional withDiscordRPC lynxpresence
    ++ lib.optional stdenv.hostPlatform.isLinux pulsectl;

  makeWrapperArgs = [
    "--prefix PATH : ${lib.makeBinPath [ ffmpeg ]}"
    "--prefix LD_LIBRARY_PATH : ${
-      lib.makeLibraryPath [
-        game-music-emu
-        libopenmpt
-        pulseaudio
-      ]
+      lib.makeLibraryPath (
+        [
+          game-music-emu
+          libopenmpt
+          pulseaudio
+        ]
+        ++ lib.optional stdenv.hostPlatform.isLinux xorg.libXcursor
+      )
    }"
    "--prefix PYTHONPATH : $out/share/tauon"
    "--set GI_TYPELIB_PATH $GI_TYPELIB_PATH"
--- a/pkgs/by-name/to/tome2/package.nix
+++ b/pkgs/by-name/to/tome2/package.nix
@ -30,13 +30,13 @@ let
 in
 stdenv.mkDerivation {
  inherit pname;
-  version = "2.4";
+  version = "2.4-unstable-2025-02-17";

  src = fetchFromGitHub {
    owner = "tome2";
    repo = "tome2";
-    rev = "4e6a906c80ff07b75a6acf4ff585b47303805e46";
-    sha256 = "06bddj55y673d7bnzblk8n01z32l6k2rad3bpzr8dmw464hx4wwf";
+    rev = "3892fbcb1c2446afcb0c34f59e2a24f78ae672c4";
+    hash = "sha256-E6T5ZnsAzZ4cy2S8WvB0k3W4XGFsiA3TKTCSBqje+tw=";
  };

  buildInputs = [
--- a/pkgs/by-name/we/weblate/package.nix
+++ b/pkgs/by-name/we/weblate/package.nix
@ -26,7 +26,7 @@ let
 in
 python.pkgs.buildPythonApplication rec {
  pname = "weblate";
-  version = "5.11.3";
+  version = "5.11.4";

  pyproject = true;

@ -39,7 +39,7 @@ python.pkgs.buildPythonApplication rec {
    owner = "WeblateOrg";
    repo = "weblate";
    tag = "weblate-${version}";
-    hash = "sha256-FdiM6pvJhJHxJUDy17qb122fA4g0ffk6NEdvzLjKBeA=";
+    hash = "sha256-0/PYl8A95r0xulaSawnSyrSqB7SiEBgd9TVP7OIla00=";
  };

  patches = [
--- a/pkgs/by-name/wi/wifi-qr/package.nix
+++ b/pkgs/by-name/wi/wifi-qr/package.nix
@ -12,6 +12,10 @@
  stdenvNoCC,
  xdg-utils,
  zbar,
+  coreutils,
+  gnused,
+  gnugrep,
+  file,
 }:
 stdenvNoCC.mkDerivation (finalAttr: {
  pname = "wifi-qr";
@ -37,6 +41,12 @@ stdenvNoCC.mkDerivation (finalAttr: {
    qrencode
    xdg-utils
    zbar
+    # needed for cross
+    # TODO: somehow splice the packages in stdenvNoCC.initialPath and use that
+    coreutils
+    gnugrep
+    gnused
+    file
  ];

  nativeBuildInputs = [
@ -74,7 +84,7 @@ stdenvNoCC.mkDerivation (finalAttr: {
    runHook preFixup

    patchShebangs $out/bin/wifi-qr
-    patsh -f $out/bin/wifi-qr -s ${builtins.storeDir}
+    patsh -f $out/bin/wifi-qr -s ${builtins.storeDir} --path "$HOST_PATH"

    runHook postFixup
  '';
--- a/pkgs/by-name/xl/xlockmore/package.nix
+++ b/pkgs/by-name/xl/xlockmore/package.nix
@ -13,11 +13,11 @@

 stdenv.mkDerivation rec {
  pname = "xlockmore";
-  version = "5.81";
+  version = "5.82";

  src = fetchurl {
    url = "http://sillycycle.com/xlock/xlockmore-${version}.tar.xz";
-    sha256 = "sha256-BTAYEyinxmi217JMDPoyqpO0u64jwMTwnx07NH7Jipc=";
+    sha256 = "sha256-1pB43ywLfflQLg2PooSTKwWSepcrYo16tnyJwG/mt7I=";
    curlOpts = "--user-agent 'Mozilla/5.0'";
  };

--- a/pkgs/desktops/gnome/extensions/guillotine/default.nix
+++ b/pkgs/desktops/gnome/extensions/guillotine/default.nix
@ -9,13 +9,13 @@
 # https://gitlab.com/ente76/guillotine/-/issues/17
 stdenv.mkDerivation (finalAttrs: {
  pname = "gnome-shell-extension-guillotine";
-  version = "25";
+  version = "26";

  src = fetchFromGitLab {
    owner = "ente76";
    repo = "guillotine";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-HEk1owolLIea4kymoVVeviZ1Ms0kSuHWUda+u+uIh0A=";
+    hash = "sha256-6RuHargk7sq6oUKj+aGPFp3t0LJCpj6RwLhNzAM5wVA=";
  };

  nativeBuildInputs = [ glib ];
--- a/pkgs/desktops/lomiri/development/lomiri-app-launch/default.nix
+++ b/pkgs/desktops/lomiri/development/lomiri-app-launch/default.nix
@ -31,7 +31,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "lomiri-app-launch";
-  version = "0.1.11";
+  version = "0.1.12";

  outputs =
    [
@ -46,7 +46,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "ubports";
    repo = "development/core/lomiri-app-launch";
    tag = finalAttrs.version;
-    hash = "sha256-5/8RCtDvCBtxyb65WhT63jL4TryMvJfHTSieb/vTs9I=";
+    hash = "sha256-vlSlQJysKmoGNmRtJ34FCI3p5bL7GDc8TjOljnKSiAE=";
  };

  patches = [
--- a/pkgs/development/ocaml-modules/ocamlgraph/default.nix
+++ b/pkgs/development/ocaml-modules/ocamlgraph/default.nix
@ -2,28 +2,23 @@
  lib,
  fetchurl,
  buildDunePackage,
-  stdlib-shims,
 }:

 buildDunePackage rec {
  pname = "ocamlgraph";
-  version = "2.1.0";
+  version = "2.2.0";

  src = fetchurl {
    url = "https://github.com/backtracking/ocamlgraph/releases/download/${version}/ocamlgraph-${version}.tbz";
-    hash = "sha256-D5YsNvklPfI5OVWvQbB0tqQmsvkqne95WyAFtX0wLWU=";
+    hash = "sha256-sJViEIY8wk9IAgO6PC7wbfrlV5U2oFdENk595YgisjA=";
  };

  minimalOCamlVersion = "4.08";

-  propagatedBuildInputs = [
-    stdlib-shims
-  ];
-
  meta = with lib; {
    homepage = "https://github.com/backtracking/ocamlgraph";
    description = "Graph library for OCaml";
-    license = licenses.gpl2Oss;
+    license = licenses.lgpl21Only;
    maintainers = [ ];
  };
 }
--- a/pkgs/development/ocaml-modules/ocamlgraph/gtk.nix
+++ b/pkgs/development/ocaml-modules/ocamlgraph/gtk.nix
@ -2,8 +2,6 @@
  buildDunePackage,
  lablgtk,
  ocamlgraph,
-  stdlib-shims,
-  ...
 }:

 buildDunePackage {
@ -13,6 +11,5 @@ buildDunePackage {
  propagatedBuildInputs = [
    lablgtk
    ocamlgraph
-    stdlib-shims
  ];
 }
--- a/pkgs/development/ocaml-modules/xenstore-tool/default.nix
+++ b/pkgs/development/ocaml-modules/xenstore-tool/default.nix
@ -11,10 +11,6 @@ buildDunePackage {

  inherit (xenstore_transport) src version;

-  postPatch = ''
-    substituteInPlace cli/dune --replace 'libraries ' 'libraries camlp-streams '
-  '';
-
  buildInputs = [
    camlp-streams
    xenstore_transport
--- a/pkgs/development/ocaml-modules/xenstore_transport/default.nix
+++ b/pkgs/development/ocaml-modules/xenstore_transport/default.nix
@ -8,7 +8,7 @@

 buildDunePackage rec {
  pname = "xenstore_transport";
-  version = "1.3.0";
+  version = "1.4.0";

  minimalOCamlVersion = "4.08";
  duneVersion = "3";
@ -17,7 +17,7 @@ buildDunePackage rec {
    owner = "xapi-project";
    repo = "ocaml-xenstore-clients";
    rev = "v${version}";
-    sha256 = "1kxxd9i4qiq98r7sgvl59iq2ni7y6drnv48qj580q5cyiyyc85q3";
+    sha256 = "sha256-8dN8dgwhVrBgjmPHxFfPvmDlhz7eUaG0R0M8ACNhhFk=";
  };

  propagatedBuildInputs = [
--- a/pkgs/development/php-packages/phpstan/default.nix
+++ b/pkgs/development/php-packages/phpstan/default.nix
@ -7,16 +7,16 @@

 php.buildComposerProject2 (finalAttrs: {
  pname = "phpstan";
-  version = "2.1.14";
+  version = "2.1.15";

  src = fetchFromGitHub {
    owner = "phpstan";
    repo = "phpstan-src";
    tag = finalAttrs.version;
-    hash = "sha256-Bo+jjTJ0EoU09z/lWl1ZyD639lz/C8v7OwPspSFNNp8=";
+    hash = "sha256-1MHEN7/OL35xBLkwW7j2CxkjGb4EUkV1Zc8Nvn4xqNI=";
  };

-  vendorHash = "sha256-exm2AofvmRqRF+TZ3hI5lsacMn+AvceNMWQvRrMTjsU=";
+  vendorHash = "sha256-7PAO+8hkeNQH9lM77NvRX2/56PlIgWCwJ700b4erM2Y=";
  composerStrictValidation = false;

  doInstallCheck = true;
--- a/pkgs/development/python-modules/amaranth/default.nix
+++ b/pkgs/development/python-modules/amaranth/default.nix
@ -20,7 +20,7 @@

 buildPythonPackage rec {
  pname = "amaranth";
-  version = "0.5.4";
+  version = "0.5.6";
  pyproject = true;

  disabled = pythonOlder "3.8";
@ -29,7 +29,7 @@ buildPythonPackage rec {
    owner = "amaranth-lang";
    repo = "amaranth";
    tag = "v${version}";
-    hash = "sha256-e4htbNq6OCy8ZTS1UnucbU987reukP4J1CbWhT39K6E=";
+    hash = "sha256-fc9mCq7AgxjlR/+KKebV1GGlF5NXN/1Vee5ZLwkNjow=";
  };

  postPatch = ''
@ -75,7 +75,7 @@ buildPythonPackage rec {
  meta = with lib; {
    description = "Modern hardware definition language and toolchain based on Python";
    homepage = "https://amaranth-lang.org/docs/amaranth";
-    changelog = "https://github.com/amaranth-lang/amaranth/blob/v${version}/docs/changes.rst";
+    changelog = "https://github.com/amaranth-lang/amaranth/blob/${src.tag}/docs/changes.rst";
    license = licenses.bsd2;
    maintainers = with maintainers; [
      thoughtpolice
--- a/pkgs/development/python-modules/anthropic/default.nix
+++ b/pkgs/development/python-modules/anthropic/default.nix
@ -1,41 +1,50 @@
 {
  lib,
-  anyio,
  buildPythonPackage,
-  dirty-equals,
-  distro,
  fetchFromGitHub,
-  google-auth,
+
+  # build-system
  hatch-fancy-pypi-readme,
  hatchling,
+
+  # dependencies
+  anyio,
+  distro,
  httpx,
  jiter,
-  nest-asyncio,
  pydantic,
-  pytest-asyncio,
-  pytestCheckHook,
-  pythonAtLeast,
-  pythonOlder,
-  respx,
  sniffio,
  tokenizers,
  typing-extensions,
+
+  # optional dependencies
+  google-auth,
+
+  # test
+  dirty-equals,
+  nest-asyncio,
+  pytest-asyncio,
+  pytestCheckHook,
+  respx,
 }:

 buildPythonPackage rec {
  pname = "anthropic";
-  version = "0.49.0";
+  version = "0.51.0";
  pyproject = true;

-  disabled = pythonOlder "3.8";
-
  src = fetchFromGitHub {
    owner = "anthropics";
    repo = "anthropic-sdk-python";
    tag = "v${version}";
-    hash = "sha256-vbK8rqCekWbgLAU7YlHUhfV+wB7Q3Rpx0OUYvq3WYWw=";
+    hash = "sha256-gD3qZpPKtKZtuoGqnKVgFp0gCxpL0Aq5NGFCMk+z3cQ=";
  };

+  postPatch = ''
+    substituteInPlace pyproject.toml \
+      --replace-fail '"hatchling==1.26.3"' '"hatchling>=1.26.3"'
+  '';
+
  build-system = [
    hatchling
    hatch-fancy-pypi-readme
@ -46,8 +55,8 @@ buildPythonPackage rec {
    distro
    httpx
    jiter
-    sniffio
    pydantic
+    sniffio
    tokenizers
    typing-extensions
  ];
@ -58,23 +67,18 @@ buildPythonPackage rec {

  nativeCheckInputs = [
    dirty-equals
-    pytest-asyncio
    nest-asyncio
+    pytest-asyncio
    pytestCheckHook
    respx
  ];

  pythonImportsCheck = [ "anthropic" ];

-  disabledTests =
-    [
-      # Test require network access
-      "test_copy_build_request"
-    ]
-    ++ lib.optionals (pythonAtLeast "3.13") [
-      # Fails on RuntimeWarning: coroutine method 'aclose' of 'AsyncStream._iter_events' was never awaited
-      "test_multi_byte_character_multiple_chunks[async]"
-    ];
+  disabledTests = [
+    # Test require network access
+    "test_copy_build_request"
+  ];

  disabledTestPaths = [
    # Test require network access
@ -87,11 +91,14 @@ buildPythonPackage rec {
    "ignore::DeprecationWarning"
  ];

-  meta = with lib; {
+  meta = {
    description = "Anthropic's safety-first language model APIs";
    homepage = "https://github.com/anthropics/anthropic-sdk-python";
    changelog = "https://github.com/anthropics/anthropic-sdk-python/releases/tag/${src.tag}";
-    license = licenses.mit;
-    maintainers = with maintainers; [ natsukium ];
+    license = lib.licenses.mit;
+    maintainers = [
+      lib.maintainers.natsukium
+      lib.maintainers.sarahec
+    ];
  };
 }
--- a/pkgs/development/python-modules/hdf5plugin/default.nix
+++ b/pkgs/development/python-modules/hdf5plugin/default.nix
@ -5,30 +5,64 @@
  setuptools,
  py-cpuinfo,
  h5py,
+  pkgconfig,
+  c-blosc2,
+  charls,
+  lz4,
+  zlib,
+  zstd,
 }:

 buildPythonPackage rec {
  pname = "hdf5plugin";
-  version = "5.0.0";
+  version = "5.1.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "silx-kit";
    repo = "hdf5plugin";
    tag = "v${version}";
-    hash = "sha256-6lEU8ZGJKazDqloel5QcaXAbNGzV1fAbAjYC/hFUOdI=";
+    hash = "sha256-12OWsNZfKToNLyokNrwgPc7WRISJI4nRA0J/zwgCZwI=";
  };

  build-system = [
    setuptools
    py-cpuinfo
+    pkgconfig # only needed if HDF5PLUGIN_SYSTEM_LIBRARIES is used
  ];

  dependencies = [ h5py ];

+  buildInputs = [
+    #c-blosc
+    c-blosc2
+    # bzip2_1_1
+    charls
+    lz4
+    # snappy
+    # zfp
+    zlib
+    zstd
+  ];
+
+  # opt-in to use use system libs instead
+  env.HDF5PLUGIN_SYSTEM_LIBRARIES = lib.concatStringsSep "," [
+    #"blosc" # AssertionError: 4000 not less than 4000
+    "blosc2"
+    # "bz2" # only works with bzip2_1_1
+    "charls"
+    "lz4"
+    # "snappy" # snappy tests fail
+    # "sperr" # not packaged?
+    # "zfp" #  pkgconfig: (lib)zfp not found
+    "zlib"
+    "zstd"
+  ];
+
  checkPhase = ''
    python test/test.py
  '';
+
  pythonImportsCheck = [ "hdf5plugin" ];

  preBuild = ''
--- a/pkgs/development/python-modules/langgraph-cli/default.nix
+++ b/pkgs/development/python-modules/langgraph-cli/default.nix
@ -20,14 +20,14 @@

 buildPythonPackage rec {
  pname = "langgraph-cli";
-  version = "0.2.8";
+  version = "0.2.10";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "langchain-ai";
    repo = "langgraph";
    tag = "cli==${version}";
-    hash = "sha256-WK31FbAqJRkJfNFMWZfnUJx0Gavu7HfcNrWBqRwiK3k=";
+    hash = "sha256-gSiyFjk1lXiCv7JpX4J00WAPoMv4VsXDuCswbFhP2kY=";
  };

  sourceRoot = "${src.name}/libs/cli";
--- a/pkgs/development/python-modules/pycxx/default.nix
+++ b/pkgs/development/python-modules/pycxx/default.nix
@ -25,7 +25,8 @@ buildPythonPackage rec {

  postInstall = ''
    mkdir -p $dev/include
-    mv $out/include/${python.libPrefix}*/cxx/ $dev/include/CXX/
+    mv $out/include/${python.libPrefix}*/* $dev/include
+    ln -s $dev/include/cxx $dev/include/CXX # pysvn compat
    mv $out/CXX $dev/src
    sed -i "s|Src|$dev/src|" $dev/src/cxxextensions.c $dev/src/cxxsupport.cxx
  '';
--- a/pkgs/development/python-modules/pysdl3/default.nix
+++ b/pkgs/development/python-modules/pysdl3/default.nix
@ -0,0 +1,102 @@
+{
+  stdenv,
+  lib,
+  fetchurl,
+  fetchFromGitHub,
+  python,
+  buildPythonPackage,
+  setuptools-scm,
+  packaging,
+  aiohttp,
+  requests,
+
+  # native dependencies
+  sdl3,
+  sdl3-ttf,
+  sdl3-image,
+}:
+
+let
+  dochash =
+    if stdenv.hostPlatform.isLinux then
+      "sha256-+1zLd308zL+m68kLMeOWWxT0wYDgCd6g9cc2hEtaeUs="
+    else if stdenv.hostPlatform.isDarwin then
+      "sha256-2uB9+ABgv5O376LyHb0ShGjM4LHYzMRMxk/k+1LBmv0="
+    else if stdenv.hostPlatform.isWindows then
+      "sha256-46bQSPYctycizf2GXichd5V74LjxwIAPhBmklXAJ/Jg="
+    else
+      throw "PySDL3 does not support ${stdenv.hostPlatform.uname.system}";
+  lib_ext = stdenv.hostPlatform.extensions.sharedLibrary;
+in
+buildPythonPackage rec {
+  pname = "pysdl3";
+  version = "0.9.8b1";
+  pyproject = true;
+
+  pythonImportsCheck = [ "sdl3" ];
+
+  src = fetchFromGitHub {
+    owner = "Aermoss";
+    repo = "PySDL3";
+    tag = "v${version}";
+    hash = "sha256-FVUCcqKTq6qdNkYHTYFiUxt2HIaNC5LK0BEUfz8Mue8=";
+  };
+
+  docfile = fetchurl {
+    url = "https://github.com/Aermoss/PySDL3/releases/download/v${version}/${stdenv.hostPlatform.uname.system}-Docs.py";
+    hash = "${dochash}";
+  };
+
+  postUnpack = ''
+    cp ${docfile} source/sdl3/__doc__.py
+  '';
+
+  postInstall = ''
+    mkdir $out/${python.sitePackages}/sdl3/bin
+    ln -s ${sdl3}/lib/libSDL3${lib_ext} -t $out/${python.sitePackages}/sdl3/bin
+    ln -s ${sdl3-ttf}/lib/libSDL3_ttf${lib_ext} -t $out/${python.sitePackages}/sdl3/bin
+    ln -s ${sdl3-image}/lib/libSDL3_image${lib_ext} -t $out/${python.sitePackages}/sdl3/bin
+  '';
+
+  build-system = [
+    setuptools-scm
+  ];
+
+  buildInputs = [
+    sdl3
+    sdl3-ttf
+    sdl3-image
+  ];
+
+  dependencies = [
+    packaging
+    aiohttp
+    requests
+  ];
+
+  # PySDL3 tries to update both itself and SDL binaries at runtime. This hook
+  # sets some env variables to tell it not to do that.
+  setupHook = ./setup-hook.sh;
+
+  env = {
+    SDL_VIDEODRIVER = "dummy";
+    SDL_AUDIODRIVER = "dummy";
+    SDL_RENDER_DRIVER = "software";
+    PYTHONFAULTHANDLER = "1";
+  };
+
+  meta = {
+    description = "Pure Python wrapper for SDL3";
+    homepage = "https://github.com/Aermoss/PySDL3";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ jansol ];
+    platforms = [
+      "aarch64-linux"
+      "x86_64-linux"
+      "aarch64-windows"
+      "x86_64-windows"
+      "aarch64-darwin"
+      "x86_64-darwin"
+    ];
+  };
+}
--- a/pkgs/development/python-modules/pysdl3/setup-hook.sh
+++ b/pkgs/development/python-modules/pysdl3/setup-hook.sh
@ -0,0 +1,10 @@
+# See also
+# https://pysdl3.readthedocs.io/en/latest/install.html#the-environment-variable-method
+
+# Don't check Pypi for new PySDL3 releases at runtime
+export SDL_CHECK_VERSION=0
+# Don't try to download SDL binaries at runtime
+export SDL_DOWNLOAD_BINARIES=0
+# Nixpkgs does not provide a metadata.json. Instead we want PySDL3 to find the
+# SDL libraries we symlink into its site-packages
+export SDL_DISABLE_METADATA=1
--- a/pkgs/development/python-modules/survey/default.nix
+++ b/pkgs/development/python-modules/survey/default.nix
@ -24,14 +24,13 @@ buildPythonPackage rec {
    setuptools-scm
  ];

-  doCheck = false;
  pythonImportsCheck = [ "survey" ];

-  meta = with lib; {
+  meta = {
    description = "Simple library for creating beautiful interactive prompts";
    homepage = "https://github.com/Exahilosys/survey";
    changelog = "https://github.com/Exahilosys/survey/releases/tag/v${version}";
-    license = licenses.mit;
-    maintainers = with maintainers; [ sfrijters ];
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ sfrijters ];
  };
 }
--- a/pkgs/development/python-modules/wrapio/default.nix
+++ b/pkgs/development/python-modules/wrapio/default.nix
@ -20,14 +20,13 @@ buildPythonPackage rec {

  build-system = [ setuptools ];

-  doCheck = false;
  pythonImportsCheck = [ "wrapio" ];

-  meta = with lib; {
+  meta = {
    description = "Handling event-based streams";
    homepage = "https://github.com/Exahilosys/wrapio";
    changelog = "https://github.com/Exahilosys/wrapio/releases/tag/v${version}";
-    license = licenses.mit;
-    maintainers = with maintainers; [ sfrijters ];
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ sfrijters ];
  };
 }
--- a/pkgs/servers/home-assistant/custom-components/alarmo/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/alarmo/package.nix
@ -7,13 +7,13 @@
 buildHomeAssistantComponent rec {
  owner = "nielsfaber";
  domain = "alarmo";
-  version = "1.10.7";
+  version = "1.10.8";

  src = fetchFromGitHub {
    owner = "nielsfaber";
    repo = "alarmo";
    tag = "v${version}";
-    hash = "sha256-EFR8GveMNpwhrIA0nP+Ny3YUTHAOFw+IF72hH1+wMSM=";
+    hash = "sha256-XfeUjZ9icgWFfeJabib1KlrGuGJKuoOZuJH/OFMw/4M=";
  };

  postPatch = ''
@ -25,6 +25,6 @@ buildHomeAssistantComponent rec {
    description = "Alarm System for Home Assistant";
    homepage = "https://github.com/nielsfaber/alarmo";
    maintainers = with maintainers; [ mindstorms6 ];
-    license = licenses.unfree;
+    license = licenses.asl20;
  };
 }
--- a/pkgs/tools/filesystems/mkspiffs/default.nix
+++ b/pkgs/tools/filesystems/mkspiffs/default.nix
@ -2,41 +2,59 @@
  lib,
  stdenv,
  fetchFromGitHub,
+  pkgsBuildHost,
+  versionCheckHook,
 }:

 # Changing the variables CPPFLAGS and BUILD_CONFIG_NAME can be done by
 # overriding the same-named attributes. See ./presets.nix for examples.

-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
  pname = "mkspiffs";
  version = "0.2.3";

  src = fetchFromGitHub {
    owner = "igrr";
    repo = "mkspiffs";
-    rev = version;
+    tag = finalAttrs.version;
    fetchSubmodules = true;
    hash = "sha256-oa6Lmo2yb66IjtEKkZyJBgM/p7rdvmrKfgNd2rAM/Lk=";
  };

+  # 1) Fix build for Darwin
+  # 2) Fix cross
+  # 3) Do not run test as part of the buildPhase - the checkPhase will run it as `make test`
+  postPatch = ''
+    substituteInPlace Makefile \
+      --replace-fail "-arch i386 -arch x86_64" "" \
+      --replace-fail "strip" "${pkgsBuildHost.binutils.targetPrefix}strip" \
+      --replace-fail "dist: test" ""
+  '';
+
+  strictDeps = true;
+
  buildFlags = [ "dist" ];

  makeFlags = [
-    "VERSION=${version}"
+    "VERSION=${finalAttrs.version}"
    "SPIFFS_VERSION=unknown"
  ];

+  doCheck = stdenv.buildPlatform.canExecute stdenv.hostPlatform;
+
  installPhase = ''
-    mkdir -p $out/bin
-    cp mkspiffs $out/bin
+    install -Dm755 -t $out/bin mkspiffs
  '';

-  meta = with lib; {
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+
+  meta = {
    description = "Tool to build and unpack SPIFFS images";
-    license = licenses.mit;
+    license = lib.licenses.mit;
    homepage = "https://github.com/igrr/mkspiffs";
-    maintainers = with maintainers; [ haslersn ];
-    platforms = platforms.linux;
+    maintainers = [ lib.maintainers.haslersn ];
+    platforms = lib.platforms.all;
    mainProgram = "mkspiffs";
  };
-}
+})
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@ -2375,7 +2375,7 @@ with pkgs;
  patool = with python3Packages; toPythonApplication patool;

  pocket-casts = callPackage ../by-name/po/pocket-casts/package.nix {
-    electron = electron_34;
+    electron = electron_35;
  };

  pixcat = with python3Packages; toPythonApplication pixcat;
@ -4691,6 +4691,7 @@ with pkgs;
    # Enable next line for console graphics. Note that it requires `sixel`
    # enabled terminals such as mlterm or xterm -ti 340
    SDL = SDL_sixel;
+    SDL_image = SDL_image.override { SDL = SDL_sixel; };
  };

  openconnectPackages = callPackage ../tools/networking/openconnect { };
@ -14680,6 +14681,7 @@ with pkgs;
    # that it requires sixel graphics compatible terminals like mlterm
    # or xterm -ti 340
    SDL = SDL_sixel;
+    SDL_image = SDL_image.override { SDL = SDL_sixel; };
  };

  zotero_7 = pkgs.zotero;
@ -16742,6 +16744,9 @@ with pkgs;
    # Note that it requires sixel capable terminals such as mlterm
    # or xterm -ti 340
    SDL = SDL_sixel;
+    SDL_gfx = SDL_gfx.override { SDL = SDL_sixel; };
+    SDL_image = SDL_image.override { SDL = SDL_sixel; };
+    SDL_ttf = SDL_ttf.override { SDL = SDL_sixel; };
  };

  yacreader = callPackage ../applications/graphics/yacreader { };
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@ -6256,7 +6256,9 @@ self: super: with self; {

  hdbscan = callPackage ../development/python-modules/hdbscan { };

-  hdf5plugin = callPackage ../development/python-modules/hdf5plugin { };
+  hdf5plugin = callPackage ../development/python-modules/hdf5plugin {
+    inherit (pkgs) zstd lz4;
+  };

  hdfs = callPackage ../development/python-modules/hdfs { };

@ -13370,6 +13372,8 @@ self: super: with self; {

  pysdl2 = callPackage ../development/python-modules/pysdl2 { };

+  pysdl3 = callPackage ../development/python-modules/pysdl3 { };
+
  pysearpc = toPythonModule (pkgs.libsearpc.override { python3 = self.python; });

  pysecretsocks = callPackage ../development/python-modules/pysecretsocks { };