Merge 7d5d19274b into haskell-updates

2026-07-06 17:13:24 -05:00 · 2026-07-05 00:43:51 +00:00 · 2026-07-05 00:43:51 +00:00 · 4f0970401a
commit 4f0970401a
parent 9959ce2f44 7d5d19274b
213 changed files with 2909 additions and 1086 deletions
--- a/doc/README.md
+++ b/doc/README.md
@ -1,21 +1,32 @@
-# Contributing to the Nixpkgs reference manual
+# Contributing to the Nixpkgs manual

-This directory houses the source files for the Nixpkgs reference manual.
+This directory houses the source files for the Nixpkgs manual.

-> [!IMPORTANT]
-> We are actively restructuring our documentation to follow the [Diátaxis framework](https://diataxis.fr/)
+> [!NOTE]
 >
-> Going forward, this directory should **only** contain [reference documentation](https://nix.dev/contributing/documentation/diataxis#reference).
-> For tutorials, guides and explanations, contribute to <https://nix.dev/> instead.
+> We are actively restructuring our documentation to be more beginner friendly.
 >
-> We are actively working to generate **all** reference documentation from the [doc-comments](https://github.com/NixOS/rfcs/blob/master/rfcs/0145-doc-strings.md) present in code.
-> This also provides the benefit of using `:doc` in the `nix repl` to view reference documentation locally on the fly.

-For documentation only relevant for contributors, use Markdown files next to the source and regular code comments.
+When writing new docs use **Progressive Disclosure**

-> [!TIP]
-> Feedback for improving support for parsing and rendering doc-comments is highly appreciated.
-> [Open an issue](https://github.com/NixOS/nixpkgs/issues/new?labels=6.topic%3A+documentation&title=Doc%3A+) to request bugfixes or new features.
+Start simple, pick up beginners.
+Use **examples** first to show how to get something done. Keep **Explanation** lean.
+
+Use our [styleguide](./styleguide.md) for more in depth guidance on writing good documentation.
+
+This directory contains **guides** and **reference** documentation for Nixpkgs.
+
+Borrowing from [Diátaxis framework](https://diataxis.fr/) what suits our needs:
+
+**Guides** are task-oriented. They can be tutorial-style walkthroughs or how-to sections.
+Explanations appear as prose after examples.
+
+**Reference** documentation is the specification of functions and attributes.
+
+We are actively working to generate **all** reference documentation from the [doc-comments](https://github.com/NixOS/rfcs/blob/master/rfcs/0145-doc-strings.md) present in code.
+This also provides the benefit of using `:doc` in the `nix repl` to view reference documentation locally on the fly.
+
+See [Document structure](#document-structure) for a structural template.

 Rendered documentation:
 - [Unstable (from master)](https://nixos.org/manual/nixpkgs/unstable/)
@ -54,9 +65,11 @@ Make sure that your local files aren't added to Git history by adding the follow
 /**/.direnv
 ```

-#### `devmode`
+#### Live preview

-Use [`devmode`](../pkgs/by-name/de/devmode/README.md) for a live preview when editing the manual.
+Run [`devmode`](../pkgs/by-name/de/devmode/README.md) for a live preview while editing the manual: it rebuilds on every change and reloads the page in your browser automatically.
+
+Changes to the renderer 'pkgs/by-name/ni/nixos-render-docs' need a manual restart. Run: `devmode` again.

 ### Testing redirects

@ -209,6 +222,62 @@ You, as the writer of documentation, are still in charge of its content.

 **For prose style, see the [documentation styleguide](./styleguide.md).**

+### Document structure
+
+Organize each chapter as guide sections first, then a single `## Reference` section.
+
+A well-structured chapter looks like this:
+
+````markdown
+# Foo {#foo}
+
+`foo` builds Foo projects from a `foo.toml`.
+
+## Package a Foo application {#foo-packaging}
+
+:::{.example #ex-foo-packaging}
+
+# Package the hello app
+
+```nix
+{ foo }:
+buildFooPackage {
+  pname = "hello";
+  version = "1.0";
+}
+```
+
+:::
+
+`buildFooPackage` needs `pname` and `version`.
+Keep explanation short, and place it after the example.
+
+## Reference {#foo-reference}
+
+### `buildFooPackage` {#foo-buildFooPackage}
+
+Builds a Foo application from source.
+
+#### Inputs {#foo-buildFooPackage-inputs}
+
+`pname` (String)
+: The program name.
+
+#### Examples {#foo-buildFooPackage-examples}
+
+See [](#ex-foo-packaging).
+````
+
+Examples live in one place: the guide owns them and the reference links to them.
+
+Guides introduce minimal working examples that are goal-oriented (typical usage).
+
+Reference may introduce additional examples that are unit-oriented. (minimal usage, edge-cases).
+If the guide example is already sufficient, just link to it from the reference.
+
+Follow this structure strictly; to deviate, ping @NixOS/documentation-team.
+
+
 ### One sentence per line

 Put each sentence in its own line.
@ -284,7 +353,15 @@ Use the [admonition syntax](#admonitions) for callouts and examples.

 ### `callPackage`-compatible examples

-Provide at least one example per function.
+Provide at least one example per function, in its doc-comment.
+
+Keep each example at the level it documents:
+
+- A **reference example** might sometimes live in a doc-comment and show function call shape.
+- A **guide example** lives in a guide section and shows a complete task that may compose several functions.
+
+When the task is nothing more than the call itself, the guide example is enough.
+The reference example links to the guide example.

 Example code should be such that it can be passed to `pkgs.callPackage`.
 Instead of something like:
--- a/doc/build-helpers/dev-shell-tools.chapter.md
+++ b/doc/build-helpers/dev-shell-tools.chapter.md
@ -2,7 +2,7 @@

 The `nix-shell` command has popularized the concept of transient shell environments for development or testing purposes.
 <!--
-  We should try to document the product, not its development process in the Nixpkgs reference manual,
+  We should try to document the product, not its development process in the Nixpkgs manual,
  but *something* needs to be said to provide context for this library.
  This is the most future proof sentence I could come up with while Nix itself does not yet make use of this.
  Relevant is the current status of the devShell attribute "project": https://github.com/NixOS/nix/issues/7501
--- a/doc/manual.md.in
+++ b/doc/manual.md.in
@ -1,4 +1,4 @@
-# Nixpkgs Reference Manual {#nixpkgs-manual}
+# Nixpkgs Manual {#nixpkgs-manual}
 ## Version @MANUAL_VERSION@

 ```{=include=} chapters
--- a/doc/style.css
+++ b/doc/style.css
@ -212,11 +212,7 @@ h3 {
  color: var(--heading-color);
 }

-.note h3,
-.tip h3,
-.warning h3,
-.caution h3,
-.important h3 {
+:is(.note, .tip, .warning, .caution, .important) h3 {
  font-size: 120%;
 }

@ -286,16 +282,7 @@ div.appendix .programlisting {
  color: var(--codeblock-text-color);
 }

-div.book .note,
-div.book .tip,
-div.book .warning,
-div.book .caution,
-div.book .important,
-div.appendix .note,
-div.appendix .tip,
-div.appendix .warning,
-div.appendix .caution,
-div.appendix .important {
+:is(.note, .tip, .warning, .caution, .important) {
  margin-bottom: 1rem;
  border-radius: 0.5rem;
  padding: 1.5rem;
@ -303,64 +290,44 @@ div.appendix .important {
  background: #f4f4f4;
 }

-div.book .note > .title,
-div.book .tip > .title,
-div.book .warning > .title,
-div.book .caution > .title,
-div.book .important > .title,
-div.appendix .note > .title,
-div.appendix .tip > .title,
-div.appendix .warning > .title,
-div.appendix .caution > .title,
-div.appendix .important > .title {
+:is(.note, .tip, .warning, .caution, .important) > .title {
  font-weight: 800;
  line-height: 110%;
  color: inherit;
  margin-bottom: 0;
 }

-div.book .note > :first-child,
-div.book .tip > :first-child,
-div.book .warning > :first-child,
-div.book .caution > :first-child,
-div.book .important > :first-child,
-div.appendix .note > :first-child,
-div.appendix .tip > :first-child,
-div.appendix .warning > :first-child,
-div.appendix .caution > :first-child,
-div.appendix .important > :first-child {
+:is(.note, .tip, .warning, .caution, .important) > :first-child {
  margin-top: 0;
 }

-div.book .note > :last-child,
-div.book .tip > :last-child,
-div.book .warning > :last-child,
-div.book .caution > :last-child,
-div.book .important > :last-child,
-div.appendix .note > :last-child,
-div.appendix .tip > :last-child,
-div.appendix .warning > :last-child,
-div.appendix .caution > :last-child,
-div.appendix .important > :last-child {
+:is(.note, .tip, .warning, .caution, .important) > :last-child {
  margin-bottom: 0;
 }

-div.book .note,
-div.book .tip,
-div.book .important,
-div.appendix .note,
-div.appendix .tip,
-div.appendix .important {
+.note {
  color: var(--note-text-color);
  background: var(--note-background);
 }

-div.book .warning,
-div.book .caution,
-div.appendix .warning,
-div.appendix .caution {
+.tip {
+  color: var(--tip-text-color);
+  background: var(--tip-background);
+}
+
+.important {
+  color: var(--important-text-color);
+  background: var(--important-background);
+}
+
+.warning {
  color: var(--warning-text-color);
-  background-color: var(--warning-background);
+  background: var(--warning-background);
+}
+
+.caution {
+  color: var(--caution-text-color);
+  background: var(--caution-background);
 }

 div.book .section,
@ -457,10 +424,21 @@ div.appendix .variablelist .term {
  --link-color: #405d99;
  --heading-color: #6586c8;
  --small-heading-color: #6a6a6a;
-  --note-text-color: #5277c3;
-  --note-background: #f2f8fd;
-  --warning-text-color: #cc3900;
-  --warning-background: #fff5e1;
+  /* NOTE */
+  --note-text-color: #0065d2;
+  --note-background: #e4f5ff;
+  /* TIP */
+  --tip-text-color: #188000;
+  --tip-background: #e8fae3;
+  /* IMPORTANT */
+  --important-text-color: #8a3db8;
+  --important-background: #fbedff;
+  /* WARNING */
+  --warning-text-color: #aa4a00;
+  --warning-background: #fff0db;
+  /* CAUTION */
+  --caution-text-color: #be222a;
+  --caution-background: #ffebe8;
  --codeblock-background: #f2f8fd;
  --codeblock-text-color: #000;
 }
@ -471,20 +449,26 @@ div.appendix .variablelist .term {
    --main-text-color: #fff;
    --link-color: #6586c8;
    --small-heading-color: #fff;
-    --note-background: none;
-    --warning-background: none;
+    /* NOTE */
+    --note-text-color: #66c6ff;
+    --note-background: #1e2f44;
+    /* TIP */
+    --tip-text-color: #80e05f;
+    --tip-background: #22331d;
+    /* IMPORTANT */
+    --important-text-color: #ea9dff;
+    --important-background: #35273f;
+    /* WARNING */
+    --warning-text-color: #ffaa00;
+    --warning-background: #3c2a13;
+    /* CAUTION */
+    --caution-text-color: #ff8c84;
+    --caution-background: #422522;
    --codeblock-background: #393939;
    --codeblock-text-color: #fff;
  }

-  div.book .note,
-  div.book .tip,
-  div.appendix .note,
-  div.appendix .tip,
-  div.book .warning,
-  div.book .caution,
-  div.appendix .warning,
-  div.appendix .caution {
+  :is(.note, .tip, .warning, .caution, .important) {
    border: 2px solid;
    font-weight: 400;
  }
--- a/nixos/doc/manual/contributing-to-this-manual.chapter.md
+++ b/nixos/doc/manual/contributing-to-this-manual.chapter.md
@ -35,9 +35,11 @@ Make sure that your local files aren't added to Git history by adding the follow
 /**/.direnv
 ```

-### `devmode` {#sec-contributing-devmode}
+### Live preview {#sec-contributing-devmode}

-Use [`devmode`](https://github.com/NixOS/nixpkgs/blob/master/pkgs/by-name/de/devmode/README.md) for a live preview when editing the manual.
+Run [`devmode`](https://github.com/NixOS/nixpkgs/blob/master/pkgs/by-name/de/devmode/README.md) for a live preview while editing the manual: it rebuilds on every change and reloads the page in your browser automatically.
+
+Changes to the renderer 'pkgs/by-name/ni/nixos-render-docs' need a manual restart. Run: `devmode` again.

 ## Testing redirects {#sec-contributing-redirects}

--- a/nixos/modules/programs/captive-browser.nix
+++ b/nixos/modules/programs/captive-browser.nix
@ -21,8 +21,6 @@ let
    types
    ;

-  requiresSetcapWrapper = config.boot.kernelPackages.kernelOlder "5.7" && cfg.bindInterface;
-
  browserDefault =
    chromium:
    concatStringsSep " " [
@ -30,11 +28,20 @@ let
      "${chromium}/bin/chromium"
      "--user-data-dir=\${XDG_DATA_HOME:-$HOME/.local/share}/chromium-captive"
      ''--proxy-server="socks5://$PROXY"''
-      ''--host-resolver-rules="MAP * ~NOTFOUND , EXCLUDE localhost"''
+      ''--proxy-bypass-list="<-loopback>"''
      "--no-first-run"
      "--new-window"
      "--incognito"
      "-no-default-browser-check"
+      "--no-crash-upload"
+      "--disable-extensions"
+      "--disable-sync"
+      "--disable-background-networking"
+      "--disable-client-side-phishing-detection"
+      "--disable-component-update"
+      "--disable-translate"
+      "--disable-web-resources"
+      "--safebrowsing-disable-auto-update"
      "http://cache.nixos.org/"
    ];

@ -144,12 +151,5 @@ in
        else
          throw "programs.captive-browser.dhcp-dns must be set"
      );
-
-    security.wrappers.captive-browser = mkIf requiresSetcapWrapper {
-      owner = "root";
-      group = "root";
-      capabilities = "cap_net_raw+p";
-      source = "${captive-browser-configured}/bin/captive-browser";
-    };
  };
 }
--- a/nixos/modules/services/matrix/matrix-authentication-service.nix
+++ b/nixos/modules/services/matrix/matrix-authentication-service.nix
@ -11,16 +11,15 @@ let
    filter
    filterAttrs
    getExe
+    getExe'
    isAttrs
    isList
    mapAttrs
-    mkDefault
    mkEnableOption
    mkIf
    mkOption
    mkPackageOption
    optional
-    optionalAttrs
    types
    ;

@ -45,6 +44,11 @@ let
    else
      pruned;
  configFile = format.generate "config.yaml" finalSettings;
+
+  extraConfigFiles = lib.imap0 (
+    i: _: "$CREDENTIALS_DIRECTORY/config-${toString i}"
+  ) cfg.extraConfigFiles;
+  runtimeConfig = "/run/matrix-authentication-service/config.yaml";
 in
 {
  meta.maintainers = with lib.maintainers; [
@ -370,6 +374,23 @@ in
        such as the Matrix homeserver if it's running on the same host.
      '';
    };
+
+    credentials = lib.mkOption {
+      type = lib.types.attrsOf lib.types.str;
+      default = { };
+      description = ''
+        Mapping of credential name to  source file-path. Exposed to the unit via LoadCredential and
+        readable inside the service at `''${CREDENTIALS_DIRECTORY}/<name>`.
+
+        For example:
+
+        ```
+        services.matrix-authentication-service.credentials."synapse-secret" = "/run/agenix/synapse-shared";
+        services.matrix-authentication-service.settings.matrix.secret_file =
+          "\''${CREDENTIALS_DIRECTORY}/synapse-secret";
+        ```
+      '';
+    };
  };

  config = mkIf cfg.enable {
@ -390,13 +411,20 @@ in
      wantedBy = [ "multi-user.target" ];
      serviceConfig = {
        DynamicUser = true;
-        ExecStartPre = ''
-          ${getExe cfg.package} config check \
-            ${concatMapStringsSep " " (x: "--config ${x}") ([ configFile ] ++ cfg.extraConfigFiles)}
+        LoadCredential =
+          (lib.imap0 (i: path: "config-${toString i}:${path}") cfg.extraConfigFiles)
+          ++ (lib.mapAttrsToList (name: path: "${name}:${path}") cfg.credentials);
+        ExecStartPre = pkgs.writeShellScript "mas-prepare" ''
+          ${getExe' pkgs.gettext "envsubst"} \
+            '$CREDENTIALS_DIRECTORY' \
+            < ${configFile} \
+            > /run/matrix-authentication-service/config.yaml
+          ${getExe cfg.package} config check --config ${runtimeConfig} \
+            ${concatMapStringsSep " " (x: "--config ${x}") extraConfigFiles}
        '';
        ExecStart = ''
-          ${getExe cfg.package} server \
-            ${concatMapStringsSep " " (x: "--config ${x}") ([ configFile ] ++ cfg.extraConfigFiles)}
+          ${getExe cfg.package} server --config ${runtimeConfig} \
+            ${concatMapStringsSep " " (x: "--config ${x}") extraConfigFiles}
        '';
        Restart = "on-failure";
        RestartSec = "1s";
@ -438,6 +466,7 @@ in
        # Working and state directories
        StateDirectory = "matrix-authentication-service";
        StateDirectoryMode = "0700";
+        RuntimeDirectory = "matrix-authentication-service";
        WorkingDirectory = "/var/lib/matrix-authentication-service";
      };
    };
--- a/nixos/modules/services/web-servers/nginx/default.nix
+++ b/nixos/modules/services/web-servers/nginx/default.nix
@ -1691,9 +1691,7 @@ in
      )
    );

-    environment.etc."nginx/nginx.conf" = mkIf cfg.enableReload {
-      source = configFile;
-    };
+    environment.etc."nginx/nginx.conf".source = configFile;

    security.acme.certs =
      let
--- a/nixos/modules/virtualisation/incus.nix
+++ b/nixos/modules/virtualisation/incus.nix
@ -93,6 +93,9 @@ let
    ]
    ++ lib.optionals nvidiaEnabled [
      libnvidia-container
+    ]
+    ++ lib.optionals cfg.storage.truenas.enable [
+      truenas-incus-ctl
    ];

  # https://github.com/lxc/incus/blob/cff35a29ee3d7a2af1f937cbb6cf23776941854b/internal/server/instance/drivers/driver_qemu.go#L123
@ -284,6 +287,8 @@ in
        '';
      };

+      storage.truenas.enable = lib.mkEnableOption "TrueNAS storage driver support";
+
      ui = {
        enable = lib.mkEnableOption "Incus Web UI";

@ -314,6 +319,10 @@ in
          );
        message = "Incus on NixOS is unsupported using iptables. Set `networking.nftables.enable = true;`";
      }
+      {
+        assertion = cfg.storage.truenas.enable -> config.services.openiscsi.enable;
+        messages = "`virtualisation.incus.storage.truenas.enable` requires `services.openiscsi.enable`";
+      }
    ];

    # https://github.com/lxc/incus/blob/f145309929f849b9951658ad2ba3b8f10cbe69d1/doc/reference/server_settings.md
@ -346,6 +355,9 @@ in

      # gui console support
      pkgs.spice-gtk
+    ]
+    ++ lib.optionals cfg.storage.truenas.enable [
+      pkgs.truenas-incus-ctl
    ];

    # Note: the following options are also declared in virtualisation.lxc, but
--- a/nixos/modules/virtualisation/nixos-containers.nix
+++ b/nixos/modules/virtualisation/nixos-containers.nix
@ -520,7 +520,7 @@ let
    hostAddress6 = null;
    localAddress = null;
    localAddress6 = null;
-    localmacAddress = null;
+    localMacAddress = null;
    tmpfs = null;
  };

--- a/nixos/tests/matrix/matrix-authentication-service.nix
+++ b/nixos/tests/matrix/matrix-authentication-service.nix
@ -237,13 +237,14 @@ in
              {
                id = masULID;
                client_id = oidcClientID;
-                client_secret = oidcClientSecret;
+                client_secret_file = "\${CREDENTIALS_DIRECTORY}/oidc_client_secret";
                issuer = "https://${dexDomain}:5556";
                scope = "openid email profile";
                token_endpoint_auth_method = "client_secret_post";
              }
            ];
          };
+          credentials.oidc_client_secret = "${pkgs.writeText "oidc-client-secret" oidcClientSecret}";
        };
        services.postgresql.authentication = pkgs.lib.mkOverride 10 ''
          local all all trust
--- a/nixos/tests/playwright-python.nix
+++ b/nixos/tests/playwright-python.nix
@ -29,7 +29,7 @@
              "firefox": {},
              "webkit": {}
            }
-            needle = re.compile("Nix.*Reference Manual")
+            needle = re.compile("Nix.* Manual")
            if len(sys.argv) != 3 or sys.argv[1] not in browsers.keys():
                print(f"usage: {sys.argv[0]} [{'|'.join(browsers.keys())}] <url>")
                sys.exit(1)
--- a/nixos/tests/scx/default.nix
+++ b/nixos/tests/scx/default.nix
@ -13,16 +13,19 @@
    specialisation = {
      beerland.configuration.services.scx.scheduler = "scx_beerland";
      bpfland.configuration.services.scx.scheduler = "scx_bpfland";
+      cake.configuration.services.scx.scheduler = "scx_cake";
+      chaos.configuration.services.scx.scheduler = "scx_chaos";
      cosmos.configuration.services.scx.scheduler = "scx_cosmos";
      flash.configuration.services.scx.scheduler = "scx_flash";
-      flatcg.configuration.services.scx.scheduler = "scx_flatcg";
+      flow.configuration.services.scx.scheduler = "scx_flow";
+      forge.configuration.services.scx.scheduler = "scx_forge";
      lavd.configuration.services.scx.scheduler = "scx_lavd";
-      nest.configuration.services.scx.scheduler = "scx_nest";
      p2dq.configuration.services.scx.scheduler = "scx_p2dq";
+      pandemonium.configuration.services.scx.scheduler = "scx_pandemonium";
      rlfifo.configuration.services.scx.scheduler = "scx_rlfifo";
      rustland.configuration.services.scx.scheduler = "scx_rustland";
      rusty.configuration.services.scx.scheduler = "scx_rusty";
-      simple.configuration.services.scx.scheduler = "scx_simple";
+      tickless.configuration.services.scx.scheduler = "scx_tickless";
    };
  };

@ -30,16 +33,19 @@
    specialisation = [
      "beerland",
      "bpfland",
+      "cake",
+      "chaos",
      "cosmos",
      "flash",
-      "flatcg",
+      "flow",
+      "forge",
      "lavd",
-      "nest",
      "p2dq",
+      "pandemonium",
      "rlfifo",
      "rustland",
      "rusty",
-      "simple"
+      "tickless",
    ]

    def activate_specialisation(name: str):
--- a/nixos/tests/unbound.nix
+++ b/nixos/tests/unbound.nix
@ -7,6 +7,7 @@
    * running a recursive DNS resolver on the local machine, forwarding to a local DNS server via TCP/853 (DoT)
    * running a recursive DNS resolver on a machine in the network awaiting input from clients over TCP/53 & UDP/53
    * running a recursive DNS resolver on a machine in the network awaiting input from clients over TCP/853 (DoT)
+    * running a recursive DNS resolver on a machine in the network awaiting input from clients over UDP/853 (DoQ)

  In the below test setup we are trying to implement all of those use cases.

@ -100,7 +101,7 @@ in
      };

    # The resolver that knows that forwards (only) to the authoritative server
-    # and listens on UDP/53, TCP/53 & TCP/853.
+    # and listens on UDP/53, TCP/53, TCP/853 & UDP/853.
    resolver =
      { lib, nodes, ... }:
      {
@ -122,7 +123,10 @@ in
          853 # DNS over TLS
          443 # DNS over HTTPS
        ];
-        networking.firewall.allowedUDPPorts = [ 53 ];
+        networking.firewall.allowedUDPPorts = [
+          53 # regular DNS
+          853 # DNS over QUIC
+        ];

        services.unbound = {
          enable = true;
@ -150,6 +154,8 @@ in
              ];
              tls-service-pem = "${cert}/cert.pem";
              tls-service-key = "${cert}/key.pem";
+              quic-port = 853;
+              quic-size = "8m";
            };
            forward-zone = [
              {
@ -306,7 +312,7 @@ in
              assert expected == out, f"Expected `{expected}` but got `{out}`"


-      def test(machine, remotes, /, doh=False, zone=zone, records=records, args=[]):
+      def test(machine, remotes, /, doh=False, doq=False, zone=zone, records=records, args=[]):
          """
          Run queries for the given remotes on the given machine.
          """
@ -331,6 +337,15 @@ in
                          expected,
                          ["+https"] + args,
                      )
+                  if doq:
+                      query(
+                          machine,
+                          remote,
+                          query_type,
+                          zone,
+                          expected,
+                          ["+quic"] + args,
+                      )


      client.start()
@ -348,12 +363,12 @@ in

      # verify that the resolver is able to resolve on all the local protocols
      with subtest("test that the resolver resolves on all protocols and transports"):
-          test(resolver, ["::1", "127.0.0.1"], doh=True)
+          test(resolver, ["::1", "127.0.0.1"], doh=True, doq=True)

      resolver.wait_for_unit("multi-user.target")

      with subtest("client should be able to query the resolver"):
-          test(client, ["${(lib.head nodes.resolver.networking.interfaces.eth1.ipv6.addresses).address}", "${(lib.head nodes.resolver.networking.interfaces.eth1.ipv4.addresses).address}"], doh=True)
+          test(client, ["${(lib.head nodes.resolver.networking.interfaces.eth1.ipv6.addresses).address}", "${(lib.head nodes.resolver.networking.interfaces.eth1.ipv4.addresses).address}"], doh=True, doq=True)

      # discard the client we do not need anymore
      client.shutdown()
--- a/pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/anthropic.claude-code/default.nix
@ -21,26 +21,26 @@ vscode-utils.buildVscodeMarketplaceExtension (finalAttrs: {
      sources = {
        "x86_64-linux" = {
          arch = "linux-x64";
-          hash = "sha256-n6UmUqfzOADzZzJMvY40gBCBKYgDtig41AD1aieA/kQ=";
+          hash = "sha256-/uvQIg773WUzalc9XFtBrocsGye3v5y1rvKyJVpXWS0=";
        };
        "aarch64-linux" = {
          arch = "linux-arm64";
-          hash = "sha256-/T7H1itSllf1h6vPzXlwokBvNOVQjZjNuhmC/ocqmPI=";
+          hash = "sha256-zC0iYoAxmymxdqo2JgDcMOvUOA3pFbkx0s9C4F6E75k=";
        };
        "x86_64-darwin" = {
          arch = "darwin-x64";
-          hash = "sha256-qj9K/BlKbl5ZuowRMSVBXLknM6NeOxtIYynIcSE+K5A=";
+          hash = "sha256-mhZBWpV3Gl5TLieIEvrtDmtqQBKeiCcDCwOShQnp++Y=";
        };
        "aarch64-darwin" = {
          arch = "darwin-arm64";
-          hash = "sha256-kXKnSZ6VQa/NPXroEbQT1pNwIy1eKnIDgOWX5WvA3JI=";
+          hash = "sha256-I570YO5mvXgzXG52NdoGjgVgHbyshm6fIkCIN0li9+4=";
        };
      };
    in
    {
      name = "claude-code";
      publisher = "anthropic";
-      version = "2.1.199";
+      version = "2.1.201";
    }
    // sources.${stdenvNoCC.hostPlatform.system}
      or (throw "Unsupported system ${stdenvNoCC.hostPlatform.system}");
--- a/pkgs/applications/editors/vscode/extensions/ms-windows-ai-studio.windows-ai-studio/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/ms-windows-ai-studio.windows-ai-studio/default.nix
@ -7,8 +7,8 @@ vscode-utils.buildVscodeMarketplaceExtension {
  mktplcRef = {
    name = "windows-ai-studio";
    publisher = "ms-windows-ai-studio";
-    version = "1.6.1";
-    hash = "sha256-9q3rK/7Q7XiaH9DZN8Yvar/WTdYdEdRXH02WK1tfk5k=";
+    version = "1.6.2";
+    hash = "sha256-irI7rcyCUc3jUhrEa449pDix3MhwMh18ezvri3bi0Gk=";
  };

  meta = {
--- a/pkgs/applications/editors/vscode/generic.nix
+++ b/pkgs/applications/editors/vscode/generic.nix
@ -308,11 +308,6 @@ stdenv.mkDerivation (
    dontConfigure = true;
    noDumpEnvVars = true;

-    stripExclude = lib.optional hasVsceSign [
-      # vsce-sign is a single executable application built with Node.js, and it becomes non-functional if stripped
-      "lib/vscode/resources/app/node_modules/@vscode/vsce-sign/bin/vsce-sign"
-    ];
-
    installPhase = ''
      runHook preInstall
    ''
@ -474,9 +469,11 @@ stdenv.mkDerivation (
          --add-needed ${libglvnd}/lib/libEGL.so.1 \
          $out/lib/${libraryName}/${executableName}
      ''
+      # restore original vsce-sign, which has integrity checks
      + (lib.optionalString hasVsceSign ''
+        cp -r ./resources/app/node_modules/@vscode/vsce-sign/bin/vsce-sign "$out/lib/vscode/resources/app/node_modules/@vscode/vsce-sign/bin/vsce-sign"
        patchelf \
-          --add-needed ${lib.getLib openssl}/lib/libssl.so \
+          --add-needed ${lib.getLib openssl}/lib/libssl.so.3 \
          $out/lib/vscode/resources/app/node_modules/@vscode/vsce-sign/bin/vsce-sign
      '')
    );
--- a/pkgs/applications/emulators/libretro/cores/mame2010.nix
+++ b/pkgs/applications/emulators/libretro/cores/mame2010.nix
@ -6,13 +6,13 @@
 }:
 mkLibretroCore {
  core = "mame2010";
-  version = "0-unstable-2026-06-16";
+  version = "0-unstable-2026-07-03";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "mame2010-libretro";
-    rev = "36c36bb0a59902aa75af3e80853f7f893d7ffe91";
-    hash = "sha256-tudxNTySzhoN4SzlzqhzuDE9Qmyr9Ud87fCiW+0MITc=";
+    rev = "484456818393505dd4367e6e4c116c573c04a1ec";
+    hash = "sha256-CstMUeTxOsL419R2kzSK6hDd1okxsbtwMvqjwzSf3bI=";
  };

  makefile = "Makefile";
--- a/pkgs/applications/emulators/libretro/cores/pcsx2.nix
+++ b/pkgs/applications/emulators/libretro/cores/pcsx2.nix
@ -11,13 +11,13 @@
 }:
 mkLibretroCore {
  core = "pcsx2";
-  version = "0-unstable-2026-06-24";
+  version = "0-unstable-2026-06-29";

  src = fetchFromGitHub {
    owner = "libretro";
    repo = "ps2";
-    rev = "6d11ca54728b0c9e0a4bf3da743d56c7d29abb4e";
-    hash = "sha256-JE2EU/ugtXwEqYIzd0JSWXUy29X44hYHiC/LfaaOjkw=";
+    rev = "b03969a333f38de21f866c2a10da4300d170364d";
+    hash = "sha256-djGM6hMQCvJQG2+PWDRLeM+13/Q8upD25uhH4vU/yko=";
    fetchSubmodules = true;
  };

--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
@ -1319,11 +1319,11 @@
    "vendorHash": "sha256-7ZoJg1HEVj5Nygr46lmBZeJDfZuU4F90yntrgkBVgGg="
  },
  "tencentcloudstack_tencentcloud": {
-    "hash": "sha256-p8AW+AzezOP6N3wzlLZOMoTbSwb/cil7cmXkdwheXtE=",
+    "hash": "sha256-tADmls3GAmR3S5wdasoHrBYOtZTVXDS2alZD6Mzfo4M=",
    "homepage": "https://registry.terraform.io/providers/tencentcloudstack/tencentcloud",
    "owner": "tencentcloudstack",
    "repo": "terraform-provider-tencentcloud",
-    "rev": "v1.83.6",
+    "rev": "v1.83.7",
    "spdx": "MPL-2.0",
    "vendorHash": null
  },
@ -1508,12 +1508,12 @@
    "vendorHash": "sha256-8p6dJwGyTK+qtgplSLtIRKxnNAQAgHfs4z/EsBcg/iY="
  },
  "yandex-cloud_yandex": {
-    "hash": "sha256-/t4HHlZ/E4QM4vvJAUzn+uJIox3Duqxl0/3Hu4AGGak=",
+    "hash": "sha256-7IyFMqzkdZ2wd5KUo5eNXUr847f3VhyYKDxwMKYZ+j0=",
    "homepage": "https://registry.terraform.io/providers/yandex-cloud/yandex",
    "owner": "yandex-cloud",
    "repo": "terraform-provider-yandex",
-    "rev": "v0.209.0",
+    "rev": "v0.213.0",
    "spdx": "MPL-2.0",
-    "vendorHash": "sha256-UKWLZp64nvohXqYHMhRB+nWfUKSYyGJBMpo1nk792XY="
+    "vendorHash": "sha256-JoOuqaiQFWWjnH/HjLxvznnyqQauxSef1KRQTMrhoGQ="
  }
 }
--- a/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
+++ b/pkgs/applications/networking/mailreaders/thunderbird/packages.nix
@ -78,8 +78,8 @@ rec {
  thunderbird = thunderbird-latest;

  thunderbird-latest = common {
-    version = "152.0";
-    sha512 = "51b950af634e7c7dfb7c043d69f925ed6d50d4c44341761e7e3ef02d5db28d2c539cd8d9286195e3facf84869f57b12a58760105b5195c449b4e1e4c9b6200d2";
+    version = "152.0.1";
+    sha512 = "f66c87de4dd73c3c45e420a55d76c3cb6ac091a61794ccf58ba59d1a40cf8001dee19a6a7f4c6bef7d36ea94ed4e4f677449d3006b2004abbd3fab42ad1c9228";

    updateScript = callPackage ./update.nix {
      attrPath = "thunderbirdPackages.thunderbird-latest";
--- a/pkgs/by-name/ac/actual-server/missing-hashes.json
+++ b/pkgs/by-name/ac/actual-server/missing-hashes.json
@ -1,55 +1,55 @@
 {
-  "@esbuild/aix-ppc64@npm:0.25.10": "6ed1afe8ab7e186e94ca26c359c685d11394deb101f0d61d62ce00f1d29147edf04a441b532f2fd683484cd980973e41e0d9bca7a71fdf2d1bcf767d45d28d18",
+  "@esbuild/aix-ppc64@npm:0.25.12": "b2cc7e0cd348bc315907f6ce090ee545d4157a19fc44327ff0262ba9296f0fad19c57dd679b1b526a0a18f34f1971b128e15b41bca794c74a9b2c32238fdd537",
  "@esbuild/aix-ppc64@npm:0.27.2": "9c18cc2e4a03339a55013aac05b4a3fc4b77e75715dc252d034aa3d43b754abc053a7601b95e31249f4b6e69b68db2f5e6cb04b0ed619f825f2f70daff1a78d7",
-  "@esbuild/android-arm64@npm:0.25.10": "3e2d57893179a673aebeeff8779e96532da0a9f204bd018f94fb7db258d65d1324e47c621a7d5399f5ae0a51337a44897e8e003d940d4120d749e57fb3b139f5",
+  "@esbuild/android-arm64@npm:0.25.12": "f770937988ec42e289277abc03800ccf88902684dbda3013a8ab274bb9eca36d35619a75f0f0510e225bdb4c7cf9a426218c7d2641a98fed74287a52d60d8865",
  "@esbuild/android-arm64@npm:0.27.2": "a318fc9ffcdad7fda8bb521af8b17f73d93d9a94b4cca9301fbf72cf3f5a6e945edd589a47388de70f3e9582655dcf5b5bb928a11e306368fae4a9106d5143d2",
-  "@esbuild/android-arm@npm:0.25.10": "c0785d963c24bab19a8a07cfa47c174d7be7bf46e329726686d743a14604b096f3a85f42807ff72dd918094d117396d3005ae88a20f15b2304691fa7d8d6b7fd",
+  "@esbuild/android-arm@npm:0.25.12": "7a5d507aa717d85470c595e11f3c03fbf4f0bffdd10d30f49e1a3f14c2553191f156b214eacd6911fa36719faef23c28be7d88ac876ec300995987964ea16e99",
  "@esbuild/android-arm@npm:0.27.2": "01114275e096b9177ad2496730087ee081d6e65a75bc087457b527c5baac5a8ccb362435f45232532bf6f97de95e1790dbce127d55abd5e4152c7214682bf4d3",
-  "@esbuild/android-x64@npm:0.25.10": "f49fbfeb6f95589ecc152668266a28ce37cc24c10756c203898be07af127b09eaf077428cef86dbcbd6f207706e8917dc6d354558afcf5cf7c532ea882b13779",
+  "@esbuild/android-x64@npm:0.25.12": "cd459b0433b0541bae9ffafd274c57529125719a5b78f4ee92aa9f8a1f54b002a18d889bee19084a503c114412269ef4e740d21b4a2de811ec2a076e96b35f48",
  "@esbuild/android-x64@npm:0.27.2": "e92c5b6919081a14c8882f1167cf90b4e4bba745ad6e9a23428f85a1cd5e79dfa3f1d2fc943686b237e4cd09fac52ad3b3791deab6a0419ee10859284d3834aa",
-  "@esbuild/darwin-arm64@npm:0.25.10": "2d049309a05272607dda18f59ce0b262ec1ae383133697b7a0c013c0835ec72910f61fd17a1be744c17562a092b1fa0a945ee1bd2cdcd029922c6401727a46b0",
+  "@esbuild/darwin-arm64@npm:0.25.12": "067f4588b9b64c93742c4a8cec35282dd076583006ce8089aae3095fcae5b606a2f60d86caf0527be6009be234178fb83d360af82698e2017a6f9fb9345e084d",
  "@esbuild/darwin-arm64@npm:0.27.2": "5e99db5037167bad4a095fc445b94a2ce02357870ed58b79e13ae6bc09b5cb33d7e03f925492df940f9e0ad685a889f02beec1431d8fbf4c7ced55b2f48f5659",
-  "@esbuild/darwin-x64@npm:0.25.10": "4eae1ae1486307a9cdc521e0416f28dff3f2693d051c81de15378bb100aef809f862526cb9c03360db69aa6832762b01b955f0a8bbcf8adc191af87d9f0e4e4f",
+  "@esbuild/darwin-x64@npm:0.25.12": "c29947d07adacadcb29092860b69d1b668d9c5abfaf525e2a7f3ece61c3f4e72a95c1c66ad0e80fbf31d01210ae4e8330d4ae6d9c6c9ad2b8aa159eb115f9a8d",
  "@esbuild/darwin-x64@npm:0.27.2": "87f2fbc4cf11724ef805b17cbdc7b0a9498332bc4b61d55e110ecc3b09bc488b88c0bd140ea48924e9c97a2063cf7e440fef13dd56e415c46799619d61086910",
-  "@esbuild/freebsd-arm64@npm:0.25.10": "f4915a93ba262028f30fe5d87210ef84e1fa725cb76fbc4ab9c72c4d6a862d79c6ac2c54f6e606a8a53ab1ecf53c21fb5064571147e8a9a10aabf1a7d95f32f6",
+  "@esbuild/freebsd-arm64@npm:0.25.12": "c51691aeb04e41c554a59cbb5ab8d917446f352aeec70e3d5a7f25409e9115ff2db930589052df3e7d60f03eff4c298bda89db62f2408d1a49b6a70e69c5d4a0",
  "@esbuild/freebsd-arm64@npm:0.27.2": "1ffa23243b913e377a5b09fd97ad9f089be3695aafdd893b60bb7f9be479256d8b7546f0bc96c4e61133fe7aeeaf95a8e941e82a65d99008ff82c99bdec85eee",
-  "@esbuild/freebsd-x64@npm:0.25.10": "94628bffea4936e26570450348be6629b1872ad73cc4af7efdc2bd29ba95a6f3bcfd87b3ce0371f61fee22bbfa5e6f9e148a6c6b8c62c5b32a0786ec4ba7b789",
+  "@esbuild/freebsd-x64@npm:0.25.12": "9b84c48176350811690751c34d1513005290641923a161f96cb433cbcbb8c072ecb92cef39ba641f48032071f74c6119e5f081b5788242109426c54f3ef1a01e",
  "@esbuild/freebsd-x64@npm:0.27.2": "44f744b289cf9e115b0adfac1905818d756dfced14213bf144d9016d96f67575ef2a55526f76e29ee775fcfec7274ba3a5e6833f35ed79a4592d3f5eac278267",
-  "@esbuild/linux-arm64@npm:0.25.10": "ec1d900010bba313b403a7350a87e10ad0eb390373b290158e98902cb3ad15738596af7ad188942db1fec027b9e73336f193d8bce821097d13c224ecaa832550",
+  "@esbuild/linux-arm64@npm:0.25.12": "1e9cc29569890f5944e7dbe2e597eb19d76e85fe07aef6253129b16800ccb5b33a79cea17873d7debdf681d34adf77e06ae99742fe06cab095f3db441b741b1e",
  "@esbuild/linux-arm64@npm:0.27.2": "2b037d74eaff4e9b5a6076760ede873320707636a3495939687cdd0c2c7150883111273bc0a8663fa305c42f439f4748b5ad7f15a1a1ea9fa7db575d9faf2d1b",
-  "@esbuild/linux-arm@npm:0.25.10": "5459fc95b966199b27060a0926d5a1822d4c7f4132150fbbdee99eb3960b8cef8314c451c4f8c4d02e39c12b36267bbd59f030fda8a9b512ca2bd44dbb4bafe7",
+  "@esbuild/linux-arm@npm:0.25.12": "fcf091d6a51834c9a942ee33b568342990c7fa29d2ff338ce628a41bc415696d09bca7ef502c2b04518973010f73ab3d13e37096030db9c8d393ab29408f104b",
  "@esbuild/linux-arm@npm:0.27.2": "28cfc3a9ca11fc899649e7a706fb4b2ee57999bd92e86c23726b3ed0f832732411dd0aa3e2bcdb4105759f83bc4e5adc98dc195aaafce736c910db4e43694702",
-  "@esbuild/linux-ia32@npm:0.25.10": "283430e003d45a698a3d5a4e1ccb243f0134679fdb839c4ef1b48c79b2d975969fa676e261a772eaa3042a9870f7392930974cca0a779ee9950698607d174c48",
+  "@esbuild/linux-ia32@npm:0.25.12": "ccd563c3189e5f651b479dd80d3bebd9d5c4747ce7448bb80266c804c3141eb3514b8c70445d77301899c54c1ff8c74614f8423704fde475a5c67efe86713235",
  "@esbuild/linux-ia32@npm:0.27.2": "ac6cc92b9be2ec6d9d483c53fc973e6381765b784a2e1b71fa93ea0cf976344c2e3e0bfda0140b0829b3ec4304d9b886692b2891e68c17d2121066d06e67f0ac",
-  "@esbuild/linux-loong64@npm:0.25.10": "c8ae07926c5d31f66ae81db3267ae62c4f844abb87188a901c91f9ab7b8a88d381152a59a89c1bfef61459dafc0a066f722b3c410ef07801d2570c1497477b44",
+  "@esbuild/linux-loong64@npm:0.25.12": "6df2710d99d84006ad8151a9ca26861dbb97524a15e61f56eb1a5a76786865ad03be838fe3d414a72b239262364964528f3136c2965b3c442c7ed85090b145c4",
  "@esbuild/linux-loong64@npm:0.27.2": "625f5b6c2218a3acb2cff8f7f02a53ca89d13925f8932260ddad01595c6907beda4a79e4b767b1101f5971049f88d3ec6ab29cf565b4d61d9b0d7277e2cb578d",
-  "@esbuild/linux-mips64el@npm:0.25.10": "cc3828db4e00fe8ab932c896628cd193aa40dcfb03584f776d3b6be141691f2b0379b5a3070cba56375b00181a13ed955d70e2f2f3c828a5a794ac9eb06f6a07",
+  "@esbuild/linux-mips64el@npm:0.25.12": "883bd8c4afd70b8e372db8a6bdb429d419ae30253a63987ff824994958d8431b6e51ead05e6372b2a233e025ea57f6f65b04ebaff8308e39acf54bfa73a5cae2",
  "@esbuild/linux-mips64el@npm:0.27.2": "0c62692cb3a297b37212dfde52a861861843a716f6b3bdb73da49ba249a4c001b989ea61dc4540c430fac59ce2f8fc45035cdfac80172c5ddaf1b9df8471aecf",
-  "@esbuild/linux-ppc64@npm:0.25.10": "7f2995c79a76ed739fe85773cd9933f90ef50c003b3cd340db9c738e714e05698d48b355d0495ffef92f7444018454c1c7072992e5411e9466856388b24c1417",
+  "@esbuild/linux-ppc64@npm:0.25.12": "71f8544a3b99b4c95d49604b66d144e9617ae9925914c1bd5bc6731d15d4e48e7f8e9bffd85835e1c93a88c3537b53f3e99b500e4dd2533af9483055b02f9d38",
  "@esbuild/linux-ppc64@npm:0.27.2": "b804d2dd0a6a85fe1c731828c725731a55ab120d2cc16941d560b2e9af5c2ec51586914ce26a84a326a9d46fa61eb8bb1f843953fe29ddd43b3f3099c491b5ff",
-  "@esbuild/linux-riscv64@npm:0.25.10": "3cba9a06e732e4c86f943699e47a2ac7dcbd225b753d2d004179069c860013a340033f1c7990e5adb62fd0930d6982baf43ce4f4e85a2cbd0d11eda30d7fdb54",
+  "@esbuild/linux-riscv64@npm:0.25.12": "fe8048262c5c6a040c047a9b7ab8547b0e7a32ce50f622ea8dadc3ec22065676efbc9b36896ca96959f77839757319633a2d05af5f2de7b32389a03b80f027f1",
  "@esbuild/linux-riscv64@npm:0.27.2": "03e67e7207a83801363e3637f9a35fb6224ed4dc23bbf6eca41904fc42f5a6806e1e591666bf48dbf62eba97d41ff4355413b14dcb2339007b22c693374c49f6",
-  "@esbuild/linux-s390x@npm:0.25.10": "b3e46636050ef3fbd80696545c84fae1969c3f58b0004af07044051b88623601da280d32d146d1f7f2b534ddff764e26dfd0baa6fa098e4379d8b7c476d7b631",
+  "@esbuild/linux-s390x@npm:0.25.12": "e5c023be1dfd75c915453763f944db8ab3da4f60a00c2b0e6f3b9349bc6c51e5ac5ce928db56e8f316e910213adf2172efd1b37abe070f6cda0c28583d770bab",
  "@esbuild/linux-s390x@npm:0.27.2": "eb24b9c0a4a1492e4ff34a87933f6a3b348739c12f864b408144efdf949871c1fbb02a1cca741bfa11fd08aebe585d046fd3311b462ce4c795e3064ba3912469",
-  "@esbuild/linux-x64@npm:0.25.10": "c677043cba5cf7c1953429d09ed5efa23d6cad209feae2080c3ab14b2f30d56a926ea4a5bc3cd3fa20cfdc3e2c6bca2eaa68e91ee92608819d02aba6c6beacbd",
+  "@esbuild/linux-x64@npm:0.25.12": "8b2c7f5e00c40058f5c150df267cd303eae5907822f196902cd8e64af70475e800a7f132ac6388aa2b77b877d6314147e67f3fb67d97c867adccd54a2a6caaf6",
  "@esbuild/linux-x64@npm:0.27.2": "ed1542f203329521fb1f308696c76ba59ed4a4616a24e21bf4820685362bba209d5c44c2f4e66c88dc7b7399df9ace625454d4829ee529d076ccaf61566e11cf",
-  "@esbuild/netbsd-arm64@npm:0.25.10": "28049c2ad9a67b366a843931742d6a5bf535deebc0b5f6918ee69980ee35a4f16d38f1e4dc2bbb1ac00e852bebb5268fff9c41939ad81bc28e4d65ad9143e51b",
+  "@esbuild/netbsd-arm64@npm:0.25.12": "19bc5a1295697aa8787929472323494302d117ea1e592f17cfae443525c1e5917a5f77e6582fc1ec9de3a11a9e296bc12749c6b12cde0aab10695b5c25f29f73",
  "@esbuild/netbsd-arm64@npm:0.27.2": "576dd082047077b9cc41fbeffd728821a4f3b80969c1d2d6c274301122c6de2050f484fd4e946777527b8a15bd2a5ac54f85ca7ab95ea72b5345177e6a888687",
-  "@esbuild/netbsd-x64@npm:0.25.10": "36d4e9ab1b9fc28b26e571b72ec4baeb639e3596a2ac7cddb86c9c812c550fbe8f860abf4915f1053280b904f1a99fd26b2d1cde3c899ba33d394b6d0bdc383a",
+  "@esbuild/netbsd-x64@npm:0.25.12": "8eb2ff51aa39b43a021e4b51411789b6299fd0dc38b3896719684333e32fd42ed4508ab67dcc88435631e5333573a4848dbfeec12569de46c2318dcdb39ad3ab",
  "@esbuild/netbsd-x64@npm:0.27.2": "f8994af3e2ff3c9a91e874e58698b66e6f8d4e72dbc0aaf749b74a79420954146ed053359b0a4c213918582cee187d8a371737a33cfb93e624b4d091e5a6c240",
-  "@esbuild/openbsd-arm64@npm:0.25.10": "d477b47a4c4201c5c4b53d14299abace47f54d3f9311534bf667b14f3935cb9bfe40724e758c1ad595e29b8e8b2cd331de0d7c4a84da290261f6a48f94eb489e",
+  "@esbuild/openbsd-arm64@npm:0.25.12": "5ff26a012d0d35673bc3800d28f284a62c310801a68c55b2d1ed8a7e09ef7568117fb8ab2d7ec7a6e7d73ce6a9e05150ee07335fc6447ba98658469b9da1cb2e",
  "@esbuild/openbsd-arm64@npm:0.27.2": "f710da24beeb747ef3a11b9d99085a14f5c929f942fd9d9a05b7806d5ff1b85631bfa506eb7a6aed9fd01ec99bf91f24736f9f0e0eb6b7c0019fe0dddd2e615c",
-  "@esbuild/openbsd-x64@npm:0.25.10": "15f4560420b57e548f26913d1bdbd00ae6535d912ce87b7e8e1a366b754511581fbfdf192c5622b1757bb56b082b316336853dfd6f6140a2b4c002c4ceaaff5d",
+  "@esbuild/openbsd-x64@npm:0.25.12": "41dce65493548bc0dc411a6175e9fb109a93bbbf370ef444d1459698226ad2a3096ab7edd420c27eb3d15e6bbd0bc79357bd7c0a59c5527ace0fefac181638f8",
  "@esbuild/openbsd-x64@npm:0.27.2": "62670fbe1f609c5362df7b45968ded512a0860e2ad8a4715a89993abfa2f9f08a28f1294c7857d80e6d3f713639a71d291c06a961b331de67ad350032d1b8e96",
-  "@esbuild/openharmony-arm64@npm:0.25.10": "3dd9f05a63e4bcb67a9097663c03b7d917bd1ae8338bafcd2f0cd788d672d729451ad41b993567ef067c49acf8581fb2bb949a4434e48b9492b6087c2a28032c",
+  "@esbuild/openharmony-arm64@npm:0.25.12": "b3e0502067e760e5b92d3180e20372cbb2dba8267fbb56206d50bdeccd8895feb408020b98c3f17054eea0f1fba365385850cb91d1f79a25dfa3751032278825",
  "@esbuild/openharmony-arm64@npm:0.27.2": "e279efdc18301add96ea791ba9ef117cae05346688cd521fd225a60ad166add4bc995af985058e3b6ab9e65a7c49a79108a294d6aa26a1d1685ad0db194e2c56",
-  "@esbuild/sunos-x64@npm:0.25.10": "1733bda6f4f5e13aa764ff27e454f5876ff72ed36bf94600a98791c678831c736f66130d527fa330b7f6cbea3d982491e8454f65a84583eb5da85588dec260fb",
+  "@esbuild/sunos-x64@npm:0.25.12": "50ed9767e00ff74a1d98d94c5fe6027bc5e9e095a64735d1d0676ec72adc4b15b0095e97f5ac71602f2c5fcdcf3e9f6cfe005315e998d9d3e12ca93a2076b639",
  "@esbuild/sunos-x64@npm:0.27.2": "7234302321d36576b5a9f027915417cddc195a67b19cdfb50e69c337ee0dd63a88be6b72d7ef299cd569d1af62e54774303d52d3d6b5e5858db975241ae467d6",
-  "@esbuild/win32-arm64@npm:0.25.10": "16fce99202539f6319f439a0db7b078b95ac4f18c1d9736a6fe0cbea1e88faf725e798af2f1a5ff3f39f9b47eb2fc70ec78b1b5dae35d06682748b245096a2e8",
+  "@esbuild/win32-arm64@npm:0.25.12": "4969d20da28a0c783ada6116724f51a542fad81dab043c4f6f9b7c8f4a68be558f03beb29d75bd550ab6e63f720535ebacb9ce1760099be7a63d4e1ec8351e2b",
  "@esbuild/win32-arm64@npm:0.27.2": "36620fddf79da3e8e527ef8331436929fa7a0b23c9b591af8f8573d80ed9c4ef45b24c6fa0abbb01d187dec497efa6c9d9d397d575afc1f28477e9ca16a48d73",
-  "@esbuild/win32-ia32@npm:0.25.10": "c6db22bb001c8da006ee83b622b2ae2403583f1bc8e11ae88190801fb19e1c16da6e2356a15b0534463aac1170d6208a230a5aa26cacad4e85fda9991b77a389",
+  "@esbuild/win32-ia32@npm:0.25.12": "60ce7d21c5e01c8b0c8c2c4660ff6d890a32b1acf09f5499f950a86bc5c6da17eee760c6bb7a720a0429f7633bbb38b2db517e444408d8a6ff6fc76157310980",
  "@esbuild/win32-ia32@npm:0.27.2": "96e8c1fa0ec2b5529ead2ba703e5da7644c138b2f9b6e285c05513f0455e99b2b0dcf399f01779fb384e22810e82f892491e44402772c62d3fe094b025bbdc0f",
-  "@esbuild/win32-x64@npm:0.25.10": "ec3c325501843d502292cc36a6ddb08ce13fdf5accc5c73b3c2084e6862a757edc4f46677ae5c9c32a0087fcbff2a894181b7e1881137641cc91a2ca146d7cc2",
+  "@esbuild/win32-x64@npm:0.25.12": "bbdc69d57d85a6b8af85731c0979186aba54eb34c8d1de5eab4aa1d8fd45e3b38b5426c287cedf43228bb0794a741d9b2c55284c7db7d79335bc33dc389e7bb3",
  "@esbuild/win32-x64@npm:0.27.2": "1ed08bebd916c16003f3784276ae683ab41d34951a0c272f6e072b8067a2b4bacd6f6f75a8dcea375b8545e15891d305425cf7c8dd31f7deab56ef22cde4a1e2",
  "@node-rs/jieba-android-arm-eabi@npm:1.10.4": "60a55caf33f914d1b6b2947c88ea5fa9a58a84d2bedfccb8639162991b9092ec86964b64979c0ca0cf0d5e5be2766236a612b67ea03b3b3c4ec4d608dde2475a",
  "@node-rs/jieba-android-arm64@npm:1.10.4": "e54d5d1c8fab348ef86c1e0aaf4aea8e2e52924ac1c4bed6ef76588b7446122c332b593e4b471b3268eae4386ab991e9eb0337962b8f17bd2dafa1baf1b7c755",
@ -65,6 +65,84 @@
  "@node-rs/jieba-win32-arm64-msvc@npm:1.10.4": "68146cf2b5324c461847da9fd36aa851aeb5655f94b0178a194630c80926e914b71f5fe60a6853c9197516e2b2680303bf28c405963f8655d0099d335c5178bd",
  "@node-rs/jieba-win32-ia32-msvc@npm:1.10.4": "38deadbf93c6ffb410a880f8938034635e2ca755b956b7cf0b751f287dbfb4b5e58a492f532f23b30e77a7b3889467055c4d9be4d76df8c4416d97f96c242f93",
  "@node-rs/jieba-win32-x64-msvc@npm:1.10.4": "073b499e19d211f416a604a791c7a29c99552b328d0565d8381258a49682f87014274eebdaafcc9477238a2fd555b0e18fedccb45a49715ad3332958c6f43905",
+  "@oxc-parser/binding-android-arm-eabi@npm:0.127.0": "e7fd819437dbd74cf322c152800bf88bf791e181c6c95e027f709e8447bdad718abe8cd6281dfc8abdadc54201a63040d44ec9c08931dc06f2671656fa9bdbac",
+  "@oxc-parser/binding-android-arm-eabi@npm:0.135.0": "a47a390b49484c5f235298caf5a1392e7c2394e39fd08c320574902c85684ed53ac0e8303e273cf387f023c47ecd24afed6b5f7bb961bcf7c88d56a5f470ad52",
+  "@oxc-parser/binding-android-arm64@npm:0.127.0": "2eee0c6fca35fe0119d0870e2f97e1bb6deab419c5f50216a3c449047597639312e7b60485bf8a21c5268049d54296757c3c52583dacd2503e8f4d669dafddce",
+  "@oxc-parser/binding-android-arm64@npm:0.135.0": "09662b6d3753b2f3fbdad4396ae6b33be036062c238347412d9c7f1edfd2cad310358f8969ddb1347c70978161bcae661def6ee832d6242010167143d464367d",
+  "@oxc-parser/binding-darwin-arm64@npm:0.127.0": "1da8651d064bafe012ef049d8b79cadb923246a0ef3e58b90cdc98eb40a11af4bc23d64606ee292a8c0edcb1e70a6057322c8aa52a9d7a5d640697917bed262f",
+  "@oxc-parser/binding-darwin-arm64@npm:0.135.0": "67589e5ca2b81b03250dd6723b80fa84b5c0ad66d13b7f7a1f5d6eac075a957f5214b85f01147c1eb01c1f35488e5e9ab92c43748d2ab9b852150de64f0abb31",
+  "@oxc-parser/binding-darwin-x64@npm:0.127.0": "0c56f6bd4b853643b5827579b98a0786bdb3bffaa7dd3486f9b24c3f2f2d5357956ad9e9de79803ccc183293f54710360fcc85255dae0db70ddb36345d1c8cfb",
+  "@oxc-parser/binding-darwin-x64@npm:0.135.0": "bfec48010a9cc9d9ac66b8e33f40e68592945eb2d4a26a017f8d0e17a9ccd336602ed7c9f160ce630b9c23d13ccb84daa4a781fe00092a3804bbaf0247f3124f",
+  "@oxc-parser/binding-freebsd-x64@npm:0.127.0": "94ed852d51f194a573b17a1f91a962f8fb200cda46e1d5adc14d0e6c5f8d3d941521f596d5ebd5addff7002eb0983924ea36d0120618340b01e1a0830147883e",
+  "@oxc-parser/binding-freebsd-x64@npm:0.135.0": "b4401dc37384b237002cdaae6dd49cd1472bd6bd6385af66c3fa0b951da2bb2bb70b01f734ec06ade2bc8b129eb540764e80309e9842b2f8f1115b73712b1b74",
+  "@oxc-parser/binding-linux-arm-gnueabihf@npm:0.127.0": "bdef00b9048e6ed29c8ebea9eb6b4a155bdf08d2eaf7dee2634fd3a456db7c3faedd3d9c0e51bf040caac86a01b1fb9b224447ba435324e5e35b10341ca40294",
+  "@oxc-parser/binding-linux-arm-gnueabihf@npm:0.135.0": "2e3c4132e91ffa76f54f721ca0ae18d24529f5bf3886dc2737ee10b4bf47d0bd954187a3d68c861754ea339b0fe4384861cb6b42e681f8255c1b7d7d487fbb35",
+  "@oxc-parser/binding-linux-arm-musleabihf@npm:0.127.0": "4574976e4dc88000417299adfe886a527e5ad65e307d7ccb527371d74e7c39bcdb647802047853557e0be92a270096d520bd36af4ea152b675bd27ae701b4ef2",
+  "@oxc-parser/binding-linux-arm-musleabihf@npm:0.135.0": "6c21ba9e714d0c7af7c835bb574c20cf19eb7a82469a8c123c703a1ca04afb883d6dc87fc5a217f6e69b23fb7e5ecdd18b23c81195bec3e4f9a1654c31be91e1",
+  "@oxc-parser/binding-linux-arm64-gnu@npm:0.127.0": "66aa5cacd1aec33b65f09d13fb32376ee297211cf1ba93c03f274e98a24f1ea41563fa73f3241c43af7813e301f11f65fe4cd759eb05efcca64955457d71bcb9",
+  "@oxc-parser/binding-linux-arm64-gnu@npm:0.135.0": "f840e428a5afe3b3a18077c1e22210483aa67c0f2e7675471c2829eb8d2ecdea8082e4459b0e3219616c9f760fb5e15e4687a1455b8f4ce1b7807026e9c0bc65",
+  "@oxc-parser/binding-linux-arm64-musl@npm:0.127.0": "8e7146df02d2d2efb7549301ab0c31ac06cf779561db874c8c3b3fa1f2dc2cabbc8cb31e544da8128605a128c688399ada59000ff670bb03e5ff709156df0091",
+  "@oxc-parser/binding-linux-arm64-musl@npm:0.135.0": "86fe9381f2cdb52f81345fd3152e00b76fce57e41383277bf5071cb2eabf389dc17c4de91ca695eec1eba00a6cc2f63664332f9a4ba58e0187362b0b669e2d8b",
+  "@oxc-parser/binding-linux-ppc64-gnu@npm:0.127.0": "c0986057e6787120cc7f60f67ae61563b2873cbccb038ec880f969a43e7e7007c375971d1775b3694485d40e3216d5845f966c8f719fe87c5abcebe40149ee07",
+  "@oxc-parser/binding-linux-ppc64-gnu@npm:0.135.0": "50fc74f6aec424d34654ea2a553ffdf5bb765dc36ff05fee078bb063ac39defaba595c484c689a27d04312f0b0504a032067c6243a4ea4137cd4aeed74b7d636",
+  "@oxc-parser/binding-linux-riscv64-gnu@npm:0.127.0": "a4b39d58ce024a967a34cdf9af53c85ee8cad9f9bc7503eb7436a00428c80da6e30a383a224237e4b37d05d40ab2136c3f9ed532220bddff5203361a04234672",
+  "@oxc-parser/binding-linux-riscv64-gnu@npm:0.135.0": "410920d4cf238c469de0f5410893372caff906e178de243aca65302be9a248c6930c59c62151a09edc4b8303b097d16431ec9c9a42d0a040fd4b8085f7f3a98a",
+  "@oxc-parser/binding-linux-riscv64-musl@npm:0.127.0": "1c1345817a5830c8b896e5283dd99caae5f6af03da50a14adb7a2060057ee6cc279cbdc665622f67234d2a84047672c2742288fa5a52359323a78fd1aa065740",
+  "@oxc-parser/binding-linux-riscv64-musl@npm:0.135.0": "823e9f54ea425644ea12a95cc427ddfaa369027f6a2019a4fcffa7dc9eb6baf0f3c1589d3da60518c3429cdf752d427670ee938f9553366fb153522e316c0581",
+  "@oxc-parser/binding-linux-s390x-gnu@npm:0.127.0": "d70bc89961b303494e8dc574b3ee4c64563e1217f32e60d9823bbe51421d19d713097607e12d588659b8ed79258b196b1809e085db52f6b3831613f64d9324d5",
+  "@oxc-parser/binding-linux-s390x-gnu@npm:0.135.0": "2057e3b0a9397dbae5266704d0e1312d9f771c06602fc9c32952e15a8218cb7a1b1e8e2a1a4ad29a71f8975c8f922304bbf7d1bb00c9b8aa1a34c2fc6b80214a",
+  "@oxc-parser/binding-linux-x64-gnu@npm:0.127.0": "481f7a1f8757c987f578a75e8325a1bed03e89b8942455a6fe574b9d8adcb4079b7659fc9e58a000887dd0f5c4740ae2ac44269707e0a3d205cbceddcc75549c",
+  "@oxc-parser/binding-linux-x64-gnu@npm:0.135.0": "49b0e1e7b6f88cc5f4be698f6837209b0d6bb833ed7d35b0ff0e29a54c65ae65a821173945737fc1521cf27f8142b42f2a09794c5831630da84b414de272959d",
+  "@oxc-parser/binding-linux-x64-musl@npm:0.127.0": "6d16c6827c1ad4a275357717ffafbe3a3e59607f63ceeb6f36cbeecdc0aba6071d4ce6aadb5f9c7b8f77d2520f13388663d967ceb26ff93089aa117bf686889e",
+  "@oxc-parser/binding-linux-x64-musl@npm:0.135.0": "c1e44c559a5a49bd95ad15221b11f08756492bc70987d4492afa63f68874f8c5ec8dbcea84acdda655d96c9d60370954f68977d712f15ca59422591f47c61fe5",
+  "@oxc-parser/binding-openharmony-arm64@npm:0.127.0": "cbf640b4c9a7a491a7d8a5d2585842da84d306a23565ec6f079d845bdf3893cf9f1fe50e22e6d26e9ab98f8231606e49fb94aa346407eedf680d92716142ef4e",
+  "@oxc-parser/binding-openharmony-arm64@npm:0.135.0": "12364a2ce9c3adf119b85df4c922a83b220ca64f5fc77ed1c9504a1fb685b145edc67c46b3f9136d81b3b977552ff3dcd5262620a2a1579f54c7f9529ffcb35c",
+  "@oxc-parser/binding-wasm32-wasi@npm:0.127.0": "44cee540065e94ef484565a29cad59077cc065ac882cde5da8bfff3fc96e012f284f6c2cdaa5da62a646639850a7326a876bef4b8d402f1e50401b062bfe1426",
+  "@oxc-parser/binding-wasm32-wasi@npm:0.135.0": "6e67ad18fddbec5666a795596a56cee518726bd1b02c5e3158191a7503e697831c4cf4f53424230ce0a589b73203e89604e2ae55b06e3e021cf3e882f6938602",
+  "@oxc-parser/binding-win32-arm64-msvc@npm:0.127.0": "998315e47c7ae648d512530e84cd248d6f74e3921573e1e9b14a73b70b3848d826e52fbe28022c7596fec02b055731a9a480b60a89c5e6f6f38dfbf13ec03524",
+  "@oxc-parser/binding-win32-arm64-msvc@npm:0.135.0": "9b15a6109561fdd52a199c87c2808687494ad0848f6fab777dd1ad8f07103b2a8fa430344891bc572931b967820a6ebdf63d122ad45bd3cf87064992d84ea3ee",
+  "@oxc-parser/binding-win32-ia32-msvc@npm:0.127.0": "d78eef92eb0203a7bb38cacaebb1364dd9c285365ffa204c29062e6f850e519be66b72b6d4cf9899084645906b8b9026d2957c6dab4bc2a20ba70c1e9790c3d9",
+  "@oxc-parser/binding-win32-ia32-msvc@npm:0.135.0": "fb5f6271f619fb6606070fed933dbc6bd58564d5c89ee53e54dce6a5107c360c4490c786b1a39ebcfa0e405546496e2371348a81377c2ad16cc03864dc9328f0",
+  "@oxc-parser/binding-win32-x64-msvc@npm:0.127.0": "ab53173be7f2202ca31dbdbeb990b46983e8a2b8a7c643a8242d3e9d32f627160ca7f35dbb2c0a3d7b2709e7c94176239501712e5929835f5c758324655918c4",
+  "@oxc-parser/binding-win32-x64-msvc@npm:0.135.0": "ea5bdb283739cce9acba051f52aea7df8eb73fcd1e9ba8d7bedff31af101bf07398726e722930ef268781983a6e010914ef33f4fe540ba47ebd1c2d6cc7a0cd6",
+  "@oxc-resolver/binding-android-arm-eabi@npm:11.20.0": "869d3813513bae96b2f33c3acb13a2cd0af94c929b668f1bfab7380fa1610db28c66b6ef1859012d80ef81ebccdef3f8b65cfcb98002812eec8e20fac62714c1",
+  "@oxc-resolver/binding-android-arm-eabi@npm:11.21.3": "7753c5536f77492993647d75ecf63997fc2c28cc0f19526f714d187c326f28fcbdc41356cd0558b889fb5e002957e66ee4d9584b84a135f0ecb5b83a64077404",
+  "@oxc-resolver/binding-android-arm64@npm:11.20.0": "7fc6c58c43b0d45b3d1c5bea9c6da3c42efc1a33c1e5ec928f2abc4c745b6a2a0a1875fa785c97a99a59f7bdc81db9977870f47a5530075cef2ed398ba23687a",
+  "@oxc-resolver/binding-android-arm64@npm:11.21.3": "2283884a7140ad0fa625eaecaf1f7b3f89a5c605d2ba38f66336772f3acbd6035f437ee1b338fa22119fb79792f03a67a046c81d6affe0b3b397de6c19b03406",
+  "@oxc-resolver/binding-darwin-arm64@npm:11.20.0": "bbb1080d8ae8cc92ecc5c8bcf323c807ff00203cf1fdad7b8c66792445d270e6427f5795dd2bf54482a7fb72801e52eb8bb5ee861c052b27bb8ee845e7b5d1ae",
+  "@oxc-resolver/binding-darwin-arm64@npm:11.21.3": "aef8175b317e31d7f07dc67382be8deb44a4380aa8f905b4db80b6d919d91612aebd7f67a55fd65183c82d23af183c447254c2828a2529b673e49a2f18521060",
+  "@oxc-resolver/binding-darwin-x64@npm:11.20.0": "c470e8d3ace09e87ddba732d4c26b8066c00b5e3db235afeb01331ccfe369b2736ffee349db4d5141063ff3bf578839e4f22a08facd49d214874f789736334ea",
+  "@oxc-resolver/binding-darwin-x64@npm:11.21.3": "fd7f96fa2e7e29e3a9e73394e79a988b2ba91243e193d379aff8cdbf0a2f2f3222b9ff4226b5dbcac6ccb401541e9899262ed1e4418bc69de980d63acaaec82c",
+  "@oxc-resolver/binding-freebsd-x64@npm:11.20.0": "433c3692f2b8b67e787af9f24172c579a100863644896d4676ca58f32211e8d5a519a4e516c2eaab4dcbc4e7b6f384bb0b8e8bb044e2805a4e773e14d56d96fc",
+  "@oxc-resolver/binding-freebsd-x64@npm:11.21.3": "67f3c8791ee8d202c9c9bddc45ff82af26d10f8718dc70090525faa6083c04d78aaadedc1b19e71757c0c38f2010d9f9ce5c40ced3a43cd6c6b6aaa4b671858b",
+  "@oxc-resolver/binding-linux-arm-gnueabihf@npm:11.20.0": "71c57f90a16796a231184fec52caac9b6e7e22c39c81af9fbcf408a430c30852cefbd8658f7f523626bb43314ff300c92fe1080d994c9e90da4a3e21b271a5b7",
+  "@oxc-resolver/binding-linux-arm-gnueabihf@npm:11.21.3": "343434f09025f7f7f80c26bb1e6b34ee5704c9d81e7e5582cab8a18055887fa2e6a7c1d560cea3aee8cfd18180f65d622510186ebfdc0a270842c6290252c935",
+  "@oxc-resolver/binding-linux-arm-musleabihf@npm:11.20.0": "76efe95e9b857d3207d8c711077eb2b60a919ade7e1778aa82463beaeac638fe4a002116f234aa0edec8f4fb7399bacb9b6f89ea4b490d2ae801e93973481638",
+  "@oxc-resolver/binding-linux-arm-musleabihf@npm:11.21.3": "0680fed46aa5db6e8339e2436ad7382493bb701bb4d5481f6cf3056e0a6571ea3682b11e1c990ff24900c6418d3ac424ace2b0a43a660e33f32bbd9b0b6f56d9",
+  "@oxc-resolver/binding-linux-arm64-gnu@npm:11.20.0": "7650a239e45f488e1598296572c1050ca8e2278731bbb571a92f70cd524fe760a47ae3272c6fec65170c408789dccdbb0f1974064d11a17a27e08fffc00a7517",
+  "@oxc-resolver/binding-linux-arm64-gnu@npm:11.21.3": "664db26300f8fdcb5de559b883a59517e725e46c9a018c9de187bd360e4229be11d86ed942d214c8110c0c7c3fa6ed35b3c832dc07b12eeca11eb6ddcade59a4",
+  "@oxc-resolver/binding-linux-arm64-musl@npm:11.20.0": "1729fb7810c9a9a118ee5ebc49006491969c0785300808d6869c331cc2ea054fe2e49e0d7e9e433e6e12baefd20cd8b60cba5b29f1ac92192a20f7620493788a",
+  "@oxc-resolver/binding-linux-arm64-musl@npm:11.21.3": "20c8322222a1ffd162b9ebcc390bc6de3705e0f3efef259b87d21e502cf448911da289e0eaeb49aa1173c6e86580c06e824e711c7ada637a055e01095329dbe3",
+  "@oxc-resolver/binding-linux-ppc64-gnu@npm:11.20.0": "607683f3bed552b1ac4b83fed81b4bc9dcae0b9b58c863573c95e791261ecffb13625b557c6c9e1bef3da5c1df79f041f5a7c8f93aed43b4b3ca1df33755ba6e",
+  "@oxc-resolver/binding-linux-ppc64-gnu@npm:11.21.3": "5962128b365fba91c53dbe0d0c2898d48357d86799d9286255ddf23756480963ad51db5e1fa9acfabcfe30c742c37800450ad46d7b150b040f7caf4e54d6825c",
+  "@oxc-resolver/binding-linux-riscv64-gnu@npm:11.20.0": "4a58183ecbccb76355582482dc052a8e92f25de4811f5d574c3d6b5169443d403d18f74e3f1373da0aa211b854072ed9ca765124f669a53ab1e8599d257b27dc",
+  "@oxc-resolver/binding-linux-riscv64-gnu@npm:11.21.3": "cfc933789d035737e6ade6b229c4a09a6e35370c9f4b6b7f0f6631074fda83dce9739a918a904beec14eee874ff400e79d3c9003c4a9b733a30bf19122702ae8",
+  "@oxc-resolver/binding-linux-riscv64-musl@npm:11.20.0": "0d1e8bcc0c077f01305fa0f85d462a10d4bb09b25f3de8c077acfd6bae8f898989087b7b451a6b05978bcc8cf386fd5453074cc3c64e08b8465fdd99b795e131",
+  "@oxc-resolver/binding-linux-riscv64-musl@npm:11.21.3": "c2c3e4632a75307aa1c818e154713d993a862cc117ac6f498a80b713dd03558d90b6425650a38ff403e8a0bdab04632524777e4d5449b9c58c9557cae095533b",
+  "@oxc-resolver/binding-linux-s390x-gnu@npm:11.20.0": "4e81f672700db7c5f33c583f04851c62dcc5826c2ad7a366794e3aae21e4a1e4655dae0f563660a9883084da98f5998650b5fe3e1bb10b0d1817670d2060bb22",
+  "@oxc-resolver/binding-linux-s390x-gnu@npm:11.21.3": "034fb6020a70acbdec5ace9230fdfd8fe29f58767493884ebe8beb2f261a78cfa908fc2da9e52db1547c9d6535e9093d073a5b47ccecf61660faee90230d3875",
+  "@oxc-resolver/binding-linux-x64-gnu@npm:11.20.0": "9bcc10d91d411e1e3c22c8c5502edea1e95043101da2c1e28d06b046368055bd0524a51f16976003d453f0962626cabb232def1a94737e43ace6767ce06cb189",
+  "@oxc-resolver/binding-linux-x64-gnu@npm:11.21.3": "095e91519ad47c8fd190d3b7429a34f89d45044ed61e5356ddcdcfd3366ef8581dc5ce6c84daefe0acfb48bc6860853c46d04906095617a3a9d68e0459ef6d70",
+  "@oxc-resolver/binding-linux-x64-musl@npm:11.20.0": "89daa69818f1c7d6fbe53402589ef81b76e52d46d3fd45bf4f7139930a7bb2e3f9506017fa32baf22c30cc308737a57858777c00fd0f882fd6911f2a9ef90467",
+  "@oxc-resolver/binding-linux-x64-musl@npm:11.21.3": "855a3c0b7bd5fe86f6544d7a6780009f0513229d38c38f59c09087771c01b03c14380f168e8f4f45619ce1a93cab669096b06b1029ba7c3881c16bd85777a0f1",
+  "@oxc-resolver/binding-openharmony-arm64@npm:11.20.0": "d6e3767f86b203e07b51fe1750b29a2c7b7a9fb3ef73c5bc4f1f1e2991374d53ae1705e81c035cc48955bf47a24911e5f36d50ed45e43d318ae010345e00f8cf",
+  "@oxc-resolver/binding-openharmony-arm64@npm:11.21.3": "bb4ae4c1904799c5c522ab391d192ed6ae99d3c2589c885dad31a056a87e22391e3f83d7336c23aef87d43a26fe9fa823126048c15b5038382d0748f3c937891",
+  "@oxc-resolver/binding-wasm32-wasi@npm:11.20.0": "f748fd1c0e8c8ce47b4773e1fd93ea2386e0d605ee099e0a665637b4113dea286d2786a00b74958671c657c243fe1e7811ad798ff64baa899fe4347240718838",
+  "@oxc-resolver/binding-wasm32-wasi@npm:11.21.3": "58838221e4b4218454e2106d064734aee24a704f6cba39fd936762ab4d4a3a832c075e75ee617172bd5c61f55208793c36d4c73b94eda66ef08566a712bce719",
+  "@oxc-resolver/binding-win32-arm64-msvc@npm:11.20.0": "58cbeb0cf65845ab163a7bd53b6aea93e1d9a600028b87e018bf6a5bfd55756fcca88a961c9ef6e588c11d8bcfe8690347dd5e263f36a7336e4f034ac97dfbdd",
+  "@oxc-resolver/binding-win32-arm64-msvc@npm:11.21.3": "c3f631b772bcc242a32d4206172f9a8ade522fe957d6fdad5525f172b7ffad9e65bb92ed81b881f8b2a709a57ad55dc63d2caa4ddc0d791ab9f66bd9d8b6aa33",
+  "@oxc-resolver/binding-win32-x64-msvc@npm:11.20.0": "7b0973006a664c089a9feb7ccf9224a2d6a91c38e9e83e8e874bfd3ab1bc3e9d81c16bf68238455ee576a78441865e88f20d31439d538bfc916bd773ac6a98c8",
+  "@oxc-resolver/binding-win32-x64-msvc@npm:11.21.3": "499b5ae8adcc42957aeaca8068721dcc2d728940cd07bbe00a0d4bbebcebda88b1d36f7e28bc0f452747d06404bc7e3fc7c48a8f02a0ae42abb981e6d86807e5",
  "@oxfmt/binding-android-arm-eabi@npm:0.44.0": "f2b29210336a7a06da7b20dd7b793b3e5f0fb1785af1deb7ecce7a8360a694d20998cec5cdfa6ef97cf6d3ed964f7771c32ace3c762b091e4ff716663d153f40",
  "@oxfmt/binding-android-arm64@npm:0.44.0": "08581f63c72281f9abb02c8414803eb352c2b0b59d6a16ad525ae14c1f94cadec7986cfa3f1caf1f1ef6f35811c18f070b409fb087878c413d740d4da271373b",
  "@oxfmt/binding-darwin-arm64@npm:0.44.0": "e77c7798f60ac34847d861e7e26973c434d00de3ba8bcc789a9658bd55173dce42fbe2db7fa33535f77a6f3d806f95ed18a177ca1fd24035298aeec7d76ae5c0",
@ -84,31 +162,31 @@
  "@oxfmt/binding-win32-arm64-msvc@npm:0.44.0": "d9aa3808de1a6e910e463235674cad17f90f015883bd1a74bdf9a1eb17b9ff0733f39f4d0a3af9b005fd55ec5584393fd1a6effb2858bd677aa205a2b8ed153c",
  "@oxfmt/binding-win32-ia32-msvc@npm:0.44.0": "b441cb9974a64d1e6dbca885000aaa76e36e6bf99020bd7172238b60c165587de737c6715259b19ac982bb5f3d008a1cf7088f8be06e4343c4acac7702da88f3",
  "@oxfmt/binding-win32-x64-msvc@npm:0.44.0": "35e4722f8594092dde9b5ee51693766928205c7bbab44e25710584ac13ae71460bf3dfe34d7222eba5d24d8bfb58700cf551873bea876858c1cb3fdb355f9945",
-  "@oxlint-tsgolint/darwin-arm64@npm:0.20.0": "34285104efbf3569d3c9dcbb4ce65c33970377fa2f5133bdc58a0b8dcedca269be03dac054c031f594782487b97a59b93084ea525e4acba5c4e45d10299f813a",
-  "@oxlint-tsgolint/darwin-x64@npm:0.20.0": "d5f5f6aeeb1bc08f1c74a7952450da97eeb4a8970bcb28645121cff9c9ce3cdce03da60c4814769f355ec9cc1c8e2b70f0ed268117cc383569c7c3b4da617d24",
-  "@oxlint-tsgolint/linux-arm64@npm:0.20.0": "93d1bad95440a976e8c241c1e233151bbe4bc8780bc65ea3605fb19851c59b8f7cc45fa0797398620c31b6b93c261964696bc9ab8fddf6ae625d2ba4981f171d",
-  "@oxlint-tsgolint/linux-x64@npm:0.20.0": "09a6529dbc46cd4b1f4f650beff905d306c264638a27ad36c46ef8631f64f689d660acdb1ced87c72406fd380b9aaa95599e6b99c73438eabc1854fd920cf6ea",
-  "@oxlint-tsgolint/win32-arm64@npm:0.20.0": "422cc8a91a65cb4bf39306da2809e963cb15fccd7600b7d99a6ada0f10cb6934ae1b6f25c881c27a2651e0bd601417f7cf6dbe65dd32f9bd862b5a76d8227a99",
-  "@oxlint-tsgolint/win32-x64@npm:0.20.0": "547630cebd56abeacae7af89df6fa46b9165732b34b72e6a0c95f2d619db9307bb0d4a7bae8039426a34c3412681962f6ee8cdd1db0bd333e287da6322b91766",
-  "@oxlint/binding-android-arm-eabi@npm:1.59.0": "fd7147e2bc930ffe34b5de0de3195e20372ce9a392bd0782f9d96ebe19e63cf7969da89cf7060d7f43ce1bc429ee14bd5b8dc8874fda3a5d0bc782d1cdd0662f",
-  "@oxlint/binding-android-arm64@npm:1.59.0": "f674440a9751e274d0ab588539cc13e5abe0c6464abdd423968572b034ff3e54c6f2a173d22df0425e16c997caf69b84b955f8457cacc908f331f54df6de2821",
-  "@oxlint/binding-darwin-arm64@npm:1.59.0": "29484896b54454e73932476adb9740c5bbac166c9fe138a6df921659efdca0b679822e463dae8b0baad54a30b0deb9038b0677ddcbc11680defac9df42b644cb",
-  "@oxlint/binding-darwin-x64@npm:1.59.0": "b16f0e20b766b66e71088ef484051ea266c9f730358aa1e41e20f02ca2a1455eed8133c3f7d79486ad0aab1930915bfe75426c2c16b8204d3e10f9a489cd0d5f",
-  "@oxlint/binding-freebsd-x64@npm:1.59.0": "5c00690cbe3fcdf6634e2e5424d1a415fc455cbd1bae264b3a0ce3ee3eed0eb8a0b825a2fd016c04afe79c863574557eed74734c5fecbd8643d62aa1d74219fc",
-  "@oxlint/binding-linux-arm-gnueabihf@npm:1.59.0": "a55e2a9ac39526a5a432fc4bc69f056e5507ad7344b082dde448e70fbeb7c180b1edcb62c377d38a99710662d8b935ecf2bdeb75ebf2b9e9425e6179616fc7a1",
-  "@oxlint/binding-linux-arm-musleabihf@npm:1.59.0": "5068f1da0497ec448e87cdc1c5ee99bfde09a050ba989b8dd3df445199360bde081eae327f52f4b37572ce300f3295444ba25a39108c19c93fa5859b9d1c8e5c",
-  "@oxlint/binding-linux-arm64-gnu@npm:1.59.0": "5a3a974a344731db64951c3aa3d591f82a2c69926bfaec1d42338aaa0a65cea97c94a68121d22441b655d80bfc0e8dfa81944136ed5a0abfb1353a46105d8478",
-  "@oxlint/binding-linux-arm64-musl@npm:1.59.0": "a2158b760c37796f5f416a2be77110935329a55788752073ac257de8d874a57cf954b90740dd1952c2f63c6d3958dad0077681de098406d4c3586ca92061804a",
-  "@oxlint/binding-linux-ppc64-gnu@npm:1.59.0": "88feb1b571f3c0eed7f020c5f06d729087571e9515a309eb3a54b25630ef0f951c07f81495598d634b0edc75abad07f1c1e595e2f42b5849fc82c90acf98825c",
-  "@oxlint/binding-linux-riscv64-gnu@npm:1.59.0": "88805ce56f0aef2dd0bc943bda3f1d2a4ca4e68765478714c26dbe95c42a7c3c8087b2658501ea36d1303b8f2aabb9c0d68586124cc0a20f8fca70bddfd598c4",
-  "@oxlint/binding-linux-riscv64-musl@npm:1.59.0": "1d99bb0491a1b02f2b2a71707d73527b1e43d18d0a5b1d964d6752af748f1e6ea73eb60d66dbce1681feba48152c636639949e9d3ab558e2c76ba58372ce280e",
-  "@oxlint/binding-linux-s390x-gnu@npm:1.59.0": "d5c3a9da18eb31597c59c17bb03eed3ca77360c0a8609097bf367f1fdcd33cf0c1a604cdec46376ff63c7741c723df060fc5b78adb256913f567a424996f665b",
-  "@oxlint/binding-linux-x64-gnu@npm:1.59.0": "963388bfd60e5497ec0f3e6d05b4567ed795f132f47cc7c112acc18231225403361e6d4f8b35923bbead94d9864e6c76754014dd6ef779dd85d4f9070605dd14",
-  "@oxlint/binding-linux-x64-musl@npm:1.59.0": "782a7fa5b28a87c2fb96fdce112625906c78df953b141f0d43e7c064eadbe4694535cddcc2bd05c7312eed0147002f4c45faabb1990e282cc0471de8e841628a",
-  "@oxlint/binding-openharmony-arm64@npm:1.59.0": "2a6bfe67c9b1ea1cd202bb84a7dd938343735afedcd2ef975f11879a0cb24a1fb7969ef47c9aa1d3f4255134483254ea83dfed7c1c674eaf9e0412371fa69b1e",
-  "@oxlint/binding-win32-arm64-msvc@npm:1.59.0": "2d8a5052bc2d959ddc57ce3ccaba237e4976e91a8bfaa0b3a658c05ba7b771f44098b406bfc610e0a2b25252d0b11f6d6240af9f095850e49d5252cd628914ba",
-  "@oxlint/binding-win32-ia32-msvc@npm:1.59.0": "1f17010c128674db9782107427e6db331aa53f437bc9fe2e97a9d37d8b25f9a011b709981af0ec1e0af7375840ffa4e3dbe9e10494c2aac949b71206cc934a63",
-  "@oxlint/binding-win32-x64-msvc@npm:1.59.0": "7d0562b3977c612e1278f8a2ed06e7e3f19a1242ba50510a68ca6adec5e6fa0d5e2aca50dbdbce69088991b233598aa8c514c5d84f5a5c1fa039b29bb453d49a",
+  "@oxlint-tsgolint/darwin-arm64@npm:0.23.0": "ab24b6a39b1f7f92307de7bbd84246836599f53da25ec45c7b35159dd7c5ec8cdd3cdfa3b73b8a0ea9a85d64af267be093232f633aafa184739b9822c14fdd95",
+  "@oxlint-tsgolint/darwin-x64@npm:0.23.0": "1ac3825249c7b7af11a3d854a98067cdeb37aba2ae63220861e5a4afb15fa01d3e5b565d9f726810d1d7ee04441917ac10b94180e2d2346c8969a3f16a11adff",
+  "@oxlint-tsgolint/linux-arm64@npm:0.23.0": "fac741be0b6ab3ba0b815cf1d0b37e0c878c374618d1baa19672780ecab79fe5f3dc993d6f70aa9cbf2aa5266fade4278563931d1d5d6a2c55d31fc9871010db",
+  "@oxlint-tsgolint/linux-x64@npm:0.23.0": "bb5fd89a2aeb1c859ae0f97ae81039616f95ac92e04efd88dd378703d88264117b935bcc824a25942b32f83bd05884103c02b1ea5bb91252df815327f8c42bea",
+  "@oxlint-tsgolint/win32-arm64@npm:0.23.0": "20bfa7f5a28d31ae3fae61c0cdb713c3c47854c7c9aafddf2881520902b2e66a5e0fbe617669b07e6fa613cd78af8a3b11378d02a927193933b3fbfb5cdb32e8",
+  "@oxlint-tsgolint/win32-x64@npm:0.23.0": "245a0c1cfb78a81dea25975397ad2634c74e9fcbc53206482e3f81d244620c865da7025375952a64a06bef590fc558fe33ecedb1db5d54a15d76ab5765091b22",
+  "@oxlint/binding-android-arm-eabi@npm:1.69.0": "e8cffa63f160db2a14c8bf5c715b51abbd84b8c0adc400b1ad21bb9db2bb0900ae1e0ddd77f81d99838ae1515dd4df4a7d0de37f429f11f6269ac2db1ceb1441",
+  "@oxlint/binding-android-arm64@npm:1.69.0": "5f3802330b9968ab061541f7b92080a06ce454eff6683ce224ea290d4decc1dcec3c809e8984bbb598e6c1f10ca532479f900d13b9627152cb43401526095eef",
+  "@oxlint/binding-darwin-arm64@npm:1.69.0": "04f32a6f25736a2a4543a213aeeeb0bc7ecbbeb030489fd2f52fdfe330aa245a1806e124e15c8ec9fb86d75f73545a46d3425d43cb1c7720e9bc5c23542c94e5",
+  "@oxlint/binding-darwin-x64@npm:1.69.0": "a788cb404b79772d825c46ee7730e97985ed39585d8434b48b249d02c8a2a44e2873d19f7b4d4da12a6abd4a2cd7a0120b385c87146437ec043a260743704187",
+  "@oxlint/binding-freebsd-x64@npm:1.69.0": "2bc52185fb3af1ace5dbba6eb1717a14631bd3981733fd10aa36e5d8fe825f0685cfda1ddfe477a63a530a95344fa6fa4e0e94ca1aea00feb19fb13f5fc687bc",
+  "@oxlint/binding-linux-arm-gnueabihf@npm:1.69.0": "06605e4dc6514100109bc66e6ab478c4d5d926d4238e712910837d05f423ae1d25eaa9f5cbf329f38dfa5e07d7031916c1e4345995efa2a4dd26a5a80ee97f99",
+  "@oxlint/binding-linux-arm-musleabihf@npm:1.69.0": "670147842e6d0eea03543f7b8e8bfd291876c597839eecb237493c37e21e14aea623e956e600e0766922f168cbb7fadbf7042e2aff381172baf8906a6e5ab75e",
+  "@oxlint/binding-linux-arm64-gnu@npm:1.69.0": "efb547265545d058acd31fd7e40d18f4e888da8b9a386f7f37f1179cc651da0db5c7ff4cbab1099b58656dbceaf3f6de951f97aba6cd206042df615a0efbfd34",
+  "@oxlint/binding-linux-arm64-musl@npm:1.69.0": "78d8e8b8bccc8c7a8e0afcd049f6705bc25b66a5d8fc509ea8be27f21f8ba6ecc683f87a7c468365d29c9ab41ba4471d0c453f98a4e581f06c09c4ae374766b0",
+  "@oxlint/binding-linux-ppc64-gnu@npm:1.69.0": "b5e8a95793baf3f83f291fcedd01538e672e557e7ddcf8057211e64276a53dc7081756c2b873610cb348fcf2a6efc1d751e518def65eee36277b92c294e33852",
+  "@oxlint/binding-linux-riscv64-gnu@npm:1.69.0": "5227ec211e9944530b9b05bd54ef36f7de9270f39018214ebc3832ced03617b84dd3086f588ac25e45a6e06bd21066a303ad207f8b6611592a144f9c09364115",
+  "@oxlint/binding-linux-riscv64-musl@npm:1.69.0": "45ac0756d43fdfdd9a4ae68ebc9c15385198f011d661db07b66552ae752a99f9bdc5b4efd00891c423bf5fe66de94088fe23c02427f44f6917ad9180a3bfa846",
+  "@oxlint/binding-linux-s390x-gnu@npm:1.69.0": "83f31f3a9a43c6a15b8e0a1008313d541db5357a2efa411f1e164362aaa79c468fba2e561c159edde35ebdd9d52137bde01ab40a18f48fccd9eaba573b659fe1",
+  "@oxlint/binding-linux-x64-gnu@npm:1.69.0": "7ca4469f595966587e967c23aa8cc54e330455ae6da4430888d8760972644469b8d4c2d74e092b923799b95a0b7149a38107b2473bb22741b9065fdd8bc7c72b",
+  "@oxlint/binding-linux-x64-musl@npm:1.69.0": "ab396a701dc3fd87e2ace55e97da092f5679b9721276a611d1e0843cf4d782cb25fe67392a2b1b59013f88ca6748a9c4b26ba5fe09a5cfba24d5c1b56ea895e2",
+  "@oxlint/binding-openharmony-arm64@npm:1.69.0": "987e1e3e1e42e41afc3e62744b674a13bc467f1683e41d40429d773fb5faea275ae74c12891186b4869de5315e51960be13c9a98ce8d044e1666a09505204cd8",
+  "@oxlint/binding-win32-arm64-msvc@npm:1.69.0": "d409472b8aa3784a18e79aa4d98b2acad9e6c483629a902f34acb47895b5fa36de31438dc880b6509fe815a0103a321b72729267698a7f29c14f10d4e8abf027",
+  "@oxlint/binding-win32-ia32-msvc@npm:1.69.0": "13b7b5702b644031e106d452f837dcd0aae4da21c6b1c770567886ed64fa834fbf9819e853fe61b9c582c2e726eaf7d4d666520c681e4fc10b8391a3fe10f3b1",
+  "@oxlint/binding-win32-x64-msvc@npm:1.69.0": "d25bc3ba61e59ab530e6d056727b0e805a4cadf22176ba383a851455bf0a08408ecf8ae51641ed0d0b78984fd8e1f52c06d56d386263f60c4667a1989d6e3db0",
  "@parcel/watcher-android-arm64@npm:2.5.1": "e9c94ede3bd5c5d999d117d22ac8032a17f8ebc72db3eff04ccb2b4e6718db19f24bf29a66a610e03f4ee95e2cd7b2d30c15b1845eb897b971fec75dbdd76141",
  "@parcel/watcher-darwin-arm64@npm:2.5.1": "0cab55a55c128ac5742388fc8dbfeb9877018509943801ce8a52b57bb6dca24189d025d38684b1e482cb7816368a52c6434dfe45d3997e2fd2509276f48774ea",
  "@parcel/watcher-darwin-x64@npm:2.5.1": "bf07b8ca9a435fb885fb0ca6565204d2f2098d7f632faf26a6478bb39f538c73b50afca17c193dc189a80a864d85e40f924ec7f21a0e7ad7d0de6f97f7154134",
@ -122,41 +200,61 @@
  "@parcel/watcher-win32-arm64@npm:2.5.1": "0f467a731cf9403b8bc7d35418d991596cf5e7898029796b4c769bcbb38cd07ae6ec05ef0f19298e5f11e73ec5198bc474d79b056bdfbaea513525725103d7dd",
  "@parcel/watcher-win32-ia32@npm:2.5.1": "9ab5f3e9849a6077c8c2aba7bdf9030dea38f0ab9180792ecd30094520cddf16f3b68006f666845b86c5ef0e05c648364475c9ba151e0269561891ca3e276667",
  "@parcel/watcher-win32-x64@npm:2.5.1": "e588d87d5b892484d252ac8e1ec3f4bf7a664d91f0d03dd93764be8db2c35f81879275908dcbec42b0e43bc99c7afdfd29fe687ec022bb2c8c4bc7edd29eaa15",
-  "@rolldown/binding-android-arm64@npm:1.0.0-rc.15": "d93872015985b19d82db7a99deddfd1bc65c3eed7928004c36cec11b70e405b82907250c183367b47ebfa2bec83582b3369b91d288ad5308152ceff860ec2a8f",
-  "@rolldown/binding-darwin-arm64@npm:1.0.0-rc.15": "1b8240d7b1f0601d6efa84d48a232e8b0e6239477634c1b7af5b27055a10aacb893522ceb08fea8800e7ce5ec882307e069077ec8626039684a323a815ea1639",
-  "@rolldown/binding-darwin-x64@npm:1.0.0-rc.15": "a73ed937b8e7dde059cd600612c359ba02dd4ef3ebcd0df3e5a2e5c0e1a7e4c8360fbfd40c066de9a6f2af471b8322b49471a6261bd322417e9c7f955eb52335",
-  "@rolldown/binding-freebsd-x64@npm:1.0.0-rc.15": "f7c48373838b49a1f3ca592299c9e21b829e4efae62e9980a097655c01c9ca65f079e0d04bb5604887b09660d71ed6c83115dfeb94cd7d7cbcd67000a4e84edf",
-  "@rolldown/binding-linux-arm-gnueabihf@npm:1.0.0-rc.15": "0681132aee29f8ffca4f436034f4bd6ebc4ac9ef15ac9857be09f991e9a1367f3e97d98f88e136659b5a5cab520f5a304e0551cb0f08320426f718c6475e64db",
-  "@rolldown/binding-linux-arm64-gnu@npm:1.0.0-rc.15": "9f1be6a7f61d913d678d77b21c499dce756d5b4d496c7665eb5015a7f9b0e52038121ab313b223448502a1f23f39f4952ccaf4651d65821ef8d0428730dc5d43",
-  "@rolldown/binding-linux-arm64-musl@npm:1.0.0-rc.15": "c13142d79451dfe6c38cc18f1ec170b87ef95546f45a465b9965b6f8ae8b162d278c77654400e69c9af7c09c8eb84c59edce6f741bc08e2f3553b019c40f51ae",
-  "@rolldown/binding-linux-ppc64-gnu@npm:1.0.0-rc.15": "10a94ad784a1997f5fb3756e44282b33524b32cfc52c622e81bcc1c178fcda3ca44734bd2562dae900e0637233bccc94f298764fd43acd5037c4b66aafab7651",
-  "@rolldown/binding-linux-s390x-gnu@npm:1.0.0-rc.15": "ef16b67d35aea455ae16c07dee6e58ec5515e2dee2b9ce0fa38752e15d12b2398f3e032485041e6234028d8ed85028c1072d73d2b0a912e0de5082ea89144cc6",
-  "@rolldown/binding-linux-x64-gnu@npm:1.0.0-rc.15": "8eb51515e2a1bd05120ff74728e972aa563b0c6d6968f78a79a9949b008c9826875c4fb74aadc7c2a1bff065d91970b706290a973128066c076007f471940f31",
-  "@rolldown/binding-linux-x64-musl@npm:1.0.0-rc.15": "1169f12fb17b8a58d5085a9968e4bd92b63bd05a9a693b9113b15b01d53c482150bdfa2226790d59c398f49e58d93200aa7a297a7994a31cd343152303a000de",
-  "@rolldown/binding-openharmony-arm64@npm:1.0.0-rc.15": "c34353635835a2fae1e637f7a02266204767901211438bd85c8d887bf741b81367ed3b5eed595f3cd707fe3b8af14a7ff53ad211f2a944e6e9e74dd4ca09d73c",
-  "@rolldown/binding-wasm32-wasi@npm:1.0.0-rc.15": "429df3739d6257244ab5d481fcc4b575c6c3f50bba7afdd9f3515832e7ae5175a215dbf591eade537fb2e6f7af38bc8022bc55bfffabfe650048563d65151304",
-  "@rolldown/binding-win32-arm64-msvc@npm:1.0.0-rc.15": "3cf2f7babe9e9b02b0dfa58b3eb8204753b4ed1eaa1e8567a932d21a5d90003dbb4b6279c928f15dfd9247dcbc8aca36fa6cae7790f25cffb91c3d4eacb7c0e1",
-  "@rolldown/binding-win32-x64-msvc@npm:1.0.0-rc.15": "cb262337da8a42a84b53430c101407a72c142b947a4588e55d6d1ff667e853fc704269436703761b127bf4895c1e205ab33b4630e603b8b5bef35aebe2c36afe",
-  "@rollup/rollup-android-arm-eabi@npm:4.40.1": "24131de0516010cd1c52d399fb17dbbe93b3ed6a981b57d82f363b9102a04083d470d0d7ead324fcc16e0eee7d54b7300ed3ce72bf43a4d277b959eb79f7490c",
-  "@rollup/rollup-android-arm64@npm:4.40.1": "6b02d5c1a8e5cb045ea9d382d71a9bfcd81da1d508ebeddf5c5118f99ce13b431af357a0458d922c03b26a00ca6ea72a861b1e15b370f20275ee73eff91fd7ce",
-  "@rollup/rollup-darwin-arm64@npm:4.40.1": "2c47b17a3670ff37a3a4ba6615f1514284317adedbf629b9d989f879f2ccd0c299f69c7733727150206b1edd96605ab9d94b6f0eae70cd7556542b436111d5c6",
-  "@rollup/rollup-darwin-x64@npm:4.40.1": "91ab2e444f00b9b98be9bc4d5bad1f1f180c3393ee6826417b1f50c5eb7cbca2b50a8fae08bfc920cff9a39b40d39ff5a06a0103598290bbe14d28caab8f2d4f",
-  "@rollup/rollup-freebsd-arm64@npm:4.40.1": "55486a57a0b2d276ba845d83b7d2423bcb4e16d47f7efb49d18d70c8bcda7f065750ce2754d2fcd3d6f038bf0fbf549e7a865cdad757fcbaee80681fc5b0cf31",
-  "@rollup/rollup-freebsd-x64@npm:4.40.1": "44d31a11edeea74bd271f929524c2b2adaa4d86912dab16bc8df19c7f36e373cec9ad8099a8784f8489d078a05b4a63d04988e7d2ff2473ee517f7703ed914a3",
-  "@rollup/rollup-linux-arm-gnueabihf@npm:4.40.1": "7449ef4aec80aed3935126964bbe4f571e7f270da02cf0f52bb8c039f4f7d81060a709a4b075bf4fd7b4edb4098d51644bc69c1228edadd24deeb1fb57061174",
-  "@rollup/rollup-linux-arm-musleabihf@npm:4.40.1": "548823023482bc71faf8ea6e9a3a2ee818d7011fd09fe70a5d2923cf2d395f9b5a3f59acfa44e3bcf20c2da947375ddb4bd83ffa81c21ca32c625bd2eddfe16b",
-  "@rollup/rollup-linux-arm64-gnu@npm:4.40.1": "04c11ce49644b0fbeefdb6d61ee98cb55a3ff657f89bd610f14b45d6add78ac45f53d5bfbc48edfc19b979a60c127f4619a6d7aa42122db9a60ea638a672b5aa",
-  "@rollup/rollup-linux-arm64-musl@npm:4.40.1": "4d257c6f80178e59a889c0df9f1d6dc8b04f28e0c7d5ff7fc8ec8037bbeed7df55c928815f654553579c8fe2c1b7030dfa4f0c46db80b5e54df68141c1dcc04d",
-  "@rollup/rollup-linux-loongarch64-gnu@npm:4.40.1": "e4d6fcc868ce49cc80dd3975b049998ac171a6c6faf10eec9409914bd49fd536a28c215e7d9f553af5107aa729bd1a8f524a0ba7eecaf4237368aaca555a7451",
-  "@rollup/rollup-linux-powerpc64le-gnu@npm:4.40.1": "3b4e4bcb11fac1048a3c93304a0efb0f84fa960b638eed465e17235a4d4d3b6710035b6b628936eefd37ba8d965773d81a27ba646952f50232ab94fc498ba7aa",
-  "@rollup/rollup-linux-riscv64-gnu@npm:4.40.1": "b83775740d1164c3bd07fea0c999f4a1d32c83769ee869905af24e91ba53b89a77000a78e76dcbe2210b30dce423bf4464c4d6a985b66d6c395d551745eb167e",
-  "@rollup/rollup-linux-riscv64-musl@npm:4.40.1": "ca1b09e4b0a34e85de5d82eb72a11604daa53c7a3612fe06110516770d31841885e54ec3cd9cd7233718616c286f81172e3a6840d958b63136826e91a8a75c68",
-  "@rollup/rollup-linux-s390x-gnu@npm:4.40.1": "e062f33b545d66baa4d794f96a7bdd6852db9f0749781fd5fe21f1c7348724b144ea1b0b92ea134edb6a7b02abbdeec36632147a77c2cfff2981836645b045aa",
-  "@rollup/rollup-linux-x64-gnu@npm:4.40.1": "4fe6c9ac21a6714f119934474f1f7553b84597569e4459d47469099479a1aab5f7384f59ff7e729d615883ce3454976a890d15eb6a372f747ba429fcde05b62d",
-  "@rollup/rollup-linux-x64-musl@npm:4.40.1": "61f05aa8f6df44385bc5c99850a95f791e14f63fa0e11a7f7351b3a4b45f7e719a4c5ae9562f772f3e08ce61ba887741e0564ae66e1c496aba2fde3e1cf97ec1",
-  "@rollup/rollup-win32-arm64-msvc@npm:4.40.1": "d4c9002b95c4b6ee842faaa5087582a0772578c0969c9ee470697a6d3fd251845481285f5a4027bc8c0524bf277f3437844cae9936c5f96ca753dcca61e2f47f",
-  "@rollup/rollup-win32-ia32-msvc@npm:4.40.1": "446e3ce5b037d1847af84e9a2b52734ae9f5425937fec2558d26ffb5c253dd8925dc35591abd78b0d43f7154222e47ee9aaeb3b167b3d69627805a97c5147185",
-  "@rollup/rollup-win32-x64-msvc@npm:4.40.1": "39fe3c6b86ef880fb1d1261f6096d19707584c628271d6ae01f5a5f50d8a24ef62128b5929064c0aed4390c7c0c0b7cc9590e300fa5f10ed624816748da2fbb2",
+  "@rolldown/binding-android-arm64@npm:1.0.3": "c73fbb421576421485f0d0f708df38938addbf48a237f08e8a4a46bad876cadf445c74c93008b3cea8c1be07a32a390a6067b0220aa838912b6a530f53f1338b",
+  "@rolldown/binding-android-arm64@npm:1.1.1": "7a6a6682dbccfa55cdc8653d1a1e92bdca1970616acb347dad8ff5f2495fb4ad8d1f7f5fce064ecfd72fa0df72dc10fadd962bf500a1a5c399d1c9dcbae2b749",
+  "@rolldown/binding-darwin-arm64@npm:1.0.3": "f140da4f3132f341a3f9c79e98d3baa6cac0034cbf4980b44ac37c67c523114feadacb5be451262923a0426c6523f5ba6f207d7fbdf4e95ac978add1ad829f96",
+  "@rolldown/binding-darwin-arm64@npm:1.1.1": "4aea3a7c56af47fd7e128f2e1038a83c3a6dab6ac6db181b30a9815b40bf8a2ffd676f43dfa690cd08092ca0d0c922705e3be98c0f81819cae9223bb7b64435c",
+  "@rolldown/binding-darwin-x64@npm:1.0.3": "ff7845f382344709fc166f7f87bea55eccf3400c2e3d7d70889c5be72640cfa7f7e2880893f8687776254cace09076767bb95ac7ed816547495e7d894f747651",
+  "@rolldown/binding-darwin-x64@npm:1.1.1": "c01c865bcf09162e3ab1c5c9bfaa461307b687708e1fda46c763ade305b4fcb79691501173670d12010c247bb671cb9682a6449c658d24b6e0388fa5a9bb65b0",
+  "@rolldown/binding-freebsd-x64@npm:1.0.3": "d6c401dfa68b6840a9a56e879198267ce8406f16108679caf6e6eb709c8ee0f2641c55d250b51ce47097000626c604bee7e7e2d9e2d70f71109b38e35fe4b836",
+  "@rolldown/binding-freebsd-x64@npm:1.1.1": "32fcac299ac43b09dfc17e478e7d0b13af742ef38dda5c4b41a5289c0b54479aca8e1c17982a8e5aa9f9a8ee8650bd145c0ac0f71ff3e19409063edb5d3504ef",
+  "@rolldown/binding-linux-arm-gnueabihf@npm:1.0.3": "8843aad46237e6a0569196eb605e29afaaf449c06ca4ed1a02e8083c86264f7cc940b085aafe6349f2011b2a44f6dfa8d58b55803e09561f12ea110bd3cb53ff",
+  "@rolldown/binding-linux-arm-gnueabihf@npm:1.1.1": "b9354e847db640142a757470c3017253ec4f8ce65cf118bfe2e437fea5f30aaea98d7e416d04a8c8a2763f777fe20e982dfa2dc4cba2d498de050d03b7141515",
+  "@rolldown/binding-linux-arm64-gnu@npm:1.0.3": "dc34425af444478f539854b02683b14ceef88520634a1dfefbc12c6a2c403c9879c8697ff87188aef199d692508d1109d69f545d6cc3414bd409202fd7f5ca1c",
+  "@rolldown/binding-linux-arm64-gnu@npm:1.1.1": "7dfcf379e0a37fc31a5ec908be9a7821d58f5f93bc7a7d2c0209eb4c7908e4f0e1b6c3ec65619ce60b779019f3a75eafa61558667fd7e101cbeea20d143b6476",
+  "@rolldown/binding-linux-arm64-musl@npm:1.0.3": "f04750497d329d71e17b86cacbc64cc78c7bf8eea0653f40a12f6b07e0baf70054feb8418538937ebb7e909f3b8a730f34e06370d6dc9188a4ea00fd3a947545",
+  "@rolldown/binding-linux-arm64-musl@npm:1.1.1": "b558ea9c6a420be7ad757ee05c77c86107915930396b100ae6b687fc4a4aac2cb01603c8678674472f98d1c3c96a025f930b61ba8921065f2770a0b1bc3a1ef9",
+  "@rolldown/binding-linux-ppc64-gnu@npm:1.0.3": "289963b6842c40d2a30457d6da2b824ecf4e502ae85e3ca7f48c45071b94a0759e327df7687b6930e418c71f7e6716ba43d061dcb9ff30e330708b4031b521eb",
+  "@rolldown/binding-linux-ppc64-gnu@npm:1.1.1": "f3269b611a8fe5b940ba9e233216f699fe5e04663cb51bd7ae6b2e6f2a3da00368851e9c4b159b2c52b029fc194768365afb808d85262fe97d3c819c988737b9",
+  "@rolldown/binding-linux-s390x-gnu@npm:1.0.3": "df6ef349cc8a8b8a6089726627f0c0db089ea57a4980bed6fae5e0246cdbbd2dbfa4e322ad90493a685ad895b21dfd982ebbebee159a7e50e873eabdc52fca8a",
+  "@rolldown/binding-linux-s390x-gnu@npm:1.1.1": "d6e516087d3dadbc14aa5e603985acb5db40f30968238d7c331a6165880f5851f4969bda1f7e8100f119d90bf6172d26f3f1987a68c7a471552be569000e6deb",
+  "@rolldown/binding-linux-x64-gnu@npm:1.0.3": "5d8faa3524898d23161a79ba6ad6fdeac8774c1a15c876a0eaadce582bcc584ec463ac8c2d685de509d04098202b67c8dfad515fcf0a614542af2b4260909597",
+  "@rolldown/binding-linux-x64-gnu@npm:1.1.1": "1126f59382a45e2b25754f9f834b66fb0cbba08b6cdc3fe88d63cfae56c7b753a995483c834326645963705f196fa710e9d1a2f5af7eaff6cfb39bd4afb0decf",
+  "@rolldown/binding-linux-x64-musl@npm:1.0.3": "a0cbdbba526790dd69f8de7810a90ee944f4a920f01326cff331702527b4dbf1377afd1dd9d65ded169f12fb3a1f0ec6d77c931a27e03cafcab453b2bfd3c317",
+  "@rolldown/binding-linux-x64-musl@npm:1.1.1": "6733c08cde69e0c471fb61d1ea9a128063da40612a1f028da325949800c9d1ea49bdae7eacbffb5fe95bbe1a651fef6f3f2466774e639a0016ad04bec3296f7c",
+  "@rolldown/binding-openharmony-arm64@npm:1.0.3": "ab0ca503f2b342e25f466dc65bd35d509ff629996086f480fefdfc7e54c0958d8f51daf51204a485f3c23b1405c824387524dd83a634f5a1304bf0c4722e0995",
+  "@rolldown/binding-openharmony-arm64@npm:1.1.1": "b977df43a86cd2a84a02cc857da9449b6ad1d98b59b6a951efce880672eef4f4d41547e71fc180d33d7cb452c40ee999d882a66568ffceba693342d3cea51dce",
+  "@rolldown/binding-wasm32-wasi@npm:1.0.3": "f540fdaebd7747dc436271fb8e22a60d08deac0b125e02f63cf0fd29cc0d228969d6ee6d49e150d9fd4f8bcd24795c116f86949bedce3cff505402ab2f4455a2",
+  "@rolldown/binding-wasm32-wasi@npm:1.1.1": "8d2b40ee92ccd7bb368cf73469825a36d00f0fd29b47fd895699efb1a1ecdb616f9459076e99b4c2d5f9e5ecf3f072405b8f2488c4392505749beef57f6ba4ef",
+  "@rolldown/binding-win32-arm64-msvc@npm:1.0.3": "b85acf5cd1065ae5260ebd43586eea6dca66675b8346fe42a14c3a95e46943f290684b36cf359c0f01c38256558e819c74571945c13adfcbdc6238ef018ad877",
+  "@rolldown/binding-win32-arm64-msvc@npm:1.1.1": "d3b31389f7354b0589fb7b1b2d4aabc76508ae6ac85648567792b32c66d80a683ced8ee02af9165f3fcfe0fa094996f69f3a1ea37c2d1d5b404c0f83ca890934",
+  "@rolldown/binding-win32-x64-msvc@npm:1.0.3": "d76ebc4fb315deddce845b82eaa07eedf88bb5f9500fa50d241805055dea593ddfcbd762d59116f35ecd6b4bcef3dba5e513180e8d9301486eac272904ce91cf",
+  "@rolldown/binding-win32-x64-msvc@npm:1.1.1": "6e7cea53c2d7c5d14479dad8b1dfb29d761ac4a1eee34e4a0afaef470afa7e8aeb4442f127b25ca5763597902d3a26e21f431d6676d5d45088b0ae8c47e56ccf",
+  "@rollup/rollup-android-arm-eabi@npm:4.61.1": "fd5cd7af9a2046adba5537f304ce3655cbe260ef5b362ac618223c0bbe1a28751077daf86c087cb5b3955ab19881ac2a79ead2f3e5122b284f43ff9228db2124",
+  "@rollup/rollup-android-arm64@npm:4.61.1": "be6b2f5f56f41e540ebb73640ca0d370e530d54bf0c18920e22ec5f6671780d3c6a4235d2257b06189aefd6e26962aeb93f8c4a2fc94f9b3dd4ca2137f40cd68",
+  "@rollup/rollup-darwin-arm64@npm:4.61.1": "29ccb594a4430bdc3ea218d1bdb46f88e1a905a54be392149fb362041c6970a916a6dfc87205933fd7eb4ef28be59b1e5404e6bae668722437c09e84a31a7392",
+  "@rollup/rollup-darwin-x64@npm:4.61.1": "f41ea58bb11199edccc0f5dd8bb5345761b4c699471b2203dd5a1d8adcc941992f483af6ecae2392ecc62035326c92d75a1afc6fb4f042d36f66a7ca596bcb89",
+  "@rollup/rollup-freebsd-arm64@npm:4.61.1": "72bdcdc77e678b14ce7cc28e94cab6661dcf1996dea4429c3d2466d2144594fb07696c95712915f8152b2dd2e1882ac02cfad9a3f8c7ba76fc7f846a89690262",
+  "@rollup/rollup-freebsd-x64@npm:4.61.1": "a238708436561e52676b7074832d8b931b12a44ef2f54e552b595bc2983de2f60e0ea2052181e8f06c957c3f34fff8f1c2ced0cba4e52f48728a339b4a345578",
+  "@rollup/rollup-linux-arm-gnueabihf@npm:4.61.1": "c802eaba8a15f09e32e30ba12e9dcf83e730252cfc708dc123974fdbb937b3f980df99a18f402e06f17fedd65592e80e185506630dbe9339c3611ff19be1f490",
+  "@rollup/rollup-linux-arm-musleabihf@npm:4.61.1": "20df453fd690bd797a249ab533a0197d0ec2dccacb9936708e7d2657ce5ac8ddea437d82c107fcba589da9cf3b5ca71398678623c8a6140f295350db4ef08c22",
+  "@rollup/rollup-linux-arm64-gnu@npm:4.61.1": "a850f2f536b531392bb5bc13fc1bb44d26fdb423b2178978d500a7658ad58dae21e37e3a6df3f66628cb6eca9edeccd88d72bf51d2e9e0a2aacedf1406e381fe",
+  "@rollup/rollup-linux-arm64-musl@npm:4.61.1": "e807e807f3207410e70578e1e83dbde94c1d2b094890d0a460d2bc689efd27dce73109a9e7b69d9feb8152143eee372045d7e8debfa8a58f3acfd76e68f519a7",
+  "@rollup/rollup-linux-loong64-gnu@npm:4.61.1": "cfe726d4f4f48020c40188d7261a7b5a630aa42d05c968caf3af0fa9418e08d81aae3a8c49104b99122c604190de05960da327214801541ac8adb207e1e1fcea",
+  "@rollup/rollup-linux-loong64-musl@npm:4.61.1": "0864a9a351ef3f6a98bf83316c4c4f7a80a3d5ec783abbb8ab279d879c420a2c42aa053477f8745ac38adf9797bb9bd60230920de44462e908713022aa32a01a",
+  "@rollup/rollup-linux-ppc64-gnu@npm:4.61.1": "934159e0082c1a8cfbfa4826b0b6917dba511e41910a0b8fa2c131d155e058950ffb278e0ffddb01202d8cd13eea197df1beec2df0ecba7f695336d014c3726b",
+  "@rollup/rollup-linux-ppc64-musl@npm:4.61.1": "0b914ba577ac83dff0e8e5a7cf3ed7ab2a8e1c0fbae040e300be2324b34252a98c703623fdd2ddbdf7d95ce8dda4167056e7b4946e615211e8866500aef206f0",
+  "@rollup/rollup-linux-riscv64-gnu@npm:4.61.1": "f48f9cb2defc84c2d4e65ef13537dc75e71cd6d8496e2c7c5506fde5af517dd6386eff3ec05422c154f408e58e57a986f4e36436709cee26a6a33931a88df246",
+  "@rollup/rollup-linux-riscv64-musl@npm:4.61.1": "0130e81563fb9557a036ca86f6fdeacfc507ae46d2fa012930f19cd223f9fe1babdba9784a2031f5b1be2cfca246cfb5484729e90e0394288f6d4e8514abe81c",
+  "@rollup/rollup-linux-s390x-gnu@npm:4.61.1": "8a01d73269e2e94628e963418f61fa03102f3d88e48cb3e529a2d7420e651f69ae556726f5727d7a57eb13c7c29a5f4f7ca316a010c2f6dd88ccab23bd3ed8be",
+  "@rollup/rollup-linux-x64-gnu@npm:4.61.1": "5aca669c49417c9eba5d1286e6d790ca418ca936cc7192f8477a91b9b07f8ec89f6c3af54bfe77544e71dc35d6f0036728939d99b20b48afdfee51d5d8ed345c",
+  "@rollup/rollup-linux-x64-musl@npm:4.61.1": "652f1b656ced1b4740390c4e96576c34c315feaef2e53d4518bccb6a99f65a038d09ec84368b929536ea98825aaeeac063f0659135587b2d3a1eb2f7393ced97",
+  "@rollup/rollup-openbsd-x64@npm:4.61.1": "591cd3849455b60ef63630c0d81b5063e371f5aa66ec1079e284852923891a83b4da79df3b76fecaf5d88fdc35eb8562846ab8de795c0693b31549db07f26e24",
+  "@rollup/rollup-openharmony-arm64@npm:4.61.1": "447d233e8013e67a0eba11213dc3d5479bb1e033cac5a7c7b542317e56ca4cbcb36acd22c3e01647097b499757d4b903045ba1b8163896db783414acf97738c9",
+  "@rollup/rollup-win32-arm64-msvc@npm:4.61.1": "182fd287aaf581def8fe46473de970deb11dc0b1afce31591fca78b2cc0b1bd7812a774009ad648263918f83a4ec22845d531495d4b38e76450ceea9928a6293",
+  "@rollup/rollup-win32-ia32-msvc@npm:4.61.1": "b74b7dce07f245137416d6cd90eec78e3bb6302d43e80cf970ec2193feccb729ce507f2120607d9696348a81cb704834396de62b13121b047e05b414bd4a55c9",
+  "@rollup/rollup-win32-x64-gnu@npm:4.61.1": "b4313203bf739d6ad57ae9af9a339ad05b5e5419c26a935d66526e557e6203befe280e68e3b81adf817b923bc40133486ebcf092f5668a4ee05c1835c3a58a86",
+  "@rollup/rollup-win32-x64-msvc@npm:4.61.1": "66cbe576533a7702b0ce88d0191980a631293d0a9f4a722a7e8d3df1efbd80a63a7a68fa512f4067a7685da075bd85af157b07c4108671a969e8d566662a64e2",
  "@typescript/native-preview-darwin-arm64@npm:7.0.0-dev.20260421.2": "12273bab953bbacf429e4895db7ac5e40b05f3e1511b7053119eafad99af9241f893e975e29735403f7247a4a1a22f56a5eca0d84ec300dc705c77ebc4292b61",
  "@typescript/native-preview-darwin-x64@npm:7.0.0-dev.20260421.2": "711451bef67dbe18e0a7fdfd5915f74935d76c8d22ac1f0bc74df55af66d6a782f7b91f3cdc7ff4773f02c5c84fbd3c79061e3888707735089d45148dc262910",
  "@typescript/native-preview-linux-arm64@npm:7.0.0-dev.20260421.2": "b1ffbf30be075be6cf8ed9da314326ca4050a31ed33fde3daa90fddc37518d62695abbbc1b1f212cbf160c22fff760fa2ee9b447a16fe6e14fcf36329df9bad5",
--- a/pkgs/by-name/ac/actual-server/package.nix
+++ b/pkgs/by-name/ac/actual-server/package.nix
@ -15,13 +15,13 @@
 let
  nodejs = nodejs_22;
  yarn-berry = yarn-berry_4.override { inherit nodejs; };
-  version = "26.6.0";
+  version = "26.7.0";
  src = fetchFromGitHub {
    name = "actualbudget-actual-source";
    owner = "actualbudget";
    repo = "actual";
    tag = "v${version}";
-    hash = "sha256-Ulz3M5z78mJQRr+te7qwVCeULCgEfE17NECSBagbI88=";
+    hash = "sha256-KePWt08rAhLZUrgyN7tdFUQXR/5y0TvakReji4eMwxg=";
  };
  translations = fetchFromGitHub {
    name = "actualbudget-translations-source";
@ -115,7 +115,7 @@ stdenv.mkDerivation (finalAttrs: {
  missingHashes = ./missing-hashes.json;
  offlineCache = yarn-berry.fetchYarnBerryDeps {
    inherit (finalAttrs) src missingHashes patches;
-    hash = "sha256-lC9+B9agqwVARfMhXSTjb6cBj23PQz+RpZZ700jypF4=";
+    hash = "sha256-eZxQAf2AfNd+0wrSEmE9kg5XWdqhE3Dlf6OGc1bZhXA=";
  };

  pname = "actual-server";
--- a/pkgs/by-name/ac/actual-server/yarn-4.14-support.patch
+++ b/pkgs/by-name/ac/actual-server/yarn-4.14-support.patch
@ -1,26 +1,32 @@
 diff --git a/.yarnrc.yml b/.yarnrc.yml
+index 597597bbc..0ff5d2399 100644
 --- a/.yarnrc.yml
 +++ b/.yarnrc.yml
-@@ -6,8 +6,9 @@ enableTransparentWorkspaces: false
-
+@@ -6,11 +6,12 @@ enableTransparentWorkspaces: false
+ 
 nodeLinker: node-modules
-
+ 
 -yarnPath: .yarn/releases/yarn-4.13.0.cjs
 +approvedGitRepositories:
 +  - "**"
-
+ 
 # Secure default: don't run postinstall scripts.
 # If a new package requires them, add it to dependenciesMeta in package.json.
 -enableScripts: false
 +enableScripts: true
+ 
+ # Supply-chain defense: don't install package versions published less than 3
+ # days ago, giving the community time to catch compromised releases. Trusted
 diff --git a/yarn.lock b/yarn.lock
+index 479cebb2c..9d78fba85 100644
 --- a/yarn.lock
 +++ b/yarn.lock
-@@ -2,6 +2,6 @@
+@@ -2,7 +2,7 @@
 # Manual changes might be lost - proceed with caution!
-
+ 
 __metadata:
 -  version: 8
 +  version: 9
   cacheKey: 10
-
+ 
+ "7zip-bin@npm:~5.2.0":
--- a/pkgs/by-name/ai/air-formatter/package.nix
+++ b/pkgs/by-name/ai/air-formatter/package.nix
@ -4,6 +4,7 @@
  fetchFromGitHub,
  versionCheckHook,
  nix-update-script,
+  installShellFiles,
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "air-formatter";
@ -32,6 +33,16 @@ rustPlatform.buildRustPackage (finalAttrs: {
    updateScript = nix-update-script { };
  };

+  nativeBuildInputs = [ installShellFiles ];
+  # TODO: Upstream also provides Elvish and PowerShell completions,
+  # but `installShellCompletion` only has support for Bash, Zsh and Fish at the moment.
+  postInstall = ''
+    installShellCompletion --cmd air-formatter \
+      --bash <($out/bin/air generate-shell-completion bash) \
+      --fish <($out/bin/air generate-shell-completion fish) \
+      --zsh  <($out/bin/air generate-shell-completion zsh)
+  '';
+
  meta = {
    description = "Extremely fast R code formatter";
    homepage = "https://posit-dev.github.io/air";
--- a/pkgs/by-name/an/anyk/package.nix
+++ b/pkgs/by-name/an/anyk/package.nix
@ -36,7 +36,7 @@ let

    src = lib.sources.sourceFilesBySuffices ./. [ "pom.xml" ];

-    mvnHash = "sha256-4keHPzS8pbIIwODmBUMofJt27n5WqYh+IGqE6d9od7k=";
+    mvnHash = "sha256-6pezqcTIPR5NYFQUmLZ5Y3TOd+XRcB/eRmNSAEoBmls=";

    installPhase = ''
      mkdir -p $out/share/java
--- a/pkgs/by-name/as/asn1c/package.nix
+++ b/pkgs/by-name/as/asn1c/package.nix
@ -1,39 +1,64 @@
 {
  lib,
  stdenv,
-  fetchurl,
+  autoreconfHook,
+  versionCheckHook,
+  fetchFromGitHub,
  perl,
+  nix-update-script,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "asn1c";
-  version = "0.9.28";
+  version = "0.9.29";

-  src = fetchurl {
-    url = "https://lionet.info/soft/asn1c-${finalAttrs.version}.tar.gz";
-    hash = "sha256-gAdEC2R+8t2ftz2THDOsEXZOavskN9vmOLtOX8gjhrk=";
+  src = fetchFromGitHub {
+    owner = "vlm";
+    repo = "asn1c";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-ms4+tzlVdV0pVGhdBod8sepjHGS4OVxJb3HdrFKv9Cc=";
  };

  outputs = [
    "out"
    "doc"
    "man"
+
+    # for the one perl utility
+    "crfc2asn1"
+  ];
+
+  postPatch = ''
+    patchShebangs examples/crfc2asn1.pl
+  '';
+
+  nativeBuildInputs = [
+    autoreconfHook
+    versionCheckHook
  ];

  buildInputs = [ perl ];

-  preConfigure = ''
-    patchShebangs examples/crfc2asn1.pl
-  '';
+  enableParallelBuilding = true;

  postInstall = ''
    cp -r skeletons/standard-modules $out/share/asn1c
  '';

-  doCheck = true;
+  # Barely anyone uses this, so make it a split-output
+  # so we don't carry the dependency on perl into bin.
+  postFixup = ''
+    mkdir -p $crfc2asn1/bin
+    mv $out/bin/crfc2asn1.pl $crfc2asn1/bin/crfc2asn1
+  '';
+
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };

  meta = {
-    homepage = "http://lionet.info/asn1c/compiler.html";
+    mainProgram = "asn1c";
+    homepage = "https://lionet.info/asn1c/compiler.html";
    description = "Open Source ASN.1 Compiler";
    license = lib.licenses.bsd2;
    platforms = lib.platforms.unix;
--- a/pkgs/by-name/au/autopush-rs/package.nix
+++ b/pkgs/by-name/au/autopush-rs/package.nix
@ -47,7 +47,7 @@ let
 in
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "autopush";
-  version = "1.81.3";
+  version = "1.82.1";

  __structuredAttrs = true;
  strictDeps = true;
@ -61,10 +61,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "mozilla-services";
    repo = "autopush-rs";
    tag = finalAttrs.version;
-    hash = "sha256-DP02mcEMoQoJqi5rw5eSuep0i7zeJ0LLYsakikt9hho=";
+    hash = "sha256-wOnuYh18q2XDAcCUBGsidAMvOi10s4njVKDLhtNJEoU=";
  };

-  cargoHash = "sha256-LqmuUtFF30TO6iw7LPFB7yJGrzrhh7R0OKCWMhe/OjU=";
+  cargoHash = "sha256-FiMEDc2wxQPkM50cNKzP8yo90HGMakn6JUl/xheaciQ=";

  nativeBuildInputs = [
    pkg-config
--- a/pkgs/by-name/bc/bcachefs-tools/kernel-module.nix
+++ b/pkgs/by-name/bc/bcachefs-tools/kernel-module.nix
@ -4,6 +4,7 @@ bcachefs-tools:
  stdenv,
  kernelModuleMakeFlags,
  kernel,
+  rustPlatform,
 }:

 stdenv.mkDerivation {
@ -27,6 +28,7 @@ stdenv.mkDerivation {
  makeFlags = kernelModuleMakeFlags ++ [
    "KDIR=${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
    "INSTALL_MOD_PATH=${placeholder "out"}"
+    "RUST_LIB_SRC=${rustPlatform.rustLibSrc}"
  ];

  installPhase = ''
@ -50,6 +52,6 @@ stdenv.mkDerivation {
      platforms
      ;

-    broken = !(lib.versionAtLeast kernel.version "6.16" && lib.versionOlder kernel.version "7.2");
+    broken = !(lib.versionAtLeast kernel.version "6.16" && lib.versionOlder kernel.version "7.3");
  };
 }
--- a/pkgs/by-name/bc/bcachefs-tools/package.nix
+++ b/pkgs/by-name/bc/bcachefs-tools/package.nix
@ -19,6 +19,7 @@
  cargo,
  rustc,
  rustPlatform,
+  rust-bindgen,
  makeWrapper,
  nix-update-script,
  versionCheckHook,
@ -30,18 +31,18 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "bcachefs-tools";
-  version = "1.38.6";
+  version = "1.38.8";

  src = fetchFromGitHub {
    owner = "koverstreet";
    repo = "bcachefs-tools";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-VNY9kURuXky504utCZ0Ye76mDG2TFAdzrgYI2iup/PI=";
+    hash = "sha256-9sDE7ua3WMCfV9ZbwQdAbpatv2IhvcwHzzPr+/l2au0=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) src;
-    hash = "sha256-rajYbfE98j/YqniUoV66LHh22PwEc6sWWJ/7bgGgGtA=";
+    hash = "sha256-F1+FeAlYSqOxeWJI8vHShpXrOZqYXjNGvty/s6f6u8w=";
  };

  postPatch = ''
@ -58,6 +59,7 @@ stdenv.mkDerivation (finalAttrs: {
    rustc
    rustPlatform.cargoSetupHook
    rustPlatform.bindgenHook
+    rust-bindgen
    makeWrapper
    installShellFiles
  ];
--- a/pkgs/by-name/be/beeper/package.nix
+++ b/pkgs/by-name/be/beeper/package.nix
@ -10,10 +10,10 @@
 }:
 let
  pname = "beeper";
-  version = "4.2.948";
+  version = "4.2.957";
  src = fetchurl {
    url = "https://beeper-desktop.download.beeper.com/builds/Beeper-${version}-x86_64.AppImage";
-    hash = "sha256-MvfQSCV8b5aOeOSlTnRlOupzg+wmHhG0hGWznwCx0Yc=";
+    hash = "sha256-wUGUwWopQ8ox2+UP5hXIIF2XVLQmZyhfb712S8JjTGk=";
  };
  appimageContents = appimageTools.extract {
    inherit pname version src;
--- a/pkgs/by-name/ca/captive-browser/package.nix
+++ b/pkgs/by-name/ca/captive-browser/package.nix
@ -2,34 +2,25 @@
  lib,
  fetchFromGitHub,
  buildGoModule,
-  fetchpatch,
 }:

-buildGoModule {
+buildGoModule (finalAttrs: {
  pname = "captive-browser";
-  version = "0-unstable-2021-08-01";
+  version = "0-unstable-2025-11-05";

  src = fetchFromGitHub {
-    owner = "FiloSottile";
+    owner = "pacoorozco";
    repo = "captive-browser";
-    rev = "9c707dc32afc6e4146e19b43a3406329c64b6f3c";
-    sha256 = "sha256-65lPo5tpE0M/VyyvlzlcVSuHX4AhhVuqK0UF4BIAH/Y=";
+    rev = "ca6f74e132ecf298c87936d4c946fd551aefbbf7";
+    sha256 = "sha256-wojx28GFg9whfkNxUbOVDVNHp8M7SLsmRBTP/Jh8nLQ=";
  };

-  vendorHash = "sha256-2MFdQ2GIDAdLPuwAiGPO9wU3mm2BDXdyTwoVA1xVlcQ=";
-  deleteVendor = true;
-
-  patches = [
-    # Add go modules support
-    (fetchpatch {
-      url = "https://github.com/FiloSottile/captive-browser/commit/ef50837778ef4eaf38b19887e79c8b6fa830c342.patch";
-      hash = "sha256-w+jDFeO94pMu4ir+G5CzqYlXxYOm9+YfyzbU3sbTyiY=";
-    })
-  ];
+  vendorHash = "sha256-8FMFgCJUTalJ45GR5UnyXqN6s0gVFtiy6zjugbngDYQ=";

  ldflags = [
    "-s"
    "-w"
+    "-X main.Version=${finalAttrs.version}"
  ];

  meta = {
@ -38,4 +29,4 @@ buildGoModule {
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ ma27 ];
  };
-}
+})
--- a/pkgs/by-name/ca/cargo-tally/package.nix
+++ b/pkgs/by-name/ca/cargo-tally/package.nix
@ -6,14 +6,14 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "cargo-tally";
-  version = "1.0.74";
+  version = "1.0.75";

  src = fetchCrate {
    inherit (finalAttrs) pname version;
-    hash = "sha256-JZtELsvxOx6FFQ+l8fbhPnR8Tt+sQWV4fGsoS8ue4QY=";
+    hash = "sha256-X3VJfzIXxwHPu31wYo79Ei6+S970UHlPPTADlB4CwjI=";
  };

-  cargoHash = "sha256-Vn5OSJNpwE3rjs+tYX784o1Khrcf4f21dvb8Yn/c9bY=";
+  cargoHash = "sha256-86V96i5DvydXu1mzxRP6hWW3TA25piubcGRYVJIi/x0=";

  meta = {
    description = "Graph the number of crates that depend on your crate over time";
--- a/pkgs/by-name/cd/cddl/Gemfile
+++ b/pkgs/by-name/cd/cddl/Gemfile
@ -1,2 +1,4 @@
 source 'https://rubygems.org'
 gem 'cddl'
+
+gem "base64", "~> 0.2.0"
--- a/pkgs/by-name/cd/cddl/Gemfile.lock
+++ b/pkgs/by-name/cd/cddl/Gemfile.lock
@ -2,20 +2,21 @@ GEM
  remote: https://rubygems.org/
  specs:
    abnc (0.1.1)
-    abnftt (0.2.6)
+    abnftt (0.2.10)
    base32 (0.3.4)
    base45_lite (1.0.1)
+    base64 (0.2.0)
    cbor-canonical (0.1.2)
    cbor-deterministic (0.1.3)
-    cbor-diag (0.9.5)
+    cbor-diag (0.9.7)
      cbor-canonical
      cbor-deterministic
      cbor-packed
      json_pure
      neatjson
      treetop (~> 1)
-    cbor-packed (0.1.5)
-    cddl (0.12.9)
+    cbor-packed (0.2.2)
+    cddl (0.12.11)
      abnc (~> 0.1.1)
      abnftt
      base32 (~> 0.3)
@ -31,14 +32,15 @@ GEM
    polyglot (0.3.5)
    regexp-examples (1.5.1)
    scanf (1.0.0)
-    treetop (1.6.12)
+    treetop (1.6.14)
      polyglot (~> 0.3)

 PLATFORMS
  ruby

 DEPENDENCIES
+  base64 (~> 0.2.0)
  cddl

 BUNDLED WITH
-   2.5.22
+   2.6.6
--- a/pkgs/by-name/cd/cddl/gemset.nix
+++ b/pkgs/by-name/cd/cddl/gemset.nix
@ -14,10 +14,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1r9ay1kxn2yh9h0j2hr7iszz7cprpc7s6yjsv2k4inxndbsw5y4v";
+      sha256 = "08k659idrl977g1anlff32g9cp3rykjvk05n4nifr8jxzdczzv0r";
      type = "gem";
    };
-    version = "0.2.6";
+    version = "0.2.10";
  };
  base32 = {
    groups = [ "default" ];
@ -39,6 +39,16 @@
    };
    version = "1.0.1";
  };
+  base64 = {
+    groups = [ "default" ];
+    platforms = [ ];
+    source = {
+      remotes = [ "https://rubygems.org" ];
+      sha256 = "01qml0yilb9basf7is2614skjp8384h2pycfx86cr8023arfj98g";
+      type = "gem";
+    };
+    version = "0.2.0";
+  };
  cbor-canonical = {
    groups = [ "default" ];
    platforms = [ ];
@ -72,20 +82,20 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1gxfs63jgvhdkfpm97mxpz14gxsvqds5pza8i175bmsqwvx3zn87";
+      sha256 = "1psh00k5s19yhxajskdqlxfamyf1piriyzm1nrcjlqcjl0863j8l";
      type = "gem";
    };
-    version = "0.9.5";
+    version = "0.9.7";
  };
  cbor-packed = {
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1dijyj7rivi39h34f32fx7k4xvngldf569i0372n1z6w01nv761l";
+      sha256 = "0sbbz0p17m77xqmh4fv4rwly1cj799hapdsg4h43kwsw8h0rnk8n";
      type = "gem";
    };
-    version = "0.1.5";
+    version = "0.2.2";
  };
  cddl = {
    dependencies = [
@ -103,10 +113,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1811vvf73jjcxifq8h2cyp0b2z2qwhkplmrc2javx7gwrxlgb2p4";
+      sha256 = "1qd398qll4xjbfaim4smvm61ffkx95hbp8l8ma6ss5hk75gr13pz";
      type = "gem";
    };
-    version = "0.12.9";
+    version = "0.12.11";
  };
  colorize = {
    groups = [ "default" ];
@ -174,9 +184,9 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0adc8qblz8ii668r3rksjx83p675iryh52rvdvysimx2hkbasj7d";
+      sha256 = "1m5fqy7vq6y7bgxmw7jmk7y6pla83m16p7lb41lbqgg53j8x2cds";
      type = "gem";
    };
-    version = "1.6.12";
+    version = "1.6.14";
  };
 }
--- a/pkgs/by-name/cl/claude-code/manifest.json
+++ b/pkgs/by-name/cl/claude-code/manifest.json
@ -1,47 +1,47 @@
 {
-  "version": "2.1.199",
-  "commit": "968b0c4118bde7c998acd97511e68daecacd8507",
-  "buildDate": "2026-07-02T01:58:04Z",
+  "version": "2.1.201",
+  "commit": "5bb45156ece6b12214696c88adec695b2dca1338",
+  "buildDate": "2026-07-03T20:01:44Z",
  "platforms": {
    "darwin-arm64": {
      "binary": "claude",
-      "checksum": "e3cb61abc8a2ec7b98976cee1ffdde5a3fa755c9990bc8d688cd89290e0dcec0",
-      "size": 232155536
+      "checksum": "a0852d76afc47b30f5cb0b7625ec9a7714cb189f2eeef6c28c77e2be954fb7fd",
+      "size": 231708784
    },
    "darwin-x64": {
      "binary": "claude",
-      "checksum": "e64853ff3bc2ae6ed8115581c851e1176762d445d0b8b9e0dd37d0d560224a88",
-      "size": 240192080
+      "checksum": "1889287a92d25356ae8bd8d8e67b11456015516ee8ba4277a0c7074786c49bb6",
+      "size": 241100240
    },
    "linux-arm64": {
      "binary": "claude",
-      "checksum": "14851b5170b154b01baca09bba970172e70cdd768b5a012bf347ba0f594b4ad3",
-      "size": 247184112
+      "checksum": "86b2eab34d382c7b428fc2e9f4c97f04e46805e950582472a13eb7d48de60516",
+      "size": 248101616
    },
    "linux-x64": {
      "binary": "claude",
-      "checksum": "b31dfd5e3dee23b51c42e0d8ddb405148978237d3aabc8cbbf77c5cf83367e27",
-      "size": 250383160
+      "checksum": "a34809a6839fdefff21b9347d7fb5b6b58e6a9cc208a5e62853f29c83eb107a3",
+      "size": 251300664
    },
    "linux-arm64-musl": {
      "binary": "claude",
-      "checksum": "4115c07bc6dfa71affff595400599032b70b4ab25b7a2dae982341ef4da47b38",
-      "size": 240432312
+      "checksum": "5b4cde588b0196c8f88654ca9652c4703788f4d9fbab32a17ab3c444830085ae",
+      "size": 241349816
    },
    "linux-x64-musl": {
      "binary": "claude",
-      "checksum": "22c8b0861078cef1b572023e7eda4ce0dda7e12cc2e3060858eaa3de010bee21",
-      "size": 245068160
+      "checksum": "a0f81ec99ac65e8c5919e7aae54b8a496488e0f1311884fc9ffd05c7cbf6bd2f",
+      "size": 245985664
    },
    "win32-x64": {
      "binary": "claude.exe",
-      "checksum": "63de670613bb74594564a2125cb54e0e2e78192c5696e396adfae093b9132eec",
-      "size": 240716448
+      "checksum": "fb804ee019bfbb8d7e85abf965e528e53b5aa5a4e4ebc0f164139dc10a9e0320",
+      "size": 241591968
    },
    "win32-arm64": {
      "binary": "claude.exe",
-      "checksum": "7e4900b1ce5588003e0ade6caa0aaef1e2b8efd903c5a86c671d0de258b7a4d4",
-      "size": 235182752
+      "checksum": "a3ad78a0b593dea94c3ee787b1f5b17a173a7679203a296acf9aae7ef4705d42",
+      "size": 236058784
    }
  }
 }
--- a/pkgs/by-name/cl/clickhouse/lts.nix
+++ b/pkgs/by-name/cl/clickhouse/lts.nix
@ -1,6 +1,6 @@
 import ./generic.nix {
-  version = "26.3.15.4-lts";
-  rev = "3c767441a1ed9b5828b94806d87a25501d1f7364";
-  hash = "sha256-7vhnUjmZtHm2v8a7w2gBxgFz153kbbUi94oy04vheLo=";
+  version = "26.3.17.4-lts";
+  rev = "00f5ad7bc29d8bb65e1f7eb24208da15db3cf642";
+  hash = "sha256-RJSqcsn3ZOL145RTUs4QujPm6DHjDSYiL9jI1C1YCVE=";
  lts = true;
 }
--- a/pkgs/by-name/co/cockpit-zfs/package.nix
+++ b/pkgs/by-name/co/cockpit-zfs/package.nix
@ -15,7 +15,7 @@
  mbuffer,
  msmtp,
  nix-update-script,
-  nodejs,
+  nodejs_22,
  openssh,
  samba,
  shadow,
@ -27,6 +27,22 @@
  yarn-berry,
  zfs,
 }:
+let
+  # Pin to Node <24.15.0: Yarn Berry's PnP linker breaks `require.cache` on
+  # newer Node, which crashes tailwindcss mid-build (and ESLint, per
+  # yarnpkg/berry#7106). See NixOS/nixpkgs#530137.
+  #
+  # `nodejs` is rebound here (rather than touched at every call site below)
+  # so the rest of this file is unaffected.
+  #
+  # yarn-berry's own `yarn` binary gets patchShebang'd against whatever
+  # `nodejs` *it* was built with, so overriding nativeBuildInputs alone does
+  # nothing - we have to rebuild yarn-berry itself against nodejs_22, for
+  # both the host and build-platform (cross-compilation) variants.
+  nodejs = nodejs_22;
+  yarnBerry = yarn-berry.override { inherit nodejs; };
+  yarnBerryForBuild = buildPackages.yarn-berry.override { nodejs = buildPackages.nodejs_22; };
+in

 stdenv.mkDerivation (finalAttrs: {
  pname = "cockpit-zfs";
@ -49,17 +65,17 @@ stdenv.mkDerivation (finalAttrs: {
  missingHashes = ./missing-hashes.json;

  # Use buildPackages for cross-compilation support
-  offlineCache = buildPackages.yarn-berry.fetchYarnBerryDeps {
+  offlineCache = yarnBerryForBuild.fetchYarnBerryDeps {
    inherit (finalAttrs) src missingHashes patches;
    hash = "sha256-Tdxe5bXN9psSrnUXL1f+1nh4WPzuvOI7j0I+VPU2/1s=";
  };

  nativeBuildInputs = [
    makeWrapper
-    nodejs
+    nodejs_22
    jq
-    yarn-berry
-    buildPackages.yarn-berry.yarnBerryConfigHook
+    yarnBerry
+    yarnBerryForBuild.yarnBerryConfigHook
  ];

  disallowedRequisites = [ finalAttrs.offlineCache ];
@ -76,7 +92,7 @@ stdenv.mkDerivation (finalAttrs: {
    lsscsi
    mbuffer
    msmtp
-    nodejs
+    nodejs_22
    openssh
    samba
    shadow
--- a/pkgs/by-name/co/commafeed/package.nix
+++ b/pkgs/by-name/co/commafeed/package.nix
@ -54,7 +54,7 @@ maven.buildMavenPackage {

  pname = "commafeed";

-  mvnHash = "sha256-jAU1zaTftMuB1WgOeFzU1i+fFHAw6JYxTGw2mY8VlQw=";
+  mvnHash = "sha256-P3pmU/ou/gErk91ANjD4QuBTldBPKHYtGJREJQVgde8=";
  mvnJdk = jdk25;

  mvnParameters = lib.escapeShellArgs [
--- a/pkgs/by-name/co/concord-tui/package.nix
+++ b/pkgs/by-name/co/concord-tui/package.nix
@ -10,16 +10,16 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "concord-tui";
-  version = "2.2.12";
+  version = "2.2.13";

  src = fetchFromGitHub {
    owner = "chojs23";
    repo = "concord";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-oohoQIShX6zZC4fEPQnkvJVqhJSmU21ZrbfN9bDTnQI=";
+    hash = "sha256-7Acffg3ExqdcqsMJyv1N74Ff1/NrA1gtw8Tpa3KM4r0=";
  };

-  cargoHash = "sha256-TFjph7qSc3dHaMRUC7kUwvblfB8zdyvcMT16aHFm8wo=";
+  cargoHash = "sha256-CDU9ajRleP/Hr/9DA+8rr+uzv8V3xR9Ki1qtBHhYSpc=";

  buildInputs = [
    opus
--- a/pkgs/by-name/cr/credspy/package.nix
+++ b/pkgs/by-name/cr/credspy/package.nix
@ -0,0 +1,41 @@
+{
+  lib,
+  python3Packages,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+
+python3Packages.buildPythonApplication (finalAttrs: {
+  pname = "credspy";
+  version = "1.0.0-unstable-2026-06-22";
+  pyproject = true;
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "RedByte1337";
+    repo = "CredSpy";
+    # https://github.com/RedByte1337/CredSpy/issues/2
+    rev = "0fa54595fd6e5d1f903d8d248a7e9f3203e7ec09";
+    hash = "sha256-PHSLke90obZw2cwY7zqp1DNnG26Hf+ixHunMwQHoU3o=";
+  };
+
+  build-system = with python3Packages; [ hatchling ];
+
+  dependencies = with python3Packages; [ requests ];
+
+  pythonImportsCheck = [ "credspy" ];
+
+  # Project has no tests
+  doCheck = false;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Entra ID user enumeration and auth method discovery";
+    homepage = "https://github.com/RedByte1337/CredSpy";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "credspy";
+  };
+})
--- a/pkgs/by-name/cr/cryptomator-cli/package.nix
+++ b/pkgs/by-name/cr/cryptomator-cli/package.nix
@ -27,7 +27,7 @@ maven.buildMavenPackage rec {

  mvnJdk = jdk;
  mvnParameters = "-Dmaven.test.skip=true";
-  mvnHash = "sha256-54DT4C+WzyUBPxayA9YnB9I/Igd19iZygByUh5of51I=";
+  mvnHash = "sha256-oMfgWQ6mID1me0OP+BIwGJShCV5r/ahHlcAJ+S1KRBA=";

  env = {
    APP_VERSION = version;
--- a/pkgs/by-name/da/dawarich/gemset.nix
+++ b/pkgs/by-name/da/dawarich/gemset.nix
@ -598,10 +598,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1aymcakhzl83k77g2f2krz07bg1cbafbcd2ghvwr4lky3rz86mkb";
+      sha256 = "1c2i64xsd35vijnb50rxb70g508s0x674xi0qpyyb8jy7bncl4j4";
      type = "gem";
    };
-    version = "1.3.6";
+    version = "1.3.7";
  };
  connection_pool = {
    groups = [
@ -993,10 +993,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1b930ag8nh99v8n9645ac1wcah9fx0mclbp323q4i1ly9acvkk3k";
+      sha256 = "0y7j6yzv07zggic6g0p2v1ivnvkzsbqjnfdl4215qqb6cxz290hq";
      type = "gem";
    };
-    version = "2.14.2";
+    version = "2.14.3";
  };
  faraday-follow_redirects = {
    dependencies = [ "faraday" ];
@ -1756,10 +1756,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1s30b7h7qpyim30m8060xs415mbr3ci7i5hdg09chh1aqfx2qcbq";
+      sha256 = "1d9safb4dly6qmc2g06444l0zifby52yy6j1a5fa1g4j3ihm3jah";
      type = "gem";
    };
-    version = "1.19.3";
+    version = "1.19.4";
  };
  oauth2 = {
    dependencies = [
--- a/pkgs/by-name/da/dawarich/sources.json
+++ b/pkgs/by-name/da/dawarich/sources.json
@ -1,5 +1,5 @@
 {
-  "version": "1.9.1",
-  "hash": "sha256-ukpX2HOGNh14vbH/2UgjIU13PMBIA8Es2p7sBySAgVQ=",
+  "version": "1.9.2",
+  "hash": "sha256-vUJPMwzYZK/UAFiqnn0fkJH7GJjdBkewfYikK35Tbb4=",
  "npmHash": "sha256-sUDEqvqNrztedUGZRRkD2ythpBQQwpqJz/QleUvqz0Y="
 }
--- a/pkgs/by-name/de/dependency-track/package.nix
+++ b/pkgs/by-name/de/dependency-track/package.nix
@ -84,7 +84,7 @@ maven.buildMavenPackage rec {
  '';

  mvnJdk = jre_headless;
-  mvnHash = "sha256-4N4KuJBF/RFZwpp3dIgXntxSEfKHyfvrShKQoUqY5bE=";
+  mvnHash = "sha256-eZuwBt+emThf4mxVaphFgBWNqP64Cs9WIKW+GPvHll4=";
  manualMvnArtifacts = [
    "com.coderplus.maven.plugins:copy-rename-maven-plugin:1.0.1"
    # added to saticfy protobuf compiler plugin dependency resolving
--- a/pkgs/by-name/de/devin-cli/package.nix
+++ b/pkgs/by-name/de/devin-cli/package.nix
@ -7,29 +7,29 @@
 }:

 let
-  version = "2026.8.18";
+  version = "3000.1.23";

  throwSystem = throw "Unsupported system: ${stdenvNoCC.hostPlatform.system}";

  srcs = {
    x86_64-linux = fetchurl {
      url = "https://static.devin.ai/cli/${version}/devin-${version}-x86_64-unknown-linux.tar.gz";
-      hash = "sha256-3Uu6IFkwhr9whHR5LBGrDJQovlskGf9cGC7F8QmaBmE=";
+      hash = "sha256-m7DOI/PY0ldm4kRmAxeEQXTiH/R2oT3R8igmtXYA40g=";
    };

    aarch64-linux = fetchurl {
      url = "https://static.devin.ai/cli/${version}/devin-${version}-aarch64-unknown-linux.tar.gz";
-      hash = "sha256-En56i68uCcsP0jhxr5idyeMuO/p/SXsfZWDMUvW/GcY=";
+      hash = "sha256-oOZjPyr3sgaH54KBWQhODFwxrEnuhkTW/rVPwXUAeUY=";
    };

    aarch64-darwin = fetchurl {
      url = "https://static.devin.ai/cli/${version}/devin-${version}-aarch64-apple-darwin.tar.gz";
-      hash = "sha256-n0GtTUnA9OYw4VmAQkGA4rcOGk9ifwYz+ouyJEkZpAo=";
+      hash = "sha256-x+g7kILZuWG2JX4tc+GdIE7XqpHIzWt6+xPQU/gzyeA=";
    };

    x86_64-darwin = fetchurl {
      url = "https://static.devin.ai/cli/${version}/devin-${version}-x86_64-apple-darwin.tar.gz";
-      hash = "sha256-KZ7FeZjOIR+/vW7Tt3BOBQUsShXOglaRbxxGSR6R2Bg=";
+      hash = "sha256-LF1Mk53ds28Avvq+TtyvIu/BPYSHm9tBVjAlUXAyJVU=";
    };
  };
 in
--- a/pkgs/by-name/di/digital/package.nix
+++ b/pkgs/by-name/di/digital/package.nix
@ -52,7 +52,7 @@ maven.buildMavenPackage rec {
  };

  inherit mvnParameters;
-  mvnHash = "sha256-wm/axWJucoW9P98dKqHI4bjrUnmBTfosCOdJg9VBJ+4=";
+  mvnHash = "sha256-qFJvpxK6PDmMfeL5fKVHUzK2NRLcQhQ3PJbwv2hYZqY=";

  nativeBuildInputs = [
    copyDesktopItems
--- a/pkgs/by-name/di/dinit/package.nix
+++ b/pkgs/by-name/di/dinit/package.nix
@ -9,7 +9,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "dinit";
-  version = "0.22.0";
+  version = "0.22.1";

  src = fetchFromGitHub {
    owner = "davmac314";
@ -19,7 +19,7 @@ stdenv.mkDerivation (finalAttrs: {
    postFetch = ''
      [ -f "$out/BUILD" ] && rm "$out/BUILD"
    '';
-    hash = "sha256-Axa993X17NdsNb+HwfzVzGGVTPVmdolNRxh3GfrpmBY=";
+    hash = "sha256-LerUex/P8UYFWG0TK8LAFPlFBNIVIH2cZfBxe6AD7Sc=";
  };

  postPatch = ''
--- a/pkgs/by-name/di/dix/package.nix
+++ b/pkgs/by-name/di/dix/package.nix
@ -7,7 +7,7 @@
 }:
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "dix";
-  version = "2.1.0";
+  version = "2.2.0";

  __structuredAttrs = true;

@ -15,10 +15,10 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "manic-systems";
    repo = "dix";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-+9I6WuPOc8Lj7NAxe19phlFiDypGQywopZ3dZK9d6F4=";
+    hash = "sha256-U7zKSFQsmAkG4Um0DxgkgsGKh+/MqT1H3llUVd/i8UE=";
  };

-  cargoHash = "sha256-k/of0KX2wBWh/etybbKn81O5UgJF0ylc2fl+HK8uIRQ=";
+  cargoHash = "sha256-m2jRDMjZTJHKbe0Ep76SFT3tV1xytThvaRAt6A0CF3A=";

  nativeInstallCheckInputs = [ versionCheckHook ];
  doInstallCheck = true;
--- a/pkgs/by-name/dn/dnsproxy/package.nix
+++ b/pkgs/by-name/dn/dnsproxy/package.nix
@ -6,16 +6,16 @@

 buildGoModule (finalAttrs: {
  pname = "dnsproxy";
-  version = "0.81.4";
+  version = "0.82.1";

  src = fetchFromGitHub {
    owner = "AdguardTeam";
    repo = "dnsproxy";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-KHun1/Da6wfOuMc9D8AJrgZg5PwuXAY6IVajSHa3rRE=";
+    hash = "sha256-d/PZrfH8jR4kcBX5Ze/06vDcDTlKWxHZ2gvi7eJF2j8=";
  };

-  vendorHash = "sha256-dcT9miAerC7c9LsC8FoR61xFXLZjxm7LZlTRalB4oSU=";
+  vendorHash = "sha256-QsNhCfqhqPv01xM/ojO3K4ktyTrUgdR79cQICtP2y1g=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/do/doctoc/package.nix
+++ b/pkgs/by-name/do/doctoc/package.nix
@ -7,16 +7,16 @@

 buildNpmPackage rec {
  pname = "doctoc";
-  version = "2.2.0";
+  version = "2.5.0";

  src = fetchFromGitHub {
    owner = "thlorenz";
    repo = "doctoc";
    rev = "v${version}";
-    hash = "sha256-LYVxW8bZ4M87CmBvPyp4y0IeL9UFawwAKnUWHEWB5Gs=";
+    hash = "sha256-EmTZLy/eHtJ0Wi8EFP2lHdFKBut/8/aghRKZr1WHcNk=";
  };

-  npmDepsHash = "sha256-TbAnFpiN/v6xjQQznL/B180f0W48HPRqW21cO9XZhYA=";
+  npmDepsHash = "sha256-rY9acsWMcR6cf9k0/rSoBvhuk96Yj8Yt8uhsC8dyQZU=";

  postInstall = ''
    find $out/lib/node_modules -xtype l -delete
--- a/pkgs/by-name/dr/drm_info/package.nix
+++ b/pkgs/by-name/dr/drm_info/package.nix
@ -3,6 +3,7 @@
  stdenv,
  fetchFromGitLab,
  libdrm,
+  libdisplay-info,
  json_c,
  pciutils,
  meson,
@ -14,18 +15,23 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "drm_info";
-  version = "2.8.0";
+  version = "2.10.0";

  src = fetchFromGitLab {
    domain = "gitlab.freedesktop.org";
    owner = "emersion";
    repo = "drm_info";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-LtZ7JJmVNWMjJL2F6k+tcBpJ2v2fd+HNWyHAOvIi7Ko=";
+    hash = "sha256-QKF0frDPelwHOzf3r0tzSo7i1WfGhcFGJfxf2bj1+OE=";
  };

  strictDeps = true;

+  postPatch = ''
+    substituteInPlace meson.build \
+      --replace-fail "'<2.4.134'" "'<2.4.133'"
+  '';
+
  depsBuildBuild = [
    pkg-config
  ];
@ -39,6 +45,7 @@ stdenv.mkDerivation (finalAttrs: {

  buildInputs = [
    libdrm
+    libdisplay-info
    json_c
    pciutils
  ];
--- a/pkgs/by-name/dr/drupal/package.nix
+++ b/pkgs/by-name/dr/drupal/package.nix
@ -8,18 +8,18 @@

 php.buildComposerProject2 (finalAttrs: {
  pname = "drupal";
-  version = "11.3.13";
+  version = "11.4.0";

  src = fetchFromGitLab {
    domain = "git.drupalcode.org";
    owner = "project";
    repo = "drupal";
    tag = finalAttrs.version;
-    hash = "sha256-t60EbgN3r9KmSyZcvLtUy+H4eRizqFyI3bLFHH1/ciY=";
+    hash = "sha256-om+WoR+uIGhHjttWpavBx3PJ4HUft4Hjtrr4F3csBsI=";
  };

  composerNoPlugins = false;
-  vendorHash = "sha256-DaKWrdFNHppZm4a8wexfwapSPDhlNL45ftVQ+YSY18s=";
+  vendorHash = "sha256-9MQ6C0gslubUlDeUSI5Tv4jO9SbxPzciOjry0KB7plI=";

  passthru = {
    tests = {
--- a/pkgs/by-name/ex/exificient/package.nix
+++ b/pkgs/by-name/ex/exificient/package.nix
@ -17,7 +17,7 @@ maven.buildMavenPackage rec {
    hash = "sha256-XrlZQf2BamYw8u1S2qQ6jV9mgyCEjBxKqPZCXMJzXmc=";
  };

-  mvnHash = "sha256-/72Pi8WbKhPXu7Zb9r30znY1FHJc7FM42f7uQJqJnWo=";
+  mvnHash = "sha256-8q8voXYxOhWcb3U2Nqg/LRhSru94puhymQa7Z9FR0+g=";

  mvnParameters = "package assembly:single -Dmaven.test.skip=true";

--- a/pkgs/by-name/fc/fcitx5-sitelen-pona/package.nix
+++ b/pkgs/by-name/fc/fcitx5-sitelen-pona/package.nix
@ -5,17 +5,18 @@
  libime,
  fcitx5,
  qt6Packages,
+  nix-update-script,
 }:

 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "fcitx5-sitelen-pona";
-  version = "1.1.0";
+  version = "1.2.0";

  src = fetchFromGitHub {
    owner = "Toastberries";
    repo = "fcitx5-sitelen-pona";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-ZLp/p5umewp1seXFPtMevVBXfoNwHXAojYl5jWHHsTU=";
+    hash = "sha256-/pauEuE+hNdWhAz4CnSqySnF0h1toNGngHKOO9ntDnY=";
  };

  strictDeps = true;
@ -54,6 +55,8 @@ stdenvNoCC.mkDerivation (finalAttrs: {

  __structuredAttrs = true;

+  passthru.updateScript = nix-update-script { };
+
  meta = {
    inherit (fcitx5.meta) platforms;
    description = "IME using Fcitx5 for writing toki pona's sitelen pona glyphs";
--- a/pkgs/by-name/fi/filen-desktop/package.nix
+++ b/pkgs/by-name/fi/filen-desktop/package.nix
@ -4,10 +4,10 @@
  buildNpmPackage,
  fetchFromGitHub,
  makeDesktopItem,
-  desktopToDarwinBundle,
-  pkg-config,
-  electron,
+  copyDesktopItems,
  makeWrapper,
+  electron,
+  pkg-config,
  pixman,
  cairo,
  pango,
@ -16,6 +16,8 @@ let
  packageName = "filen-desktop";
  packageVersion = "3.0.47";
  desktopName = "Filen Desktop";
+  appName = "Filen";
+
  desktopItem = makeDesktopItem {
    name = packageName;
    exec = packageName;
@ -34,9 +36,6 @@ let
      "encrypted"
    ];
  };
-
-  iconPrefix = if stdenv.hostPlatform.isDarwin then "darwin" else "linux";
-  iconSuffix = if stdenv.hostPlatform.isDarwin then "icns" else "png";
 in
 buildNpmPackage {
  pname = packageName;
@ -51,20 +50,13 @@ buildNpmPackage {
  };

  npmDepsHash = "sha256-+Ul2z6faZvAeCHq35janVTUNoqTQ5JNDeLbCV220nFU=";
-  npmBuildScript = "build";
-
-  env = {
-    ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
-    PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD = "1";
-  };

  nativeBuildInputs = [
    pkg-config
-    electron
    makeWrapper
  ]
-  ++ lib.optionals stdenv.hostPlatform.isDarwin [
-    desktopToDarwinBundle
+  ++ lib.optionals (!stdenv.hostPlatform.isDarwin) [
+    copyDesktopItems
  ];

  buildInputs = [
@ -73,34 +65,87 @@ buildNpmPackage {
    pango
  ];

-  # Override package-lock.json electron version to use what's given by nixpkgs
+  env = {
+    ELECTRON_SKIP_BINARY_DOWNLOAD = "1";
+    PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD = "1";
+  };
+
  postPatch = ''
+    # Use nixpkgs electron instead of downloading
    substituteInPlace package.json \
      --replace-fail '"electron": "^34.1.1"' '"electron": "*"'
+
+    # Disable code signing (not needed for Nix)
+    substituteInPlace package.json \
+      --replace-fail '"afterSign": "build/notarize.js",' ""
+
+    # Fix app name and userData paths inside filen-desktop app source
+    substituteInPlace src/index.ts \
+      --replace-fail 'const options = await this.options.get()' \ '
+      app.setName("${desktopName}")
+      app.setPath("userData", pathModule.join(app.getPath("appData"), "@filen", "desktop"))
+      const options = await this.options.get()
+    '
  '';

-  # Set up icon assets in path required by desktopItem
-  preInstall = ''
-    install -D $src/assets/icons/app/${iconPrefix}.${iconSuffix} $out/share/icons/hicolor/128x128/apps/${packageName}.${iconSuffix}
-    install -D $src/assets/icons/app/${iconPrefix}Notification.${iconSuffix} $out/share/icons/hicolor/128x128/apps/${packageName}-notification.${iconSuffix}
+  buildPhase = ''
+    runHook preBuild
+
+    # Compile TypeScript
+    npm run build
+
+    # Prepare nixpkgs electron for electron-builder
+    cp -r ${electron.dist} electron-dist
+    chmod -R u+w electron-dist
+
+    # Build platform bundle
+    npx electron-builder \
+      --dir \
+      --${if stdenv.hostPlatform.isDarwin then "mac" else "linux"} \
+      -c.electronDist=electron-dist \
+      -c.electronVersion="${electron.version}"
+
+    runHook postBuild
  '';

-  # Create binary wrapper and desktopItem
-  # desktopItem auto-creates the .app bundle for Darwin
-  postInstall = ''
-    makeWrapper ${electron}/bin/electron $out/bin/${packageName} \
-      --set-default ELECTRON_IS_DEV 0 \
-      --add-flags $out/lib/node_modules/@filen/desktop/dist/index.js \
-      --prefix LD_LIBRARY_PATH : "${lib.makeLibraryPath [ stdenv.cc.cc.lib ]}"
+  installPhase = ''
+    runHook preInstall

-    mkdir -p $out/share/applications
-    cp ${desktopItem}/share/applications/* $out/share/applications/
+    ${
+      if stdenv.hostPlatform.isDarwin then
+        ''
+          # Install macOS .app bundle
+          mkdir -p $out/Applications
+          cp -r prod/mac*/${appName}.app $out/Applications/
+
+          # Create bin symlink
+          mkdir -p $out/bin
+          makeWrapper "$out/Applications/${appName}.app/Contents/MacOS/${appName}" $out/bin/${packageName}
+        ''
+      else
+        ''
+          # Copy built resources
+          mkdir -p $out/share/${packageName}
+          cp -r prod/*-unpacked/{locales,resources{,.pak}} $out/share/${packageName}
+
+          # Create desktop icon
+          mkdir -p $out/share/icons/hicolor/128x128/apps
+          cp assets/icons/app/linux.png $out/share/icons/hicolor/128x128/apps/${packageName}.png
+
+          # Create launcher with electron
+          makeWrapper ${lib.getExe electron} $out/bin/${packageName} \
+            --set ELECTRON_IS_DEV 0 \
+            --add-flags $out/share/${packageName}/resources/app.asar \
+            --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations --enable-wayland-ime=true}}" \
+            --prefix LD_LIBRARY_PATH : "${lib.makeLibraryPath [ stdenv.cc.cc.lib ]}" \
+            --inherit-argv0
+        ''
+    }
+
+    runHook postInstall
  '';

-  # Write correct darwin icons to .app contents
-  postFixup = lib.optionalString stdenv.hostPlatform.isDarwin ''
-    cp -rf $out/share/pixmaps/* "$out/Applications/${desktopName}.app/Contents/Resources"
-  '';
+  desktopItems = lib.optionals (!stdenv.hostPlatform.isDarwin) [ desktopItem ];

  meta = {
    homepage = "https://filen.io/products";
--- a/pkgs/by-name/fi/filius/package.nix
+++ b/pkgs/by-name/fi/filius/package.nix
@ -19,7 +19,7 @@ maven.buildMavenPackage rec {
    hash = "sha256-sIcYjbWONg8Cq+dHpoBYj07cyHV7oX06Xh1zK0CHn64=";
  };

-  mvnHash = "sha256-/gA49V1Kjh4zJTzDCzFNwZF30ERwPk2lG6lw/jxM2Qo=";
+  mvnHash = "sha256-41NirfgR9EhHLRT3V6P5KrakYKZ6dJTlXZu6rgCAK3I=";
  mvnParameters = "-Plinux";

  # tests want to create an X11 window which isn't often feasible
--- a/pkgs/by-name/fl/flye/package.nix
+++ b/pkgs/by-name/fl/flye/package.nix
@ -56,7 +56,7 @@ python3Packages.buildPythonApplication (finalAttrs: {

  meta = {
    description = "De novo assembler for single molecule sequencing reads using repeat graphs";
-    homepage = "https://github.com/fenderglass/Flye";
+    homepage = "https://github.com/mikolmogorov/Flye";
    license = lib.licenses.bsd3;
    mainProgram = "flye";
    maintainers = with lib.maintainers; [ assistant ];
--- a/pkgs/by-name/fo/fop/package.nix
+++ b/pkgs/by-name/fo/fop/package.nix
@ -18,7 +18,7 @@ maven.buildMavenPackage (finalAttrs: {

  patches = [ ./fix-maven-plugin-versions.patch ];

-  mvnHash = "sha256-EaOIAy0+YPrF+yGsFKKqcA4bt90bq1Z86V57P9rMatE=";
+  mvnHash = "sha256-KfIcc1MWGs7vZHPjfNgy3NBCAyTMtyvRTZfcN4LQVv8=";

  buildOffline = true;
  doCheck = false;
--- a/pkgs/by-name/ga/gardendevd/package.nix
+++ b/pkgs/by-name/ga/gardendevd/package.nix
@ -0,0 +1,77 @@
+{
+  lib,
+  stdenv,
+  fetchFromCodeberg,
+  nix-update-script,
+  acl,
+  elogind,
+  meson,
+  ninja,
+  pkg-config,
+  util-linux,
+  kmod,
+  uaccessSupport ? true,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "gardendevd";
+  version = "0.2";
+
+  __structuredAttrs = true;
+
+  src = fetchFromCodeberg {
+    owner = "Gardenhouse";
+    repo = "gardendevd";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-aEG2QIRFH3F5tXBD1U+6SNmOpUMHgdhH7AXwyGGrilI=";
+  };
+
+  strictDeps = true;
+
+  nativeBuildInputs = [
+    meson
+    ninja
+    pkg-config
+  ];
+
+  buildInputs = lib.optionals uaccessSupport [
+    acl
+    elogind
+  ];
+
+  mesonFlags = [
+    "-Dopenrc=disabled"
+    (lib.mesonEnable "uaccess" uaccessSupport)
+  ];
+
+  postPatch = ''
+    substituteInPlace src/rules-builtin.c \
+      --replace-fail "/sbin/blkid" "${util-linux}/bin/blkid" \
+      --replace-fail "/sbin/modprobe" "${kmod}/bin/modprobe"
+    substituteInPlace src/rules-parse.c \
+      --replace-fail "/usr/lib/udev/rules.d" "$out/lib/udev/rules.d"
+    substituteInPlace src/spawn.c \
+      --replace-fail "/usr/lib/udev/" "$out/lib/udev/"
+
+    patchShebangs scripts/
+  '';
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    homepage = "https://codeberg.org/Gardenhouse/gardendevd";
+    description = "Udev daemon running on top of mdevd to replace systemd-udev";
+    longDescription = ''
+      Gardendevd is a udev-compatible daemon that processes device
+      events from the Linux kernel. It is designed to be a lightweight
+      and flexible alternative to systemd-udevd, leveraging mdevd for
+      device node creation and firmware loading.
+    '';
+    maintainers = with lib.maintainers; [
+      aanderse
+      choco98
+    ];
+    license = lib.licenses.gpl3Only;
+    platforms = lib.platforms.linux;
+  };
+})
--- a/pkgs/by-name/gh/gh-dash/package.nix
+++ b/pkgs/by-name/gh/gh-dash/package.nix
@ -8,16 +8,16 @@

 buildGoModule (finalAttrs: {
  pname = "gh-dash";
-  version = "4.24.1";
+  version = "4.25.0";

  src = fetchFromGitHub {
    owner = "dlvhdr";
    repo = "gh-dash";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-eNmOSYsmB+G0VgVn1ITo/mUyYSeXz43goG/VjYqmiQI=";
+    hash = "sha256-gdjP1jIYI84szuNhP7LgGRMXIPqrRwb8nRWB0BjQF+k=";
  };

-  vendorHash = "sha256-fXgj2q0HAGu9Jfdy7NJ6iE5hEKmt50HAEg/9Wds56g0=";
+  vendorHash = "sha256-Teu+8jiZE2gZ+0ErKsunhotY9W4Hjg6PAeFkFLgESIk=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/gi/gitqlient/package.nix
+++ b/pkgs/by-name/gi/gitqlient/package.nix
@ -42,7 +42,7 @@ stdenv.mkDerivation (finalAttrs: {
  env.NIX_CFLAGS_COMPILE = "-Wno-error=deprecated-declarations"; # QCheckBox::stateChanged is deprecated

  meta = {
-    homepage = "https://github.com/francescmm/GitQlient";
+    homepage = "https://github.com/francescmaestre/GitQlient";
    description = "Multi-platform Git client written with Qt";
    license = lib.licenses.lgpl2Plus;
    platforms = lib.platforms.linux;
--- a/pkgs/by-name/go/gol/package.nix
+++ b/pkgs/by-name/go/gol/package.nix
@ -17,7 +17,7 @@ maven.buildMavenPackage rec {
    hash = "sha256-AnPm5Mooww9kAMWLnM36z8DVRGfIIEiqUE65tgNuKm8=";
  };

-  mvnHash = "sha256-YD28YX0RKuxOEWuK12ToOnFFrUPqA9xZ+EmsCt1fDPI=";
+  mvnHash = "sha256-kLSMLt0TMMuyWLU65Y+4CpEn5PIm/+nLg1+oBR5w3pI=";
  mvnParameters = "compile assembly:single -Dmaven.test.skip=true";

  nativeBuildInputs = [ makeWrapper ];
--- a/pkgs/by-name/gr/graphhopper/version.toml
+++ b/pkgs/by-name/gr/graphhopper/version.toml
@ -5,4 +5,4 @@ mapsBundle = "0.0.0-f171bcf55e447bf494348dd274cd377b73c951f6"
 [hash]
 src = "sha256-tK8zEX2szcU77ydHW+ak/GTjKKC6C5xlG0Uum7a/76I="
 mapsBundle = "sha256-ehwWBIuYBwXu7W7uHYYuGl0lS4s6Tm5c4BfKPkY+w0A="
-mvnDeps = "sha256-0B38C37QbkOhxd5e4SHfMg9SqcUZkuIf1g1S9SnCu7U="
+mvnDeps = "sha256-bP019enDiHdKVtXvFXvBmsg9CtDTXA1t3VVjX3Xf8M0="
--- a/pkgs/by-name/gr/grav/package.nix
+++ b/pkgs/by-name/gr/grav/package.nix
@ -6,7 +6,7 @@
 }:

 let
-  version = "1.7.53";
+  version = "1.7.53.2";
 in
 stdenvNoCC.mkDerivation {
  pname = "grav";
@ -14,7 +14,7 @@ stdenvNoCC.mkDerivation {

  src = fetchzip {
    url = "https://github.com/getgrav/grav/releases/download/${version}/grav-admin-v${version}.zip";
-    hash = "sha256-Ug8sIEMwIoCUyHpxk5NaGHaJA7lThgbUuu+8NpmI9YI=";
+    hash = "sha256-6cQotHwIwWFR5phFQI9r79jpd+iYA1HpFBbYIzEVBsc=";
  };

  patches = [
--- a/pkgs/by-name/gr/grok-build/package.nix
+++ b/pkgs/by-name/gr/grok-build/package.nix
@ -0,0 +1,100 @@
+{
+  lib,
+  stdenvNoCC,
+  fetchurl,
+  installShellFiles,
+  autoPatchelfHook,
+  versionCheckHook,
+  runCommand,
+  testers,
+  grok-build,
+}:
+let
+  version = "0.2.82";
+
+  throwSystem = throw "Unsupported system: ${stdenvNoCC.hostPlatform.system}";
+
+  platform = {
+    x86_64-linux = "linux-x86_64";
+    aarch64-linux = "linux-aarch64";
+    x86_64-darwin = "macos-x86_64";
+    aarch64-darwin = "macos-aarch64";
+  };
+
+  sourceData = lib.mapAttrs (
+    system: upstreamPlatform:
+    fetchurl {
+      url = "https://x.ai/cli/grok-${version}-${upstreamPlatform}";
+      hash =
+        {
+          x86_64-linux = "sha256-x0+vJ1FB4WVIgCQY6/EHY5R+uqAPJCe7gPAiq6Y2iP4=";
+          aarch64-linux = "sha256-tHJ8YAeG1ko++xn3OmyLlRsHWzXW+nypUZoIlBFQelg=";
+          x86_64-darwin = "sha256-wCiGbPt50wH/he2VJhdqFD2rUiUznZL0Hj8hUo4+s5Y=";
+          aarch64-darwin = "sha256-HkyKeLBQ2TVj4g9iKkGjT46WuAV1sclYrT8JUxb+YYk=";
+        }
+        .${system};
+    }
+  ) platform;
+in
+stdenvNoCC.mkDerivation (finalAttrs: {
+  pname = "grok-build";
+  inherit version;
+
+  strictDeps = true;
+  __structuredAttrs = true;
+
+  src = sourceData.${stdenvNoCC.hostPlatform.system} or throwSystem;
+
+  dontUnpack = true;
+  dontBuild = true;
+
+  nativeBuildInputs = [
+    installShellFiles
+  ]
+  ++ lib.optionals stdenvNoCC.hostPlatform.isElf [ autoPatchelfHook ];
+
+  installPhase = ''
+    runHook preInstall
+
+    install -Dm755 "$src" "$out/bin/grok"
+    ln -s grok "$out/bin/agent"
+
+    ${lib.optionalString (stdenvNoCC.buildPlatform.canExecute stdenvNoCC.hostPlatform) ''
+      installShellCompletion --cmd grok \
+        --bash <("$out/bin/grok" completions bash) \
+        --fish <("$out/bin/grok" completions fish) \
+        --zsh <("$out/bin/grok" completions zsh)
+    ''}
+
+    runHook postInstall
+  '';
+
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
+  installCheckPhase = ''
+    runHook preInstallCheck
+
+    # ensure is a symlink
+    test -L "$out/bin/agent"
+
+    # ensure agent points at grok
+    [ "$(readlink -f "$out/bin/agent")" = "$(readlink -f "$out/bin/grok")" ]
+
+    runHook postInstallCheck
+  '';
+
+  passthru.updateScript = ./update.sh;
+
+  meta = {
+    description = "Command-line coding agent by xAI";
+    homepage = "https://docs.x.ai/build/overview";
+    downloadPage = "https://x.ai/cli/stable";
+    license = lib.licenses.unfreeRedistributable;
+    maintainers = with lib.maintainers; [ crertel ];
+    platforms = lib.attrNames sourceData;
+    mainProgram = "grok";
+    sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ];
+  };
+})
--- a/pkgs/by-name/gr/grok-build/update.sh
+++ b/pkgs/by-name/gr/grok-build/update.sh
@ -0,0 +1,34 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p curl common-updater-scripts
+
+set -euo pipefail
+
+version="$(curl -fsSL https://x.ai/cli/stable)"
+
+currentVersion=$(
+  nix-instantiate --eval --raw -E "with import ./. {}; grok-build.version or (lib.getVersion grok-build)"
+)
+
+if [[ "$currentVersion" == "$version" ]]; then
+  echo "package is up-to-date: $version"
+  exit 0
+fi
+
+update-source-version grok-build "${version}" || true
+
+for system in "aarch64-darwin macos-aarch64" "aarch64-linux linux-aarch64" "x86_64-darwin macos-x86_64" "x86_64-linux linux-x86_64"; do
+  # shellcheck disable=SC2086
+  set -- ${system}
+
+  arch="${1}"
+  platform="${2}"
+
+  url="https://x.ai/cli/grok-${version}-${platform}"
+  hash=$(
+    nix --extra-experimental-features nix-command hash convert --hash-algo sha256 "$(
+      nix-prefetch-url "${url}"
+    )"
+  )
+
+  update-source-version grok-build "${version}" "${hash}" --system="${arch}" --ignore-same-version
+done
--- a/pkgs/by-name/h2/h2/package.nix
+++ b/pkgs/by-name/h2/h2/package.nix
@ -24,7 +24,7 @@ maven.buildMavenPackage (finalAttrs: {
  };

  mvnParameters = "-f h2/pom.xml";
-  mvnHash = "sha256-ue1X0fswi3C9uqJ/cVCf/qd2XStMve1k1qA+IsREOGk=";
+  mvnHash = "sha256-j4Uso/bl4UhQbJc7Wre0btgC+9RKvuCHkn9euQFuTxk=";

  nativeBuildInputs = [ makeWrapper ];

--- a/pkgs/by-name/ha/hacksguard/package.nix
+++ b/pkgs/by-name/ha/hacksguard/package.nix
@ -0,0 +1,41 @@
+{
+  lib,
+  fetchFromGitHub,
+  nix-update-script,
+  pkg-config,
+  rustPlatform,
+  versionCheckHook,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "hacksguard";
+  version = "0.1";
+
+  __structuredAttrs = true;
+
+  src = fetchFromGitHub {
+    owner = "Rhacknarok";
+    repo = "hacksguard";
+    tag = finalAttrs.version;
+    hash = "sha256-kS8VF1zD4VV9rSLz4euvNwtOUFWLeW2isAjgjw/iay0=";
+  };
+
+  cargoHash = "sha256-7Wt2cFKwWT82P2uxOy/lGEWZcCUSu0BNr9JdgRLwBnw=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    description = "Multi-threaded TUI malware analysis tool";
+    homepage = "https://github.com/Rhacknarok/hacksguard";
+    changelog = "https://github.com/Rhacknarok/hacksguard/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "hacksguard";
+  };
+})
--- a/pkgs/by-name/id/idevicerestore/package.nix
+++ b/pkgs/by-name/id/idevicerestore/package.nix
@ -13,13 +13,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "idevicerestore";
-  version = "1.0.0-unstable-2025-10-02";
+  version = "1.0.0-unstable-2026-07-26";

  src = fetchFromGitHub {
    owner = "libimobiledevice";
    repo = "idevicerestore";
-    rev = "f4d0f7e83105cc362527566315abee07b0840848";
-    hash = "sha256-fqTVAHTxamk2lIllr7ZNHOJ1YTJHM4JpVQylMV33CJI=";
+    rev = "45145e9fdc8458022c61a4b87bd029b866d5bcdc";
+    hash = "sha256-0W0DEnO8eZx2G3JKjp7SilLH8vmpfkiJxrwkudyf5rM=";
  };

  nativeBuildInputs = [
@ -61,7 +61,10 @@ stdenv.mkDerivation (finalAttrs: {
    '';
    license = lib.licenses.lgpl21Plus;
    platforms = lib.platforms.unix;
-    maintainers = with lib.maintainers; [ nh2 ];
+    maintainers = with lib.maintainers; [
+      flokli
+      nh2
+    ];
    mainProgram = "idevicerestore";
  };
 })
--- a/pkgs/by-name/im/immich-kiosk/package.nix
+++ b/pkgs/by-name/im/immich-kiosk/package.nix
@ -3,68 +3,61 @@
  buildGoModule,
  fetchFromGitHub,
  nodejs,
-  pnpm_9,
-  fetchPnpmDeps,
-  pnpmConfigHook,
+  fetchNpmDeps,
+  npmHooks,
+  go-task,
 }:
+
 buildGoModule rec {
  pname = "immich-kiosk";
-  version = "0.31.0";
+  version = "0.39.3";

  src = fetchFromGitHub {
    owner = "damongolding";
    repo = "immich-kiosk";
    tag = "v${version}";
-    hash = "sha256-PHdHhhVy0RWMFzR4ZEyWLOiRYHROadLiPIdqkUZMTow=";
+    hash = "sha256-kdTEvH8MqL3oXe0QZlPTVpeByLpqAdNfPGfu5f2G6g0=";
  };

-  # Delete vendor directory to regenerate it consistently across platforms
  postPatch = ''
+    # Delete vendor directory to regenerate it consistently across platforms
    rm -rf vendor
+    # immich-kiosk bumps go at a faster cadence than nixpkgs
+    sed 's/^go 1\.26\.\d+$/go 1.26/' go.mod
  '';
-  vendorHash = "sha256-3M3fXwCkljfY8wjXf+PdcbqnkyPKaDCJWt9/nRA/+Dc=";
+  vendorHash = "sha256-y6Xl00G+mkhRKVGwMS0WCXZhQqqGGX5qY8PhMxtw7z8=";
  proxyVendor = true;

-  pnpmDeps = fetchPnpmDeps {
-    inherit
-      pname
-      version
-      src
-      ;
-    pnpm = pnpm_9;
+  npmDeps = fetchNpmDeps {
+    inherit src;
    sourceRoot = "${src.name}/frontend";
-    hash = "sha256-8iKug4zsX3u0vS68osKRW6iOP+A3OdjI3yxNPIJaQqM=";
-    fetcherVersion = 3;
+    hash = "sha256-lNON0/lxix2aczC0+m7Er5Te1+4fsSoLkk6Z2pYzQYQ=";
  };
-
  # Frontend is in a subdirectory
-  pnpmRoot = "frontend";
+  npmRoot = "frontend";

  nativeBuildInputs = [
    nodejs
-    pnpmConfigHook
-    pnpm_9
+    go-task
+    npmHooks.npmConfigHook
  ];

  # Generate templ templates during vendor hash calculation
-  # Don't run pnpm in this phase - filter out pnpmConfigHook
+  # Don't run npm in this phase - filter out npmConfigHook
  overrideModAttrs = oldAttrs: {
-    nativeBuildInputs = builtins.filter (drv: drv != pnpmConfigHook) (
+    nativeBuildInputs = builtins.filter (drv: drv != npmHooks.npmConfigHook) (
      oldAttrs.nativeBuildInputs or [ ]
    );
    preBuild = ''
-      go run github.com/a-h/templ/cmd/templ generate
+      go tool templ generate
    '';
  };

  # Generate templ templates and build frontend assets before Go build
  # Frontend assets are embedded into the binary via go:embed
  preBuild = ''
-    go run github.com/a-h/templ/cmd/templ generate
-
-    pushd frontend
-    pnpm build
-    popd
+    go tool templ generate
+    task frontend
  '';

  ldflags = [
--- a/pkgs/by-name/im/immichframe/deps.json
+++ b/pkgs/by-name/im/immichframe/deps.json
@ -1,54 +1,19 @@
 [
-  {
-    "pname": "AwesomeAssertions",
-    "version": "9.2.0",
-    "hash": "sha256-s5j46b6KchKwjQgiXvCYUZLk5Xtk4sb1wSh25f8ShFc="
-  },
  {
    "pname": "BloomFilter.NetCore",
    "version": "2.5.3",
    "hash": "sha256-UfH3JZgUh8zj34+E1DLZdKo9Dyqb/Ek8qmg4kx5N818="
  },
-  {
-    "pname": "Castle.Core",
-    "version": "5.1.1",
-    "hash": "sha256-oVkQB+ON7S6Q27OhXrTLaxTL0kWB58HZaFFuiw4iTrE="
-  },
-  {
-    "pname": "coverlet.collector",
-    "version": "6.0.4",
-    "hash": "sha256-ieiUl7G5pVKQ4V6rxhEe0ehep0/u1RBD3EAI63AQTI0="
-  },
  {
    "pname": "Ical.Net",
    "version": "4.3.1",
    "hash": "sha256-jpohvCiUBe61A3O+BJwCqsPW+3jUt4cKeCqZb/0cw0M="
  },
-  {
-    "pname": "Microsoft.ApplicationInsights",
-    "version": "2.23.0",
-    "hash": "sha256-5sf3bg7CZZjHseK+F3foOchEhmVeioePxMZVvS6Rjb0="
-  },
-  {
-    "pname": "Microsoft.AspNetCore.Mvc.Testing",
-    "version": "8.0.20",
-    "hash": "sha256-jSWZfbewG7LqrqVQ4wmwj4K6OPGslm0wt4D5wK2TlFc="
-  },
  {
    "pname": "Microsoft.AspNetCore.SpaProxy",
    "version": "8.0.20",
    "hash": "sha256-kjvVZQBbE6fjKdbZsg+BNCRHh3d5fvxNNFaCF5fxQSI="
  },
-  {
-    "pname": "Microsoft.AspNetCore.TestHost",
-    "version": "8.0.20",
-    "hash": "sha256-M/MTiN0nNQ8eKQn9r8TnIXYWxOYgBHNG/PZtvnInmDw="
-  },
-  {
-    "pname": "Microsoft.CodeCoverage",
-    "version": "17.14.1",
-    "hash": "sha256-f8QytG8GvRoP47rO2KEmnDLxIpyesaq26TFjDdW40Gs="
-  },
  {
    "pname": "Microsoft.Extensions.ApiDescription.Client",
    "version": "8.0.20",
@ -94,36 +59,6 @@
    "version": "8.0.0",
    "hash": "sha256-GanfInGzzoN2bKeNwON8/Hnamr6l7RTpYLA49CNXD9Q="
  },
-  {
-    "pname": "Microsoft.Extensions.Configuration.Binder",
-    "version": "8.0.2",
-    "hash": "sha256-aGB0VuoC34YadAEqrwoaXLc5qla55pswDV2xLSmR7SE="
-  },
-  {
-    "pname": "Microsoft.Extensions.Configuration.CommandLine",
-    "version": "8.0.0",
-    "hash": "sha256-fmPC/o8S+weTtQJWykpnGHm6AKVU21xYE/CaHYU7zgg="
-  },
-  {
-    "pname": "Microsoft.Extensions.Configuration.EnvironmentVariables",
-    "version": "8.0.0",
-    "hash": "sha256-+bjFZvqCsMf2FRM2olqx/fub+QwfM1kBhjGVOT5HC48="
-  },
-  {
-    "pname": "Microsoft.Extensions.Configuration.FileExtensions",
-    "version": "8.0.1",
-    "hash": "sha256-iRA8L7BX/fe5LHCVOhzBSk30GfshP7V2Qj2nxpEvStA="
-  },
-  {
-    "pname": "Microsoft.Extensions.Configuration.Json",
-    "version": "8.0.1",
-    "hash": "sha256-J8EK/yhsfTpeSUY8F81ZTBV9APHiPUliN7d+n2OX9Ig="
-  },
-  {
-    "pname": "Microsoft.Extensions.Configuration.UserSecrets",
-    "version": "8.0.1",
-    "hash": "sha256-yGvWfwBhyFudcIv96pKWaQ1MIMOiv5LHSCn+9J7Doz0="
-  },
  {
    "pname": "Microsoft.Extensions.DependencyInjection",
    "version": "8.0.1",
@ -149,11 +84,6 @@
    "version": "9.0.5",
    "hash": "sha256-JSGmzV9CdZaRIBDbnUXCMlrIk2oVnrQSCL79xoNmjeY="
  },
-  {
-    "pname": "Microsoft.Extensions.DependencyModel",
-    "version": "8.0.2",
-    "hash": "sha256-PyuO/MyCR9JtYqpA1l/nXGh+WLKCq34QuAXN9qNza9Q="
-  },
  {
    "pname": "Microsoft.Extensions.Diagnostics",
    "version": "8.0.1",
@ -164,31 +94,6 @@
    "version": "8.0.1",
    "hash": "sha256-d5DVXhA8qJFY9YbhZjsTqs5w5kDuxF5v+GD/WZR1QL0="
  },
-  {
-    "pname": "Microsoft.Extensions.FileProviders.Abstractions",
-    "version": "8.0.0",
-    "hash": "sha256-uQSXmt47X2HGoVniavjLICbPtD2ReQOYQMgy3l0xuMU="
-  },
-  {
-    "pname": "Microsoft.Extensions.FileProviders.Physical",
-    "version": "8.0.0",
-    "hash": "sha256-29y5ZRQ1ZgzVOxHktYxyiH40kVgm5un2yTGdvuSWnRc="
-  },
-  {
-    "pname": "Microsoft.Extensions.FileSystemGlobbing",
-    "version": "8.0.0",
-    "hash": "sha256-+Oz41JR5jdcJlCJOSpQIL5OMBNi+1Hl2d0JUHfES7sU="
-  },
-  {
-    "pname": "Microsoft.Extensions.Hosting",
-    "version": "8.0.1",
-    "hash": "sha256-FFLo6em0N2vaWg6//vaQhxoOgT9LLH5Y2KWkCeX5xQ4="
-  },
-  {
-    "pname": "Microsoft.Extensions.Hosting.Abstractions",
-    "version": "8.0.1",
-    "hash": "sha256-/bIVL9uvBQhV/KQmjA1ZjR74sMfaAlBb15sVXsGDEVA="
-  },
  {
    "pname": "Microsoft.Extensions.Http",
    "version": "8.0.1",
@ -214,31 +119,6 @@
    "version": "9.0.5",
    "hash": "sha256-ILcK06TEbVwxUZ3PCpGkjg69H6PGwTXnN512JJ8F9KI="
  },
-  {
-    "pname": "Microsoft.Extensions.Logging.Configuration",
-    "version": "8.0.1",
-    "hash": "sha256-E2JbJG2EXlv2HUWLi17kIkAL6RC9rC2E18C3gAyOuaE="
-  },
-  {
-    "pname": "Microsoft.Extensions.Logging.Console",
-    "version": "8.0.1",
-    "hash": "sha256-2thhF1JbDNj3Bx2fcH7O26uHGNeMd9MYah6N60lIpIU="
-  },
-  {
-    "pname": "Microsoft.Extensions.Logging.Debug",
-    "version": "8.0.1",
-    "hash": "sha256-gKFqBg5lbjy5VBEcAuoQ/SsXAxvrYdBYOu9dV60eJKg="
-  },
-  {
-    "pname": "Microsoft.Extensions.Logging.EventLog",
-    "version": "8.0.1",
-    "hash": "sha256-1UkEOwl3Op2b3jTvpI10hHxIe9FqeVVy+VB1tZp6Lc8="
-  },
-  {
-    "pname": "Microsoft.Extensions.Logging.EventSource",
-    "version": "8.0.1",
-    "hash": "sha256-EINT/PgfB4Dvf+1JBzL1plPT35ezT7kyS8y/XMMgYxA="
-  },
  {
    "pname": "Microsoft.Extensions.Options",
    "version": "6.0.0",
@ -279,71 +159,11 @@
    "version": "9.0.5",
    "hash": "sha256-3ctJMOwnEsBSNqcrh77IItX2wtOmjM/b8OTXJUZ/P0o="
  },
-  {
-    "pname": "Microsoft.NET.Test.Sdk",
-    "version": "17.14.1",
-    "hash": "sha256-mZUzDFvFp7x1nKrcnRd0hhbNu5g8EQYt8SKnRgdhT/A="
-  },
  {
    "pname": "Microsoft.OpenApi",
    "version": "1.6.23",
    "hash": "sha256-YD2oxM/tlNpK5xUeHF85xdqcpBzHioUSyRjpN2A7KcY="
  },
-  {
-    "pname": "Microsoft.Testing.Extensions.Telemetry",
-    "version": "1.9.0",
-    "hash": "sha256-JT91ThKLEyoRS/8ZJqZwlSTT7ofC2QhNqPFI3pYmMaw="
-  },
-  {
-    "pname": "Microsoft.Testing.Extensions.TrxReport.Abstractions",
-    "version": "1.9.0",
-    "hash": "sha256-oscZOEKw7gM6eRdDrOS3x+CwqIvXWRmfmi0ugCxBRw0="
-  },
-  {
-    "pname": "Microsoft.Testing.Extensions.VSTestBridge",
-    "version": "1.9.0",
-    "hash": "sha256-CadXLWD093sUDaWhnppzD9LvpxSRqqt93ZEOFiIAPyw="
-  },
-  {
-    "pname": "Microsoft.Testing.Platform",
-    "version": "1.9.0",
-    "hash": "sha256-6nzjoYbJOh7v/GB7d+TDuM0l/xglCshFX6KWjg7+cFI="
-  },
-  {
-    "pname": "Microsoft.Testing.Platform.MSBuild",
-    "version": "1.9.0",
-    "hash": "sha256-/bileP4b+9RZp8yjgS6eynXwc2mohyyzf6p/0LZJd8I="
-  },
-  {
-    "pname": "Microsoft.TestPlatform.AdapterUtilities",
-    "version": "17.13.0",
-    "hash": "sha256-Vr+3Tad/h/nk7f/5HMExn3HvCGFCarehFAzJSfCBaOc="
-  },
-  {
-    "pname": "Microsoft.TestPlatform.ObjectModel",
-    "version": "17.13.0",
-    "hash": "sha256-6S0fjfj8vA+h6dJVNwLi6oZhYDO/I/6hBZaq2VTW+Uk="
-  },
-  {
-    "pname": "Microsoft.TestPlatform.ObjectModel",
-    "version": "17.14.1",
-    "hash": "sha256-QMf6O+w0IT+16Mrzo7wn+N20f3L1/mDhs/qjmEo1rYs="
-  },
-  {
-    "pname": "Microsoft.TestPlatform.TestHost",
-    "version": "17.14.1",
-    "hash": "sha256-1cxHWcvHRD7orQ3EEEPPxVGEkTpxom1/zoICC9SInJs="
-  },
-  {
-    "pname": "Moq",
-    "version": "4.20.72",
-    "hash": "sha256-+uAc/6xtzij9YnmZrhZwc+4vUgx6cppZsWQli3CGQ8o="
-  },
-  {
-    "pname": "Newtonsoft.Json",
-    "version": "13.0.3",
-    "hash": "sha256-hy/BieY4qxBWVVsDqqOPaLy1QobiIapkbrESm6v2PHc="
-  },
  {
    "pname": "Newtonsoft.Json",
    "version": "13.0.4",
@ -356,28 +176,13 @@
  },
  {
    "pname": "NSwag.ApiDescription.Client",
-    "version": "13.20.0",
-    "hash": "sha256-r/BtE46yFdM9MuoaVYNhO7vvdBICDsM8ROXZldxFIeY="
+    "version": "14.6.3",
+    "hash": "sha256-razR+CaeTvCob8IaRkg9MKgfcChqAqjBa8At05V9lxQ="
  },
  {
    "pname": "NSwag.MSBuild",
-    "version": "13.20.0",
-    "hash": "sha256-HarUF6peOsd12saco8+Na4TnOEh+Gl2MJelSfnBVRhQ="
-  },
-  {
-    "pname": "NUnit",
-    "version": "4.4.0",
-    "hash": "sha256-5geF5QOF+X/WkuCEgkPVKH4AdKx4U0olpU07S8+G3nU="
-  },
-  {
-    "pname": "NUnit.Analyzers",
-    "version": "4.10.0",
-    "hash": "sha256-wkThcI2ratJoCnstOIj/jB5muGQbdDPFbRK1r7PHEBU="
-  },
-  {
-    "pname": "NUnit3TestAdapter",
-    "version": "5.2.0",
-    "hash": "sha256-ybTutL4VkX/fq61mS+O3Ruh+adic4fpv+MKgQ0IZvGg="
+    "version": "14.6.3",
+    "hash": "sha256-6hzKfptXAXCCs2nM1UuN4cSBzZxDVoFWvFt5ypOTDxw="
  },
  {
    "pname": "OpenWeatherMap.API",
@ -404,46 +209,11 @@
    "version": "8.1.4",
    "hash": "sha256-zkVzBxkxGh5WyhFEOiZknez9GBeBKXTH2ySf2/BnSV4="
  },
-  {
-    "pname": "System.Collections.Immutable",
-    "version": "8.0.0",
-    "hash": "sha256-F7OVjKNwpqbUh8lTidbqJWYi476nsq9n+6k0+QVRo3w="
-  },
-  {
-    "pname": "System.Diagnostics.DiagnosticSource",
-    "version": "5.0.0",
-    "hash": "sha256-6mW3N6FvcdNH/pB58pl+pFSCGWgyaP4hfVtC/SMWDV4="
-  },
  {
    "pname": "System.Diagnostics.DiagnosticSource",
    "version": "9.0.5",
    "hash": "sha256-fB8970CWgKWI1UwAaDa9D2yaMUiQ74ULGU7GMsr2u/o="
  },
-  {
-    "pname": "System.Diagnostics.EventLog",
-    "version": "6.0.0",
-    "hash": "sha256-zUXIQtAFKbiUMKCrXzO4mOTD5EUphZzghBYKXprowSM="
-  },
-  {
-    "pname": "System.Diagnostics.EventLog",
-    "version": "8.0.1",
-    "hash": "sha256-zvqd72pwgcGoa1nH3ZT1C0mP9k53vFLJ69r5MCQ1saA="
-  },
-  {
-    "pname": "System.IO.Pipelines",
-    "version": "8.0.0",
-    "hash": "sha256-LdpB1s4vQzsOODaxiKstLks57X9DTD5D6cPx8DE1wwE="
-  },
-  {
-    "pname": "System.Reflection.Metadata",
-    "version": "1.6.0",
-    "hash": "sha256-JJfgaPav7UfEh4yRAQdGhLZF1brr0tUWPl6qmfNWq/E="
-  },
-  {
-    "pname": "System.Reflection.Metadata",
-    "version": "8.0.0",
-    "hash": "sha256-dQGC30JauIDWNWXMrSNOJncVa1umR1sijazYwUDdSIE="
-  },
  {
    "pname": "System.Runtime.CompilerServices.Unsafe",
    "version": "6.0.0",
--- a/pkgs/by-name/im/immichframe/package.nix
+++ b/pkgs/by-name/im/immichframe/package.nix
@ -3,47 +3,29 @@
  buildNpmPackage,
  dotnet-sdk,
  fetchFromGitHub,
-  fetchpatch,
  lib,
  nixosTests,
  writeShellApplication,
+  _experimental-update-script-combinators,
+  nix-update-script,
 }:

 let
-  version = "1.0.29.0";
+  version = "1.0.33.0";
  src = fetchFromGitHub {
    owner = "immichFrame";
    repo = "immichFrame";
-    rev = "v${version}";
-    hash = "sha256-YFh+/QWYYtQzBVJUyUuhhKqi9/5waWVX+lw/tov++ws=";
+    tag = "v${version}";
+    hash = "sha256-b8hfzNZJz9XCRO4UfzwK5OsrgqV2F5wnZlRH7h3Eo9Q=";
  };

-  publishApi = buildDotnetModule {
+  api = buildDotnetModule {
    pname = "immichframe";
    inherit version src;
    projectFile = "ImmichFrame.WebApi/ImmichFrame.WebApi.csproj";
    nugetDeps = ./deps.json;
    dotnet-runtime = dotnet-sdk.aspnetcore;

-    patches = [
-      # This not-yet-released commit has landed upstream. It adds a
-      # `IMMICHFRAME_CONFIG_PATH` environment variable for a "configurable"
-      # config path.
-      (fetchpatch {
-        name = "Configurable config path";
-        url = "https://github.com/immichFrame/ImmichFrame/commit/f6680f23bcf107ce27372dfb37809c0f92ebb2f2.patch";
-        hash = "sha256-dQnspQEKixQgBpCvNxrYL51z5wg5BhdN0uTuaXgKQZU=";
-      })
-      # This patch adds an `ApiKeyFile` option, which makes it possible to
-      # configure ImmichFrame without leaking secrets into your configuration.
-      # See [upstream PR](https://github.com/immichFrame/ImmichFrame/pull/511)
-      (fetchpatch {
-        name = "Add a `ApiKeyFile` option";
-        url = "https://github.com/immichFrame/ImmichFrame/commit/f5bb164170460b1020bfe6bce8e8abb3315e32e3.diff";
-        hash = "sha256-F3BVIxcu8Hm6wbWmzVnfgm6XvqdBw4IiS61CDQiMRVg=";
-      })
-    ];
-
    meta.mainProgram = "ImmichFrame.WebApi";
  };

@ -54,7 +36,7 @@ let
    sourceRoot = "${src.name}/immichFrame.Web";

    npmBuildScript = "build";
-    npmDepsHash = "sha256-eOv3DlmHaI6hVCYTBzCtLWKD72/RM/KjCUDVUgb9jcg=";
+    npmDepsHash = "sha256-PjbbBpYYUHH4oucJuk0FCdJa0LzTlkQnjkZ5MLziqTY=";

    installPhase = ''
      runHook preInstall
@ -71,10 +53,20 @@ writeShellApplication {

  text = ''
    cd ${frontend}
-    exec ${lib.getExe publishApi} "$@"
+    exec ${lib.getExe api} "$@"
  '';

-  passthru.tests = { inherit (nixosTests) immichframe; };
+  passthru = {
+    inherit api frontend;
+    updateScript = _experimental-update-script-combinators.sequence [
+      (nix-update-script { attrPath = "immichframe.api"; })
+      (nix-update-script {
+        attrPath = "immichframe.frontend";
+        extraArgs = [ "--version=skip" ];
+      })
+    ];
+    tests = { inherit (nixosTests) immichframe; };
+  };

  meta = {
    description = "Display your photos from Immich as a digital photo frame";
--- a/pkgs/by-name/ir/iredis/package.nix
+++ b/pkgs/by-name/ir/iredis/package.nix
@ -1,34 +1,34 @@
 {
  lib,
  stdenv,
-  python3,
+  python3Packages,
  fetchFromGitHub,
+  versionCheckHook,
 }:

-python3.pkgs.buildPythonApplication (finalAttrs: {
+python3Packages.buildPythonApplication (finalAttrs: {
  pname = "iredis";
-  version = "1.15.2";
+  version = "1.16.1";
  pyproject = true;
+  __structuredAttrs = true;

  src = fetchFromGitHub {
    owner = "laixintao";
    repo = "iredis";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-g/gQb9QOyfa7kyHCUZf/kLZRO5IE8389BUCYz8Sqr8o=";
+    hash = "sha256-m8XDNzHgMWBgcN3AyFlb8K/UNXbGhH4toKBiX5Q4/QY=";
  };

-  postPatch = ''
-    substituteInPlace pyproject.toml \
-      --replace-fail 'packaging = "^23.0"' 'packaging = "*"' \
-      --replace-fail 'wcwidth = "0.1.9"' 'wcwidth = "*"' \
-      --replace-fail 'redis = "^5.0.0"' 'redis = "*"'
-  '';
+  pythonRelaxDeps = [
+    "packaging"
+    "redis"
+  ];

-  nativeBuildInputs = with python3.pkgs; [
+  build-system = with python3Packages; [
    poetry-core
  ];

-  propagatedBuildInputs = with python3.pkgs; [
+  dependencies = with python3Packages; [
    click
    configobj
    mistune
@ -37,10 +37,9 @@ python3.pkgs.buildPythonApplication (finalAttrs: {
    pygments
    python-dateutil
    redis
-    wcwidth
  ];

-  nativeCheckInputs = with python3.pkgs; [
+  nativeCheckInputs = with python3Packages; [
    freezegun
    pexpect
    pytestCheckHook
@ -65,6 +64,11 @@ python3.pkgs.buildPythonApplication (finalAttrs: {

  pythonImportsCheck = [ "iredis" ];

+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  doInstallCheck = true;
+
  meta = {
    description = "Terminal Client for Redis with AutoCompletion and Syntax Highlighting";
    changelog = "https://github.com/laixintao/iredis/blob/${finalAttrs.src.tag}/CHANGELOG.md";
--- a/pkgs/by-name/ja/java-language-server/package.nix
+++ b/pkgs/by-name/ja/java-language-server/package.nix
@ -32,7 +32,7 @@ maven.buildMavenPackage {

  mvnFetchExtraArgs.dontConfigure = true;
  mvnJdk = jdk_headless;
-  mvnHash = "sha256-2uthmSjFQ43N5lgV11DsxuGce+ZptZsmRLTgjDo0M2w=";
+  mvnHash = "sha256-xxTR+2E+4nIkGwxCk0B+f0//rLdlqO/nwRaArxt3u8U=";

  nativeBuildInputs = [
    jdk_headless
--- a/pkgs/by-name/jc/jchempaint/package.nix
+++ b/pkgs/by-name/jc/jchempaint/package.nix
@ -22,7 +22,7 @@ maven.buildMavenPackage {
    hash = "sha256-pcHX6PdnD/jkLxAMSV/Ts8VVrK9xy2NWiMVVJ7jTrQc=";
  };

-  mvnHash = "sha256-VpYSTN5u9IhCakak48HhbwnT3FhMpPKlwRZztiNGEIw=";
+  mvnHash = "sha256-L5Gru4b8lMiDWapzaK9VXoKqRkJnXc1uKUn5Vjmnrqc=";

  nativeBuildInputs = [
    makeWrapper
--- a/pkgs/by-name/jd/jdt-language-server/package.nix
+++ b/pkgs/by-name/jd/jdt-language-server/package.nix
@ -7,15 +7,15 @@
 }:

 let
-  timestamp = "202604151538";
+  timestamp = "202606262232";
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "jdt-language-server";
-  version = "1.58.0";
+  version = "1.60.0";

  src = fetchurl {
    url = "https://download.eclipse.org/jdtls/milestones/${finalAttrs.version}/jdt-language-server-${finalAttrs.version}-${timestamp}.tar.gz";
-    hash = "sha256-Klu+VeyRtDJTkgUNxCLOrTIgokWbN2a+NeH/9FtKUNk=";
+    hash = "sha256-6UwwPYGY+XeTCANYJzh3H9GMUsVJKHhBC/IisaqB7x0=";
  };

  sourceRoot = ".";
--- a/pkgs/by-name/jm/jmc2obj/package.nix
+++ b/pkgs/by-name/jm/jmc2obj/package.nix
@ -18,7 +18,7 @@ maven.buildMavenPackage rec {
    hash = "sha256-3+vH1pGJ6I4oobb2vk+J5GrOQrSLNoCuBIC9OsWYCj0=";
  };

-  mvnHash = "sha256-ZU/5RGujCdmlBuxtHDaBpF/54e8W/Kca+2jtTudMXWo=";
+  mvnHash = "sha256-y+K6FR0USh4LUyv/w5n3pRVILtMRKg64+3D7yfE1IP8=";

  mvnParameters = "-Dmaven.gitcommitid.skip=true";

--- a/pkgs/by-name/jn/jnr-posix/package.nix
+++ b/pkgs/by-name/jn/jnr-posix/package.nix
@ -45,7 +45,7 @@ let
    '';

    outputHashMode = "recursive";
-    outputHash = "sha256-gOw0KUFyZEMONwLwlHSiV+ZZ7JQhjZwg708Q1IciUfo=";
+    outputHash = "sha256-Mtu67CcNY5uThfaa7CQr9cHHpjX+EMFktuSZOlLwyFg=";

    doCheck = false;
  };
--- a/pkgs/by-name/jo/jol/package.nix
+++ b/pkgs/by-name/jo/jol/package.nix
@ -17,7 +17,7 @@ maven.buildMavenPackage (finalAttrs: {
    hash = "sha256-ZJFuY2QYB8eUS3y3VRMGGwklCS93HHVkNe/dhyIx0SY=";
  };

-  mvnHash = "sha256-yQfiHlAZZgINGAYVlK5JflWX3d8Axtv1Ke89S7x86G4=";
+  mvnHash = "sha256-VXYY7XWRuSjju9mgQ6cvHlJwOK2BklE9j/uj0yczjcI=";

  nativeBuildInputs = [ makeWrapper ];

--- a/pkgs/by-name/jo/joularjx/package.nix
+++ b/pkgs/by-name/jo/joularjx/package.nix
@ -17,7 +17,7 @@ maven.buildMavenPackage rec {
    hash = "sha256-hr8a3Qr1LdFfGBLVJVkm6hhCW7knG4VpXj7nCtcptuU=";
  };

-  mvnHash = "sha256-3y39873pxlQD7d02sbVtZ2I/zcQtPZ30XrA2qY84EzA=";
+  mvnHash = "sha256-XXqpajmHCjDxMZvYnW7EiCsPIuWF8tsE7RmI/gt3iZQ=";

  mvnParameters = "-DskipTests -Dmaven.javadoc.skip=true";

--- a/pkgs/by-name/js/jsign/package.nix
+++ b/pkgs/by-name/js/jsign/package.nix
@ -18,16 +18,16 @@ maven.buildMavenPackage rec {
  pname = "jsign";
  # For build from non-release, increment version by one and add -SNAPSHOT
  # e.g. 7.3-SNAPSHOT
-  version = "7.3";
+  version = "7.4";

  src = fetchFromGitHub {
    owner = "ebourg";
    repo = "jsign";
    tag = version;
-    hash = "sha256-FlVTKM1swdNP3kht8MELgUAHPv+FBpwt23WNl/moGjI=";
+    hash = "sha256-r19w9k6Iuk6AQGC3l2yu6Ocn740BtE7DjtFLXUdhdw8=";
  };

-  mvnHash = "sha256-N91gwM3vsDZQM/BptF5RgRQ/A8g56NOJ6bc2SkxLnBs=";
+  mvnHash = "sha256-zxlwb2id8yAw/yxTjD6jyAkPJx9IazrPQYGacQGLEK8=";

  nativeBuildInputs = [ makeBinaryWrapper ];

--- a/pkgs/by-name/ke/keycloak/package.nix
+++ b/pkgs/by-name/ke/keycloak/package.nix
@ -24,11 +24,11 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "keycloak";
-  version = "26.6.3";
+  version = "26.6.4";

  src = fetchzip {
    url = "https://github.com/keycloak/keycloak/releases/download/${finalAttrs.version}/keycloak-${finalAttrs.version}.zip";
-    hash = "sha256-MlWWiTnQVB/JjBhEk3wUv/1WPWnEx9h2iULwzCxUKHU=";
+    hash = "sha256-rb3Wdzc3g8jMvUffOfMfJ4Uw9HJomznXzLtPOrHoWU8=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/ko/kotlin-interactive-shell/package.nix
+++ b/pkgs/by-name/ko/kotlin-interactive-shell/package.nix
@ -17,7 +17,7 @@ maven.buildMavenPackage (finalAttrs: {
    hash = "sha256-3DTyo7rPswpEVzFkcprT6FD+ITGJ+qCXFKXEGoCK+oE=";
  };

-  mvnHash = "sha256-UHtvBVw35QBwgCD+nSduR0924ANAOfwrr/a4qPEYsrM=";
+  mvnHash = "sha256-qGxpeb+8hP0ljbI0+aHnuO5efzXvVQWo8VFYMuRzYck=";
  mvnParameters = "compile";

  nativeBuildInputs = [ makeWrapper ];
--- a/pkgs/by-name/le/lemminx/package.nix
+++ b/pkgs/by-name/le/lemminx/package.nix
@ -48,7 +48,7 @@ maven.buildMavenPackage rec {
  };

  mvnJdk = jdk_headless;
-  mvnHash = "sha256-0KnaXr5Mmwm0pV4o5bAX0MWKl6f/cvlO6cyV9UcgXeo=";
+  mvnHash = "sha256-IJBmztfNco5UF0BwfeU5QHwvr50bXsrZFOSIPoGBijA=";

  # Disable gitcommitid plugin which needs a .git folder which we don't have.
  # Disable failing tests which either need internet access or are flaky.
--- a/pkgs/by-name/li/libcava/package.nix
+++ b/pkgs/by-name/li/libcava/package.nix
@ -8,13 +8,13 @@
 cava.overrideAttrs (old: rec {
  pname = "libcava";
  # fork may not be updated when we update upstream
-  version = "0.10.6";
+  version = "0.10.7";

  src = fetchFromGitHub {
    owner = "LukashonakV";
    repo = "cava";
    tag = version;
-    hash = "sha256-63be1wypMiqhPA6sjMebmFE6yKpTj/bUE53sMWun554=";
+    hash = "sha256-zkyj1vBzHtoypX4Bxdh1Vmwh967DKKxN751v79hzmgQ=";
  };

  nativeBuildInputs = old.nativeBuildInputs ++ [
--- a/pkgs/by-name/li/libphonenumber/package.nix
+++ b/pkgs/by-name/li/libphonenumber/package.nix
@ -15,13 +15,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "libphonenumber";
-  version = "9.0.33";
+  version = "9.0.34";

  src = fetchFromGitHub {
    owner = "google";
    repo = "libphonenumber";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-YsTvJgHBLrIWDJH/SooYDu1ecZyFib7PAqdqcOhHc8Q=";
+    hash = "sha256-KWn58r2Dnh9DMwiESmrF/pN5LPuYe0G7z3TeM+Zp6ZA=";
  };

  patches = [
--- a/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix
+++ b/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix
@ -36,7 +36,7 @@ let

  pname = "librewolf-bin-unwrapped";

-  version = "152.0.2-1";
+  version = "152.0.4-1";
 in

 stdenv.mkDerivation {
@ -46,8 +46,8 @@ stdenv.mkDerivation {
    url = "https://codeberg.org/api/packages/librewolf/generic/librewolf/${version}/librewolf-${version}-${arch}-package.tar.xz";
    hash =
      {
-        x86_64-linux = "sha256-Tq2bj75oZXSH2YHXShjRRs4Aqxo86BuwONXu+IsdCuA=";
-        aarch64-linux = "sha256-xk3o5FODm5ge2I8JzgwXTpgu/SI6VcROIJ7005ew2PY=";
+        x86_64-linux = "sha256-4vmsv93ENtteE18uGJF2ZEhaRA3nGJg//WYYdBREIig=";
+        aarch64-linux = "sha256-Q1vT/9qOs2AiMRsLcofF7F2Y+5QJJloI/QSVZwA9gC8=";
      }
      .${stdenv.hostPlatform.system} or throwSystem;
  };
--- a/pkgs/by-name/li/libudev-garden/package.nix
+++ b/pkgs/by-name/li/libudev-garden/package.nix
@ -0,0 +1,45 @@
+{
+  lib,
+  stdenv,
+  fetchFromCodeberg,
+  nix-update-script,
+  meson,
+  ninja,
+  pkg-config,
+}:
+
+stdenv.mkDerivation (finalAttrs: {
+  pname = "libudev-garden";
+  version = "0.2.1";
+
+  __structuredAttrs = true;
+
+  src = fetchFromCodeberg {
+    owner = "Gardenhouse";
+    repo = "libudev-garden";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-+95+3Hb6lkIhpNZF0pQdM9y5GxZCplp/o2nemZJb5Wc=";
+  };
+
+  strictDeps = true;
+
+  nativeBuildInputs = [
+    meson
+    ninja
+    pkg-config
+  ];
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    homepage = "https://codeberg.org/Gardenhouse/libudev-garden";
+    description = "Daemonless replacement for libudev for use with gardendevd";
+    maintainers = with lib.maintainers; [
+      aanderse
+      choco98
+    ];
+    license = lib.licenses.isc;
+    pkgConfigModules = [ "libudev" ];
+    platforms = lib.platforms.linux;
+  };
+})
--- a/pkgs/by-name/lu/lux-cli/package.nix
+++ b/pkgs/by-name/lu/lux-cli/package.nix
@ -18,18 +18,18 @@
 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "lux-cli";

-  version = "0.35.0";
+  version = "0.35.1";

  src = fetchFromGitHub {
    owner = "lumen-oss";
    repo = "lux";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-CHLtA9K7w10G1OM3PaXDRiYCB94OpE27lLbHD45IWRQ=";
+    hash = "sha256-jbHub9/mTkWdg+oTu6jEaNbPLEaS0/f3TqxvymsDS3I=";
  };

  buildAndTestSubdir = "lux-cli";

-  cargoHash = "sha256-FzprOAtLv3zak7qnmpB/r6MGVtU5x5hyjpUFVUQccvA=";
+  cargoHash = "sha256-envh7C5D/38pDTUi08/9c6YaA9OlZ8Zg+IPLhtKZg6A=";

  nativeInstallCheckInputs = [
    versionCheckHook
--- a/pkgs/by-name/ma/maigret/package.nix
+++ b/pkgs/by-name/ma/maigret/package.nix
@ -7,14 +7,14 @@

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "maigret";
-  version = "0.6.1";
+  version = "0.6.2";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "soxoj";
    repo = "maigret";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-gojeqNZd0n5Qs7YVFBy6zDdjXR6KKdebcu8vfNs/AE8=";
+    hash = "sha256-KgSf0lM8euahWRYT+acuoH6C+NN08IzkVGzytfnvHEg=";
  };

  pythonRelaxDeps = true;
--- a/pkgs/by-name/ma/mariadb-connector-java/package.nix
+++ b/pkgs/by-name/ma/mariadb-connector-java/package.nix
@ -16,7 +16,7 @@ maven.buildMavenPackage rec {
    hash = "sha256-ScdrBSJKbVyD/omPrxiZvuaa5uOo2d3SqX/ozalMWHk=";
  };

-  mvnHash = "sha256-pQYLMsxNVdby4WkO/dznIqqeu2dTtiBjrpJ/A3MuJ5Y=";
+  mvnHash = "sha256-CiUXHrabVX+ragocKbd4erIWr7J4kuWYcKYCDycpIrs=";

  doCheck = false; # Requires networking

--- a/pkgs/by-name/ma/maven/package.nix
+++ b/pkgs/by-name/ma/maven/package.nix
@ -9,11 +9,11 @@
 }:
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "maven";
-  version = "3.9.12";
+  version = "3.9.16";

  src = fetchurl {
    url = "mirror://apache/maven/maven-3/${finalAttrs.version}/binaries/apache-maven-${finalAttrs.version}-bin.tar.gz";
-    hash = "sha256-+iyZSHKSlsI6/Rj9AakPYs3aCaRhkbVKi8N2TC7ugS4=";
+    hash = "sha256-gP/KIq7Z6LlxOiMvM5T9gdfyAyLfde/bKwR9vT46I7s=";
  };

  sourceRoot = ".";
--- a/pkgs/by-name/me/megabasterd/package.nix
+++ b/pkgs/by-name/me/megabasterd/package.nix
@ -19,7 +19,7 @@ maven.buildMavenPackage {
    hash = "sha256-6PKBzQA3lBa9/7J8bymGmnW3OPsRV4GgZ7dc7H6fOuE=";
  };

-  mvnHash = "sha256-DVfPmW0ep6y/GxnwNKXxo68W5idcTkoNqUEKm7ouTEY=";
+  mvnHash = "sha256-JZ8INISDHPVhxylKwQc2DybPqxfwcGpkWxDhq8Fpqt8=";

  nativeBuildInputs = [ makeWrapper ];

--- a/pkgs/by-name/mi/mise/package.nix
+++ b/pkgs/by-name/mi/mise/package.nix
@ -22,16 +22,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "mise";
-  version = "2026.6.13";
+  version = "2026.7.0";

  src = fetchFromGitHub {
    owner = "jdx";
    repo = "mise";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-/HE/2bHUz1gPpyLZnKZO5ZqT5oxOn+SZ0J4vyj67Ohs=";
+    hash = "sha256-F/hxgkqLk36906uhr56W+4Evwc8WLbYWw8pibGsq3EY=";
  };

-  cargoHash = "sha256-p7PCqwS0bI7kXvGYZm4bWpYhz1kkqILDCPGlEq32Cqo=";
+  cargoHash = "sha256-W88dlxvDEwN6C1j1WMtL/KodWQZ9UnI1VJc3xp1Lnqw=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/mm/mmj2/package.nix
+++ b/pkgs/by-name/mm/mmj2/package.nix
@ -25,7 +25,7 @@ maven.buildMavenPackage {
    hash = "sha256-WYBrLY04+bJGzjRMs8LgHnI6lMRhQKyz15DIoLeiE2s=";
  };

-  mvnHash = "sha256-fu/q6CTvSllrfgnKNX6aIuPO65H/q0IPCHFuWmOFOvM=";
+  mvnHash = "sha256-MTI393L/t9AXYbE9hvkIQ28WzYmjt9B22XbFSlLQQUk=";

  nativeBuildInputs = [ makeWrapper ];

--- a/pkgs/by-name/mo/mo-viewer/package.nix
+++ b/pkgs/by-name/mo/mo-viewer/package.nix
@ -14,13 +14,13 @@

 buildGoModule (finalAttrs: {
  pname = "mo-viewer";
-  version = "1.6.2";
+  version = "1.6.3";

  src = fetchFromGitHub {
    owner = "k1LoW";
    repo = "mo";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-/dUAz55hsDYV+1rgNN52rdO798SCRyIyHXrL/ZGTwmY=";
+    hash = "sha256-DbcktOAdcg/v5q3gYgxMvSHVtwXODz9xHoPqiiWBaP4=";
  };

  frontend = stdenvNoCC.mkDerivation (finalFrontendAttrs: {
--- a/pkgs/by-name/mu/mustang-cli/package.nix
+++ b/pkgs/by-name/mu/mustang-cli/package.nix
@ -32,7 +32,7 @@ maven.buildMavenPackage (finalAttrs: {
  strictDeps = true;
  __structuredAttrs = true;

-  mvnHash = "sha256-ekSgGKY3OMFAEM3bNByBXrU3tpbDcbJ0fmCTRz7NIkA=";
+  mvnHash = "sha256-JjhKHcnLO6OZ6VAI7fFpvS90TK6yOVhX0wk4vrnbFFo=";

  nativeBuildInputs = [
    makeWrapper
--- a/pkgs/by-name/na/nagstamon/package.nix
+++ b/pkgs/by-name/na/nagstamon/package.nix
@ -7,14 +7,16 @@

 python3Packages.buildPythonApplication (finalAttrs: {
  pname = "nagstamon";
-  version = "3.16.2";
+  version = "3.18.2";
  pyproject = true;

+  __structuredAttrs = true;
+
  src = fetchFromGitHub {
    owner = "HenriWahl";
    repo = "Nagstamon";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-9w8ux+AeSg0vDhnk28/2eCE2zYLvAjD7mB0pJBMFs2I=";
+    hash = "sha256-ZA6gxV9zLKZ0g5v8CvnAuiYPhEDByz17kC54Idk9CYM=";
  };

  build-system = with python3Packages; [ setuptools ];
@ -46,6 +48,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
    requests
    requests-kerberos
    setuptools
+    tzlocal
  ];

  nativeCheckInputs = with python3Packages; [
--- a/Show more
+++ b/Show more