Merge remote-tracking branch 'origin/master' into staging-next

2 years ago · 68c0ca4416
parent 86afd1c579 5fa1488e2b
commit 68c0ca4416
326 changed files with 5595 additions and 4668 deletions
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@ -37,6 +37,7 @@
 /pkgs/top-level/splice.nix                       @Ericson2314 @matthewbauer
 /pkgs/top-level/release-cross.nix                @Ericson2314 @matthewbauer
 /pkgs/stdenv/generic                             @Ericson2314 @matthewbauer
+/pkgs/stdenv/generic/check-meta.nix              @Ericson2314 @matthewbauer @piegamesde
 /pkgs/stdenv/cross                               @Ericson2314 @matthewbauer
 /pkgs/build-support/cc-wrapper                   @Ericson2314
 /pkgs/build-support/bintools-wrapper             @Ericson2314
--- a/.mailmap
+++ b/.mailmap
@ -0,0 +1 @@
+Daniel Løvbrøtte Olsen <me@dandellion.xyz> <daniel.olsen99@gmail.com>
--- a/lib/modules.nix
+++ b/lib/modules.nix
@ -720,6 +720,7 @@ rec {
        inherit (res.defsFinal') highestPrio;
        definitions = map (def: def.value) res.defsFinal;
        files = map (def: def.file) res.defsFinal;
+        definitionsWithLocations = res.defsFinal;
        inherit (res) isDefined;
        # This allows options to be correctly displayed using `${options.path.to.it}`
        __toString = _: showOption loc;
--- a/lib/types.nix
+++ b/lib/types.nix
@ -119,8 +119,22 @@ rec {
      #  - "composite": a phrase with an "of" connective
      # See the `optionDescriptionPhrase` function.
    , descriptionClass ? null
-    , # Function applied to each definition that should return true if
-      # its type-correct, false otherwise.
+    , # DO NOT USE WITHOUT KNOWING WHAT YOU ARE DOING!
+      # Function applied to each definition that must return false when a definition
+      # does not match the type. It should not check more than the root of the value,
+      # because checking nested values reduces laziness, leading to unnecessary
+      # infinite recursions in the module system.
+      # Further checks of nested values should be performed by throwing in
+      # the merge function.
+      # Strict and deep type checking can be performed by calling lib.deepSeq on
+      # the merged value.
+      #
+      # See https://github.com/NixOS/nixpkgs/pull/6794 that introduced this change,
+      # https://github.com/NixOS/nixpkgs/pull/173568 and
+      # https://github.com/NixOS/nixpkgs/pull/168295 that attempted to revert this,
+      # https://github.com/NixOS/nixpkgs/issues/191124 and
+      # https://github.com/NixOS/nixos-search/issues/391 for what happens if you ignore
+      # this disclaimer.
      check ? (x: true)
    , # Merge a list of definitions together into a single value.
      # This function is called with two arguments: the location of
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@ -641,7 +641,7 @@
  };
  alkeryn = {
    email = "plbraundev@gmail.com";
-    github = "Alkeryn";
+    github = "alkeryn";
    githubId = 11599075;
    name = "Pierre-Louis Braun";
  };
@ -1071,7 +1071,7 @@
  };
  arcticlimer = {
    email = "vinigm.nho@gmail.com";
-    github = "arcticlimer";
+    github = "viniciusmuller";
    githubId = 59743220;
    name = "Vinícius Müller";
  };
@ -2137,6 +2137,12 @@
    githubId = 91694;
    name = "Javier Candeira";
  };
+  candyc1oud = {
+    email = "candyc1oud@outlook.com";
+    github = "candyc1oud";
+    githubId = 113157395;
+    name = "Candy Cloud";
+  };
  canndrew = {
    email = "shum@canndrew.org";
    github = "canndrew";
@ -4107,7 +4113,7 @@
  };
  ersin = {
    email = "me@ersinakinci.com";
-    github = "DesertDevErsin";
+    github = "ersinakinci";
    githubId = 5427394;
    name = "Ersin Akinci";
  };
@ -6042,7 +6048,7 @@
  jayesh-bhoot = {
    name = "Jayesh Bhoot";
    email = "jayesh@bhoot.sh";
-    github = "jayesh-bhoot";
+    github = "jayeshbhoot";
    githubId = 1915507;
  };
  jb55 = {
@ -6533,7 +6539,7 @@
    name = "Jona Enzinger";
    email = "5xt3zyy5l@mozmail.com";
    matrix = "@jona:matrix.jonaenz.de";
-    github = "jonaenz";
+    github = "JonaEnz";
    githubId = 57130301;
    keys = [{
      fingerprint = "1CC5 B67C EB9A 13A5 EDF6 F10E 0B4A 3662 FC58 9202";
@ -6590,7 +6596,7 @@
  };
  joshvanl = {
    email = " me@joshvanl.dev ";
-    github = "joshvanl";
+    github = "JoshVanL";
    githubId = 15893072;
    name = "Josh van Leeuwen";
  };
@ -6825,9 +6831,6 @@
    github = "jyooru";
    githubId = 63786778;
    name = "Joel";
-    keys = [{
-      fingerprint = "9148 DC9E F4D5 3EB6 A30E  8EF0 1855 0BD2 05E9 EF64";
-    }];
  };
  jyp = {
    email = "jeanphilippe.bernardy@gmail.com";
@ -8277,7 +8280,7 @@
  };
  marsupialgutz = {
    email = "mars@possums.xyz";
-    github = "marsupialgutz";
+    github = "pupbrained";
    githubId = 33522919;
    name = "Marshall Arruda";
  };
@ -8588,6 +8591,13 @@
      fingerprint = "D709 03C8 0BE9 ACDC 14F0  3BFB 77BF E531 397E DE94";
    }];
  };
+  meain = {
+    email = "mail@meain.io";
+    matrix = "@meain:matrix.org";
+    github = "meain";
+    githubId = 14259816;
+    name = "Abin Simon";
+  };
  meatcar = {
    email = "nixpkgs@denys.me";
    github = "meatcar";
@ -9604,7 +9614,7 @@
  };
  NieDzejkob = {
    email = "kuba@kadziolka.net";
-    github = "NieDzejkob";
+    github = "meithecatte";
    githubId = 23580910;
    name = "Jakub Kądziołka";
    keys = [{
@ -10553,6 +10563,12 @@
    githubId = 3737;
    name = "Peter Jones";
  };
+  pkharvey = {
+    email = "kayharvey@protonmail.com";
+    github = "pkharvey";
+    githubId = 50750875;
+    name = "Paul Harvey";
+  };
  pkmx = {
    email = "pkmx.tw@gmail.com";
    github = "PkmX";
@ -11073,7 +11089,7 @@
  };
  ratsclub = {
    email = "victor@freire.dev.br";
-    github = "ratsclub";
+    github = "vtrf";
    githubId = 25647735;
    name = "Victor Freire";
  };
@ -13278,7 +13294,7 @@
  };
  thetallestjj = {
    email = "me+nixpkgs@jeroen-jetten.com";
-    github = "thetallestjj";
+    github = "TheTallestJJ";
    githubId = 6579555;
    name = "Jeroen Jetten";
  };
@ -13808,7 +13824,7 @@
  };
  urandom = {
    email = "colin@urandom.co.uk";
-    github = "arnottcr";
+    github = "urandom2";
    githubId = 2526260;
    keys = [{
      fingerprint = "04A3 A2C6 0042 784A AEA7  D051 0447 A663 F7F3 E236";
@ -14412,7 +14428,7 @@
  wrmilling = {
    name = "Winston R. Milling";
    email = "Winston@Milli.ng";
-    github = "WRMilling";
+    github = "wrmilling";
    githubId = 6162814;
    keys = [{
      fingerprint = "21E1 6B8D 2EE8 7530 6A6C  9968 D830 77B9 9F8C 6643";
@ -14467,6 +14483,12 @@
    github = "x3rAx";
    githubId = 2268851;
  };
+  xanderio = {
+    name = "Alexander Sieg";
+    email = "alex@xanderio.de";
+    github = "xanderio";
+    githubId = 6298052;
+  };
  xaverdh = {
    email = "hoe.dom@gmx.de";
    github = "xaverdh";
@ -14579,7 +14601,7 @@
  };
  yana = {
    email = "yana@riseup.net";
-    github = "sowelisuwi";
+    github = "yanalunaterra";
    githubId = 1643293;
    name = "Yana Timoshenko";
  };
@ -15346,7 +15368,7 @@
  yisuidenghua = {
    email = "bileiner@gmail.com";
    name = "Milena Yisui";
-    github = "yisuidenghua";
+    github = "YisuiDenghua";
    githubId = 102890144;
  };
  macalinao = {
--- a/maintainers/scripts/luarocks-packages.csv
+++ b/maintainers/scripts/luarocks-packages.csv
@ -14,6 +14,7 @@ cqueues,,,,,,vcunat
 cyrussasl,https://github.com/JorjBauer/lua-cyrussasl.git,,,,,
 digestif,https://github.com/astoff/digestif.git,,,0.2-1,5.3,
 dkjson,,,,,,
+fennel,,,,,,misterio77
 fifo,,,,,,
 fluent,,,,,,alerque
 gitsigns.nvim,https://github.com/lewis6991/gitsigns.nvim.git,,,,5.1,
--- a/nixos/doc/manual/from_md/release-notes/rl-2211.section.xml
+++ b/nixos/doc/manual/from_md/release-notes/rl-2211.section.xml
@ -474,6 +474,14 @@
          maintainer to update the package.
        </para>
      </listitem>
+      <listitem>
+        <para>
+          The (previously undocumented) Nixpkgs configuration option
+          <literal>checkMeta</literal> now defaults to
+          <literal>true</literal>. This may cause evaluation failures
+          for packages with incorrect <literal>meta</literal> attribute.
+        </para>
+      </listitem>
      <listitem>
        <para>
          xow package removed along with the
--- a/nixos/doc/manual/release-notes/rl-2211.section.md
+++ b/nixos/doc/manual/release-notes/rl-2211.section.md
@ -164,6 +164,9 @@ Available as [services.patroni](options.html#opt-services.patroni.enable).

 - riak package removed along with `services.riak` module, due to lack of maintainer to update the package.

+- The (previously undocumented) Nixpkgs configuration option `checkMeta` now defaults to `true`. This may cause evaluation
+  failures for packages with incorrect `meta` attribute.
+
 - xow package removed along with the `hardware.xow` module, due to the project being deprecated in favor of `xone`,  which is available via the `hardware.xone` module.

 - dd-agent package removed along with the `services.dd-agent` module, due to the project being deprecated in favor of `datadog-agent`,  which is available via the `services.datadog-agent` module.
--- a/nixos/lib/make-options-doc/mergeJSON.py
+++ b/nixos/lib/make-options-doc/mergeJSON.py
@ -259,20 +259,24 @@ def is_docbook(o, key):
 # check that every option has a description
 hasWarnings = False
 hasErrors = False
+hasDocBookErrors = False
 for (k, v) in options.items():
    if errorOnDocbook:
        if isinstance(v.value.get('description', {}), str):
            hasErrors = True
+            hasDocBookErrors = True
            print(
                f"\x1b[1;31merror: option {v.name} description uses DocBook\x1b[0m",
                file=sys.stderr)
        elif is_docbook(v.value, 'defaultText'):
            hasErrors = True
+            hasDocBookErrors = True
            print(
                f"\x1b[1;31merror: option {v.name} default uses DocBook\x1b[0m",
                file=sys.stderr)
        elif is_docbook(v.value, 'example'):
            hasErrors = True
+            hasDocBookErrors = True
            print(
                f"\x1b[1;31merror: option {v.name} example uses DocBook\x1b[0m",
                file=sys.stderr)
@ -287,6 +291,20 @@ for (k, v) in options.items():
            f"\x1b[1;31m{severity}: option {v.name} has no type. Please specify a valid type, see " +
            "https://nixos.org/manual/nixos/stable/index.html#sec-option-types\x1b[0m", file=sys.stderr)

+if hasDocBookErrors:
+    print("Explanation: The documentation contains descriptions, examples, or defaults written in DocBook. " +
+        "NixOS is in the process of migrating from DocBook to Markdown, and " +
+        "DocBook is disallowed for in-tree modules. To change your contribution to "+
+        "use Markdown, apply mdDoc and literalMD. For example:\n" +
+        "\n" +
+        "  example.foo = mkOption {\n" +
+        "    description = lib.mdDoc ''your description'';\n" +
+        "    defaultText = lib.literalMD ''your description of default'';\n" +
+        "  }\n" +
+        "\n" +
+        "  example.enable = mkEnableOption (lib.mdDoc ''your thing'');",
+        file = sys.stderr)
+
 if hasErrors:
    sys.exit(1)
 if hasWarnings and warningsAreErrors:
--- a/nixos/modules/security/pam.nix
+++ b/nixos/modules/security/pam.nix
@ -1279,7 +1279,7 @@ in
        mr ${pkgs.pam_mount}/lib/security/pam_mount.so,
      '' +
      optionalString (isEnabled (cfg: cfg.enableGnomeKeyring)) ''
-        mr ${pkgs.gnome3.gnome-keyring}/lib/security/pam_gnome_keyring.so,
+        mr ${pkgs.gnome.gnome-keyring}/lib/security/pam_gnome_keyring.so,
      '' +
      optionalString (isEnabled (cfg: cfg.startSession)) ''
        mr ${config.systemd.package}/lib/security/pam_systemd.so,
--- a/nixos/modules/services/networking/v2ray.nix
+++ b/nixos/modules/services/networking/v2ray.nix
@ -34,7 +34,7 @@ with lib;

          Either `configFile` or `config` must be specified.

-          See <https://www.v2fly.org/en_US/config/overview.html>.
+          See <https://www.v2fly.org/en_US/v5/config/overview.html>.
        '';
      };

@ -56,7 +56,7 @@ with lib;

          Either `configFile` or `config` must be specified.

-          See <https://www.v2fly.org/en_US/config/overview.html>.
+          See <https://www.v2fly.org/en_US/v5/config/overview.html>.
        '';
      };
    };
@ -71,7 +71,7 @@ with lib;
        name = "v2ray.json";
        text = builtins.toJSON cfg.config;
        checkPhase = ''
-          ${cfg.package}/bin/v2ray -test -config $out
+          ${cfg.package}/bin/v2ray test -c $out
        '';
      };

@ -83,13 +83,15 @@ with lib;
      }
    ];

+    environment.etc."v2ray/config.json".source = configFile;
+
+    systemd.packages = [ cfg.package ];
+
    systemd.services.v2ray = {
-      description = "v2ray Daemon";
-      after = [ "network.target" ];
+      restartTriggers = [ config.environment.etc."v2ray/config.json".source ];
+
+      # Workaround: https://github.com/NixOS/nixpkgs/issues/81138
      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${cfg.package}/bin/v2ray -config ${configFile}";
-      };
    };
  };
 }
--- a/nixos/modules/services/networking/yggdrasil.nix
+++ b/nixos/modules/services/networking/yggdrasil.nix
@ -40,14 +40,14 @@ in {

          If the {option}`persistentKeys` is enabled then the
          keys that are generated during activation will override
-          those in {option}`config` or
+          those in {option}`settings` or
          {option}`configFile`.

          If no keys are specified then ephemeral keys are generated
          and the Yggdrasil interface will have a random IPv6 address
          each time the service is started, this is the default.

-          If both {option}`configFile` and {option}`config`
+          If both {option}`configFile` and {option}`settings`
          are supplied, they will be combined, with values from
          {option}`configFile` taking precedence.

@ -62,7 +62,7 @@ in {
        example = "/run/keys/yggdrasil.conf";
        description = lib.mdDoc ''
          A file which contains JSON configuration for yggdrasil.
-          See the {option}`config` option for more information.
+          See the {option}`settings` option for more information.
        '';
      };

@ -81,7 +81,7 @@ in {
          discovery. The NixOS firewall blocks link-local
          communication, so in order to make local peering work you
          will also need to set `LinkLocalTCPPort` in your
-          yggdrasil configuration ({option}`config` or
+          yggdrasil configuration ({option}`settings` or
          {option}`configFile`) to a port number other than 0,
          and then add that port to
          {option}`networking.firewall.allowedTCPPorts`.
--- a/nixos/modules/services/networking/yggdrasil.xml
+++ b/nixos/modules/services/networking/yggdrasil.xml
@ -27,7 +27,7 @@ An annotated example of a simple configuration:
      # The NixOS module will generate new keys and a new IPv6 address each time
      # it is started if persistentKeys is not enabled.

-    config = {
+    settings = {
      Peers = [
        # Yggdrasil will automatically connect and "peer" with other nodes it
        # discovers via link-local multicast annoucements. Unless this is the
@ -58,7 +58,7 @@ in {
  services.yggdrasil = {
    enable = true;
    persistentKeys = true; # Maintain a fixed public key and IPv6 address.
-    config = {
+    settings = {
      Peers = [ "tcp://1.2.3.4:1024" "tcp://1.2.3.5:1024" ];
      NodeInfo = {
        # This information is visible to the network.
--- a/nixos/modules/services/web-apps/onlyoffice.nix
+++ b/nixos/modules/services/web-apps/onlyoffice.nix
@ -252,7 +252,10 @@ in
              .rabbitmq.url = "${cfg.rabbitmqUrl}"
              ' /run/onlyoffice/config/default.json | sponge /run/onlyoffice/config/default.json

-            if ! psql -d onlyoffice -c "SELECT 'task_result'::regclass;" >/dev/null; then
+            if psql -d onlyoffice -c "SELECT 'task_result'::regclass;" >/dev/null; then
+              psql -f ${cfg.package}/var/www/onlyoffice/documentserver/server/schema/postgresql/removetbl.sql
+              psql -f ${cfg.package}/var/www/onlyoffice/documentserver/server/schema/postgresql/createdb.sql
+            else
              psql -f ${cfg.package}/var/www/onlyoffice/documentserver/server/schema/postgresql/createdb.sql
            fi
          '';
--- a/nixos/modules/services/x11/desktop-managers/plasma5.nix
+++ b/nixos/modules/services/x11/desktop-managers/plasma5.nix
@ -444,11 +444,14 @@ in
      services.xserver.displayManager.setupCommands = startplasma;

      nixpkgs.config.firefox.enablePlasmaBrowserIntegration = true;
+    })

-      environment.etc = {
-        "xdg/kwinrc".text     = lib.generators.toINI {} cfg.kwinrc;
-        "xdg/kdeglobals".text = lib.generators.toINI {} cfg.kdeglobals;
-      };
+    (mkIf (cfg.kwinrc != {}) {
+      environment.etc."xdg/kwinrc".text = lib.generators.toINI {} cfg.kwinrc;
+    })
+
+    (mkIf (cfg.kdeglobals != {}) {
+      environment.etc."xdg/kdeglobals".text = lib.generators.toINI {} cfg.kdeglobals;
    })

    # Plasma Desktop
--- a/nixos/modules/virtualisation/docker.nix
+++ b/nixos/modules/virtualisation/docker.nix
@ -221,6 +221,8 @@ in
        '';

        startAt = optional cfg.autoPrune.enable cfg.autoPrune.dates;
+        after = [ "docker.service" ];
+        requires = [ "docker.service" ];
      };

      assertions = [
--- a/nixos/tests/all-tests.nix
+++ b/nixos/tests/all-tests.nix
@ -86,7 +86,7 @@ in {
  cjdns = handleTest ./cjdns.nix {};
  clickhouse = handleTest ./clickhouse.nix {};
  cloud-init = handleTest ./cloud-init.nix {};
-  cntr = handleTest ./cntr.nix {};
+  cntr = handleTestOn ["aarch64-linux" "x86_64-linux"] ./cntr.nix {};
  cockroachdb = handleTestOn ["x86_64-linux"] ./cockroachdb.nix {};
  collectd = handleTest ./collectd.nix {};
  consul = handleTest ./consul.nix {};
--- a/nixos/tests/docker.nix
+++ b/nixos/tests/docker.nix
@ -11,6 +11,7 @@ import ./make-test-python.nix ({ pkgs, ...} : {
      { pkgs, ... }:
        {
          virtualisation.docker.enable = true;
+          virtualisation.docker.autoPrune.enable = true;
          virtualisation.docker.package = pkgs.docker;

          users.users = {
--- a/nixos/tests/v2ray.nix
+++ b/nixos/tests/v2ray.nix
@ -20,7 +20,7 @@ import ./make-test-python.nix ({ lib, pkgs, ... }: let
        port = 1081;
        listen = "127.0.0.1";
        protocol = "vmess";
-        settings.clients = [v2rayUser];
+        settings.clients = [ v2rayUser ];
      }
    ];
    outbounds = [
@ -30,7 +30,7 @@ import ./make-test-python.nix ({ lib, pkgs, ... }: let
        settings.vnext = [{
          address = "127.0.0.1";
          port = 1081;
-          users = [v2rayUser];
+          users = [ v2rayUser ];
        }];
      }
      {
@ -49,6 +49,14 @@ import ./make-test-python.nix ({ lib, pkgs, ... }: let
        inboundTag = "vmess_in";
        outboundTag = "direct";
      }
+
+      # Assert assets "geoip" and "geosite" are accessible.
+      {
+        type = "field";
+        ip = [ "geoip:private" ];
+        domain = [ "geosite:category-ads" ];
+        outboundTag = "direct";
+      }
    ];
  };

--- a/pkgs/applications/audio/bitwig-studio/bitwig-studio4.nix
+++ b/pkgs/applications/audio/bitwig-studio/bitwig-studio4.nix
@ -1,7 +1,7 @@
 { stdenv, fetchurl, alsa-lib, cairo, dpkg, freetype
 , gdk-pixbuf, glib, gtk3, lib, xorg
 , libglvnd, libjack2, ffmpeg
-, libxkbcommon, xdg-utils, zlib, pulseaudio
+, libxkbcommon, xdg-utils, zlib, pipewire, pulseaudio
 , wrapGAppsHook, makeWrapper }:

 stdenv.mkDerivation rec {
@ -24,7 +24,7 @@ stdenv.mkDerivation rec {
  dontWrapGApps = true; # we only want $gappsWrapperArgs here

  buildInputs = with xorg; [
-    alsa-lib cairo freetype gdk-pixbuf glib gtk3 libxcb xcbutil xcbutilwm zlib libXtst libxkbcommon pulseaudio libjack2 libX11 libglvnd libXcursor stdenv.cc.cc.lib
+    alsa-lib cairo freetype gdk-pixbuf glib gtk3 libxcb xcbutil xcbutilwm zlib libXtst libxkbcommon pipewire pulseaudio libjack2 libX11 libglvnd libXcursor stdenv.cc.cc.lib
  ];

  installPhase = ''
--- a/pkgs/applications/audio/cardinal/default.nix
+++ b/pkgs/applications/audio/cardinal/default.nix
@ -21,12 +21,12 @@

 stdenv.mkDerivation rec {
  pname = "cardinal";
-  version = "22.07";
+  version = "22.09";

  src = fetchurl {
    url =
      "https://github.com/DISTRHO/Cardinal/releases/download/${version}/cardinal+deps-${version}.tar.xz";
-    sha256 = "sha256-4PpqGfycIwJ7g7gnogPYUO1BnlW7dkwYzw/9QV3R3+g=";
+    sha256 = "sha256-dwxKhX926oGlxlplUzhTiX9cvx58FyO2oIShiQ1SXCs=";
  };

  prePatch = ''
--- a/pkgs/applications/audio/deadbeef/default.nix
+++ b/pkgs/applications/audio/deadbeef/default.nix
@ -40,7 +40,7 @@ assert gtk2Support || gtk3Support;
 let
  inherit (lib) optionals;

-  version = "1.9.1";
+  version = "1.9.2";
 in clangStdenv.mkDerivation {
  pname = "deadbeef";
  inherit version;
@ -50,7 +50,7 @@ in clangStdenv.mkDerivation {
    repo = "deadbeef";
    fetchSubmodules = true;
    rev = version;
-    sha256 = "sha256-e3bAGpkRPIqVWl0nvSZ61JpIQZw24mqE9218SWHBCFo=";
+    sha256 = "sha256-rlw7s5OUQ9DT6Ru9WieOKUDBqtOvaPE05pg3bN1NQCU=";
  };

  buildInputs = [
--- a/pkgs/applications/audio/furnace/default.nix
+++ b/pkgs/applications/audio/furnace/default.nix
@ -21,14 +21,14 @@

 stdenv.mkDerivation rec {
  pname = "furnace";
-  version = "0.6pre1";
+  version = "0.6pre1.5";

  src = fetchFromGitHub {
    owner = "tildearrow";
    repo = "furnace";
    rev = "v${version}";
    fetchSubmodules = true;
-    sha256 = "sha256-7MrzSC8PYQ4X8fyX1hB8mOoSCtLpY+o1x42v9HLdoao=";
+    sha256 = "sha256-2Bl6CFZJkhdNxMZiJ392zjcVMu8BgyK58R8aE4ToskY=";
  };

  nativeBuildInputs = [
--- a/pkgs/applications/audio/nootka/default.nix
+++ b/pkgs/applications/audio/nootka/default.nix
@ -1,19 +1,30 @@
 { lib, stdenv, fetchurl, cmake
-, alsa-lib, fftwSinglePrec, libjack2, libpulseaudio, libvorbis, soundtouch, qtbase
+, alsa-lib, fftwSinglePrec, libjack2, libpulseaudio, libvorbis, soundtouch
+, qtbase, qtdeclarative, qtgraphicaleffects, qtquickcontrols2, qttools, wrapQtAppsHook
 }:

 stdenv.mkDerivation rec {
  pname = "nootka";
-  version = "1.4.7";
+  version = "2.0.2";

  src = fetchurl {
    url = "mirror://sourceforge/nootka/${pname}-${version}-source.tar.bz2";
-    sha256 = "1y9wlwri74v2z9dwbcfjs7xri54yra24vpwq19xi2lfv1nbs518x";
+    sha256 = "sha256-ZHdyLZ3+TCpQ77tcNuDlN2124qLDZu9DdH5x7RI1HIs=";
  };

-  nativeBuildInputs = [ cmake ];
+  nativeBuildInputs = [ cmake wrapQtAppsHook ];
  buildInputs = [
-    alsa-lib fftwSinglePrec libjack2 libpulseaudio libvorbis soundtouch qtbase
+    alsa-lib
+    fftwSinglePrec
+    libjack2
+    libpulseaudio
+    libvorbis
+    soundtouch
+    qtbase
+    qtdeclarative
+    qtgraphicaleffects
+    qtquickcontrols2
+    qttools
  ];

  cmakeFlags = [
@ -22,13 +33,11 @@ stdenv.mkDerivation rec {
    "-DENABLE_PULSEAUDIO=ON"
  ];

-  dontWrapQtApps = true;
-
  meta = with lib; {
    description = "Application for practicing playing musical scores and ear training";
    homepage = "https://nootka.sourceforge.io/";
    license = licenses.gpl3Plus;
-    maintainers = with maintainers; [ orivej ];
+    maintainers = with maintainers; [ mmlb orivej ];
    platforms = platforms.linux;
  };
 }
--- a/pkgs/applications/audio/nootka/unstable.nix
+++ b/pkgs/applications/audio/nootka/unstable.nix
@ -1,54 +0,0 @@
-{ lib
-, stdenv
-, fetchurl
-, cmake
-, alsa-lib
-, fftwSinglePrec
-, libjack2
-, libpulseaudio
-, libvorbis
-, soundtouch
-, qtbase
-, qtdeclarative
-, qtquickcontrols2
-}:
-
-stdenv.mkDerivation rec {
-  pname = "nootka";
-  version = "1.7.0-beta1";
-
-  src = fetchurl {
-    url = "mirror://sourceforge/nootka/nootka-${version}-source.tar.bz2";
-    sha256 = "13b50vnpr1zx2mrgkc8fmhsyfa19rqq1rksvn31145dy6fk1f3gc";
-  };
-
-  nativeBuildInputs = [ cmake ];
-  buildInputs = [
-    alsa-lib
-    fftwSinglePrec
-    libjack2
-    libpulseaudio
-    libvorbis
-    soundtouch
-    qtbase
-    qtdeclarative
-    qtquickcontrols2
-  ];
-
-  dontWrapQtApps = true;
-
-  cmakeFlags = [
-    "-DCMAKE_INCLUDE_PATH=${libjack2}/include/jack;${libpulseaudio.dev}/include/pulse"
-    "-DENABLE_JACK=ON"
-    "-DENABLE_PULSEAUDIO=ON"
-  ];
-
-  meta = with lib; {
-    broken = (stdenv.isLinux && stdenv.isAarch64);
-    description = "Application for practicing playing musical scores and ear training";
-    homepage = "https://nootka.sourceforge.io/";
-    license = licenses.gpl3Plus;
-    maintainers = with maintainers; [ orivej ];
-    platforms = platforms.linux;
-  };
-}
--- a/pkgs/applications/editors/vim/plugins/generated.nix
+++ b/pkgs/applications/editors/vim/plugins/generated.nix
@ -281,12 +281,12 @@ final: prev:

  SchemaStore-nvim = buildVimPluginFrom2Nix {
    pname = "SchemaStore.nvim";
-    version = "2022-09-19";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "b0o";
      repo = "SchemaStore.nvim";
-      rev = "af749fe5a2f7ca222ef2891d2d508b1f2f90cd65";
-      sha256 = "0qpbx9nga9mmxm2dkayydr4ahhbvjql0gqcj35srqpqmshwgswwv";
+      rev = "68e83c96a6e972ead7b72b250cffd0418686155d";
+      sha256 = "1mr5zg353fibxzkjznlwn9d8bkw1vd8q446sirf2azdwf7yw1cll";
    };
    meta.homepage = "https://github.com/b0o/SchemaStore.nvim/";
  };
@ -437,12 +437,12 @@ final: prev:

  YouCompleteMe = buildVimPluginFrom2Nix {
    pname = "YouCompleteMe";
-    version = "2022-08-29";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "ycm-core";
      repo = "YouCompleteMe";
-      rev = "d4343e8384ffb25d70a9ebc966bbf1277735567c";
-      sha256 = "12pgal13zxdmdb6vqbnllxjdk68p9p1c9wvwhqrrwa1jriwijap0";
+      rev = "cdd88b5e46109c01a69f3f9b10eae53811b4a65c";
+      sha256 = "0v7dg2s7igs11566kxd5qjl81fq4iw5i6xn9qrl23wg5mbksvwiy";
      fetchSubmodules = true;
    };
    meta.homepage = "https://github.com/ycm-core/YouCompleteMe/";
@ -534,12 +534,12 @@ final: prev:

  ale = buildVimPluginFrom2Nix {
    pname = "ale";
-    version = "2022-09-13";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "dense-analysis";
      repo = "ale";
-      rev = "8e03ceecdc4151b6a85c004ce4ef699da0a1f57a";
-      sha256 = "0z755x6jyl8a5f0p8dcnb717rf08h8xkr5dvydwzdk63c5w8whk1";
+      rev = "a56d51ec1cd40172e94a6cb017049c0a7fed08e5";
+      sha256 = "1hyg3zmb9z72b8yp4z5dvdwqns1hkvja91dlm5i03js310r4r0i7";
    };
    meta.homepage = "https://github.com/dense-analysis/ale/";
  };
@ -666,12 +666,12 @@ final: prev:

  asyncrun-vim = buildVimPluginFrom2Nix {
    pname = "asyncrun.vim";
-    version = "2022-09-13";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "skywind3000";
      repo = "asyncrun.vim";
-      rev = "2483bbd0f55bd33cbcc021fafc187c1f6a0e7354";
-      sha256 = "1zdcz2025cm19f62v182a8nlpw023a0ch7hf0mhnbn39sdxyyb8v";
+      rev = "7ee75ae20c7d556f1febb6d1a5961e48766c9c0b";
+      sha256 = "1ikxarjknpba4mvd1bkyswvai9laca38biccn3py7x8lwvlvhp85";
    };
    meta.homepage = "https://github.com/skywind3000/asyncrun.vim/";
  };
@ -906,12 +906,12 @@ final: prev:

  bufexplorer = buildVimPluginFrom2Nix {
    pname = "bufexplorer";
-    version = "2022-05-03";
+    version = "2022-09-20";
    src = fetchFromGitHub {
      owner = "jlanzarotta";
      repo = "bufexplorer";
-      rev = "1be66e253730fd186a5a789a67a337420f431a71";
-      sha256 = "1k3x04xvsmqbvmmcg7hlv3jnwpv9qgmdvwjz0620xmspfk43m09x";
+      rev = "e782dab0fe9523ac65d9fe4f726f2efe924e3f43";
+      sha256 = "1zbaqs96rimwawcf6nhxi3l02gs1yzdr4qk5aqh2ka0g6mx8mldn";
    };
    meta.homepage = "https://github.com/jlanzarotta/bufexplorer/";
  };
@ -1038,12 +1038,12 @@ final: prev:

  clangd_extensions-nvim = buildVimPluginFrom2Nix {
    pname = "clangd_extensions.nvim";
-    version = "2022-09-08";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "p00f";
      repo = "clangd_extensions.nvim";
-      rev = "8fd2d8a11bb9b7610b3caedd3601843ceafc119f";
-      sha256 = "16blllwprqi52797bbmvkcfyh43i8yjd6k4kjkh77gx2nwqr7f6v";
+      rev = "f2ca89d978f9fc907beb432a472a89fced7e10bd";
+      sha256 = "0g0w950l7pam1fibkc5fggchvsfi4fsyvrky2f1yizrndpmq09yz";
    };
    meta.homepage = "https://github.com/p00f/clangd_extensions.nvim/";
  };
@ -1698,12 +1698,12 @@ final: prev:

  coc-nvim = buildVimPluginFrom2Nix {
    pname = "coc.nvim";
-    version = "2022-09-20";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "neoclide";
      repo = "coc.nvim";
-      rev = "6b4fd860557aa99d9c617279a098d7d9fde7c60e";
-      sha256 = "0rl673752640kcd4jvbbjhyfdkds0lsk4zks19wzhhj8k7mp32vh";
+      rev = "2266266289566b711532b65f4d09e699ca541887";
+      sha256 = "1wqgljjnbiv6wywlpfm1411zdvzcm9mmqfbpw1fir05ilgq8j5rr";
    };
    meta.homepage = "https://github.com/neoclide/coc.nvim/";
  };
@ -1854,12 +1854,12 @@ final: prev:

  compiler-explorer-nvim = buildVimPluginFrom2Nix {
    pname = "compiler-explorer.nvim";
-    version = "2022-09-19";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "krady21";
      repo = "compiler-explorer.nvim";
-      rev = "3869187baf47ecdedcb5aafd6716b6b13530cdf8";
-      sha256 = "0g3x2wmmrm1kvkrrriyi9p354nrcplh4wm941dfkqxhi5w5qbr42";
+      rev = "7a5ead76df2acd51421ff387bae528590898e131";
+      sha256 = "02dbdzvvpf999sv8cqml93lb63ghs1sfzy02ids1xg4g9m0l7fi1";
    };
    meta.homepage = "https://github.com/krady21/compiler-explorer.nvim/";
  };
@ -1986,24 +1986,24 @@ final: prev:

  coq-artifacts = buildVimPluginFrom2Nix {
    pname = "coq.artifacts";
-    version = "2022-09-20";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "ms-jpq";
      repo = "coq.artifacts";
-      rev = "4eac52892f475a95a094d525e4327600034aab32";
-      sha256 = "0p1yml5j5haw4ynz1y981hxcq6lw3rigd74ws3w5y6qys1c85bj6";
+      rev = "88db7c0d2606fa9e315e788a780c362ef53de0ae";
+      sha256 = "1qd2ysipdjfh5azjmnb86m5x8zw7dyfzlihf6104n7s5204igq59";
    };
    meta.homepage = "https://github.com/ms-jpq/coq.artifacts/";
  };

  coq-thirdparty = buildVimPluginFrom2Nix {
    pname = "coq.thirdparty";
-    version = "2022-09-20";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "ms-jpq";
      repo = "coq.thirdparty";
-      rev = "f7962c44c41b926dca6df096cae5f61e83cd98e2";
-      sha256 = "08pz2bjs0rkc7s70hd8zjmpq3jmvg1dgy0d8pj0gnhd300s0hkj6";
+      rev = "0380c0cc30e7d0c91f01a0e93bc191e131a1bdbf";
+      sha256 = "0yqb66dsqfxrrxlpzqaiw083482jna61d4lbpc3d259pwhvnzzw4";
    };
    meta.homepage = "https://github.com/ms-jpq/coq.thirdparty/";
  };
@ -2022,12 +2022,12 @@ final: prev:

  coq_nvim = buildVimPluginFrom2Nix {
    pname = "coq_nvim";
-    version = "2022-09-20";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "ms-jpq";
      repo = "coq_nvim";
-      rev = "3498662bf7e27fbb0909f5cd00b3de818d6bc427";
-      sha256 = "03wv31w40cjn0gk74kzmvm6saf3kpwgvzy04c9v2scz0xilxdpk3";
+      rev = "690efd4dfd7d05e97f7af5c6c4c743b406cd1965";
+      sha256 = "1gp90yi7kf9kmnmhlwxyvp5krnv5c3nfb2gslznjqx0k79km0gfc";
    };
    meta.homepage = "https://github.com/ms-jpq/coq_nvim/";
  };
@ -2062,8 +2062,8 @@ final: prev:
    src = fetchFromGitHub {
      owner = "saecki";
      repo = "crates.nvim";
-      rev = "b2a7f17bc4666fe403a29ab098abe5ff4c5ad6e8";
-      sha256 = "00wz2yandb5gdyv8fmwflya5dnw7j6kfcbjlff62ik5332in1vgk";
+      rev = "80949e9c479017640695d593282b477ace2928d8";
+      sha256 = "1y7m2j13hiq1pyq0lkhi9yk2hkhd7yrvyk91cqf7bmgqp8j32ax8";
    };
    meta.homepage = "https://github.com/saecki/crates.nvim/";
  };
@ -2540,12 +2540,12 @@ final: prev:

  diffview-nvim = buildVimPluginFrom2Nix {
    pname = "diffview.nvim";
-    version = "2022-09-18";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "sindrets";
      repo = "diffview.nvim";
-      rev = "5d3d11aad8deaaa3fec1968a2707846cfd12918a";
-      sha256 = "1vj8m9254y7bwz5sgmrwp1xspgksyyh6ci8r60r0j511r2in2sb6";
+      rev = "579815945dbefc1cf10347941a6d2022b41d279c";
+      sha256 = "037zmfsg0cj2h1pfrwib3f499s28crxs4xwdkk02vjzhman0hlzx";
    };
    meta.homepage = "https://github.com/sindrets/diffview.nvim/";
  };
@ -2576,12 +2576,12 @@ final: prev:

  dressing-nvim = buildVimPluginFrom2Nix {
    pname = "dressing.nvim";
-    version = "2022-09-15";
+    version = "2022-09-20";
    src = fetchFromGitHub {
      owner = "stevearc";
      repo = "dressing.nvim";
-      rev = "fbc798c34c21a4d7914a41f5b2263af2f75750c8";
-      sha256 = "0sd03zqv60kpd8ip60hk7aa1aw2g0ciycs6mawzjfjgcql5nygp2";
+      rev = "76477792b34f8fed167b5aa61a325e4dab26c3d7";
+      sha256 = "10ma1k67c36jy38j3mx3s57scflmja7m68cgf5dzh0icg7h4viyi";
    };
    meta.homepage = "https://github.com/stevearc/dressing.nvim/";
  };
@ -2722,12 +2722,12 @@ final: prev:

  fastfold = buildVimPluginFrom2Nix {
    pname = "fastfold";
-    version = "2022-01-26";
+    version = "2022-09-20";
    src = fetchFromGitHub {
      owner = "konfekt";
      repo = "fastfold";
-      rev = "e4a51e0f6763720ab1d1889e1ce3fa3beaaf00d3";
-      sha256 = "11v3jh8qrpwpnvjj1r9z522v9bsyvxwxb8s8856a2zl6vn9caqml";
+      rev = "542683b0cce738be22b6fdadb08302faed68e7b4";
+      sha256 = "1n859x82xfgjv4nnv1vms45nkamnnm7lkryfs6jqy4sqiyv0x615";
    };
    meta.homepage = "https://github.com/konfekt/fastfold/";
  };
@ -3011,24 +3011,24 @@ final: prev:

  fzf-lua = buildVimPluginFrom2Nix {
    pname = "fzf-lua";
-    version = "2022-09-20";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "ibhagwan";
      repo = "fzf-lua";
-      rev = "e4d66b70674b011a0d41fb3f321f160aa7d8814d";
-      sha256 = "0hadgji9inn70nyrvprr9kbghaff8cfxdcj0zh7h70blwqccix3r";
+      rev = "316879662ff9c33ae4b1072f8238e4bba2999e0a";
+      sha256 = "1b334fqvv49d9cnk4yv3hd3qgnw4x48l1i2ja1pxxiwi91q1hgwr";
    };
    meta.homepage = "https://github.com/ibhagwan/fzf-lua/";
  };

  fzf-vim = buildVimPluginFrom2Nix {
    pname = "fzf.vim";
-    version = "2022-09-13";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "junegunn";
      repo = "fzf.vim";
-      rev = "ecbf9cd98e65e9170ef743d229f35bf1306efde1";
-      sha256 = "04sw236gjzaj3rmzmmlk6z1mb533lq81ymmm5dnjxygiiskl9x6j";
+      rev = "9ceac718026fd39498d95ff04fa04d3e40c465d7";
+      sha256 = "1zyypxi8kv3gcc8crwkd52c1nnp06yqdyz9ici02sq121lpdfklg";
    };
    meta.homepage = "https://github.com/junegunn/fzf.vim/";
  };
@ -3203,12 +3203,12 @@ final: prev:

  glow-nvim = buildVimPluginFrom2Nix {
    pname = "glow.nvim";
-    version = "2022-08-23";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "ellisonleao";
      repo = "glow.nvim";
-      rev = "8dca3583e44d54bcfd79cb8dc06ddb89128aa5e0";
-      sha256 = "09k7773w0y6mi3q13q5myv55x498f0vlifmlqna6bfgn9lw03glv";
+      rev = "b6b997277e019f751031ea52f9571ad2e1e7e42d";
+      sha256 = "1cnzgm0pixh2zrmkfgxjybb6i1lqa0hbkwrmbm1jb5p0hhc4d1j6";
    };
    meta.homepage = "https://github.com/ellisonleao/glow.nvim/";
  };
@ -3620,6 +3620,18 @@ final: prev:
    meta.homepage = "https://github.com/ciaranm/inkpot/";
  };

+  instant-nvim = buildVimPluginFrom2Nix {
+    pname = "instant.nvim";
+    version = "2022-06-25";
+    src = fetchFromGitHub {
+      owner = "jbyuki";
+      repo = "instant.nvim";
+      rev = "294b6d08143b3db8f9db7f606829270149e1a786";
+      sha256 = "07lr7k34ldw278g191fcj4fc9zfnz6qf4dgdqm1cciyd5y75cwhd";
+    };
+    meta.homepage = "https://github.com/jbyuki/instant.nvim/";
+  };
+
  intero-neovim = buildVimPluginFrom2Nix {
    pname = "intero-neovim";
    version = "2019-11-15";
@ -4246,12 +4258,12 @@ final: prev:

  lspkind-nvim = buildVimPluginFrom2Nix {
    pname = "lspkind-nvim";
-    version = "2022-09-13";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "onsails";
      repo = "lspkind.nvim";
-      rev = "f46e3b5528e73347dc0678277460e5cea2a52b6a";
-      sha256 = "09kg1ax5xmy8jbi95bqngx0lrpc9mvl0cdkgmfzsr16p9mfbf5rl";
+      rev = "c68b3a003483cf382428a43035079f78474cd11e";
+      sha256 = "0qrfqajpbkb757vbcjz1g7v5rihsyhg1f1jxrbwg08dbxpw101av";
    };
    meta.homepage = "https://github.com/onsails/lspkind.nvim/";
  };
@ -4270,12 +4282,12 @@ final: prev:

  lua-dev-nvim = buildVimPluginFrom2Nix {
    pname = "lua-dev.nvim";
-    version = "2022-09-20";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "folke";
      repo = "lua-dev.nvim";
-      rev = "4f4f4d4fb76d9ce541341d8c909525990560d2f0";
-      sha256 = "1gpxdghsxm0pfrd68217jy9dywpw62yhxj8z3qhw9fb5v5azkrlr";
+      rev = "323371f9f06445e67b54b5f3ce905db4e1ab0d35";
+      sha256 = "0q2jdliw23qc96lkzvf6hilgaqnqr3zhm3d1viq2gwq3l98gfbaf";
    };
    meta.homepage = "https://github.com/folke/lua-dev.nvim/";
  };
@ -4415,12 +4427,12 @@ final: prev:

  mini-nvim = buildVimPluginFrom2Nix {
    pname = "mini.nvim";
-    version = "2022-09-15";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "echasnovski";
      repo = "mini.nvim";
-      rev = "7cdef92809c1e531d5f90b16834149a7e7f00de1";
-      sha256 = "0a84v7g5j1w1v6wplzzabipgnq80b8kvpvpr7zrv89pyg012piq6";
+      rev = "96fcd3ef46e3feec4906855fc034d8c82ba4c1ae";
+      sha256 = "0iyv03hii8qlphyq07xkv6vh8znwq7rsp9hrg4amxgwc0l3zm1l8";
    };
    meta.homepage = "https://github.com/echasnovski/mini.nvim/";
  };
@ -4787,12 +4799,12 @@ final: prev:

  neogit = buildVimPluginFrom2Nix {
    pname = "neogit";
-    version = "2022-09-10";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "TimUntersberger";
      repo = "neogit";
-      rev = "64245bb7f577bad0308d77dc1116ce7d8428f27f";
-      sha256 = "18gkb6aff2qi6pjg1c20kpc3ab7j41i9dywdads6vlman26dpmbm";
+      rev = "463820a83f4ba387655f370a17c87dc3100cdf0d";
+      sha256 = "1h0mil77s8pbgjvqb0kf6l4avz1y33116rgv2kkaii1zn4dwmnws";
    };
    meta.homepage = "https://github.com/TimUntersberger/neogit/";
  };
@ -4847,12 +4859,12 @@ final: prev:

  neorg = buildVimPluginFrom2Nix {
    pname = "neorg";
-    version = "2022-09-18";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "nvim-neorg";
      repo = "neorg";
-      rev = "dadabdbe75afb74b66e977188801a8f754ef696b";
-      sha256 = "0j5rxwz7qnxbn71vsz7ib6faajzb7gyfna2a6wzc0ivybahq633y";
+      rev = "3b231261e0e908f7372ce504aef98f69ce0823bc";
+      sha256 = "05xzd65hxag6j44a509a1plvl43d993z4cdwr37l846rv8qgar84";
    };
    meta.homepage = "https://github.com/nvim-neorg/neorg/";
  };
@ -4907,12 +4919,12 @@ final: prev:

  neovim-ayu = buildVimPluginFrom2Nix {
    pname = "neovim-ayu";
-    version = "2022-09-10";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "Shatur";
      repo = "neovim-ayu";
-      rev = "a6ff1df695e068217584a87394532cd4519b4763";
-      sha256 = "03xhcxr9a8mnhy5cc2l6sml9vrwbs9bh1680lyhk4jzfbf5dy0i4";
+      rev = "15f95630f75f170e49b96ec0ed7133e02d7d206f";
+      sha256 = "1hdgdcm3g48vwlvxlmiv380vpdsmwx1jnawnxma3a6hr4xazs5da";
    };
    meta.homepage = "https://github.com/Shatur/neovim-ayu/";
  };
@ -5135,12 +5147,12 @@ final: prev:

  null-ls-nvim = buildVimPluginFrom2Nix {
    pname = "null-ls.nvim";
-    version = "2022-09-19";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "jose-elias-alvarez";
      repo = "null-ls.nvim";
-      rev = "1533257895fa953c004f88c1d9476af50b721c7d";
-      sha256 = "1difw47p4w2m5bl1hmi9y7yb6hw242zf6az55fmf51ppz58m75sk";
+      rev = "8af89c5fa2b732aaa9c3bf8aed95bccc9c4ce295";
+      sha256 = "0801yhgh6vjhskcmcwd9z62zvcp7szmb4q8xdrzn30gfwxzci04j";
    };
    meta.homepage = "https://github.com/jose-elias-alvarez/null-ls.nvim/";
  };
@ -5219,12 +5231,12 @@ final: prev:

  nvim-bqf = buildVimPluginFrom2Nix {
    pname = "nvim-bqf";
-    version = "2022-09-20";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "kevinhwang91";
      repo = "nvim-bqf";
-      rev = "a72e9b197f166e39e93d728433b92d2043a7a237";
-      sha256 = "0794hqgjgwv7i9w3bchvlwsykxsiyhgbblkjcrwpjmw9801qhxr3";
+      rev = "aea31569d1b20aa6a35fa84ec756cb205a4a7134";
+      sha256 = "105iz6m3hp2qqxhmgnz17rydcbbvwyn3yvrlfr5jsj0r8qxfs0yj";
    };
    meta.homepage = "https://github.com/kevinhwang91/nvim-bqf/";
  };
@ -5279,12 +5291,12 @@ final: prev:

  nvim-colorizer-lua = buildVimPluginFrom2Nix {
    pname = "nvim-colorizer.lua";
-    version = "2022-09-15";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "nvchad";
      repo = "nvim-colorizer.lua";
-      rev = "004a2b3ef62b01d3d1db454d1efe76d31934d43b";
-      sha256 = "0ya9qnp294lldarab7cc6fddjc3wad8zsqn2bl9b4dlypgcz7g1g";
+      rev = "20fd0091ef4d873fb1ce8b2bbb278664514cac7a";
+      sha256 = "02wj29bm7fwkp7igvynfmvndxmz6gngkhjz740xbwv2ncxiv974j";
    };
    meta.homepage = "https://github.com/nvchad/nvim-colorizer.lua/";
  };
@ -5351,24 +5363,24 @@ final: prev:

  nvim-dap = buildVimPluginFrom2Nix {
    pname = "nvim-dap";
-    version = "2022-09-19";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "mfussenegger";
      repo = "nvim-dap";
-      rev = "e12496beb5e231ca9148c0a380ec784a607a27df";
-      sha256 = "1x0g0shjjwwl57rz0pajykww9w1rr12h8izp6d0pf865jmfzrk6d";
+      rev = "3c3e0a82457e2279563510ca16ae71279687c19c";
+      sha256 = "1gm2hrwkan7ybn80jx1ahyh1rsdw4riwjbw3538g4199h3iqbvdz";
    };
    meta.homepage = "https://github.com/mfussenegger/nvim-dap/";
  };

  nvim-dap-ui = buildVimPluginFrom2Nix {
    pname = "nvim-dap-ui";
-    version = "2022-09-20";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "rcarriga";
      repo = "nvim-dap-ui";
-      rev = "4af75ae48a213aede653b1954459a47b3fc18dac";
-      sha256 = "1i5y694s8skki2z639lqkadj8qpcqc5924fwp5j02f5v0mcf5gpl";
+      rev = "922a3479d3341aad4d20e7986660c74c57534e0c";
+      sha256 = "0k9gi99g0di58lx77hdkl0q64wwc6vmm53wbqs9px05q5sfxy6gb";
    };
    meta.homepage = "https://github.com/rcarriga/nvim-dap-ui/";
  };
@ -5495,12 +5507,12 @@ final: prev:

  nvim-jqx = buildVimPluginFrom2Nix {
    pname = "nvim-jqx";
-    version = "2022-02-10";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "gennaro-tedesco";
      repo = "nvim-jqx";
-      rev = "26bf7cc5e1942dac9f825dff90e180620c264fe7";
-      sha256 = "0r45lda81khhkkqk6nrdqw6y3hdzc0w5jirz1yn1n51b7vxjm1dy";
+      rev = "24d3e0228aec27280e091d09ff65593e99d4d564";
+      sha256 = "06zp3hffwjgq3c30d7h3a3bnx7vw77xwz4g3kcb54rxffvhjwwvj";
    };
    meta.homepage = "https://github.com/gennaro-tedesco/nvim-jqx/";
  };
@ -5543,12 +5555,12 @@ final: prev:

  nvim-lint = buildVimPluginFrom2Nix {
    pname = "nvim-lint";
-    version = "2022-08-25";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "mfussenegger";
      repo = "nvim-lint";
-      rev = "b551a7218c802a5b361dd46857af4945fe779dcd";
-      sha256 = "09dlqcfgandw7v08w8nfs8b277z9za01l6zm80c4i2p8h9xpn6fc";
+      rev = "1b3468b07452e3736b67afd43547f766cc1db307";
+      sha256 = "096yp2lpqkr7fv2nh3kk3v06d5mcy1lsr0x3d0y3j7zsy2xxn8fb";
    };
    meta.homepage = "https://github.com/mfussenegger/nvim-lint/";
  };
@ -5567,12 +5579,12 @@ final: prev:

  nvim-lspconfig = buildVimPluginFrom2Nix {
    pname = "nvim-lspconfig";
-    version = "2022-09-14";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "neovim";
      repo = "nvim-lspconfig";
-      rev = "51775b12cfbf1b6462c7b13cd020cc09e6767aea";
-      sha256 = "0rvrzb0pg6r2725cd5yrjhla6zgrk4kjw9wgqxdcs8n90d25a2s8";
+      rev = "d4eb971db353ccf78cefb3be1b05483b69ec1e69";
+      sha256 = "0hrf4lkd8ikdrncajylbsgjkpj8vg6yfmbdlqaw6z8bqqk0n28dq";
    };
    meta.homepage = "https://github.com/neovim/nvim-lspconfig/";
  };
@ -5615,12 +5627,12 @@ final: prev:

  nvim-neoclip-lua = buildVimPluginFrom2Nix {
    pname = "nvim-neoclip.lua";
-    version = "2022-09-05";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "AckslD";
      repo = "nvim-neoclip.lua";
-      rev = "fbbe56a196bf8409df8cc41ea028210dc8694464";
-      sha256 = "1qr89p677grvr4hfgbhdnsm450p0yw17kji4jsz9qvqf8vjbfln8";
+      rev = "73fd2494b181cdad5dca2be23bfefd6e34621fd2";
+      sha256 = "161s8b67n4n80y3drqk3azhjr6m17nr5m3ns3b49p7xypfigqpwn";
    };
    meta.homepage = "https://github.com/AckslD/nvim-neoclip.lua/";
  };
@ -5639,12 +5651,12 @@ final: prev:

  nvim-notify = buildVimPluginFrom2Nix {
    pname = "nvim-notify";
-    version = "2022-09-19";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "rcarriga";
      repo = "nvim-notify";
-      rev = "7a9be08986b4d98dd685a6b40a62fcba19c1ad27";
-      sha256 = "1qac3wfrc9hms18kh9ahqlj966d0zxjj9jvww1s83fhbihhf0453";
+      rev = "3a8ec89e1918ea2acbb9b22c5ac2006d31773052";
+      sha256 = "00ixzciwgzpi2sg6s5cyw8101nnwrv0ks8x77mcqrvpmqnlg6hky";
    };
    meta.homepage = "https://github.com/rcarriga/nvim-notify/";
  };
@ -5675,12 +5687,12 @@ final: prev:

  nvim-snippy = buildVimPluginFrom2Nix {
    pname = "nvim-snippy";
-    version = "2022-08-03";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "dcampos";
      repo = "nvim-snippy";
-      rev = "1860215584d4835d87f75896f07007b3b3c06df4";
-      sha256 = "077nzfb16266w28wlnb70c765y358l9issjldm57dwkwyyaxv6j2";
+      rev = "afff8a8cbda4de2b75249ee08359d0584458f0ef";
+      sha256 = "1swhn82b2a9gc5kxas9cgdpkvykpb9322ghmk5nwss99i05nrnl0";
    };
    meta.homepage = "https://github.com/dcampos/nvim-snippy/";
  };
@ -5735,36 +5747,36 @@ final: prev:

  nvim-tree-lua = buildVimPluginFrom2Nix {
    pname = "nvim-tree.lua";
-    version = "2022-09-18";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "kyazdani42";
      repo = "nvim-tree.lua";
-      rev = "3676e0b124c2a132857e2bbcf7f48f05228f1052";
-      sha256 = "0535g95mcm8syfm9mkslv8m17mn2n38vxa1sqhngmkv08kd50qzw";
+      rev = "52b0c3215271349ed91421b9bb39d61b58d9e5d4";
+      sha256 = "1pfwn3qpjd6inzhlabp2kkr7vcs9yq2xyp0g8yzshpl3fm90h5p0";
    };
    meta.homepage = "https://github.com/kyazdani42/nvim-tree.lua/";
  };

  nvim-treesitter = buildVimPluginFrom2Nix {
    pname = "nvim-treesitter";
-    version = "2022-09-20";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "nvim-treesitter";
      repo = "nvim-treesitter";
-      rev = "8ec59aee8097c64fcf27d1dbd77ea181c50846c5";
-      sha256 = "1fn5v6s8xlqg19vimh49a3r6gr2g4ypnvpjr3axkidc66ivgwyps";
+      rev = "ebea89483d6c4a6e2d563c8b884a66d546676350";
+      sha256 = "153va6km6pbd55a8xzkimk82jfa175kvkvzf3zc21c8n54kavqg1";
    };
    meta.homepage = "https://github.com/nvim-treesitter/nvim-treesitter/";
  };

  nvim-treesitter-context = buildVimPluginFrom2Nix {
    pname = "nvim-treesitter-context";
-    version = "2022-09-19";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "nvim-treesitter";
      repo = "nvim-treesitter-context";
-      rev = "3148205c72a535af0493fec7c90a12344ac2f90d";
-      sha256 = "1kfmi846mgjq1s125c2mcz6i77b92q8jyhxranc67m3b5viz8yc5";
+      rev = "8d0759eb798fee2e1201b26c3279713ac67c44c2";
+      sha256 = "1pbd9x89vcph1n67ybfnn659xlnbsy8wjx403j9hp7x1qy73906p";
    };
    meta.homepage = "https://github.com/nvim-treesitter/nvim-treesitter-context/";
  };
@ -7107,12 +7119,12 @@ final: prev:

  swayconfig-vim = buildVimPluginFrom2Nix {
    pname = "swayconfig.vim";
-    version = "2022-08-30";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "jamespeapen";
      repo = "swayconfig.vim";
-      rev = "70eb9f5866c1770f8dc18395a4a4d4040d9a4fba";
-      sha256 = "1yj2vh6hq2jjxlmrspz4rv9c1c4g82m85cvs047p9y4arp59jyqr";
+      rev = "5369682267a826a1717c1331ea5f90c19d5ff64d";
+      sha256 = "017kj74lm935bi5sxg4gm32b0jq2wmfck65cjyhmxyyy8mcwi24c";
    };
    meta.homepage = "https://github.com/jamespeapen/swayconfig.vim/";
  };
@ -7361,12 +7373,12 @@ final: prev:

  telescope-file-browser-nvim = buildVimPluginFrom2Nix {
    pname = "telescope-file-browser.nvim";
-    version = "2022-09-16";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "nvim-telescope";
      repo = "telescope-file-browser.nvim";
-      rev = "60bcf4e70ecb9392445c2a2205ee8181dff964d5";
-      sha256 = "0dnmv6n6wfl481g4jb0nkh371l3idvahi5z67nnbibm9c2jxi6fv";
+      rev = "b1bc53e0da3d26f0003ffb9602115ce258411aa5";
+      sha256 = "15ck17lrzz2ai1z5ar9m7n8yn1zm7wrhjljvrykng7w0651fz2ci";
    };
    meta.homepage = "https://github.com/nvim-telescope/telescope-file-browser.nvim/";
  };
@ -7987,12 +7999,12 @@ final: prev:

  vifm-vim = buildVimPluginFrom2Nix {
    pname = "vifm.vim";
-    version = "2022-09-18";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "vifm";
      repo = "vifm.vim";
-      rev = "f869d8125786fca806c17bc35aaacd870a16d44c";
-      sha256 = "1yxh4za9iz3yd7hf199v5s09kinvh8gflclpk92np8d6jcn639aq";
+      rev = "90eeb664a73c640fbc6304855d1a153687ae583f";
+      sha256 = "1dyck2icfn4mdjlj4sz7458qsb4ilfp7244054qpzyxmxyf0ihma";
    };
    meta.homepage = "https://github.com/vifm/vifm.vim/";
  };
@ -8323,12 +8335,12 @@ final: prev:

  vim-airline = buildVimPluginFrom2Nix {
    pname = "vim-airline";
-    version = "2022-09-07";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "vim-airline";
      repo = "vim-airline";
-      rev = "2cea8346cfaf0d92da079c27708bec7c092cef84";
-      sha256 = "01lrymsr65yc2565frgnysdi7qq0320zd5klkjsvz8kp5p5mj57v";
+      rev = "a71f9a6417fd3dc9fd4f0a5228528ec3260dc201";
+      sha256 = "1zjnxsyrgximaw0rmw6vz2dmg105vaf8faiql78mwxfnvc0dk3yp";
    };
    meta.homepage = "https://github.com/vim-airline/vim-airline/";
  };
@ -9932,12 +9944,12 @@ final: prev:

  vim-illuminate = buildVimPluginFrom2Nix {
    pname = "vim-illuminate";
-    version = "2022-09-16";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "RRethy";
      repo = "vim-illuminate";
-      rev = "b5452627d6ef9c04a27ac4edde0b00aa3a50f60f";
-      sha256 = "1cvfsdc6ybhzlk1gjdm10d14sb957nd3p7b2kcyinn61nny8pszf";
+      rev = "a2e8476af3f3e993bb0d6477438aad3096512e42";
+      sha256 = "1wk0gxvljzl6c0vrwb99mvxj755ck1c6jhvn16r1d68kva1f0nkj";
    };
    meta.homepage = "https://github.com/RRethy/vim-illuminate/";
  };
@ -10474,12 +10486,12 @@ final: prev:

  vim-matchup = buildVimPluginFrom2Nix {
    pname = "vim-matchup";
-    version = "2022-09-11";
+    version = "2022-09-21";
    src = fetchFromGitHub {
      owner = "andymass";
      repo = "vim-matchup";
-      rev = "ab8575d05f760da64321fefa88ed5d6cc8bb9369";
-      sha256 = "1cpgsnilwvqzxv3j8mhv70n46ifr25vkq23vgnw4bskrk6c7pgzp";
+      rev = "80ad7817e58755a602f993163f61f3500978ebe5";
+      sha256 = "1q001rwqp04nl09xl32c328vbbdmm9n51i3a8wszqpz3blp4jl3s";
    };
    meta.homepage = "https://github.com/andymass/vim-matchup/";
  };
@ -11314,12 +11326,12 @@ final: prev:

  vim-rails = buildVimPluginFrom2Nix {
    pname = "vim-rails";
-    version = "2022-09-13";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "tpope";
      repo = "vim-rails";
-      rev = "cb9773960222de0e44041f9a3e80a39316a69401";
-      sha256 = "0rk4mgzsfrplps3af94dpja3d507cdcjhw13zjfkkvxghw1ylp3z";
+      rev = "12b2f1a9c8d5394a9dc4e63267b2abad38eb1492";
+      sha256 = "1rj7m2w5cxdjjb6xs5nx0pjikfj8a6w48ycyzj40xdljgbj926jz";
    };
    meta.homepage = "https://github.com/tpope/vim-rails/";
  };
@ -11915,12 +11927,12 @@ final: prev:

  vim-test = buildVimPluginFrom2Nix {
    pname = "vim-test";
-    version = "2022-09-20";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "vim-test";
      repo = "vim-test";
-      rev = "dae07571033b075d8a334e7e13a8987528483f59";
-      sha256 = "1bcn9c84df49yrxjj2sq4dk0hqzhf5qss28lb68mwfykkc91pjc4";
+      rev = "8e2d3f55fdf315903a59cfa9ee60bac283a5f7fa";
+      sha256 = "0fnjgalxgyjzy5c5j20zvla1c645hgf2d5mqinz397xxss672mfm";
    };
    meta.homepage = "https://github.com/vim-test/vim-test/";
  };
@ -12587,12 +12599,12 @@ final: prev:

  vimspector = buildVimPluginFrom2Nix {
    pname = "vimspector";
-    version = "2022-09-09";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "puremourning";
      repo = "vimspector";
-      rev = "3378018bc1cdd1d9b70734c3e970bc52fd983415";
-      sha256 = "0f9f5si586vnpqh2smkycwkzhmbihvvib9dkx97mn1c3d1dwyw66";
+      rev = "2b65a05fb54e34f39317815fb7a5cefb4803d458";
+      sha256 = "1sma0jam06hxav9ws9ckpzkirab7v3bkizc8n8vj2ln90zq1d5hi";
      fetchSubmodules = true;
    };
    meta.homepage = "https://github.com/puremourning/vimspector/";
@ -12600,12 +12612,12 @@ final: prev:

  vimtex = buildVimPluginFrom2Nix {
    pname = "vimtex";
-    version = "2022-09-20";
+    version = "2022-09-22";
    src = fetchFromGitHub {
      owner = "lervag";
      repo = "vimtex";
-      rev = "8a7d1c4b97c7db3de5f67d132ef2598f4f6bccf7";
-      sha256 = "1qx6d9vf01ylcr95p49h0k2p0vjizwhk5zhjl235wpm1dw6h023k";
+      rev = "a603b5242593851c854e940d048269773222886e";
+      sha256 = "1fd1v2cb5v9cpi1x69x60pw8f5cxdgb6fn86j56aial4znzk9w74";
    };
    meta.homepage = "https://github.com/lervag/vimtex/";
  };
@ -12925,12 +12937,12 @@ final: prev:

  catppuccin-nvim = buildVimPluginFrom2Nix {
    pname = "catppuccin-nvim";
-    version = "2022-09-19";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "catppuccin";
      repo = "nvim";
-      rev = "778c1bb33f041ab79e44642bc41036ac1c56a7bd";
-      sha256 = "0pygc3z3rx5g28pbg43mqgdx9fmh10r80g52izppn8859nifmdn3";
+      rev = "4880f23b12901d7337d196f18680700d5db927d2";
+      sha256 = "1k6qzjkazzrm6f1lykj8n9lsn5w07nra8hbmf8hlcdw15gvyqdg9";
    };
    meta.homepage = "https://github.com/catppuccin/nvim/";
  };
@ -12949,12 +12961,12 @@ final: prev:

  chad = buildVimPluginFrom2Nix {
    pname = "chad";
-    version = "2022-09-20";
+    version = "2022-09-23";
    src = fetchFromGitHub {
      owner = "ms-jpq";
      repo = "chadtree";
-      rev = "fcb069987d45d2673d247e268df1bbed97e01ee0";
-      sha256 = "1ffchsx31siimw69f19zjqa8hzd7qngdbi1klz23ki0fq5i8r47p";
+      rev = "780f801e382dfe0ae7f51709db88d6228efbe2ca";
+      sha256 = "0v2ncx0r5kslwqk6hbwm2ygjz1q9b5hjp57rs5zsr7mppvq45vx4";
    };
    meta.homepage = "https://github.com/ms-jpq/chadtree/";
  };
--- a/pkgs/applications/editors/vim/plugins/vim-plugin-names
+++ b/pkgs/applications/editors/vim/plugins/vim-plugin-names
@ -303,6 +303,7 @@ https://github.com/haya14busa/incsearch.vim/,,
 https://github.com/lukas-reineke/indent-blankline.nvim/,,
 https://github.com/Yggdroot/indentLine/,,
 https://github.com/ciaranm/inkpot/,,
+https://github.com/jbyuki/instant.nvim/,HEAD,
 https://github.com/parsonsmatt/intero-neovim/,,
 https://github.com/keith/investigate.vim/,,
 https://github.com/neutaaaaan/iosvkem/,,
--- a/pkgs/applications/editors/vscode/extensions/default.nix
+++ b/pkgs/applications/editors/vscode/extensions/default.nix
@ -1203,8 +1203,8 @@ let
          mktplcRef = {
            publisher = "github";
            name = "copilot";
-            version = "1.7.4812";
-            sha256 = "1yl7m90m38pv8nz4dwcszjsa1sf253459xln17mngmc8z9wd3d3a";
+            version = "1.46.6822";
+            sha256 = "sha256-L71mC0190ZubqNVliu7es4SDsBTGVokePpcNupABI8Q=";
          };
          meta = { license = lib.licenses.unfree; };
        };
--- a/pkgs/applications/file-managers/vifm/default.nix
+++ b/pkgs/applications/file-managers/vifm/default.nix
@ -10,11 +10,11 @@
 let isFullPackage = mediaSupport;
 in stdenv.mkDerivation rec {
  pname = if isFullPackage then "vifm-full" else "vifm";
-  version = "0.12";
+  version = "0.12.1";

  src = fetchurl {
    url = "https://github.com/vifm/vifm/releases/download/v${version}/vifm-${version}.tar.bz2";
-    sha256 = "1h5j4y704nciyzg3aaav8sl3r5h9mpwq8f28cj65nnxk6a7n3a9k";
+    sha256 = "sha256-j+KBPr3Mz+ma7OArBdYqIJkVJdRrDM+67Dr2FMZlVog=";
  };

  nativeBuildInputs = [ pkg-config makeWrapper ];
--- a/pkgs/applications/gis/spatialite-gui/default.nix
+++ b/pkgs/applications/gis/spatialite-gui/default.nix
@ -0,0 +1,77 @@
+{ lib
+, stdenv
+, fetchurl
+, pkg-config
+, desktopToDarwinBundle
+, curl
+, freexl
+, geos
+, librasterlite2
+, librttopo
+, libspatialite
+, libwebp
+, libxlsxwriter
+, libxml2
+, lz4
+, minizip
+, openjpeg
+, postgresql
+, proj
+, sqlite
+, virtualpg
+, wxGTK
+, wxmac
+, zstd
+, Carbon
+, Cocoa
+, IOKit
+}:
+
+stdenv.mkDerivation rec {
+  pname = "spatialite-gui";
+  version = "2.1.0-beta1";
+
+  src = fetchurl {
+    url = "https://www.gaia-gis.it/gaia-sins/spatialite-gui-sources/spatialite_gui-${version}.tar.gz";
+    hash = "sha256-ukjZbfGM68P/I/aXlyB64VgszmL0WWtpuuMAyjwj2zM=";
+  };
+
+  nativeBuildInputs = [ pkg-config ]
+    ++ lib.optional stdenv.isDarwin desktopToDarwinBundle;
+
+  buildInputs = [
+    curl
+    freexl
+    geos
+    librasterlite2
+    librttopo
+    libspatialite
+    libwebp
+    libxlsxwriter
+    libxml2
+    lz4
+    minizip
+    openjpeg
+    postgresql
+    proj
+    sqlite
+    virtualpg
+    zstd
+  ] ++ lib.optional stdenv.isLinux wxGTK
+    ++ lib.optionals stdenv.isDarwin [ Carbon Cocoa IOKit wxmac ];
+
+  enableParallelBuilding = true;
+
+  postFixup = lib.optionalString stdenv.isDarwin ''
+    rm -fr $out/share
+  '';
+
+  meta = with lib; {
+    description = "Graphical user interface for SpatiaLite";
+    homepage = "https://www.gaia-gis.it/fossil/spatialite_gui";
+    license = licenses.gpl3Plus;
+    platforms = platforms.unix;
+    maintainers = with maintainers; [ sikmir ];
+    mainProgram = "spatialite_gui";
+  };
+}
--- a/pkgs/applications/graphics/eyedropper/default.nix
+++ b/pkgs/applications/graphics/eyedropper/default.nix
@ -15,19 +15,19 @@

 stdenv.mkDerivation rec {
  pname = "eyedropper";
-  version = "0.2.0";
+  version = "0.3.1";

  src = fetchFromGitHub {
    owner = "FineFindus";
    repo = pname;
-    rev = "v${version}";
-    hash = "sha256-xyvnnWts+VuUFlV/o1cGOM7482ReiHVsn+AfdExYBTM=";
+    rev = version;
+    hash = "sha256-dOB274OA7h1vwCuapzivHnMLLw/NTzsmOfFtHHaca1I=";
  };

  cargoDeps = rustPlatform.fetchCargoTarball {
    inherit src;
    name = "${pname}-${version}";
-    hash = "sha256-8G1fJ5YiUAzMqDoIjWGDTvtPw8chkxPrOz/c9WZRbhM=";
+    hash = "sha256-ymRl/nIUuT1BXa1dF5CMemBI8aYrdqeoVtghm6NF8cs=";
  };

  nativeBuildInputs = [
--- a/pkgs/applications/graphics/openscad/default.nix
+++ b/pkgs/applications/graphics/openscad/default.nix
@ -30,6 +30,7 @@
 , wayland
 , wayland-protocols
 , qtwayland
+, cairo
 }:

 mkDerivation rec {
@ -61,7 +62,7 @@ mkDerivation rec {
  buildInputs = [
    eigen boost glew opencsg cgal mpfr gmp glib
    harfbuzz lib3mf libzip double-conversion freetype fontconfig
-    qtbase qtmultimedia qscintilla
+    qtbase qtmultimedia qscintilla cairo
  ] ++ lib.optionals stdenv.isLinux [ libGLU libGL wayland wayland-protocols qtwayland ]
    ++ lib.optional stdenv.isDarwin qtmacextras
    ++ lib.optional spacenavSupport libspnav
--- a/pkgs/applications/graphics/unigine-sanctuary/default.nix
+++ b/pkgs/applications/graphics/unigine-sanctuary/default.nix
@ -20,8 +20,8 @@ stdenv.mkDerivation rec{
  version = "2.3";

  src = fetchurl {
-    url = "https://m12-assets.unigine.com/d/Unigine_Sanctuary-${version}.run";
-    sha256 = "1m9r79q33hx213zg3c2kknnc7hi8jp2h88s9qynny4k4rg8vpa18";
+    url = "https://assets.unigine.com/d/Unigine_Sanctuary-${version}.run";
+    sha256 = "sha256-KKi70ctkEm+tx0kjBMWVKMLDrJ1TsPH+CKLDMXA6OdU=";
  };

  libPath = lib.makeLibraryPath [
@ -94,5 +94,6 @@ stdenv.mkDerivation rec{
    license = lib.licenses.unfree;
    maintainers = [ lib.maintainers.BarinovMaxim ];
    platforms = [ "x86_64-linux" "i686-linux" ];
+    mainProgram = "Sanctuary";
  };
 }
--- a/pkgs/applications/graphics/unigine-tropics/default.nix
+++ b/pkgs/applications/graphics/unigine-tropics/default.nix
@ -22,8 +22,8 @@ stdenv.mkDerivation {
  inherit version;

  src = fetchurl {
-    url = "http://m12-assets.unigine.com/d/Unigine_Tropics-${version}.run";
-    sha256 = "0icasdp46fjnic7gk83pknjx0gpap9j202dm0llcfg5zin5kbq7x";
+    url = "https://assets.unigine.com/d/Unigine_Tropics-${version}.run";
+    sha256 = "sha256-/eA1i42/PMcoBbUJIGS66j7QpZ13oPkOi1Y6Q27TikU=";
  };

  libPath = lib.makeLibraryPath [
@ -92,5 +92,6 @@ stdenv.mkDerivation {
    license = lib.licenses.unfree;
    maintainers = [ lib.maintainers.BarinovMaxim ];
    platforms = [ "x86_64-linux" "i686-linux" ];
+    mainProgram = "Tropics";
  };
 }
--- a/pkgs/applications/graphics/unigine-valley/default.nix
+++ b/pkgs/applications/graphics/unigine-valley/default.nix
@ -38,8 +38,8 @@ stdenv.mkDerivation rec {
  inherit version;

  src = fetchurl {
-    url = "https://m11-assets.unigine.com/d/Unigine_Valley-${version}.run";
-    sha256 = "5f0c8bd2431118551182babbf5f1c20fb14e7a40789697240dcaf546443660f4";
+    url = "https://assets.unigine.com/d/Unigine_Valley-${version}.run";
+    sha256 = "sha256-XwyL0kMRGFURgrq79fHCD7FOekB4lpckDcr1RkQ2YPQ=";
  };

  sourceRoot = "Unigine_Valley-${version}";
@ -132,6 +132,7 @@ stdenv.mkDerivation rec {
    license = lib.licenses.unfree; # see also: $out/$instPath/documentation/License.pdf
    maintainers = [ lib.maintainers.kierdavis ];
    platforms = [ "x86_64-linux" "i686-linux" ];
+    mainProgram = "valley";
  };
 }

--- a/pkgs/applications/misc/1password-gui/beta.nix
+++ b/pkgs/applications/misc/1password-gui/beta.nix
@ -44,18 +44,18 @@ let

 in stdenv.mkDerivation rec {
  pname = "1password";
-  version = "8.9.0-1.BETA";
+  version = "8.9.6-30.BETA";

  src =
    if stdenv.hostPlatform.isAarch64 then
      fetchurl {
        url = "https://downloads.1password.com/linux/tar/beta/aarch64/1password-${version}.arm64.tar.gz";
-        sha256 = "0wxf1l6wh5m80f6s4f32j9i7f233lg162fw40770xxgwv8bl1f6a";
+        sha256 = "0j0v90i78y1m77gpn65iyjdy1xslv1mar1ihxj9jzcmva0nmdmra";
      }
    else
      fetchurl {
        url = "https://downloads.1password.com/linux/tar/beta/x86_64/1password-${version}.x64.tar.gz";
-        sha256 = "0vqrcwn5y350g91w3kh8n43gw21kck1cwim92dw9i0xxxch91hrg";
+        sha256 = "sha256-xBfpBkYff1X26Iu0Ee03lIiR6UdJOiaG+kZMVotG0Hc=";
      };

  nativeBuildInputs = [ makeWrapper ];
--- a/pkgs/applications/misc/1password-gui/default.nix
+++ b/pkgs/applications/misc/1password-gui/default.nix
@ -44,18 +44,18 @@ let

 in stdenv.mkDerivation rec {
  pname = "1password";
-  version = "8.8.0";
+  version = "8.9.4";

  src =
    if stdenv.hostPlatform.isAarch64 then
      fetchurl {
        url = "https://downloads.1password.com/linux/tar/stable/aarch64/1password-${version}.arm64.tar.gz";
-        sha256 = "01swx12nqqh9i3191ibc8gv92k4dzsk1qpikg053qhn1zh2ag1dd";
+        sha256 = "0y456ssfsx4cy6pcnihiwi64y90s91399qhgs4abn4pp9wr0h08g";
      }
    else
      fetchurl {
        url = "https://downloads.1password.com/linux/tar/stable/x86_64/1password-${version}.x64.tar.gz";
-        sha256 = "1rcvxxcz2q7kgf6qbcjnjhysnx9z81hvl0jfv0nkp0p1w8bf1h66";
+        sha256 = "sha256-Smq0gOGfBTjIOMwF1AI+TJwXaIiTi/YP9mGIqcjsCNQ=";
      };

  nativeBuildInputs = [ makeWrapper ];
--- a/pkgs/applications/misc/crow-translate/default.nix
+++ b/pkgs/applications/misc/crow-translate/default.nix
@ -12,15 +12,18 @@
 , qtx11extras
 , qttranslations
 , wrapQtAppsHook
+, gst_all_1
+, testers
+, crow-translate
 }:

 stdenv.mkDerivation rec {
  pname = "crow-translate";
-  version = "2.9.12";
+  version = "2.10.0";

  src = fetchzip {
    url = "https://github.com/${pname}/${pname}/releases/download/${version}/${pname}-${version}-source.tar.gz";
-    hash = "sha256-JkAykc5j5HMkK48qAm876A2zBD095CG/yR4TyXAdevM=";
+    hash = "sha256-ayEt4PI15NjlmFrDEa6Ipbn94nN9Ga7jThnIVBWPgKw=";
  };

  patches = [
@ -31,6 +34,11 @@ stdenv.mkDerivation rec {
    })
  ];

+  postPatch = ''
+    substituteInPlace data/io.crow_translate.CrowTranslate.desktop \
+      --replace "Exec=qdbus" "Exec=${lib.getBin qttools}/bin/qdbus"
+  '';
+
  nativeBuildInputs = [
    cmake
    extra-cmake-modules
@ -44,18 +52,27 @@ stdenv.mkDerivation rec {
    tesseract4
    qtmultimedia
    qtx11extras
-  ];
+  ] ++ (with gst_all_1; [
+    gstreamer
+    gst-plugins-base
+    gst-plugins-good
+    gst-plugins-bad
+  ]);

-  postInstall = ''
-    substituteInPlace $out/share/applications/io.crow_translate.CrowTranslate.desktop \
-      --replace "Exec=qdbus" "Exec=${lib.getBin qttools}/bin/qdbus"
+  preFixup = ''
+    qtWrapperArgs+=(--prefix GST_PLUGIN_SYSTEM_PATH_1_0 : "$GST_PLUGIN_SYSTEM_PATH_1_0")
  '';

+  passthru.tests.version = testers.testVersion {
+    package = crow-translate;
+  };
+
  meta = with lib; {
    description = "A simple and lightweight translator that allows to translate and speak text using Google, Yandex and Bing";
    homepage = "https://crow-translate.github.io/";
    license = licenses.gpl3Plus;
    maintainers = with maintainers; [ sikmir ];
    platforms = platforms.linux;
+    mainProgram = "crow";
  };
 }
--- a/pkgs/applications/misc/hugo/default.nix
+++ b/pkgs/applications/misc/hugo/default.nix
@ -2,16 +2,16 @@

 buildGoModule rec {
  pname = "hugo";
-  version = "0.103.1";
+  version = "0.104.0";

  src = fetchFromGitHub {
    owner = "gohugoio";
    repo = pname;
    rev = "v${version}";
-    sha256 = "sha256-KSNBbSJROx65WxOd98XLLbbSDL0x4ESEKVIsrZV911k=";
+    sha256 = "sha256-yvU3owVbYrG0D0zy6MTTwwKC+b2vE7/trMsuR9VX58E=";
  };

-  vendorSha256 = "sha256-Y0+D5H7kWi+bacJm1pouYDPHnnSRPatOt6qPfkk92X4=";
+  vendorSha256 = "sha256-K7rQSs4PqFGV4gZ6UevS7S0w0OQykAkHntklKz5vPrU=";

  doCheck = false;

--- a/pkgs/applications/misc/keeweb/default.nix
+++ b/pkgs/applications/misc/keeweb/default.nix
@ -1,21 +1,21 @@
 { lib, stdenv, fetchurl, appimageTools, undmg, libsecret, libxshmfence }:
 let
  pname = "keeweb";
-  version = "1.18.6";
+  version = "1.18.7";
  name = "${pname}-${version}";

  srcs = {
    x86_64-linux = fetchurl {
      url = "https://github.com/keeweb/keeweb/releases/download/v${version}/KeeWeb-${version}.linux.AppImage";
-      sha256 = "sha256-hxXs8Dfh5YQy1zaFb20KDWNl8eqFjuN5QY7tsO6+E/U=";
+      hash = "sha256-W3Dfo7YZfLObodAS7ZN3jqnYzLNAnjJIfJC6il5THwY=";
    };
    x86_64-darwin = fetchurl {
      url = "https://github.com/keeweb/keeweb/releases/download/v${version}/KeeWeb-${version}.mac.x64.dmg";
-      sha256 = "sha256-8+7NzaHVcLinKb57SAcJmF2Foy9RfxFhcTxzvL0JSJQ=";
+      hash = "sha256-+ZFGrrw0tZ7F6lb/3iBIyGD+tp1puVhkPv10hfp6ATU=";
    };
    aarch64-darwin = fetchurl {
      url = "https://github.com/keeweb/keeweb/releases/download/v${version}/KeeWeb-${version}.mac.arm64.dmg";
-      sha256 = "sha256-1BNY6kRS0F+AUI+80ZGFi/ek28NMP1uexo1UORz5D6g=";
+      hash = "sha256-bkhwsWYLkec16vMOfXUce7jfrmI9W2xHiZvU1asebK4=";
    };
  };
  src = srcs.${stdenv.hostPlatform.system};
@ -28,6 +28,7 @@ let
    description = "Free cross-platform password manager compatible with KeePass";
    homepage = "https://keeweb.info/";
    changelog = "https://github.com/keeweb/keeweb/blob/v${version}/release-notes.md";
+    sourceProvenance = with sourceTypes; [ binaryNativeCode ];
    license = licenses.mit;
    maintainers = with maintainers; [ sikmir ];
    platforms = builtins.attrNames srcs;
@ -44,7 +45,7 @@ let
      install -Dm644 ${appimageContents}/keeweb.png -t $out/share/icons/hicolor/256x256/apps
      install -Dm644 ${appimageContents}/usr/share/mime/keeweb.xml -t $out/share/mime
      substituteInPlace $out/share/applications/keeweb.desktop \
-        --replace 'Exec=AppRun' 'Exec=${pname}'
+        --replace "Exec=AppRun" "Exec=$out/bin/${pname}"
    '';
  };

--- a/pkgs/applications/misc/minigalaxy/default.nix
+++ b/pkgs/applications/misc/minigalaxy/default.nix
@ -16,13 +16,13 @@

 python3Packages.buildPythonApplication rec {
  pname = "minigalaxy";
-  version = "1.1.0";
+  version = "1.2.1";

  src = fetchFromGitHub {
    owner = "sharkwouter";
    repo = pname;
-    rev = version;
-    sha256 = "sha256-BbtwLuG5TH/+06Ez8+mwSAjG1IWg9/3uxzjmgPHczAw=";
+    rev = "refs/tags/${version}";
+    sha256 = "sha256-KTbur9UhV08Wy3Eg/UboG0fZ/6nzNABAildnhe64FEs=";
  };

  checkPhase = ''
--- a/pkgs/applications/misc/mu-repo/default.nix
+++ b/pkgs/applications/misc/mu-repo/default.nix
@ -1,25 +1,30 @@
-{ lib, fetchFromGitHub, buildPythonApplication, pytestCheckHook, git }:
+{ lib, fetchFromGitHub, buildPythonApplication, pytestCheckHook, git, testers, mu-repo }:

 buildPythonApplication rec {
  pname = "mu-repo";
-  version = "1.8.1";
+  version = "1.8.2";

  src = fetchFromGitHub {
    owner = "fabioz";
-    repo = pname;
+    repo = "mu-repo";
    rev = "mu_repo_${lib.replaceStrings [ "." ] [ "_" ] version}";
-    sha256 = "0mmjdkvmdlsndi2q56ybxyz2988ppxsbbr1g54nzzkkvab2bc2na";
+    hash = "sha256-COc7hbu72eA+ikZQkz6zXtFyaa/AKhoF+Zvsr6ZVOuY=";
  };

  propagatedBuildInputs = [ git ];

  checkInputs = [ pytestCheckHook git ];

+  passthru.tests.version = testers.testVersion {
+    package = mu-repo;
+  };
+
  meta = with lib; {
    description = "Tool to help in dealing with multiple git repositories";
    homepage = "http://fabioz.github.io/mu-repo/";
    license = licenses.gpl3;
    platforms = platforms.unix;
    maintainers = with maintainers; [ sikmir ];
+    mainProgram = "mu";
  };
 }
--- a/pkgs/applications/misc/octoprint/default.nix
+++ b/pkgs/applications/misc/octoprint/default.nix
@ -43,7 +43,7 @@ let
                owner = "OctoPrint";
                repo = "OctoPrint-FirmwareCheck";
                rev = version;
-                sha256 = "0hl0612x0h4pcwsrga5il5x3m04j37cmyzh2dg1kl971cvrw79n2";
+                hash = "sha256-wqbD82bhJDrDawJ+X9kZkoA6eqGxqJc1Z5dA0EUwgEI=";
              };
              doCheck = false;
            };
@ -61,7 +61,7 @@ let
                owner = "OctoPrint";
                repo = "OctoPrint-PiSupport";
                rev = version;
-                sha256 = "sha256-3z5Btl287W3j+L+MQG8FOWt21smML0vpmu9BP48B9A0=";
+                hash = "sha256-3z5Btl287W3j+L+MQG8FOWt21smML0vpmu9BP48B9A0=";
              };

              # requires octoprint itself during tests
@ -74,16 +74,17 @@ let
          self: super: {
            octoprint = self.buildPythonPackage rec {
              pname = "OctoPrint";
-              version = "1.8.2";
+              version = "1.8.3";

              src = fetchFromGitHub {
                owner = "OctoPrint";
                repo = "OctoPrint";
                rev = version;
-                sha256 = "sha256-uJuGeDS4TnGH1r+6oHtcJDZVGM7hDmkJpB35B1JtqQ0=";
+                hash = "sha256-uLQUVYxy7diOJl69sQ+7eshK0fsG34Fto+Zzih1MeVE=";
              };

              propagatedBuildInputs = with super; [
+                argon2-cffi
                blinker
                cachelib
                click
@ -95,6 +96,7 @@ let
                flask-babel
                flask_assets
                flask_login
+                flask-limiter
                frozendict
                future
                itsdangerous
@ -107,6 +109,7 @@ let
                octoprint-filecheck
                octoprint-firmwarecheck
                octoprint-pisupport
+                passlib
                pathvalidate
                pkginfo
                pip
--- a/pkgs/applications/misc/sigi/default.nix
+++ b/pkgs/applications/misc/sigi/default.nix
@ -2,14 +2,14 @@

 rustPlatform.buildRustPackage rec {
  pname = "sigi";
-  version = "3.4.2";
+  version = "3.4.3";

  src = fetchCrate {
    inherit pname version;
-    sha256 = "sha256-YlTawz09i7k5QxaybKSo4IhECs6UdDSNV+ylIJgKPt4=";
+    sha256 = "sha256-CDu/tllCwmt+UO4ae1uFkR4KKCWdxM4aW1O7oY59qHE=";
  };

-  cargoSha256 = "sha256-L4eIGxQTM+sZWXWZDGtSwsCT54CWLbyPQ9b+Jf6s94U=";
+  cargoSha256 = "sha256-pMOaw7Ra78aRisYF9ttbpjB/cbylpzZXw8DtBqn5Tjo=";
  nativeBuildInputs = [ installShellFiles ];

  # In case anything goes wrong.
--- a/pkgs/applications/misc/ttyper/default.nix
+++ b/pkgs/applications/misc/ttyper/default.nix
@ -2,16 +2,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "ttyper";
-  version = "0.4.3";
+  version = "1.0.0";

  src = fetchFromGitHub {
    owner = "max-niederman";
    repo = pname;
    rev = "v${version}";
-    sha256 = "sha256-rdQaUaNBnYCU11OMLqnidPYiJB2Ywly6NVw2W40kxng=";
+    sha256 = "sha256-yReDHe5UJfBnEIhOp/3nHQkhp6YQQGDWqihLYi9IxdM=";
  };

-  cargoSha256 = "sha256-jJAluIyyU9XfN4BEZw2VbJHZvJ+6MJ781lvbAueUhKM=";
+  cargoSha256 = "sha256-5vhtF8GKg4Cw3F1GlhpWz2VMZfcMpCijlHTGmbKHjP8=";

  meta = with lib; {
    description = "Terminal-based typing test";
--- a/pkgs/applications/networking/apache-directory-studio/default.nix
+++ b/pkgs/applications/networking/apache-directory-studio/default.nix
@ -1,4 +1,4 @@
-{ lib, stdenv, fetchurl, jdk, makeWrapper, autoPatchelfHook, makeDesktopItem, glib, libsecret }:
+{ lib, stdenv, fetchurl, jdk, makeWrapper, autoPatchelfHook, makeDesktopItem, glib, libsecret, webkitgtk }:

 stdenv.mkDerivation rec {
  pname = "apache-directory-studio";
@ -37,7 +37,8 @@ stdenv.mkDerivation rec {

    makeWrapper "$dest/ApacheDirectoryStudio" \
        "$out/bin/ApacheDirectoryStudio" \
-        --prefix PATH : "${jdk}/bin"
+        --prefix PATH : "${jdk}/bin" \
+        --prefix LD_LIBRARY_PATH : ${lib.makeLibraryPath ([ webkitgtk ])}
    install -D icon.xpm "$out/share/pixmaps/apache-directory-studio.xpm"
    install -D -t "$out/share/applications" ${desktopItem}/share/applications/*
  '';
--- a/pkgs/applications/networking/browsers/firefox-bin/beta_sources.nix
+++ b/pkgs/applications/networking/browsers/firefox-bin/beta_sources.nix
--- a/pkgs/applications/networking/browsers/firefox-bin/devedition_sources.nix
+++ b/pkgs/applications/networking/browsers/firefox-bin/devedition_sources.nix
--- a/pkgs/applications/networking/browsers/firefox-bin/release_sources.nix
+++ b/pkgs/applications/networking/browsers/firefox-bin/release_sources.nix
--- a/pkgs/applications/networking/browsers/firefox/packages.nix
+++ b/pkgs/applications/networking/browsers/firefox/packages.nix
@ -3,10 +3,10 @@
 rec {
  firefox = buildMozillaMach rec {
    pname = "firefox";
-    version = "105.0";
+    version = "105.0.1";
    src = fetchurl {
      url = "mirror://mozilla/firefox/releases/${version}/source/firefox-${version}.source.tar.xz";
-      sha512 = "a48f323f874b538402630a9094daa83189b3ca319feddc80fd66d087eca13f21c8b2d85be9c29e948c18cb7c524adac44e135adcde4d4592738e104ae9c1a734";
+      sha512 = "66ef7cd5028953e7da9d55e127135739c9d85be68ec633b71c52d6c9427edb0bd8a38504148484cd322adcefb57bfefe6e57cb15855f195508fe438864f4322b";
    };

    meta = {
--- a/pkgs/applications/networking/browsers/firefox/update.nix
+++ b/pkgs/applications/networking/browsers/firefox/update.nix
@ -9,7 +9,7 @@
 , gnupg
 , attrPath
 , runtimeShell
-, baseUrl ? "http://archive.mozilla.org/pub/firefox/releases/"
+, baseUrl ? "https://archive.mozilla.org/pub/firefox/releases/"
 , versionPrefix ? ""
 , versionSuffix ? ""
 , versionKey ? "version"
--- a/pkgs/applications/networking/cluster/argo-rollouts/default.nix
+++ b/pkgs/applications/networking/cluster/argo-rollouts/default.nix
@ -2,16 +2,16 @@

 buildGoModule rec {
  pname = "argo-rollouts";
-  version = "1.2.2";
+  version = "1.3.0";

  src = fetchFromGitHub {
    owner = "argoproj";
    repo = "argo-rollouts";
    rev = "v${version}";
-    sha256 = "sha256-l23RVpwT/XYkpVTWkSYdPyvn7Xirs0Sf85U6Wrx5H1k=";
+    sha256 = "sha256-CsH/qYhi4sw4u7MZMSdNT5fAae5APwrvJQbubDCLbLY=";
  };

-  vendorSha256 = "sha256-URuIeF1ejKdMGxziJbujLctYheiIr/Jfo+gTzppZG9E=";
+  vendorSha256 = "sha256-gm96rQdQJGsIcxVgEI7sI7BvEETU/+HsQ6PnDjFXb/0=";

  # Disable tests since some test fail because of missing test data
  doCheck = false;
--- a/pkgs/applications/networking/cluster/arkade/default.nix
+++ b/pkgs/applications/networking/cluster/arkade/default.nix
@ -7,13 +7,13 @@

 buildGoModule rec {
  pname = "arkade";
-  version = "0.8.44";
+  version = "0.8.45";

  src = fetchFromGitHub {
    owner = "alexellis";
    repo = "arkade";
    rev = version;
-    sha256 = "sha256-2+/CQhaeg/5FUx/igitt2MM3J0p5qYOQpc9zi60Tqkg=";
+    sha256 = "sha256-9CH91ITbogg/xFA1eqmjeYkyjsPPUvD5+4L6NhqTNp8=";
  };

  CGO_ENABLED = 0;
--- a/pkgs/applications/networking/cluster/civo/default.nix
+++ b/pkgs/applications/networking/cluster/civo/default.nix
@ -1,17 +1,19 @@
-{ stdenv, lib, buildGoModule, fetchFromGitHub }:
+{ lib, buildGoModule, fetchFromGitHub, installShellFiles }:

 buildGoModule rec {
  pname = "civo";
-  version = "1.0.32";
+  version = "1.0.40";

  src = fetchFromGitHub {
    owner  = "civo";
    repo   = "cli";
    rev    = "v${version}";
-    sha256 = "sha256-Q/eSYm+SupHdRf7O7dU+UU+1GOwtjcsT0iFxWiKAEuw=";
+    sha256 = "sha256-rsO7vGPr80/ChoNtRGuJDnVDzxwBgLD//iMZEfvxvHc=";
  };

-  vendorSha256 = "sha256-ZZwecjcJqKOj2ywy4el1SVMs+0a/F6tFP37MYDC6tyg=";
+  vendorSha256 = "sha256-gBVSpjoAfbxlJnlrFrsBupJgVQ59sh1ipOry0Mgppig=";
+
+  nativeBuildInputs = [ installShellFiles ];

  CGO_ENABLED = 0;

@ -20,15 +22,19 @@ buildGoModule rec {

  ldflags = [
    "-s"
-    "-X github.com/civo/cli/cmd.VersionCli=${version}"
-    "-X github.com/civo/cli/cmd.CommitCli=${src.rev}"
-    "-X github.com/civo/cli/cmd.DateCli=unknown"
+    "-X github.com/civo/cli/common.VersionCli=${version}"
+    "-X github.com/civo/cli/common.CommitCli=${src.rev}"
+    "-X github.com/civo/cli/common.DateCli=unknown"
  ];

  doInstallCheck = false;

  postInstall = ''
    mv $out/bin/cli $out/bin/civo
+    installShellCompletion --cmd civo \
+      --bash <($out/bin/civo completion bash) \
+      --fish <($out/bin/civo completion fish) \
+      --zsh <($out/bin/civo completion zsh)
  '';

  meta = with lib; {
--- a/pkgs/applications/networking/cluster/pgo-client/default.nix
+++ b/pkgs/applications/networking/cluster/pgo-client/default.nix
@ -2,13 +2,13 @@

 buildGoModule rec {
  pname = "pgo-client";
-  version = "4.7.5";
+  version = "4.7.7";

  src = fetchFromGitHub {
    owner = "CrunchyData";
    repo = "postgres-operator";
    rev = "v${version}";
-    sha256 = "sha256-1GYpvw3ch03Cx4BReNwLnbgbds4uuSe/cjvbHuRhLOw=";
+    sha256 = "sha256-rHWCj25NEKbwV1kmuH6k3oWSXKelknb2GRDgLaZSb3U=";
  };

  vendorSha256 = "sha256-5/mLlgNdlX/ABrpofPqowCskxFwJAEKVpbsMOvMvTWc=";
--- a/pkgs/applications/networking/cluster/terraform-providers/default.nix
+++ b/pkgs/applications/networking/cluster/terraform-providers/default.nix
@ -17,17 +17,18 @@ let
     , repo
     , rev
     , version
-     , sha256
-     , vendorSha256
+     , hash ? throw "use hash instead of sha256" # added 2202/09
+     , vendorHash ? throw "use vendorHash instead of vendorSha256" # added 2202/09
     , deleteVendor ? false
     , proxyVendor ? false
     , mkProviderGoModule ? buildGoModule
-     , # Looks like "registry.terraform.io/vancluever/acme"
-       provider-source-address
+       # Looks like "registry.terraform.io/vancluever/acme"
+     , provider-source-address
+     , ...
     }@attrs:
      mkProviderGoModule {
        pname = repo;
-        inherit vendorSha256 version deleteVendor proxyVendor;
+        inherit vendorHash version deleteVendor proxyVendor;
        subPackages = [ "." ];
        doCheck = false;
        # https://github.com/hashicorp/terraform-provider-scaffolding/blob/a8ac8375a7082befe55b71c8cbb048493dd220c2/.goreleaser.yml
@ -36,7 +37,7 @@ let
        ldflags = [ "-s" "-w" "-X main.version=${version}" "-X main.commit=${rev}" ];
        src = fetchFromGitHub {
          name = "source-${rev}";
-          inherit owner repo rev sha256;
+          inherit owner repo rev hash;
        };

        # Move the provider to libexec
--- a/pkgs/applications/networking/cluster/terraform-providers/providers.json
+++ b/pkgs/applications/networking/cluster/terraform-providers/providers.json
--- a/pkgs/applications/networking/cluster/terraform-providers/update-provider
+++ b/pkgs/applications/networking/cluster/terraform-providers/update-provider
@ -28,14 +28,14 @@ Options:

  * --force: Force the update even if the version matches.
  * --no-build: Don't build provider
-  * --vendor-sha256 <sha256>: Override the SHA256 or "null".
+  * --vendor-hash <SRI-hash>: Override the SHA256 or "null".
 DOC
 }

 force=
 provider=
 build=1
-vendorSha256=
+vendorHash=

 while [[ $# -gt 0 ]]; do
  case "$1" in
@ -51,9 +51,9 @@ while [[ $# -gt 0 ]]; do
    build=0
    shift
    ;;
-  --vendor-sha256)
+  --vendor-hash)
    force=1
-    vendorSha256=$2
+    vendorHash=$2
    shift 2
    ;;
  *)
@ -93,14 +93,14 @@ repo_root=$(git rev-parse --show-toplevel)

 generate_hash() {
  nix-prefetch -I nixpkgs="${repo_root}" \
-    "{ sha256 }: (import ${repo_root} {}).terraform-providers.${provider}.$1.overrideAttrs (_: { $2 = sha256; })"
+    "{ sha256 }: (import ${repo_root} {}).terraform-providers.${provider}.$1.overrideAttrs (_: { inherit sha256; })"
 }

 echo_provider() {
  echo "== terraform-providers.${provider}: $* =="
 }

-pushd "$(dirname "$0")"
+pushd "$(dirname "$0")" >/dev/null

 if [[ ${provider} =~ ^[^/]+/[^/]+$ ]]; then
  echo_provider "init"
@ -109,13 +109,13 @@ if [[ ${provider} =~ ^[^/]+/[^/]+$ ]]; then
  update_attr "provider-source-address" "${source_address}"
  update_attr version "0"
  # create empty stings so nix-prefetch works
-  update_attr sha256 ""
-  update_attr vendorSha256 ""
+  update_attr hash ""
+  update_attr vendorHash ""
 else
  source_address="$(read_attr provider-source-address)"
 fi

-old_vendor_sha256=$(read_attr vendorSha256)
+old_vendor_hash=$(read_attr vendorHash)
 old_version=$(read_attr version)

 # The provider source address (used inside Terraform `required_providers` block) is
@ -127,7 +127,7 @@ old_version=$(read_attr version)
 registry_response=$(curl -s https://"${source_address/\///v1/providers/}")

 version="$(jq -r '.version' <<<"${registry_response}")"
-if [[ ${old_version} == "${version}" && ${force} != 1 && -z ${vendorSha256} && ${old_vendor_sha256} != "${vendorSha256}" ]]; then
+if [[ ${old_version} == "${version}" && ${force} != 1 && -z ${vendorHash} && ${old_vendor_hash} != "${vendorHash}" ]]; then
  echo_provider "already at version ${version}"
  exit
 fi
@ -146,20 +146,20 @@ repo="$(echo "${provider_source_url}" | cut -d '/' -f 5)"
 update_attr repo "${repo}"
 rev="$(jq -r '.tag' <<<"${registry_response}")"
 update_attr rev "${rev}"
-echo_provider "calculating sha256"
-sha256=$(generate_hash src outputHash)
-update_attr sha256 "${sha256}"
+echo_provider "calculating hash"
+hash=$(generate_hash src)
+update_attr hash "${hash}"

-if [[ -z ${vendorSha256} ]]; then
-  if [[ ${old_vendor_sha256} == null ]]; then
-    vendorSha256=null
+if [[ -z ${vendorHash} ]]; then
+  if [[ ${old_vendor_hash} == null ]]; then
+    vendorHash=null
  else
-    echo_provider "calculating vendorSha256"
-    vendorSha256=$(generate_hash go-modules vendorSha256)
+    echo_provider "calculating vendorHash"
+    vendorHash=$(generate_hash go-modules)
  fi
 fi

-update_attr vendorSha256 "${vendorSha256}"
+update_attr vendorHash "${vendorHash}"

 # Check that the provider builds
 if [[ ${build} == 1 ]]; then
@ -167,4 +167,4 @@ if [[ ${build} == 1 ]]; then
  nix-build --no-out-link "${repo_root}" -A "terraform-providers.${provider}"
 fi

-popd
+popd >/dev/null
--- a/pkgs/applications/networking/feedreaders/yarr/default.nix
+++ b/pkgs/applications/networking/feedreaders/yarr/default.nix
@ -0,0 +1,38 @@
+{ lib, buildGoModule, fetchFromGitHub, testers, yarr }:
+
+buildGoModule rec {
+  pname = "yarr";
+  version = "2.3";
+
+  src = fetchFromGitHub {
+    owner = "nkanaev";
+    repo = "yarr";
+    rev = "v${version}";
+    hash = "sha256-LW0crWdxS6zcY5rxR0F2FLDYy9Ph2ZKyB/5VFVss+tA=";
+  };
+
+  vendorHash = "sha256-yXnoibqa0+lHhX3I687thGgasaVeNiHpGFmtEnH7oWY=";
+
+  subPackages = [ "src" ];
+
+  ldflags = [ "-s" "-w" "-X main.Version=${version}" "-X main.GitHash=none" ];
+
+  tags = [ "sqlite_foreign_keys" "release" ];
+
+  postInstall = ''
+    mv $out/bin/{src,yarr}
+  '';
+
+  passthru.tests.version = testers.testVersion {
+    package = yarr;
+    version = "v${version}";
+  };
+
+  meta = with lib; {
+    description = "Yet another rss reader";
+    homepage = "https://github.com/nkanaev/yarr";
+    changelog = "https://github.com/nkanaev/yarr/blob/v${version}/doc/changelog.txt";
+    license = licenses.mit;
+    maintainers = with maintainers; [ sikmir ];
+  };
+}
--- a/pkgs/applications/networking/flexget/default.nix
+++ b/pkgs/applications/networking/flexget/default.nix
@ -5,14 +5,14 @@

 python3Packages.buildPythonApplication rec {
  pname = "flexget";
-  version = "3.3.29";
+  version = "3.3.30";

  # Fetch from GitHub in order to use `requirements.in`
  src = fetchFromGitHub {
    owner = "flexget";
    repo = "flexget";
    rev = "refs/tags/v${version}";
-    hash = "sha256-BUOjcde6/9IzkEBR1TsDBPr4rArRs83X/vwYQr+72ww=";
+    hash = "sha256-LwMbqweRtH0l+89pRns6VbQgWOy3j34i76IwYdOUW0M=";
  };

  postPatch = ''
--- a/pkgs/applications/networking/instant-messengers/cinny-desktop/default.nix
+++ b/pkgs/applications/networking/instant-messengers/cinny-desktop/default.nix
@ -11,11 +11,11 @@

 stdenv.mkDerivation rec {
  name = "cinny-desktop";
-  version = "2.1.3";
+  version = "2.2.0";

  src = fetchurl {
    url = "https://github.com/cinnyapp/cinny-desktop/releases/download/v${version}/Cinny_desktop-x86_64.deb";
-    sha256 = "sha256-fUnWGnulj/515aEdd+rCy/LGLLAs2yAOOBUn9K1LhNs=";
+    sha256 = "sha256-UvNvfgOaqG2P3pl7cHwP0E7f8JLMo1EDiDAy05pJVE4=";
  };

  nativeBuildInputs = [
--- a/pkgs/applications/networking/instant-messengers/slack/default.nix
+++ b/pkgs/applications/networking/instant-messengers/slack/default.nix
@ -44,14 +44,14 @@ let

  pname = "slack";

-  x86_64-darwin-version = "4.27.154";
-  x86_64-darwin-sha256 = "0a3cc9kkiq18vr4hk532vc59cza1hq8qh9x9hlhli4n72n3h7y3n";
+  x86_64-darwin-version = "4.28.182";
+  x86_64-darwin-sha256 = "0x0zc45k0jh0hivgjymcxnnwc2lwyfq68rw39lbxp4i1ir2sbnxg";

-  x86_64-linux-version = "4.27.156";
-  x86_64-linux-sha256 = "sha256-/xtD+/+KGtPr4vQJm8ZczvpyPxfMBw0OE7hzTzFhSs0=";
+  x86_64-linux-version = "4.28.171";
+  x86_64-linux-sha256 = "sha256-rsHX/NLLGR0XZsg3Cc6GjNK6rSc9UmM2XkfjqwsJZV4=";

-  aarch64-darwin-version = "4.27.154";
-  aarch64-darwin-sha256 = "1n3vgcsbi1w49w4xqc5hyadb9qwvsqdiirfw9v4s65wsnark1iz6";
+  aarch64-darwin-version = "4.28.182";
+  aarch64-darwin-sha256 = "0bc8lhmpm0310gh1w9xkb8i1cpldchm4b4mzsr9h0mhvljxmvlyf";

  version = {
    x86_64-darwin = x86_64-darwin-version;
--- a/pkgs/applications/networking/mailreaders/bluemail/default.nix
+++ b/pkgs/applications/networking/mailreaders/bluemail/default.nix
@ -0,0 +1,82 @@
+{ stdenv
+, lib
+, fetchurl
+, dpkg
+, autoPatchelfHook
+, pango
+, gtk3
+, alsa-lib
+, nss
+, libXdamage
+, libdrm
+, mesa
+, libxshmfence
+, makeWrapper
+, wrapGAppsHook
+, gcc-unwrapped
+, udev
+}:
+
+stdenv.mkDerivation rec {
+  pname = "bluemail";
+  version = "1.131.4-1795";
+
+  # Taking a snapshot of the DEB release because there are no tagged version releases.
+  # For new versions, download the upstream release, extract it and check for the version string.
+  # In case there's a new version, create a snapshot of it on https://archive.org before updating it here.
+  src = fetchurl {
+    url = "https://web.archive.org/web/20220921124548/https://download.bluemail.me/BlueMail/deb/BlueMail.deb";
+    sha256 = "sha256-deO+D9HSfj1YEDSO5Io0MA7H8ZK9iFSRwB/e+8GkgOU=";
+  };
+
+  nativeBuildInputs = [
+    autoPatchelfHook
+    makeWrapper
+    dpkg
+    wrapGAppsHook
+  ];
+
+  buildInputs = [
+    pango
+    gtk3
+    alsa-lib
+    nss
+    libXdamage
+    libdrm
+    mesa
+    libxshmfence
+    udev
+  ];
+
+  unpackCmd = "${dpkg}/bin/dpkg-deb -x $src debcontents";
+
+  dontBuild = true;
+  dontStrip = true;
+  dontWrapGApps = true;
+
+  installPhase = ''
+    mkdir -p $out/bin
+    mv opt/BlueMail/* $out
+    ln -s $out/bluemail $out/bin/bluemail
+  '';
+
+  makeWrapperArgs = [
+    "--prefix LD_LIBRARY_PATH : ${lib.makeLibraryPath [ gcc-unwrapped.lib gtk3 udev ]}"
+    "--prefix PATH : ${lib.makeBinPath [ stdenv.cc ]}"
+  ];
+
+  preFixup = ''
+    wrapProgram $out/bin/bluemail \
+      ''${makeWrapperArgs[@]} \
+      ''${gappsWrapperArgs[@]}
+  '';
+
+  meta = with lib; {
+    description = "Free, secure, universal email app, capable of managing an unlimited number of mail accounts";
+    homepage = "https://bluemail.me";
+    license = licenses.unfree;
+    platforms = platforms.linux;
+    sourceProvenance = with sourceTypes; [ binaryNativeCode ];
+    maintainers = with maintainers; [ onny ];
+  };
+}
--- a/pkgs/applications/networking/mailreaders/mailnag/default.nix
+++ b/pkgs/applications/networking/mailreaders/mailnag/default.nix
@ -103,5 +103,6 @@ python3Packages.buildPythonApplication rec {
    license = licenses.gpl2;
    platforms = platforms.linux;
    maintainers = with maintainers; [ doronbehar ];
+    broken = true; # at 2022-09-23
  };
 }
--- a/pkgs/applications/networking/shellhub-agent/default.nix
+++ b/pkgs/applications/networking/shellhub-agent/default.nix
@ -8,18 +8,18 @@

 buildGoModule rec {
  pname = "shellhub-agent";
-  version = "0.10.1";
+  version = "0.10.2";

  src = fetchFromGitHub {
    owner = "shellhub-io";
    repo = "shellhub";
    rev = "v${version}";
-    sha256 = "jeZh1vPXUN/jcf306S6KdIeHygci+4+uky4MXQgRlpA=";
+    sha256 = "F0kDrucPjjzlSiYDuZBO7xT0hTT0BNpHDCKbzWFQCzo=";
  };

  modRoot = "./agent";

-  vendorSha256 = "sha256-AqtDI1GFw4cduFdWRSh9lYe/OwvEdu5iB0+ud8QPgXM=";
+  vendorSha256 = "sha256-IYDy3teo+hm+yEfZa9V9MFNGmO2tqeh3lAq+Eh4Ek+A=";

  ldflags = [ "-s" "-w" "-X main.AgentVersion=v${version}" ];

--- a/pkgs/applications/office/mmex/default.nix
+++ b/pkgs/applications/office/mmex/default.nix
@ -28,5 +28,6 @@ stdenv.mkDerivation rec {
    license = lib.licenses.gpl2Plus;
    maintainers = with lib.maintainers; [viric];
    platforms = with lib.platforms; linux;
+    broken = true; # at 2022-11-23
  };
 }
--- a/pkgs/applications/office/qownnotes/default.nix
+++ b/pkgs/applications/office/qownnotes/default.nix
@ -5,13 +5,13 @@

 mkDerivation rec {
  pname = "qownnotes";
-  version = "22.9.0";
+  version = "22.9.1";

  src = fetchurl {
    url = "https://download.tuxfamily.org/${pname}/src/${pname}-${version}.tar.xz";
    # Fetch the checksum of current version with curl:
    # curl https://download.tuxfamily.org/qownnotes/src/qownnotes-<version>.tar.xz.sha256
-    sha256 = "sha256-PTaOExBWx7YTdVpDDSwnPu3vt12Yfh2/FW2xwnhB9WA=";
+    sha256 = "sha256-uVcu14Pg9Na3qG05O03IGWp71N994S2zRyTkcSjwhrk=";
  };

  nativeBuildInputs = [ qmake qttools ];
--- a/pkgs/applications/office/trilium/default.nix
+++ b/pkgs/applications/office/trilium/default.nix
@ -10,13 +10,13 @@ let
    maintainers = with maintainers; [ fliegendewurst ];
  };

-  version = "0.54.3";
+  version = "0.55.1";

  desktopSource.url = "https://github.com/zadam/trilium/releases/download/v${version}/trilium-linux-x64-${version}.tar.xz";
-  desktopSource.sha256 = "1r7gzvcgdy8i5z5l8z4xw6s44mplr6h1pnpp19di953zmywbdi0f";
+  desktopSource.sha256 = "0c12azw0hrax392ymn25nqszdhsy8p5cf970rfq9d98qp0i8ywf0";

  serverSource.url = "https://github.com/zadam/trilium/releases/download/v${version}/trilium-linux-x64-server-${version}.tar.xz";
-  serverSource.sha256 = "1c3mcga87ifdlgxdhsgxndmqqkjl2glxilyf702wf1bpscsirc4z";
+  serverSource.sha256 = "04yjkmz2ck6r0c2593w2ck4w66x9wjzma0vaddx29b9anh9vrln3";

 in {

--- a/pkgs/applications/science/electronics/kicad/base.nix
+++ b/pkgs/applications/science/electronics/kicad/base.nix
@ -20,6 +20,7 @@
 , libpthreadstubs
 , libXdmcp
 , lndir
+, unixODBC

 , util-linux
 , libselinux
@ -32,7 +33,7 @@
 , at-spi2-core
 , libXtst

-, swig
+, swig4
 , python
 , wxPython
 , opencascade-occt
@ -68,16 +69,18 @@ stdenv.mkDerivation rec {
  # tagged releases don't have "unknown"
  # kicad nightlies use git describe --dirty
  # nix removes .git, so its approximated here
-  postPatch = ''
-    substituteInPlace CMakeModules/KiCadVersion.cmake \
-      --replace "unknown" "${builtins.substring 0 10 src.rev}" \
-  '';
+  postPatch = if (!stable) then ''
+    substituteInPlace cmake/KiCadVersion.cmake \
+      --replace "unknown" "${builtins.substring 0 10 src.rev}"
+  ''
+  else "";

  makeFlags = optionals (debug) [ "CFLAGS+=-Og" "CFLAGS+=-ggdb" ];

  cmakeFlags = [
    # RPATH of binary /nix/store/.../bin/... contains a forbidden reference to /build/
    "-DCMAKE_SKIP_BUILD_RPATH=ON"
+    "-DKICAD_USE_EGL=ON"
  ]
  ++ optionals (withScripting) [
    "-DKICAD_SCRIPTING_WXPYTHON=ON"
@ -151,15 +154,19 @@ stdenv.mkDerivation rec {
    curl
    openssl
    boost
-    swig
+    swig4
    python
  ]
+  ++ optional (!stable) unixODBC
  ++ optional (withScripting) wxPython
  ++ optional (withNgspice) libngspice
  ++ optional (withOCC) opencascade-occt
  ++ optional (debug) valgrind
  ;

+  # started becoming necessary halfway into 2022, not sure what changed to break a test...
+  preInstallCheck = optionals (withNgspice) [ "export LD_LIBRARY_PATH=${libngspice}/lib" ];
+
  # debug builds fail all but the python test
  # stable release doesn't have the fix for upstream issue 9888 yet
  doInstallCheck = !debug && !stable;
--- a/pkgs/applications/science/electronics/kicad/update.sh
+++ b/pkgs/applications/science/electronics/kicad/update.sh
@ -65,7 +65,11 @@ tmp="${here}/,versions.nix.${RANDOM}"
 libs=( symbols templates footprints packages3d )

 get_rev() {
-  git ls-remote --tags "$@"
+  if [[ ${version} == "master" ]]; then
+    git ls-remote --heads "$@"
+  else
+    git ls-remote --tags "$@"
+  fi
 }

 gitlab="https://gitlab.com/kicad"
--- a/pkgs/applications/science/electronics/kicad/versions.nix
+++ b/pkgs/applications/science/electronics/kicad/versions.nix
@ -25,23 +25,23 @@
  };
  "kicad-unstable" = {
    kicadVersion = {
-      version =			"2022-06-21";
+      version =			"2022-09-18";
      src = {
-        rev =			"b54bb909755d39dcce38ef277c715d7f31ab8e00";
-        sha256 =		"0nzgrkkvc66hgqdrwfmh5fjw4ffr8gc3bw3n44sa6zjkkz5s6p48";
+        rev =			"0efc1149afed2af5b81e4555de4623217ece650f";
+        sha256 =		"19fqy8yvvl45izg5ynhch9r4gl4ncx0bz9s6n1x98bgzxkdyc14q";
      };
    };
    libVersion = {
-      version =			"2022-06-21";
+      version =			"2022-09-18";
      libSources = {
-        symbols.rev =		"a003b00f6f1056d726e32e911cd65b32946f5503";
-        symbols.sha256 =	"02z3vqhz1rlf57zi8vyrlxvvdl1hpsh447p41qdgcpn5dyjycb9d";
+        symbols.rev =		"879023fba005d23f285b6d052d9e6bcba1d754aa";
+        symbols.sha256 =	"1nxz8r3h3j62fs3s77lj27333fsj5c4i01n05lv0gqx36h28hqxk";
        templates.rev =		"ae2b46f8756d79379b90fec01d4fdde1ccfd73c1";
        templates.sha256 =	"08zxh83fbygh1x2jhca8nrp3f9kihf7kmg65qmyp95wvps4p5h8v";
-        footprints.rev =	"5df530ec44892407d6382d933ff9ad42dd19df0e";
-        footprints.sha256 =	"1phynxisha2pq2knbx5l1hkdz1bmjm0qxl3lcb4ab82h8d35r37c";
-        packages3d.rev =	"6bfd8dfa3adc6ac316b9857977c87f22282c6e24";
-        packages3d.sha256 =	"0ci9gxbpfnfqwah95ki4qcwlca78s1z6s7hckisnp58a1cm9siya";
+        footprints.rev =	"b1dfe894de90b0063befc02b914dc9e2b47e3a62";
+        footprints.sha256 =	"06kn6c00wlnr33mks582xhadvkbbgmqhb4qc1wjfw264pavz7v7y";
+        packages3d.rev =	"45df600c5e3dd5113d62e6445115e7c37bdf362f";
+        packages3d.sha256 =	"0cnrg7mr3khpglviid1adk2ihs1qwj0r7l32z2vqsl8aidzbg9kr";
      };
    };
  };
--- a/pkgs/applications/science/electronics/pulseview/default.nix
+++ b/pkgs/applications/science/electronics/pulseview/default.nix
@ -1,6 +1,6 @@
 { mkDerivation, lib, fetchurl, fetchpatch, pkg-config, cmake, glib, boost, libsigrok
 , libsigrokdecode, libserialport, libzip, udev, libusb1, libftdi1, glibmm
-, pcre, librevisa, python3, qtbase, qtsvg, qttools
+, pcre, python3, qtbase, qtsvg, qttools
 }:

 mkDerivation rec {
@ -16,7 +16,7 @@ mkDerivation rec {

  buildInputs = [
    glib boost libsigrok libsigrokdecode libserialport libzip udev libusb1 libftdi1 glibmm
-    pcre librevisa python3
+    pcre python3
    qtbase qtsvg qttools
  ];

--- a/pkgs/applications/science/logic/cadical/default.nix
+++ b/pkgs/applications/science/logic/cadical/default.nix
@ -2,13 +2,13 @@

 stdenv.mkDerivation rec {
  pname = "cadical";
-  version = "1.5.0";
+  version = "1.5.3";

  src = fetchFromGitHub {
    owner = "arminbiere";
    repo = "cadical";
    rev = "rel-${version}";
-    sha256 = "sha256-Po+pGoUwk1gtBqz4Sc/QQ52rRGbA2pATebX+KPYII5o=";
+    sha256 = "sha256-3H/vowWfE1jfomYg2hOi3B3zjWa4CaLHAJXnoKWzskU=";
  };

  outputs = [ "out" "dev" "lib" ];
--- a/pkgs/applications/science/math/cntk/default.nix
+++ b/pkgs/applications/science/math/cntk/default.nix
@ -120,13 +120,14 @@ in stdenv.mkDerivation rec {
  '';

  meta = with lib; {
-    # Newer cub is included with cudatoolkit now and it breaks the build.
-    # https://github.com/Microsoft/CNTK/issues/3191
-    broken = cudaSupport;
    homepage = "https://github.com/Microsoft/CNTK";
    description = "An open source deep-learning toolkit";
    license = if onebitSGDSupport then licenses.unfreeRedistributable else licenses.mit;
    platforms = [ "x86_64-linux" ];
    maintainers = with maintainers; [ abbradar ];
+    # Newer cub is included with cudatoolkit now and it breaks the build.
+    # https://github.com/Microsoft/CNTK/issues/3191
+    # broken = cudaSupport;
+    broken = true; # at 2022-11-23
  };
 }
--- a/pkgs/applications/science/math/mxnet/default.nix
+++ b/pkgs/applications/science/math/mxnet/default.nix
@ -13,25 +13,26 @@ assert cudnnSupport -> cudaSupport;

 stdenv.mkDerivation rec {
  pname = "mxnet";
-  version = "1.8.0";
+  version = "1.9.1";

  src = fetchurl {
    name = "apache-mxnet-src-${version}-incubating.tar.gz";
    url = "https://dlcdn.apache.org/incubator/mxnet/${version}/apache-mxnet-src-${version}-incubating.tar.gz";
-    hash = "sha256-la/5hYlaukCcCNVRRRCuOLiEkM+2KBqzpf8PWCbI21Q=";
+    hash = "sha256-EephMoF02MKblvNBl34D3rC/Sww3rOZY+T442euMkyI=";
  };

  patches = [
-    # Fix build error https://github.com/apache/incubator-mxnet/issues/19405
+    # Remove the following two patches when updating mxnet to 2.0.
    (fetchpatch {
-      name = "mxnet-fix-gcc-linker-error-1.patch";
-      url = "https://github.com/apache/incubator-mxnet/commit/78e31d66d19e385ca4ef73245ce79a47e375d8d1.diff";
-      sha256 = "sha256-UfmGhh4RbvrEOXe6IJxHm1Aqpy1gS6gHxrX5KQBXjv4=";
+      name = "1-auto-disable-sse-for-non-x86.patch";
+      url = "https://github.com/apache/incubator-mxnet/commit/55e69871d4cadec51a8bbb6700131065388cb0b9.patch";
+      hash = "sha256-uaMpM0F9HRtEBXz2ewB/dlbuKaY5/RineCPUE2T6CHU=";
    })
    (fetchpatch {
-      name = "mxnet-fix-gcc-linker-error-2.patch";
-      url = "https://github.com/apache/incubator-mxnet/commit/9bfe3116aabd01049fdbd90855cb245a30b795df.diff";
-      sha256 = "sha256-BL7Zf7Bgn0qpai9HbQ6LBxZNa3iLjVJSe5nxZgqI/fw=";
+      name = "2-auto-disable-sse-for-non-x86.patch";
+      url = "https://github.com/apache/incubator-mxnet/commit/c1b96f562f55dfa024ac941d7b104f00e239ee0f.patch";
+      excludes = ["ci/docker/runtime_functions.sh"];
+      hash = "sha256-r1LbC8ueRooW5tTNakAlRSJ+9aR4WXXoEKx895DgOs4=";
    })
  ];

--- a/pkgs/applications/science/math/nasc/default.nix
+++ b/pkgs/applications/science/math/nasc/default.nix
@ -83,5 +83,6 @@ stdenv.mkDerivation rec {
    platforms = platforms.linux;
    license = licenses.gpl3Plus;
    mainProgram = "com.github.parnold_x.nasc";
+    broken = true; # at 2022-09-23
  };
 }
--- a/pkgs/applications/science/math/pari/default.nix
+++ b/pkgs/applications/science/math/pari/default.nix
@ -3,10 +3,11 @@
 , fetchurl
 , gmp
 , libX11
+, libpthreadstubs
 , perl
 , readline
 , tex
-, withThread ? true, libpthreadstubs
+, withThread ? true
 }:

 assert withThread -> libpthreadstubs != null;
@ -80,7 +81,7 @@ stdenv.mkDerivation rec {
    '';
    downloadPage = "http://pari.math.u-bordeaux.fr/download.html";
    license = licenses.gpl2Plus;
-    maintainers = with maintainers; [ ertes AndersonTorres ] ++ teams.sage.members;
+    maintainers = with maintainers; [ ertes ] ++ teams.sage.members;
    platforms = platforms.linux ++ platforms.darwin;
    broken = stdenv.isDarwin && stdenv.isAarch64;
    mainProgram = "gp";
--- a/pkgs/applications/science/math/pari/gp2c.nix
+++ b/pkgs/applications/science/math/pari/gp2c.nix
@ -7,11 +7,11 @@

 stdenv.mkDerivation rec {
  pname = "gp2c";
-  version = "0.0.12";
+  version = "0.0.13";

  src = fetchurl {
    url = "https://pari.math.u-bordeaux.fr/pub/pari/GP2C/${pname}-${version}.tar.gz";
-    sha256 = "039ip7qkwwv46wrcdrz7y12m30kazzkjr44kqbc0h137g4wzd7zf";
+    hash = "sha256-JhN07Kc+vXbBEqlZPcootkgSqnYlYf2lpLLCzXmmnTY=";
  };

  buildInputs = [
@ -25,10 +25,9 @@ stdenv.mkDerivation rec {
  ];

  meta = with lib; {
-    description =  "A compiler to translate GP scripts to PARI programs";
    homepage = "http://pari.math.u-bordeaux.fr/";
+    description =  "A compiler to translate GP scripts to PARI programs";
    downloadPage = "http://pari.math.u-bordeaux.fr/download.html";
-    license = licenses.gpl2Plus;
-    maintainers = with maintainers; [ AndersonTorres ];
+    inherit (pari.meta) license maintainers platforms broken;
  };
 }
--- a/pkgs/applications/version-management/gitlab/data.json
+++ b/pkgs/applications/version-management/gitlab/data.json
@ -1,22 +1,27 @@
 {
-  "version": "15.3.3",
-  "repo_hash": "sha256-cgFy119/ZAUc/mBVAwZ5t5H2Z2+i5EJI9Q1KYtB2MJo=",
-  "yarn_hash": "1s2xai0q16xhp3q68hf9mxh1v429h4n5qy1iizdi7a5cmg3p3ldq",
+  "version": "15.4.0",
+  "repo_hash": "sha256-AONzkIZbrOJkxGUYAunoWTc9xuCykKr4YkYeQQxRW8A=",
+  "yarn_hash": "1r33qrvwf2wmq5c1d2awk9qhk9nzvafqn3drdvnczfv43sda4lg8",
  "owner": "gitlab-org",
  "repo": "gitlab",
-  "rev": "v15.3.3-ee",
+  "rev": "v15.4.0-ee",
  "passthru": {
-    "GITALY_SERVER_VERSION": "15.3.3",
+    "GITALY_SERVER_VERSION": "15.4.0",
    "GITLAB_PAGES_VERSION": "1.62.0",
    "GITLAB_SHELL_VERSION": "14.10.0",
-    "GITLAB_WORKHORSE_VERSION": "15.3.3"
+    "GITLAB_WORKHORSE_VERSION": "15.4.0"
  },
  "vendored_gems": [
+    "bundler-checksum",
    "devise-pbkdf2-encryptable",
+    "omniauth-azure-oauth2",
    "omniauth-cas3",
    "omniauth-gitlab",
+    "omniauth-google-oauth2",
    "omniauth_crowd",
+    "omniauth-salesforce",
    "mail-smtp_pool",
+    "microsoft_graph_mailer",
    "ipynbdiff",
    "error_tracking_open_api"
  ]
--- a/pkgs/applications/version-management/gitlab/gitaly/Gemfile
+++ b/pkgs/applications/version-management/gitlab/gitaly/Gemfile
@ -13,11 +13,11 @@ gem 'faraday', '~> 1.0'
 gem 'rbtrace', require: false

 # Labkit provides observability functionality
-gem 'gitlab-labkit', '~> 0.23'
+gem 'gitlab-labkit', '~> 0.24'

 # Detects the open source license the repository includes
 # This version needs to be in sync with GitLab CE/EE
-gem 'licensee', '~> 9.14.1'
+gem 'licensee', '~> 9.15'

 gem 'google-protobuf', '~> 3.21.0'

--- a/pkgs/applications/version-management/gitlab/gitaly/Gemfile.lock
+++ b/pkgs/applications/version-management/gitlab/gitaly/Gemfile.lock
@ -24,7 +24,7 @@ GEM
    adamantium (0.2.0)
      ice_nine (~> 0.11.0)
      memoizable (~> 0.4.0)
-    addressable (2.7.0)
+    addressable (2.8.0)
      public_suffix (>= 2.0.2, < 5.0)
    ast (2.4.2)
    binding_ninja (0.2.3)
@ -39,13 +39,13 @@ GEM
    diff-lcs (1.3)
    dotenv (2.7.6)
    equalizer (0.0.11)
-    erubi (1.10.0)
+    erubi (1.11.0)
    escape_utils (1.2.2)
    factory_bot (5.0.2)
      activesupport (>= 4.2.0)
    faraday (1.0.1)
      multipart-post (>= 1.2, < 3)
-    ffi (1.15.3)
+    ffi (1.15.5)
    gemojione (3.3.0)
      json
    github-linguist (7.20.0)
@ -65,9 +65,9 @@ GEM
    gitlab-gollum-rugged_adapter (0.4.4.4.gitlab.1)
      mime-types (>= 1.15)
      rugged (~> 1.0)
-    gitlab-labkit (0.23.0)
-      actionpack (>= 5.0.0, < 7.0.0)
-      activesupport (>= 5.0.0, < 7.0.0)
+    gitlab-labkit (0.24.0)
+      actionpack (>= 5.0.0, < 8.0.0)
+      activesupport (>= 5.0.0, < 8.0.0)
      grpc (>= 1.37)
      jaeger-client (~> 1.1.0)
      opentracing (~> 0.4)
@ -81,8 +81,8 @@ GEM
      with_env (= 1.1.0)
      xml-simple (~> 1.1.5)
    gitlab-markup (1.7.1)
-    google-protobuf (3.21.3)
-    googleapis-common-protos-types (1.3.0)
+    google-protobuf (3.21.5)
+    googleapis-common-protos-types (1.4.0)
      google-protobuf (~> 3.14)
    grpc (1.42.0)
      google-protobuf (~> 3.18)
@ -95,13 +95,13 @@ GEM
      opentracing (~> 0.3)
      thrift
    json (2.5.1)
-    licensee (9.14.1)
+    licensee (9.15.2)
      dotenv (~> 2.0)
-      octokit (~> 4.17)
+      octokit (~> 4.20)
      reverse_markdown (~> 1.0)
      rugged (>= 0.24, < 2.0)
      thor (>= 0.19, < 2.0)
-    loofah (2.16.0)
+    loofah (2.18.0)
      crass (~> 1.0.2)
      nokogiri (>= 1.5.9)
    memoizable (0.4.2)
@ -112,7 +112,7 @@ GEM
    mime-types-data (3.2020.1104)
    mini_mime (1.1.2)
    mini_portile2 (2.8.0)
-    minitest (5.16.2)
+    minitest (5.16.3)
    msgpack (1.3.3)
    multipart-post (2.1.1)
    nokogiri (1.13.8)
@ -126,8 +126,8 @@ GEM
    parallel (1.19.2)
    parser (3.0.3.2)
      ast (~> 2.4.1)
-    pg_query (2.1.1)
-      google-protobuf (>= 3.17.1)
+    pg_query (2.1.3)
+      google-protobuf (>= 3.19.2)
    proc_to_ast (0.1.0)
      coderay
      parser
@ -136,15 +136,15 @@ GEM
    pry (0.12.2)
      coderay (~> 1.1.0)
      method_source (~> 0.9.0)
-    public_suffix (4.0.6)
+    public_suffix (4.0.7)
    racc (1.6.0)
-    rack (2.2.3)
-    rack-test (1.1.0)
-      rack (>= 1.0, < 3)
+    rack (2.2.4)
+    rack-test (2.0.2)
+      rack (>= 1.3)
    rails-dom-testing (2.0.3)
      activesupport (>= 4.2.0)
      nokogiri (>= 1.6)
-    rails-html-sanitizer (1.4.2)
+    rails-html-sanitizer (1.4.3)
      loofah (~> 2.3)
    rainbow (3.0.0)
    rbtrace (0.4.14)
@ -152,12 +152,12 @@ GEM
      msgpack (>= 0.4.3)
      optimist (>= 3.0.0)
    rdoc (6.3.2)
-    redis (4.4.0)
+    redis (4.8.0)
    regexp_parser (1.8.1)
    reverse_markdown (1.4.0)
      nokogiri
    rexml (3.2.5)
-    rouge (3.27.0)
+    rouge (3.30.0)
    rspec (3.8.0)
      rspec-core (~> 3.8.0)
      rspec-expectations (~> 3.8.0)
@ -202,7 +202,7 @@ GEM
    stringex (2.8.5)
    thor (1.1.0)
    thread_safe (0.3.6)
-    thrift (0.15.0)
+    thrift (0.16.0)
    timecop (0.9.1)
    tomlrb (2.0.1)
    tzinfo (2.0.5)
@ -231,13 +231,13 @@ DEPENDENCIES
  github-linguist (~> 7.20.0)
  gitlab-gollum-lib (~> 4.2.7.10.gitlab.2)
  gitlab-gollum-rugged_adapter (~> 0.4.4.4.gitlab.1)
-  gitlab-labkit (~> 0.23)
+  gitlab-labkit (~> 0.24)
  gitlab-license_finder
  gitlab-markup (~> 1.7.1)
  google-protobuf (~> 3.21.0)
  grpc (~> 1.42.0)
  grpc-tools (~> 1.42.0)
-  licensee (~> 9.14.1)
+  licensee (~> 9.15)
  pry (~> 0.12.2)
  rbtrace
  rdoc (~> 6.0)
--- a/pkgs/applications/version-management/gitlab/gitaly/default.nix
+++ b/pkgs/applications/version-management/gitlab/gitaly/default.nix
@ -11,7 +11,7 @@ let
    gemdir = ./.;
  };

-  version = "15.3.3";
+  version = "15.4.0";
  package_version = "v${lib.versions.major version}";
  gitaly_package = "gitlab.com/gitlab-org/gitaly/${package_version}";

@ -22,10 +22,10 @@ let
      owner = "gitlab-org";
      repo = "gitaly";
      rev = "v${version}";
-      sha256 = "sha256-JapesdZbEjGsiR9o1J/exkqlV6Y9a69PVVPS22AaJG0=";
+      sha256 = "sha256-cESZfLlwyC6khUrvS0LGfkvzCLudjFmlGXculYLrcDM=";
    };

-    vendorSha256 = "sha256-aPCcTS5zflpjzb2L/oDOQotdL8cFsgKPa8b+lhCpbag=";
+    vendorSha256 = "sha256-CUFYHjmOfosM3mfw0qEY+AQcR8U3J/1lU2Ml6wSZ/QM=";

    ldflags = [ "-X ${gitaly_package}/internal/version.version=${version}" "-X ${gitaly_package}/internal/version.moduleVersion=${version}" ];

--- a/pkgs/applications/version-management/gitlab/gitaly/gemset.nix
+++ b/pkgs/applications/version-management/gitlab/gitaly/gemset.nix
@ -55,10 +55,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1fvchp2rhp2rmigx7qglf69xvjqvzq7x0g49naliw29r2bz656sy";
+      sha256 = "022r3m9wdxljpbya69y2i3h9g3dhhfaqzidf95m6qjzms792jvgp";
      type = "gem";
    };
-    version = "2.7.0";
+    version = "2.8.0";
  };
  ast = {
    groups = ["default" "development" "test"];
@ -168,10 +168,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "09l8lz3j00m898li0yfsnb6ihc63rdvhw3k5xczna5zrjk104f2l";
+      sha256 = "11bz1v1cxabm8672gabrw542zyg51dizlcvdck6vvwzagxbjv9zx";
      type = "gem";
    };
-    version = "1.10.0";
+    version = "1.11.0";
  };
  escape_utils = {
    groups = ["default"];
@ -210,10 +210,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1wgvaclp4h9y8zkrgz8p2hqkrgr4j7kz0366mik0970w532cbmcq";
+      sha256 = "1862ydmclzy1a0cjbvm8dz7847d9rch495ib0zb64y84d3xd4bkg";
      type = "gem";
    };
-    version = "1.15.3";
+    version = "1.15.5";
  };
  gemojione = {
    dependencies = ["json"];
@ -271,10 +271,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0kiz2m3dw6ld2z6dsl8jh2ycw061wv8wiy34flymb5zqjiyyzw8l";
+      sha256 = "0j0598m9445msa0rksl1l1cvd11wsnyq1s4gjmcbw18a9smfa5lg";
      type = "gem";
    };
-    version = "0.23.0";
+    version = "0.24.0";
  };
  gitlab-license_finder = {
    dependencies = ["rubyzip" "thor" "tomlrb" "with_env" "xml-simple"];
@ -302,10 +302,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0825yplkfp8xf0vpl25ff58xrlah98x9yv3hj9pgl82b0gqali6p";
+      sha256 = "1ysvm5mxx1knjp3sbhi18nswaml625vbgm3gbh7is14h4d8fwjy9";
      type = "gem";
    };
-    version = "3.21.3";
+    version = "3.21.5";
  };
  googleapis-common-protos-types = {
    dependencies = ["google-protobuf"];
@ -313,10 +313,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0w860lqs5j6n58a8qn4wr16hp0qz7cq5h67dgma04gncjwqiyhf5";
+      sha256 = "04sy3c91nlw2sv53xf2h2yf0cc09bdcvj2qbjsxwzxpbqgfrf255";
      type = "gem";
    };
-    version = "1.3.0";
+    version = "1.4.0";
  };
  grpc = {
    dependencies = ["google-protobuf" "googleapis-common-protos-types"];
@ -385,10 +385,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0c551j4qy773d79hgypjaz43h5wjn08mnxnxy9s2vdjc40qm95k5";
+      sha256 = "1v9x94h19b20wc551vs9a0yvk44w2y3g9ng07fflk26s8jsmjsab";
      type = "gem";
    };
-    version = "9.14.1";
+    version = "9.15.2";
  };
  loofah = {
    dependencies = ["crass" "nokogiri"];
@ -396,10 +396,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "15s6z5bvhdhnqv4wg8zcz3mhbc7i4dbqskv5jvhprz33ak7682km";
+      sha256 = "18ymp6l3bv7abz07k6qbbi9c9vsiahq30d2smh4qzsvag8j5m5v1";
      type = "gem";
    };
-    version = "2.16.0";
+    version = "2.18.0";
  };
  memoizable = {
    dependencies = ["thread_safe"];
@ -464,10 +464,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "14a9ign0hj3z3j4cpfplj2djaskx3skzyx4fl3x53d7saxmhrgn1";
+      sha256 = "0516ypqlx0mlcfn5xh7qppxqc3xndn1fnadxawa8wld5dkcimy30";
      type = "gem";
    };
-    version = "5.16.2";
+    version = "5.16.3";
  };
  msgpack = {
    groups = ["default"];
@ -558,10 +558,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0cf1b97nznl6adkx25j2x96sq8xx2b4fpic230fx65k3vqqn8a4r";
+      sha256 = "00bhwkhjy6bkp04313m5il7vd165i3fz0x4jissflf66i164ppgk";
      type = "gem";
    };
-    version = "2.1.1";
+    version = "2.1.3";
  };
  proc_to_ast = {
    dependencies = ["coderay" "parser" "unparser"];
@ -594,10 +594,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1xqcgkl7bwws1qrlnmxgh8g4g9m10vg60bhlw40fplninb3ng6d9";
+      sha256 = "1f3knlwfwm05sfbaihrxm4g772b79032q14c16q4b38z8bi63qcb";
      type = "gem";
    };
-    version = "4.0.6";
+    version = "4.0.7";
  };
  racc = {
    groups = ["default"];
@ -614,10 +614,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0i5vs0dph9i5jn8dfc6aqd6njcafmb20rwqngrf759c9cvmyff16";
+      sha256 = "0axc6w0rs4yj0pksfll1hjgw1k6a5q0xi2lckh91knfb72v348pa";
      type = "gem";
    };
-    version = "2.2.3";
+    version = "2.2.4";
  };
  rack-test = {
    dependencies = ["rack"];
@ -625,10 +625,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0rh8h376mx71ci5yklnpqqn118z3bl67nnv5k801qaqn1zs62h8m";
+      sha256 = "0rjl709krgf499dhjdapg580l2qaj9d91pwzk8ck8fpnazlx1bdd";
      type = "gem";
    };
-    version = "1.1.0";
+    version = "2.0.2";
  };
  rails-dom-testing = {
    dependencies = ["activesupport" "nokogiri"];
@ -647,10 +647,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "09qrfi3pgllxb08r024lln9k0qzxs57v0slsj8616xf9c0cwnwbk";
+      sha256 = "1mj0b7ay10a2fgwj70kjw7mlyrp7a5la8lx8zmwhy40bkansdfrf";
      type = "gem";
    };
-    version = "1.4.2";
+    version = "1.4.3";
  };
  rainbow = {
    source = {
@ -686,10 +686,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1ig832dp0xmpp6a934nifzaj7wm9lzjxzasw911fagycs8p6m720";
+      sha256 = "0i4a8hxxcxci3n8hhlm9a8wa7a9m58r6sjvh4749v7362i8cy010";
      type = "gem";
    };
-    version = "4.4.0";
+    version = "4.8.0";
  };
  regexp_parser = {
    groups = ["default" "development" "test"];
@ -727,10 +727,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0530ri0p60km0bg0ib6swkhfnas427cva7vcdmnwl8df52a10y1k";
+      sha256 = "1dnfkrk8xx2m8r3r9m2p5xcq57viznyc09k7r3i4jbm758i57lx3";
      type = "gem";
    };
-    version = "3.27.0";
+    version = "3.30.0";
  };
  rspec = {
    dependencies = ["rspec-core" "rspec-expectations" "rspec-mocks"];
@ -915,10 +915,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0rb9nax4k72zbriq7k98shfcj4lf54sqjpin2xm6ma7bb48ra8mc";
+      sha256 = "1knw2xa3pkfql4np9qazz2mdi1vz21vdsa0wkx648c4ym1p2h8yh";
      type = "gem";
    };
-    version = "0.15.0";
+    version = "0.16.0";
  };
  timecop = {
    source = {
--- a/pkgs/applications/version-management/gitlab/gitlab-workhorse/default.nix
+++ b/pkgs/applications/version-management/gitlab/gitlab-workhorse/default.nix
@ -5,7 +5,7 @@ in
 buildGoModule rec {
  pname = "gitlab-workhorse";

-  version = "15.3.3";
+  version = "15.4.0";

  src = fetchFromGitLab {
    owner = data.owner;
@ -16,7 +16,7 @@ buildGoModule rec {

  sourceRoot = "source/workhorse";

-  vendorSha256 = "sha256-fOAHv+/FiR/R0ohhluDig5zKH9ZkBABrr0aeFsT3U8M=";
+  vendorSha256 = "sha256-dN3DfkAJkqkmGyahsBDsPQBog52RGECV+SESSR6W3fg=";
  buildInputs = [ git ];
  ldflags = [ "-X main.Version=${version}" ];
  doCheck = false;
--- a/pkgs/applications/version-management/gitlab/rubyEnv/Gemfile
+++ b/pkgs/applications/version-management/gitlab/rubyEnv/Gemfile
@ -2,6 +2,8 @@

 source 'https://rubygems.org'

+gem 'bundler-checksum', '~> 0.1.0', path: 'bundler-checksum', require: false
+
 gem 'rails', '~> 6.1.6.1'

 gem 'bootsnap', '~> 1.13.0', require: false
@ -11,7 +13,7 @@ gem 'responders', '~> 3.0'

 gem 'sprockets', '~> 3.7.0'

-gem 'view_component', '~> 2.61'
+gem 'view_component', '~> 2.71.0'

 # Default values for AR models
 gem 'default_value_for', '~> 3.4.0'
@ -29,32 +31,33 @@ gem 'marginalia', '~> 1.10.0'
 gem 'declarative_policy', '~> 1.1.0'

 # Authentication libraries
-gem 'devise', '~> 4.7.2'
+gem 'devise', '~> 4.8.1'
 gem 'devise-pbkdf2-encryptable', '~> 0.0.0', path: 'devise-pbkdf2-encryptable'
 gem 'bcrypt', '~> 3.1', '>= 3.1.14'
 gem 'doorkeeper', '~> 5.5.0.rc2'
 gem 'doorkeeper-openid_connect', '~> 1.7.5'
 gem 'rexml', '~> 3.2.5'
 gem 'ruby-saml', '~> 1.13.0'
-gem 'omniauth', '~> 1.8'
+gem 'omniauth-rails_csrf_protection'
+gem 'omniauth', '~> 2.1.0'
 gem 'omniauth-auth0', '~> 2.0.0'
 gem 'omniauth-azure-activedirectory-v2', '~> 1.0'
-gem 'omniauth-azure-oauth2', '~> 0.0.9' # See vendor/gems/omniauth-azure-oauth2/README.md
+gem 'omniauth-azure-oauth2', '~> 0.0.9', path: 'omniauth-azure-oauth2' # See gem README.md
 gem 'omniauth-cas3', '~> 1.1.4', path: 'omniauth-cas3' # See vendor/gems/omniauth-cas3/README.md
 gem 'omniauth-dingtalk-oauth2', '~> 1.0'
 gem 'omniauth-alicloud', '~> 1.0.1'
 gem 'omniauth-facebook', '~> 4.0.0'
-gem 'omniauth-github', '~> 1.4'
+gem 'omniauth-github', '2.0.0'
 gem 'omniauth-gitlab', '~> 4.0.0', path: 'omniauth-gitlab' # See vendor/gems/omniauth-gitlab/README.md
-gem 'omniauth-google-oauth2', '~> 0.6.0'
+gem 'omniauth-google-oauth2', '~> 1.0.1', path: 'omniauth-google-oauth2' # See gem README.md
 gem 'omniauth-oauth2-generic', '~> 0.2.2'
-gem 'omniauth-saml', '~> 1.10'
+gem 'omniauth-saml', '~> 2.0.0'
 gem 'omniauth-shibboleth', '~> 1.3.0'
 gem 'omniauth-twitter', '~> 1.4'
 gem 'omniauth_crowd', '~> 2.4.0', path: 'omniauth_crowd' # See vendor/gems/omniauth_crowd/README.md
 gem 'omniauth-authentiq', '~> 0.3.3'
-gem 'gitlab-omniauth-openid-connect', '~> 0.9.0', require: 'omniauth_openid_connect'
-gem 'omniauth-salesforce', '~> 1.0.5'
+gem 'gitlab-omniauth-openid-connect', '~> 0.10.0', require: 'omniauth_openid_connect'
+gem 'omniauth-salesforce', '~> 1.0.5', path: 'omniauth-salesforce' # See gem README.md
 gem 'omniauth-atlassian-oauth2', '~> 0.2.0'
 gem 'rack-oauth2', '~> 1.21.2'
 gem 'jwt', '~> 2.1.0'
@ -164,21 +167,21 @@ gem 'rdoc', '~> 6.3.2'
 gem 'org-ruby', '~> 0.9.12'
 gem 'creole', '~> 0.5.0'
 gem 'wikicloth', '0.8.1'
-gem 'asciidoctor', '~> 2.0.10'
+gem 'asciidoctor', '~> 2.0.17'
 gem 'asciidoctor-include-ext', '~> 0.4.0', require: false
-gem 'asciidoctor-plantuml', '~> 0.0.12'
+gem 'asciidoctor-plantuml', '~> 0.0.16'
 gem 'asciidoctor-kroki', '~> 0.5.0', require: false
 gem 'rouge', '~> 3.30.0'
 gem 'truncato', '~> 0.7.12'
 gem 'bootstrap_form', '~> 4.2.0'
-gem 'nokogiri', '~> 1.13.0'
+gem 'nokogiri', '~> 1.13.8'
 gem 'escape_utils', '~> 1.1'

 # Calendar rendering
 gem 'icalendar'

 # Diffs
-gem 'diffy', '~> 3.3'
+gem 'diffy', '~> 3.4'
 gem 'diff_match_patch', '~> 0.1.0'

 # Application server
@ -187,7 +190,7 @@ gem 'rack', '~> 2.2.4'
 gem 'rack-timeout', '~> 0.6.0', require: 'rack/timeout/base'

 group :puma do
-  gem 'puma', '~> 5.6.4', require: false
+  gem 'puma', '~> 5.6.5', require: false
  gem 'puma_worker_killer', '~> 0.3.1', require: false
  gem 'sd_notify', '~> 0.1.0', require: false
 end
@ -199,8 +202,8 @@ gem 'state_machines-activerecord', '~> 0.8.0'
 gem 'acts-as-taggable-on', '~> 9.0'

 # Background jobs
-gem 'sidekiq', '~> 6.4'
-gem 'sidekiq-cron', '~> 1.2'
+gem 'sidekiq', '~> 6.4.0'
+gem 'sidekiq-cron', '~> 1.4.0'
 gem 'redis-namespace', '~> 1.8.1'
 gem 'gitlab-sidekiq-fetcher', '0.8.0', require: 'sidekiq-reliable-fetch'

@ -233,7 +236,7 @@ gem 'js_regex', '~> 3.7'
 gem 'device_detector'

 # Redis
-gem 'redis', '~> 4.4.0'
+gem 'redis', '~> 4.7.0'
 gem 'connection_pool', '~> 2.0'

 # Redis session store
@ -272,7 +275,9 @@ gem 'babosa', '~> 1.0.4'
 gem 'loofah', '~> 2.18.0'

 # Working with license
-gem 'licensee', '~> 9.14.1'
+# Detects the open source license the repository includes
+# This version needs to be in sync with gitlab-org/gitaly
+gem 'licensee', '~> 9.15'

 # Detect and convert string character encoding
 gem 'charlock_holmes', '~> 0.7.7'
@ -318,9 +323,7 @@ gem 'premailer-rails', '~> 1.10.3'

 # LabKit: Tracing and Correlation
 gem 'gitlab-labkit', '~> 0.24.0'
-# Thrift is a dependency of gitlab-labkit, we want a version higher than 0.14.0
-# because of https://gitlab.com/gitlab-org/gitlab/-/issues/321900
-gem 'thrift', '>= 0.14.0'
+gem 'thrift', '>= 0.16.0'

 # I18n
 gem 'ruby_parser', '~> 3.15', require: false
@ -338,22 +341,21 @@ gem 'peek', '~> 1.1'
 gem 'snowplow-tracker', '~> 0.6.1'

 # Metrics
-gem 'method_source', '~> 1.0', require: false
 gem 'webrick', '~> 1.6.1', require: false
 gem 'prometheus-client-mmap', '~> 0.16', require: 'prometheus/client'

 gem 'warning', '~> 1.3.0'

 group :development do
-  gem 'lefthook', '~> 1.1.0', require: false
+  gem 'lefthook', '~> 1.1.1', require: false
  gem 'rubocop'
-  gem 'solargraph', '~> 0.45.0', require: false
+  gem 'solargraph', '~> 0.46.0', require: false

  gem 'letter_opener_web', '~> 2.0.0'
-  gem 'lookbook'
+  gem 'lookbook', '~> 1.0'

  # Better errors handler
-  gem 'better_errors', '~> 2.9.0'
+  gem 'better_errors', '~> 2.9.1'

  gem 'sprite-factory', '~> 1.7'
 end
@ -380,12 +382,14 @@ group :development, :test do
  gem 'spring', '~> 2.1.0'
  gem 'spring-commands-rspec', '~> 1.0.4'

-  gem 'gitlab-styles', '~> 7.1.0', require: false
+  gem 'gitlab-styles', '~> 8.0.0', require: false

-  gem 'haml_lint', '~> 0.36.0', require: false
+  gem 'haml_lint', '~> 0.40.0', require: false
  gem 'bundler-audit', '~> 0.7.0.1', require: false

+  # Benchmarking & profiling
  gem 'benchmark-ips', '~> 2.3.0', require: false
+  gem 'benchmark-memory', '~> 0.1', require: false

  gem 'knapsack', '~> 1.21.1'
  gem 'crystalball', '~> 0.7.0', require: false
@ -406,7 +410,7 @@ group :development, :test do
 end

 group :development, :test, :danger do
-  gem 'gitlab-dangerfiles', '~> 3.5.0', require: false
+  gem 'gitlab-dangerfiles', '~> 3.5.2', require: false
 end

 group :development, :test, :coverage do
@ -457,10 +461,9 @@ gem 'email_reply_trimmer', '~> 0.1'
 gem 'html2text'

 gem 'ruby-prof', '~> 1.3.0'
-gem 'stackprof', '~> 0.2.15', require: false
+gem 'stackprof', '~> 0.2.21', require: false
 gem 'rbtrace', '~> 0.4', require: false
 gem 'memory_profiler', '~> 0.9', require: false
-gem 'benchmark-memory', '~> 0.1', require: false
 gem 'activerecord-explain-analyze', '~> 0.1', require: false

 # OAuth
@ -480,10 +483,10 @@ gem 'net-ntp'
 gem 'ssh_data', '~> 1.3'

 # Spamcheck GRPC protocol definitions
-gem 'spamcheck', '~> 0.1.0'
+gem 'spamcheck', '~> 1.0.0'

 # Gitaly GRPC protocol definitions
-gem 'gitaly', '~> 15.3.0-rc3'
+gem 'gitaly', '~> 15.4.0-rc2'

 # KAS GRPC protocol definitions
 gem 'kas-grpc', '~> 0.0.2'
@ -524,6 +527,8 @@ gem 'erubi', '~> 1.9.0'
 gem 'mail', '= 2.7.1'
 gem 'mail-smtp_pool', '~> 0.1.0', path: 'mail-smtp_pool', require: false

+gem 'microsoft_graph_mailer', '~> 0.1.0', path: 'microsoft_graph_mailer'
+
 # File encryption
 gem 'lockbox', '~> 0.6.2'

--- a/pkgs/applications/version-management/gitlab/rubyEnv/Gemfile.lock
+++ b/pkgs/applications/version-management/gitlab/rubyEnv/Gemfile.lock
@ -1,3 +1,9 @@
+PATH
+  remote: bundler-checksum
+  specs:
+    bundler-checksum (0.1.0)
+      bundler
+
 PATH
  remote: devise-pbkdf2-encryptable
  specs:
@ -14,7 +20,7 @@ PATH
  remote: ipynbdiff
  specs:
    ipynbdiff (0.4.7)
-      diffy (~> 3.3)
+      diffy (~> 3.4)
      oj (~> 3.13.16)

 PATH
@ -24,28 +30,59 @@ PATH
      connection_pool (~> 2.0)
      mail (~> 2.7)

+PATH
+  remote: microsoft_graph_mailer
+  specs:
+    microsoft_graph_mailer (0.1.0)
+      mail (~> 2.7)
+      oauth2 (>= 1.4.4, < 3)
+
+PATH
+  remote: omniauth-azure-oauth2
+  specs:
+    omniauth-azure-oauth2 (0.0.10)
+      jwt (>= 1.0, < 3.0)
+      omniauth (~> 2.0)
+      omniauth-oauth2 (~> 1.4)
+
 PATH
  remote: omniauth-cas3
  specs:
    omniauth-cas3 (1.1.4)
      addressable (~> 2.3)
      nokogiri (~> 1.7, >= 1.7.1)
-      omniauth (~> 1.2, < 3)
+      omniauth (~> 2.0)

 PATH
  remote: omniauth-gitlab
  specs:
    omniauth-gitlab (4.0.0)
-      omniauth (~> 1.0)
+      omniauth (~> 2.0)
+      omniauth-oauth2 (~> 1.7.1)
+
+PATH
+  remote: omniauth-google-oauth2
+  specs:
+    omniauth-google-oauth2 (1.0.1)
+      jwt (>= 2.0)
+      oauth2 (~> 2.0)
+      omniauth (~> 2.0)
      omniauth-oauth2 (~> 1.7.1)

+PATH
+  remote: omniauth-salesforce
+  specs:
+    omniauth-salesforce (1.0.5)
+      omniauth (~> 2.0)
+      omniauth-oauth2 (~> 1.0)
+
 PATH
  remote: omniauth_crowd
  specs:
    omniauth_crowd (2.4.0)
      activesupport
      nokogiri (>= 1.4.4)
-      omniauth (~> 1.0, < 3)
+      omniauth (~> 2.0)

 GEM
  remote: https://rubygems.org/
@ -131,13 +168,13 @@ GEM
      faraday_middleware (~> 1.0)
      faraday_middleware-multi_json (~> 0.0)
      oauth2 (>= 1.4, < 3)
-    asciidoctor (2.0.15)
+    asciidoctor (2.0.17)
    asciidoctor-include-ext (0.4.0)
      asciidoctor (>= 1.5.6, < 3.0.0)
    asciidoctor-kroki (0.5.0)
      asciidoctor (~> 2.0)
-    asciidoctor-plantuml (0.0.12)
-      asciidoctor (>= 1.5.6, < 3.0.0)
+    asciidoctor-plantuml (0.0.16)
+      asciidoctor (>= 2.0.17, < 3.0.0)
    ast (2.4.2)
    atlassian-jwt (0.2.0)
      jwt (~> 2.1.0)
@ -306,7 +343,7 @@ GEM
      ruby-statistics (>= 2.1)
      thor (>= 0.19, < 2)
    device_detector (1.0.0)
-    devise (4.7.3)
+    devise (4.8.1)
      bcrypt (~> 3.0)
      orm_adapter (~> 0.1)
      railties (>= 4.1.0)
@ -320,7 +357,7 @@ GEM
      rotp (~> 6.0)
    diff-lcs (1.5.0)
    diff_match_patch (0.1.0)
-    diffy (3.3.0)
+    diffy (3.4.2)
    discordrb-webhooks (3.4.2)
      rest-client (>= 2.0.0)
    docile (1.4.0)
@ -377,7 +414,7 @@ GEM
    encryptor (3.0.0)
    erubi (1.9.0)
    escape_utils (1.2.1)
-    et-orbi (1.2.1)
+    et-orbi (1.2.7)
      tzinfo
    ethon (0.15.0)
      ffi (>= 1.15.0)
@ -486,7 +523,7 @@ GEM
      fog-core
      nokogiri (>= 1.5.11, < 2.0.0)
    formatador (0.2.5)
-    fugit (1.2.1)
+    fugit (1.2.3)
      et-orbi (~> 1.1, >= 1.1.8)
      raabro (~> 1.1)
    fuubar (2.2.0)
@ -508,7 +545,7 @@ GEM
      rails (>= 3.2.0)
    git (1.11.0)
      rchardet (~> 1.8)
-    gitaly (15.3.0.pre.rc3)
+    gitaly (15.4.0.pre.rc2)
      grpc (~> 1.0)
    github-markup (1.7.0)
    gitlab (4.16.1)
@ -516,7 +553,7 @@ GEM
      terminal-table (~> 1.5, >= 1.5.1)
    gitlab-chronic (0.10.5)
      numerizer (~> 0.2)
-    gitlab-dangerfiles (3.5.0)
+    gitlab-dangerfiles (3.5.2)
      danger (>= 8.4.5)
      danger-gitlab (>= 8.0.0)
      rake
@ -540,15 +577,15 @@ GEM
      redis (> 3.0.0, < 5.0.0)
    gitlab-license (2.2.1)
    gitlab-mail_room (0.0.9)
-    gitlab-markup (1.8.0)
+    gitlab-markup (1.8.1)
    gitlab-net-dns (0.9.1)
-    gitlab-omniauth-openid-connect (0.9.1)
+    gitlab-omniauth-openid-connect (0.10.0)
      addressable (~> 2.7)
-      omniauth (~> 1.9)
+      omniauth (>= 1.9, < 3)
      openid_connect (~> 1.2)
    gitlab-sidekiq-fetcher (0.8.0)
      sidekiq (~> 6.1)
-    gitlab-styles (7.1.0)
+    gitlab-styles (8.0.0)
      rubocop (~> 0.91, >= 0.91.1)
      rubocop-gitlab-security (~> 0.1.1)
      rubocop-graphql (~> 0.10)
@ -580,7 +617,7 @@ GEM
      signet (~> 0.12)
    google-cloud-env (1.6.0)
      faraday (>= 0.17.3, < 3.0)
-    google-protobuf (3.21.3)
+    google-protobuf (3.21.5)
    googleapis-common-protos-types (1.3.0)
      google-protobuf (~> 3.14)
    googleauth (0.14.0)
@ -649,10 +686,10 @@ GEM
      guard (~> 2.1)
      guard-compat (~> 1.1)
      rspec (>= 2.99.0, < 4.0)
-    haml (5.1.2)
+    haml (5.2.2)
      temple (>= 0.8.0)
      tilt
-    haml_lint (0.36.0)
+    haml_lint (0.40.1)
      haml (>= 4.0, < 5.3)
      parallel (~> 1.10)
      rainbow
@ -757,7 +794,7 @@ GEM
      rest-client (~> 2.0)
    launchy (2.5.0)
      addressable (~> 2.7)
-    lefthook (1.1.0)
+    lefthook (1.1.1)
    letter_opener (1.7.0)
      launchy (~> 2.2)
    letter_opener_web (2.0.0)
@ -773,9 +810,9 @@ GEM
      tomlrb (>= 1.3, < 2.1)
      with_env (= 1.1.0)
      xml-simple (~> 1.1.9)
-    licensee (9.14.1)
+    licensee (9.15.2)
      dotenv (~> 2.0)
-      octokit (~> 4.17)
+      octokit (~> 4.20)
      reverse_markdown (~> 1.0)
      rugged (>= 0.24, < 2.0)
      thor (>= 0.19, < 2.0)
@ -792,9 +829,11 @@ GEM
    loofah (2.18.0)
      crass (~> 1.0.2)
      nokogiri (>= 1.5.9)
-    lookbook (0.9.3)
+    lookbook (1.0.3)
      actioncable
+      css_parser
      htmlbeautifier (~> 1.3)
+      htmlentities (~> 4.3.4)
      listen (~> 3.0)
      railties (>= 5.0)
      redcarpet (~> 3.5)
@ -888,9 +927,10 @@ GEM
      train-core
      wmi-lite (~> 1.0)
    oj (3.13.21)
-    omniauth (1.9.1)
+    omniauth (2.1.0)
      hashie (>= 3.4.6)
-      rack (>= 1.6.2, < 3)
+      rack (>= 2.2.3)
+      rack-protection
    omniauth-alicloud (1.0.1)
      omniauth-oauth2 (~> 1.7.1)
    omniauth-atlassian-oauth2 (0.2.0)
@ -903,21 +943,13 @@ GEM
      omniauth-oauth2 (>= 1.5)
    omniauth-azure-activedirectory-v2 (1.0.0)
      omniauth-oauth2 (~> 1.7)
-    omniauth-azure-oauth2 (0.0.10)
-      jwt (>= 1.0, < 3.0)
-      omniauth (~> 1.0)
-      omniauth-oauth2 (~> 1.4)
    omniauth-dingtalk-oauth2 (1.0.1)
      omniauth-oauth2 (~> 1.7)
    omniauth-facebook (4.0.0)
      omniauth-oauth2 (~> 1.2)
-    omniauth-github (1.4.0)
-      omniauth (~> 1.5)
-      omniauth-oauth2 (>= 1.4.0, < 2.0)
-    omniauth-google-oauth2 (0.6.0)
-      jwt (>= 2.0)
-      omniauth (>= 1.1.1)
-      omniauth-oauth2 (>= 1.5)
+    omniauth-github (2.0.0)
+      omniauth (~> 2.0)
+      omniauth-oauth2 (~> 1.7.1)
    omniauth-oauth (1.2.0)
      oauth
      omniauth (>= 1.0, < 3)
@ -926,12 +958,12 @@ GEM
      omniauth (>= 1.9, < 3)
    omniauth-oauth2-generic (0.2.2)
      omniauth-oauth2 (~> 1.0)
-    omniauth-salesforce (1.0.5)
-      omniauth (~> 1.0)
-      omniauth-oauth2 (~> 1.0)
-    omniauth-saml (1.10.0)
-      omniauth (~> 1.3, >= 1.3.2)
-      ruby-saml (~> 1.7)
+    omniauth-rails_csrf_protection (1.0.1)
+      actionpack (>= 4.2)
+      omniauth (~> 2.0)
+    omniauth-saml (2.0.0)
+      omniauth (~> 2.0)
+      ruby-saml (~> 1.9)
    omniauth-shibboleth (1.3.0)
      omniauth (>= 1.0.0)
    omniauth-twitter (1.4.0)
@ -980,7 +1012,7 @@ GEM
      rspec (>= 2.14)
      term-ansicolor (~> 1.0)
    parallel (1.22.1)
-    parser (3.1.2.0)
+    parser (3.1.2.1)
      ast (~> 2.4.1)
    parslet (1.8.2)
    pastel (0.8.0)
@ -988,7 +1020,7 @@ GEM
    peek (1.1.0)
      railties (>= 4.0.0)
    pg (1.4.3)
-    pg_query (2.1.3)
+    pg_query (2.1.4)
      google-protobuf (>= 3.19.2)
    plist (3.6.0)
    png_quantizator (0.2.1)
@ -1019,13 +1051,13 @@ GEM
      tty-markdown
      tty-prompt
    public_suffix (4.0.7)
-    puma (5.6.4)
+    puma (5.6.5)
      nio4r (~> 2.0)
    puma_worker_killer (0.3.1)
      get_process_mem (~> 0.2)
      puma (>= 2.7)
    pyu-ruby-sasl (0.0.3.3)
-    raabro (1.1.6)
+    raabro (1.4.0)
    racc (1.6.0)
    rack (2.2.4)
    rack-accept (0.4.5)
@ -1040,6 +1072,8 @@ GEM
      httpclient
      json-jwt (>= 1.11.0)
      rack (>= 2.1.0)
+    rack-protection (2.2.2)
+      rack
    rack-proxy (0.7.2)
      rack
    rack-test (1.1.0)
@ -1083,7 +1117,7 @@ GEM
    randexp (0.1.7)
    rash_alt (0.4.12)
      hashie (>= 3.4)
-    rb-fsevent (0.11.1)
+    rb-fsevent (0.11.2)
    rb-inotify (0.10.1)
      ffi (~> 1.0)
    rbtrace (0.4.14)
@ -1098,7 +1132,7 @@ GEM
      json
    recursive-open-struct (1.1.3)
    redcarpet (3.5.1)
-    redis (4.4.0)
+    redis (4.7.1)
    redis-actionpack (5.3.0)
      actionpack (>= 5, < 8)
      redis-rack (>= 2.1.0, < 3)
@ -1187,11 +1221,11 @@ GEM
      rubocop-ast (>= 0.6.0)
      ruby-progressbar (~> 1.7)
      unicode-display_width (>= 1.4.0, < 2.0)
-    rubocop-ast (1.19.1)
+    rubocop-ast (1.21.0)
      parser (>= 3.1.1.0)
    rubocop-gitlab-security (0.1.1)
      rubocop (>= 0.51)
-    rubocop-graphql (0.14.3)
+    rubocop-graphql (0.14.6)
      rubocop (>= 0.87, < 2)
    rubocop-performance (1.9.2)
      rubocop (>= 0.90.0, < 2.0)
@ -1269,12 +1303,12 @@ GEM
    shellany (0.0.1)
    shoulda-matchers (5.1.0)
      activesupport (>= 5.2.0)
-    sidekiq (6.4.0)
+    sidekiq (6.4.2)
      connection_pool (>= 2.2.2)
      rack (~> 2.0)
      redis (>= 4.2.0)
-    sidekiq-cron (1.2.0)
-      fugit (~> 1.1)
+    sidekiq-cron (1.4.0)
+      fugit (~> 1)
      sidekiq (>= 4.2.1)
    sigdump (0.2.4)
    signet (0.17.0)
@ -1296,7 +1330,7 @@ GEM
    slack-messenger (2.3.4)
    snowplow-tracker (0.6.1)
      contracts (~> 0.7, <= 0.11)
-    solargraph (0.45.0)
+    solargraph (0.46.0)
      backport (~> 1.2)
      benchmark
      bundler (>= 1.17.2)
@ -1314,7 +1348,7 @@ GEM
    sorted_set (1.0.3)
      rbtree
      set (~> 1.0)
-    spamcheck (0.1.0)
+    spamcheck (1.0.0)
      grpc (~> 1.0)
    spring (2.1.1)
    spring-commands-rspec (1.0.4)
@ -1330,7 +1364,7 @@ GEM
    sqlite3 (1.4.2)
    ssh_data (1.3.0)
    ssrf_filter (1.0.7)
-    stackprof (0.2.15)
+    stackprof (0.2.21)
    state_machines (0.5.0)
    state_machines-activemodel (0.8.0)
      activemodel (>= 5.1)
@ -1364,7 +1398,7 @@ GEM
      faraday (~> 1.0)
    text (1.3.1)
    thor (1.2.1)
-    thrift (0.14.0)
+    thrift (0.16.0)
    tilt (2.0.10)
    timecop (0.9.1)
    timeliness (0.3.10)
@ -1432,7 +1466,7 @@ GEM
    validate_email (0.1.6)
      activemodel (>= 3.0)
      mail (>= 2.2.5)
-    validate_url (1.0.13)
+    validate_url (1.0.15)
      activemodel (>= 3.0.0)
      public_suffix
    validates_hostname (1.0.11)
@ -1440,12 +1474,13 @@ GEM
      activesupport (>= 3.0)
    version_gem (1.0.0)
    version_sorter (2.2.4)
-    view_component (2.61.0)
+    view_component (2.71.0)
      activesupport (>= 5.0.0, < 8.0)
+      concurrent-ruby (~> 1.0)
      method_source (~> 1.0)
    vmstat (2.3.0)
-    warden (1.2.8)
-      rack (>= 2.0.6)
+    warden (1.2.9)
+      rack (>= 2.0.9)
    warning (1.3.0)
    webauthn (2.3.0)
      android_key_attestation (~> 0.3.0)
@ -1495,10 +1530,10 @@ DEPENDENCIES
  akismet (~> 3.0)
  apollo_upload_server (~> 2.1.0)
  asana (~> 0.10.13)
-  asciidoctor (~> 2.0.10)
+  asciidoctor (~> 2.0.17)
  asciidoctor-include-ext (~> 0.4.0)
  asciidoctor-kroki (~> 0.5.0)
-  asciidoctor-plantuml (~> 0.0.12)
+  asciidoctor-plantuml (~> 0.0.16)
  atlassian-jwt (~> 0.2.0)
  attr_encrypted (~> 3.1.0)
  autoprefixer-rails (= 10.2.5.1)
@ -1512,12 +1547,13 @@ DEPENDENCIES
  bcrypt (~> 3.1, >= 3.1.14)
  benchmark-ips (~> 2.3.0)
  benchmark-memory (~> 0.1)
-  better_errors (~> 2.9.0)
+  better_errors (~> 2.9.1)
  bootsnap (~> 1.13.0)
  bootstrap_form (~> 4.2.0)
  browser (~> 4.2)
  bullet (~> 7.0.2)
  bundler-audit (~> 0.7.0.1)
+  bundler-checksum (~> 0.1.0)!
  capybara (~> 3.35.3)
  capybara-screenshot (~> 1.0.22)
  carrierwave (~> 1.3)
@ -1535,11 +1571,11 @@ DEPENDENCIES
  deprecation_toolkit (~> 1.5.1)
  derailed_benchmarks
  device_detector
-  devise (~> 4.7.2)
+  devise (~> 4.8.1)
  devise-pbkdf2-encryptable (~> 0.0.0)!
  devise-two-factor (~> 4.0.2)
  diff_match_patch (~> 0.1.0)
-  diffy (~> 3.3)
+  diffy (~> 3.4)
  discordrb-webhooks (~> 3.4)
  doorkeeper (~> 5.5.0.rc2)
  doorkeeper-openid_connect (~> 1.7.5)
@ -1573,10 +1609,10 @@ DEPENDENCIES
  gettext (~> 3.3)
  gettext_i18n_rails (~> 1.8.0)
  gettext_i18n_rails_js (~> 1.3)
-  gitaly (~> 15.3.0.pre.rc3)
+  gitaly (~> 15.4.0.pre.rc2)
  github-markup (~> 1.7.0)
  gitlab-chronic (~> 0.10.5)
-  gitlab-dangerfiles (~> 3.5.0)
+  gitlab-dangerfiles (~> 3.5.2)
  gitlab-experiment (~> 0.7.1)
  gitlab-fog-azure-rm (~> 1.3.0)
  gitlab-labkit (~> 0.24.0)
@ -1584,9 +1620,9 @@ DEPENDENCIES
  gitlab-mail_room (~> 0.0.9)
  gitlab-markup (~> 1.8.0)
  gitlab-net-dns (~> 0.9.1)
-  gitlab-omniauth-openid-connect (~> 0.9.0)
+  gitlab-omniauth-openid-connect (~> 0.10.0)
  gitlab-sidekiq-fetcher (= 0.8.0)
-  gitlab-styles (~> 7.1.0)
+  gitlab-styles (~> 8.0.0)
  gitlab_chronic_duration (~> 0.10.6.2)
  gitlab_omniauth-ldap (~> 2.2.0)
  gon (~> 6.4.0)
@ -1605,7 +1641,7 @@ DEPENDENCIES
  grpc (~> 1.42.0)
  gssapi
  guard-rspec
-  haml_lint (~> 0.36.0)
+  haml_lint (~> 0.40.0)
  hamlit (~> 2.15.0)
  hangouts-chat (~> 0.0.5)
  hashie
@ -1628,46 +1664,47 @@ DEPENDENCIES
  knapsack (~> 1.21.1)
  kramdown (~> 2.3.1)
  kubeclient (~> 4.9.3)
-  lefthook (~> 1.1.0)
+  lefthook (~> 1.1.1)
  letter_opener_web (~> 2.0.0)
  license_finder (~> 7.0)
-  licensee (~> 9.14.1)
+  licensee (~> 9.15)
  lockbox (~> 0.6.2)
  lograge (~> 0.5)
  loofah (~> 2.18.0)
-  lookbook
+  lookbook (~> 1.0)
  lru_redux
  mail (= 2.7.1)
  mail-smtp_pool (~> 0.1.0)!
  marginalia (~> 1.10.0)
  memory_profiler (~> 0.9)
-  method_source (~> 1.0)
+  microsoft_graph_mailer (~> 0.1.0)!
  mini_magick (~> 4.10.1)
  minitest (~> 5.11.0)
  multi_json (~> 1.14.1)
  net-ldap (~> 0.16.3)
  net-ntp
-  nokogiri (~> 1.13.0)
+  nokogiri (~> 1.13.8)
  oauth2 (~> 2.0)
  octokit (~> 4.15)
  ohai (~> 16.10)
  oj (~> 3.13.21)
-  omniauth (~> 1.8)
+  omniauth (~> 2.1.0)
  omniauth-alicloud (~> 1.0.1)
  omniauth-atlassian-oauth2 (~> 0.2.0)
  omniauth-auth0 (~> 2.0.0)
  omniauth-authentiq (~> 0.3.3)
  omniauth-azure-activedirectory-v2 (~> 1.0)
-  omniauth-azure-oauth2 (~> 0.0.9)
+  omniauth-azure-oauth2 (~> 0.0.9)!
  omniauth-cas3 (~> 1.1.4)!
  omniauth-dingtalk-oauth2 (~> 1.0)
  omniauth-facebook (~> 4.0.0)
-  omniauth-github (~> 1.4)
+  omniauth-github (= 2.0.0)
  omniauth-gitlab (~> 4.0.0)!
-  omniauth-google-oauth2 (~> 0.6.0)
+  omniauth-google-oauth2 (~> 1.0.1)!
  omniauth-oauth2-generic (~> 0.2.2)
-  omniauth-salesforce (~> 1.0.5)
-  omniauth-saml (~> 1.10)
+  omniauth-rails_csrf_protection
+  omniauth-salesforce (~> 1.0.5)!
+  omniauth-saml (~> 2.0.0)
  omniauth-shibboleth (~> 1.3.0)
  omniauth-twitter (~> 1.4)
  omniauth_crowd (~> 2.4.0)!
@ -1684,7 +1721,7 @@ DEPENDENCIES
  pry-byebug
  pry-rails (~> 0.3.9)
  pry-shell (~> 0.5.1)
-  puma (~> 5.6.4)
+  puma (~> 5.6.5)
  puma_worker_killer (~> 0.3.1)
  rack (~> 2.2.4)
  rack-attack (~> 6.6.0)
@ -1700,7 +1737,7 @@ DEPENDENCIES
  rdoc (~> 6.3.2)
  re2 (~> 1.4.0)
  recaptcha (~> 4.11)
-  redis (~> 4.4.0)
+  redis (~> 4.7.0)
  redis-actionpack (~> 5.3.0)
  redis-namespace (~> 1.8.1)
  request_store (~> 1.5)
@ -1735,8 +1772,8 @@ DEPENDENCIES
  sentry-sidekiq (~> 5.1.1)
  settingslogic (~> 2.0.9)
  shoulda-matchers (~> 5.1.0)
-  sidekiq (~> 6.4)
-  sidekiq-cron (~> 1.2)
+  sidekiq (~> 6.4.0)
+  sidekiq-cron (~> 1.4.0)
  sigdump (~> 0.2.4)
  simple_po_parser (~> 1.1.6)
  simplecov (~> 0.21)
@ -1744,21 +1781,21 @@ DEPENDENCIES
  simplecov-lcov (~> 0.8.0)
  slack-messenger (~> 2.3.4)
  snowplow-tracker (~> 0.6.1)
-  solargraph (~> 0.45.0)
-  spamcheck (~> 0.1.0)
+  solargraph (~> 0.46.0)
+  spamcheck (~> 1.0.0)
  spring (~> 2.1.0)
  spring-commands-rspec (~> 1.0.4)
  sprite-factory (~> 1.7)
  sprockets (~> 3.7.0)
  ssh_data (~> 1.3)
-  stackprof (~> 0.2.15)
+  stackprof (~> 0.2.21)
  state_machines-activerecord (~> 0.8.0)
  sys-filesystem (~> 1.4.3)
  tanuki_emoji (~> 0.6)
  terser (= 1.0.2)
  test-prof (~> 1.0.7)
  test_file_finder (~> 0.1.3)
-  thrift (>= 0.14.0)
+  thrift (>= 0.16.0)
  timecop (~> 0.9.1)
  timfel-krb5-auth (~> 0.8)
  toml-rb (~> 2.0)
@ -1771,7 +1808,7 @@ DEPENDENCIES
  valid_email (~> 0.1)
  validates_hostname (~> 1.0.11)
  version_sorter (~> 2.2.4)
-  view_component (~> 2.61)
+  view_component (~> 2.71.0)
  vmstat (~> 2.3.0)
  warning (~> 1.3.0)
  webauthn (~> 2.3)
--- a/pkgs/applications/version-management/gitlab/rubyEnv/gemset.nix
+++ b/pkgs/applications/version-management/gitlab/rubyEnv/gemset.nix
@ -221,10 +221,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0k3lijm4dmiz977bfmpclk5glj5jwv7bidamwwwywm60ywb0n4n4";
+      sha256 = "0g8gn3g6qy4bzjv1b14sj283kqynjgwq62bgq569jr4dkqwmwnzd";
      type = "gem";
    };
-    version = "2.0.15";
+    version = "2.0.17";
  };
  asciidoctor-include-ext = {
    dependencies = ["asciidoctor"];
@ -254,10 +254,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "02knhmyd3h1yryn66xjfciz7jjsq676kl7ama0r0cf92vyyvm12x";
+      sha256 = "14qppm3qzfra2g2lf8jl3mbnrhi4alp8232zqz6dbpl6276lfzj0";
      type = "gem";
    };
-    version = "0.0.12";
+    version = "0.0.16";
  };
  ast = {
    groups = ["default" "development" "test"];
@ -1067,10 +1067,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0syqkh0q9mcdgj68m2cf1innpxb8fv6xsayk1kgsdmq539rkv3ic";
+      sha256 = "0gl0b4jqf7ysv3rg99sgxa5y9va2k13p0si3a88pr7m8g6z8pm7x";
      type = "gem";
    };
-    version = "4.7.3";
+    version = "4.8.1";
  };
  devise-two-factor = {
    dependencies = ["activesupport" "attr_encrypted" "devise" "railties" "rotp"];
@ -1108,10 +1108,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0qhx743lcx61r2d3925jk61c6r8clfjmpf5g93cdy5sq00ig76lh";
+      sha256 = "1qcsv29ljfhy76gq4xi8zpn6dc6nv15c41r131bdr38kwpxjzd1n";
      type = "gem";
    };
-    version = "3.3.0";
+    version = "3.4.2";
  };
  discordrb-webhooks = {
    dependencies = ["rest-client"];
@ -1394,10 +1394,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1swgjb3h2hs5xflb68837l0vd32masbz9c66b1963mxlnnxf5gsg";
+      sha256 = "1d2z4ky2v15dpcz672i2p7lb2nc793dasq3yq3660h2az53kss9v";
      type = "gem";
    };
-    version = "1.2.1";
+    version = "1.2.7";
  };
  ethon = {
    dependencies = ["ffi"];
@ -1880,10 +1880,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1x5h31hl75x0p5s36hinywg18ijlxjhnlb5p02aqcjjkx777rcav";
+      sha256 = "0idp3hcg50rd7nh8lywyk39s40wgq7axc9nc64si0saf3whmifm0";
      type = "gem";
    };
-    version = "1.2.1";
+    version = "1.2.3";
  };
  fuubar = {
    dependencies = ["rspec-core" "ruby-progressbar"];
@ -1977,10 +1977,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0nvlnfjv5fycndri3bfbs7fsgb3cndgl3hhckiq7428yz58jgvg0";
+      sha256 = "1qzqyglw7akval4rxjyqygs2abdrziy6ry0cy135lq1hlwl4axj8";
      type = "gem";
    };
-    version = "15.3.0.pre.rc3";
+    version = "15.4.0.pre.rc2";
  };
  github-markup = {
    groups = ["default"];
@ -2020,10 +2020,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "18cs97r8msg2cvrvz9jfp6gn02xm80y4r14y7f5xpmg4k9j6ywqj";
+      sha256 = "07zhs9mz9gi6hgarm0px55kn6wxfah1xkcdrk217yv1vp1aqmqps";
      type = "gem";
    };
-    version = "3.5.0";
+    version = "3.5.2";
  };
  gitlab-experiment = {
    dependencies = ["activesupport" "request_store"];
@ -2083,10 +2083,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "11kc33j6m0nayppkb7645w0ldh8g18pgmxgb8wz39pd5vilr6qpv";
+      sha256 = "0yvh8vv9kgd06hc8c1pl2hq56w56vr0n7dr5mz19fx4p2v89y7xb";
      type = "gem";
    };
-    version = "1.8.0";
+    version = "1.8.1";
  };
  gitlab-net-dns = {
    groups = ["default"];
@ -2104,10 +2104,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1nxak6q0m0nd3m5a7vp9xqww9w5fqx97viv5g6pg3q62q9binm0j";
+      sha256 = "0lqizfap12ica5c6q74ldarzmbpmhgl156bap9xhamrlm4za4i7a";
      type = "gem";
    };
-    version = "0.9.1";
+    version = "0.10.0";
  };
  gitlab-sidekiq-fetcher = {
    dependencies = ["sidekiq"];
@ -2126,10 +2126,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0xp2f1bbx8i7a89xjwy6b5rhxr9g1vnms68chcnxdd95csxhxpzp";
+      sha256 = "1nk6gdgjs920kfzyj35im2m3rp79vhmamg8f8f3y74vh7dadhxzz";
      type = "gem";
    };
-    version = "7.1.0";
+    version = "8.0.0";
  };
  gitlab_chronic_duration = {
    dependencies = ["numerizer"];
@ -2202,10 +2202,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0825yplkfp8xf0vpl25ff58xrlah98x9yv3hj9pgl82b0gqali6p";
+      sha256 = "1ysvm5mxx1knjp3sbhi18nswaml625vbgm3gbh7is14h4d8fwjy9";
      type = "gem";
    };
-    version = "3.21.3";
+    version = "3.21.5";
  };
  googleapis-common-protos-types = {
    dependencies = ["google-protobuf"];
@ -2408,10 +2408,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0dwarfbc04bblljs4xg9fy57b5y8xrck6slhssa6bd7x58bh222c";
+      sha256 = "035fgbfr20m08w4603ls2lwqbggr0vy71mijz0p68ib1am394xbf";
      type = "gem";
    };
-    version = "5.1.2";
+    version = "5.2.2";
  };
  haml_lint = {
    dependencies = ["haml" "parallel" "rainbow" "rubocop" "sysexits"];
@ -2419,10 +2419,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0imdiwxqyca1i158yrqkdv6fa8sdfk8wwx2kaq6ad9i7k7jj365a";
+      sha256 = "00j8wdi731wy8qnn5g4laynswxlw0d0s69wsn509wfa5n8p34n5n";
      type = "gem";
    };
-    version = "0.36.0";
+    version = "0.40.1";
  };
  hamlit = {
    dependencies = ["temple" "thor" "tilt"];
@ -2907,10 +2907,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0mvyr9wqgv3pp75wg8majkivzrd0imkvq5f62p1ndzm09lnv6z05";
+      sha256 = "0nyhh3h96c118xcyfmn2595fhavi9r0g2v7rckqzc56walncszgs";
      type = "gem";
    };
-    version = "1.1.0";
+    version = "1.1.1";
  };
  letter_opener = {
    dependencies = ["launchy"];
@ -2961,10 +2961,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0c551j4qy773d79hgypjaz43h5wjn08mnxnxy9s2vdjc40qm95k5";
+      sha256 = "1v9x94h19b20wc551vs9a0yvk44w2y3g9ng07fflk26s8jsmjsab";
      type = "gem";
    };
-    version = "9.14.1";
+    version = "9.15.2";
  };
  listen = {
    dependencies = ["rb-fsevent" "rb-inotify"];
@ -3020,15 +3020,15 @@
    version = "2.18.0";
  };
  lookbook = {
-    dependencies = ["actioncable" "htmlbeautifier" "listen" "railties" "redcarpet" "rouge" "view_component" "yard"];
+    dependencies = ["actioncable" "css_parser" "htmlbeautifier" "htmlentities" "listen" "railties" "redcarpet" "rouge" "view_component" "yard"];
    groups = ["development"];
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1ycj1wa1qfxiz2g2i8lqmzfhrl82n2sh6242gyp5vdzhqqyaf6yz";
+      sha256 = "1mmw3jklhhrvvmp2fswld7pipdgw3s5l3fg3dgv353jq6w516gn5";
      type = "gem";
    };
-    version = "0.9.3";
+    version = "1.0.3";
  };
  lru_redux = {
    groups = ["default"];
@ -3511,15 +3511,15 @@
    version = "3.13.21";
  };
  omniauth = {
-    dependencies = ["hashie" "rack"];
-    groups = ["default" "kerberos"];
+    dependencies = ["hashie" "rack" "rack-protection"];
+    groups = ["default"];
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "002vi9gwamkmhf0dsj2im1d47xw2n1jfhnzl18shxf3ampkqfmyz";
+      sha256 = "0013azz7kz2q6dy8131b1q5xwl7qa9nz5iqpn8i3ccn9br7j7xxz";
      type = "gem";
    };
-    version = "1.9.1";
+    version = "2.1.0";
  };
  omniauth-alicloud = {
    dependencies = ["omniauth-oauth2"];
@ -3576,17 +3576,6 @@
    };
    version = "1.0.0";
  };
-  omniauth-azure-oauth2 = {
-    dependencies = ["jwt" "omniauth" "omniauth-oauth2"];
-    groups = ["default"];
-    platforms = [];
-    source = {
-      remotes = ["https://rubygems.org"];
-      sha256 = "1a3iqy63l1jd6na4y0bj4a8mlp7gcn3a0awnz9g79fa8n4v2g8n4";
-      type = "gem";
-    };
-    version = "0.0.10";
-  };
  omniauth-dingtalk-oauth2 = {
    dependencies = ["omniauth-oauth2"];
    groups = ["default"];
@ -3615,21 +3604,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0xbk0dbxqfpyfb33ghz6vrlz3m6442rp18ryf13gwzlnifcawhlb";
+      sha256 = "0jc66zp4bhwy7c6s817ws0nkimski3crrhwd7xyy55ss29v6b8hw";
      type = "gem";
    };
-    version = "1.4.0";
-  };
-  omniauth-google-oauth2 = {
-    dependencies = ["jwt" "omniauth" "omniauth-oauth2"];
-    groups = ["default"];
-    platforms = [];
-    source = {
-      remotes = ["https://rubygems.org"];
-      sha256 = "03v2gqpsbdhkqaxhvzr83za885awm6pgskv3mkyfvang7mr321df";
-      type = "gem";
-    };
-    version = "0.6.0";
+    version = "2.0.0";
  };
  omniauth-oauth = {
    dependencies = ["oauth" "omniauth"];
@ -3664,16 +3642,16 @@
    };
    version = "0.2.2";
  };
-  omniauth-salesforce = {
-    dependencies = ["omniauth" "omniauth-oauth2"];
+  omniauth-rails_csrf_protection = {
+    dependencies = ["actionpack" "omniauth"];
    groups = ["default"];
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0sr7xmffx6dbsrvnh6spka5ljyzf69iac754xw5r1736py41qhpj";
+      sha256 = "1kwswnkyl8ym6i4wv65qh3qchqbf2n0c6lbhfgbvkds3gpmnlm7w";
      type = "gem";
    };
-    version = "1.0.5";
+    version = "1.0.1";
  };
  omniauth-saml = {
    dependencies = ["omniauth" "ruby-saml"];
@ -3681,10 +3659,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "17lji8i4q9k3yi8lmjwlw8rfpp2sc74jv8d6flgq85lg5brfqq1p";
+      sha256 = "1is4vnikwmd148gpyv3sm57k4cmdx4il5rm2cng6mqhdcgb4yn82";
      type = "gem";
    };
-    version = "1.10.0";
+    version = "2.0.0";
  };
  omniauth-shibboleth = {
    dependencies = ["omniauth"];
@ -3849,10 +3827,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0xhfghgidj8cbdnqp01f7kvnrv1f60izpkd9dhxsvpdzkfsdg97d";
+      sha256 = "1q31n7yj59wka8xl8s5wkf66hm4pgvblx95czyxffprdnlhrir2p";
      type = "gem";
    };
-    version = "3.1.2.0";
+    version = "3.1.2.1";
  };
  parslet = {
    groups = ["default" "development" "test"];
@ -3902,10 +3880,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "00bhwkhjy6bkp04313m5il7vd165i3fz0x4jissflf66i164ppgk";
+      sha256 = "1fyhhb5f2y5mqk5vg5ykicxp58wwhc7invfp27x8d7fgi0zkdwa8";
      type = "gem";
    };
-    version = "2.1.3";
+    version = "2.1.4";
  };
  plist = {
    groups = ["default"];
@ -4045,10 +4023,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0dgr2rybayih2naz3658mbzqwfrg9fxl80zsvhscf6b972kp3jdw";
+      sha256 = "0qzq0c791kacv68hgk9zqsd1p7zx1y1rr9j10rn9yphibb8jj436";
      type = "gem";
    };
-    version = "5.6.4";
+    version = "5.6.5";
  };
  puma_worker_killer = {
    dependencies = ["get_process_mem" "puma"];
@ -4076,10 +4054,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0xzdmbn48753f6k0ckirp8ja5p0xn1a92wbwxfyggyhj0hza9ylq";
+      sha256 = "10m8bln9d00dwzjil1k42i5r7l82x25ysbi45fwyv4932zsrzynl";
      type = "gem";
    };
-    version = "1.1.6";
+    version = "1.4.0";
  };
  racc = {
    groups = ["default" "development" "test"];
@ -4145,6 +4123,17 @@
    };
    version = "1.21.2";
  };
+  rack-protection = {
+    dependencies = ["rack"];
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "169jzzgvbjrqmz4q55wp9pg4ji2h90mggcdxy152gv5vp96l2hgx";
+      type = "gem";
+    };
+    version = "2.2.2";
+  };
  rack-proxy = {
    dependencies = ["rack"];
    groups = ["default"];
@ -4289,10 +4278,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "06c50pvxib7wqnv6q0f3n7gzfcrp5chi3sa48hxpkfxc3hhy11fm";
+      sha256 = "1zmf31rnpm8553lqwibvv3kkx0v7majm1f341xbxc0bk5sbhp423";
      type = "gem";
    };
-    version = "0.11.1";
+    version = "0.11.2";
  };
  rb-inotify = {
    dependencies = ["ffi"];
@ -4402,10 +4391,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1ig832dp0xmpp6a934nifzaj7wm9lzjxzasw911fagycs8p6m720";
+      sha256 = "1xid9av3apfz5mszwqgl6v0n58g6038lsfdz0p53xb9ywpa5dcpc";
      type = "gem";
    };
-    version = "4.4.0";
+    version = "4.7.1";
  };
  redis-actionpack = {
    dependencies = ["actionpack" "redis-rack" "redis-store"];
@ -4735,10 +4724,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0h8q3gwqs8afshjd2l52ywf48md9rskr3q2y4fydgm536vvahjgm";
+      sha256 = "0s4m9h9hzrpfmsnswvfimafmjwfa79cbqh9dvq18cja32dhrhpcg";
      type = "gem";
    };
-    version = "1.19.1";
+    version = "1.21.0";
  };
  rubocop-gitlab-security = {
    dependencies = ["rubocop"];
@ -4757,10 +4746,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1yam7fdm77y0x6b6i7v14iiji9020mvdd9h1ainvv88zbv8yd4wq";
+      sha256 = "1bdxal5n0q6aq457jz60jzhs3z04mv2wbvl5xd2cw3lrr6x2q3xl";
      type = "gem";
    };
-    version = "0.14.3";
+    version = "0.14.6";
  };
  rubocop-performance = {
    dependencies = ["rubocop" "rubocop-ast"];
@ -5160,10 +5149,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "10pllqwracvy5nmchipg359sq9pnyg08q970xpqmpc3nkmrihxlf";
+      sha256 = "0b06kw7frd8hrb7373pvfd39qap00ykkvipgymgwxfjzrgz0ag0d";
      type = "gem";
    };
-    version = "6.4.0";
+    version = "6.4.2";
  };
  sidekiq-cron = {
    dependencies = ["fugit" "sidekiq"];
@ -5171,10 +5160,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0hxvm42zbr27k40jvdba5v8ich2ys8q7a2wbia9sxb0mmcy8v2aj";
+      sha256 = "0v9psfprq1x03b51mnpidfzilnm8b6spzkgap3pb8yga4pg2lq91";
      type = "gem";
    };
-    version = "1.2.0";
+    version = "1.4.0";
  };
  sigdump = {
    groups = ["development" "test"];
@ -5296,10 +5285,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "11c7hcgg4sflhlj9lv9yh76sxrlk9a52y6p56xc99f0w015yyslh";
+      sha256 = "0r8lr7gldwp57xqik4kims6w72q9ww34bral0j5z20a56s6gva8x";
      type = "gem";
    };
-    version = "0.45.0";
+    version = "0.46.0";
  };
  sorted_set = {
    dependencies = ["rbtree" "set"];
@ -5318,10 +5307,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "0n307r7y819gq21yqhlni3r455cgcg3nc5318rhhx1bs99qs793r";
+      sha256 = "177wcssfjp63vwr4rxma6sx7rc0lszrx4afp2wz3b4a0322s1vnz";
      type = "gem";
    };
-    version = "0.1.0";
+    version = "1.0.0";
  };
  spring = {
    groups = ["development" "test"];
@ -5411,10 +5400,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1g2zzasjdr1qnwmpmn28ddv2z9jsnv4w5raiz26y9h1jh03sagqd";
+      sha256 = "1bpmrz2vw59gw556y5hsha3xlrvfv4qwck4wg2r39qf2bp2hcr1b";
      type = "gem";
    };
-    version = "0.2.15";
+    version = "0.2.21";
  };
  state_machines = {
    groups = ["default"];
@ -5610,10 +5599,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1v4q8wlc4kr952r24q9x60cvimn27g34h0j23imwqkrjcbngsj5n";
+      sha256 = "1knw2xa3pkfql4np9qazz2mdi1vz21vdsa0wkx648c4ym1p2h8yh";
      type = "gem";
    };
-    version = "0.14.0";
+    version = "0.16.0";
  };
  tilt = {
    groups = ["default" "development" "test"];
@ -5947,10 +5936,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1bwj34rz7961rrl545f006m2jdz1nrc0m72gfqmnb41xwsvpagbk";
+      sha256 = "0lblym140w5n88ijyfgcvkxvpfj8m6z00rxxf2ckmmhk0x61dzkj";
      type = "gem";
    };
-    version = "1.0.13";
+    version = "1.0.15";
  };
  validates_hostname = {
    dependencies = ["activerecord" "activesupport"];
@ -5984,15 +5973,15 @@
    version = "2.2.4";
  };
  view_component = {
-    dependencies = ["activesupport" "method_source"];
+    dependencies = ["activesupport" "concurrent-ruby" "method_source"];
    groups = ["default" "development"];
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "03my3glfw0v9g2zlwp1wad74v5n2pgz8hai8kj1n9by06vwr32v0";
+      sha256 = "0av6ngrfb1pyxwvy2lsp7m5lljk2vc9j7aabzw1zp70dh13hd261";
      type = "gem";
    };
-    version = "2.61.0";
+    version = "2.71.0";
  };
  vmstat = {
    groups = ["default"];
@ -6010,10 +5999,10 @@
    platforms = [];
    source = {
      remotes = ["https://rubygems.org"];
-      sha256 = "1fr9n9i9r82xb6i61fdw4xgc7zjv7fsdrr4k0njchy87iw9fl454";
+      sha256 = "1l7gl7vms023w4clg02pm4ky9j12la2vzsixi2xrv9imbn44ys26";
      type = "gem";
    };
-    version = "1.2.8";
+    version = "1.2.9";
  };
  warning = {
    groups = ["default"];
--- a/pkgs/applications/version-management/gitlab/update-pg.patch
+++ b/pkgs/applications/version-management/gitlab/update-pg.patch
@ -1,13 +1,13 @@
 diff --git a/Gemfile.lock b/Gemfile.lock
-index f04445e1d..b9bf34cd0 100644
+index 9074b48c56b..57a1c924897 100644
 --- a/Gemfile.lock
 +++ b/Gemfile.lock
-@@ -987,7 +987,7 @@ GEM
+@@ -1019,7 +1019,7 @@ GEM
       tty-color (~> 0.5)
     peek (1.1.0)
       railties (>= 4.0.0)
 -    pg (1.4.1)
 +    pg (1.4.3)
-     pg_query (2.1.3)
+     pg_query (2.1.4)
       google-protobuf (>= 3.19.2)
     plist (3.6.0)
--- a/pkgs/applications/version-management/gitlab/update.py
+++ b/pkgs/applications/version-management/gitlab/update.py
@ -17,7 +17,20 @@ import requests

 # Always keep this in sync with the GitLaab version you're updating to.
 # If you see any errors about vendored dependencies during an update, check the Gemfile.
-VENDORED_GEMS = ['devise-pbkdf2-encryptable', 'omniauth-cas3', 'omniauth-gitlab', 'omniauth_crowd', 'mail-smtp_pool', 'ipynbdiff', 'error_tracking_open_api']
+VENDORED_GEMS = [
+    "bundler-checksum",
+    "devise-pbkdf2-encryptable",
+    "omniauth-azure-oauth2",
+    "omniauth-cas3",
+    "omniauth-gitlab",
+    "omniauth-google-oauth2",
+    "omniauth_crowd",
+    "omniauth-salesforce",
+    "mail-smtp_pool",
+    "microsoft_graph_mailer",
+    "ipynbdiff",
+    "error_tracking_open_api",
+]
 logger = logging.getLogger(__name__)


--- a/pkgs/applications/video/corrscope/default.nix
+++ b/pkgs/applications/video/corrscope/default.nix
@ -19,7 +19,10 @@ mkDerivationWith python3Packages.buildPythonApplication rec {
    sha256 = "1wdla4ryif1ss37aqi61lcvzddvf568wyh5s3xv1lrryh4al9vpd";
  };

+  pythonRelaxDeps = [ "attrs" ];
+
  nativeBuildInputs = [
+    python3Packages.pythonRelaxDepsHook
    wrapQtAppsHook
  ] ++ (with python3Packages; [
    poetry-core
--- a/pkgs/applications/video/mpv/scripts/mpris.nix
+++ b/pkgs/applications/video/mpv/scripts/mpris.nix
@ -2,13 +2,13 @@

 stdenv.mkDerivation rec {
  pname = "mpv-mpris";
-  version = "0.8.1";
+  version = "0.9";

  src = fetchFromGitHub {
    owner = "hoyon";
    repo = "mpv-mpris";
    rev = version;
-    sha256 = "ugEiQZA1vQCVwyv3ViM84Qz8lhRvy17vcxjayYevTAs=";
+    sha256 = "sha256-leW7oCWTnJuprVnJJ+iXd3nuB2VXl3fw8FmPxv7d6rA=";
  };

  nativeBuildInputs = [ pkg-config ];
--- a/pkgs/applications/video/obs-studio/plugins/obs-pipewire-audio-capture.nix
+++ b/pkgs/applications/video/obs-studio/plugins/obs-pipewire-audio-capture.nix
@ -10,13 +10,13 @@

 stdenv.mkDerivation rec {
  pname = "obs-pipewire-audio-capture";
-  version = "1.0.4";
+  version = "1.0.5";

  src = fetchFromGitHub {
    owner = "dimtpap";
    repo = pname;
    rev = "${version}";
-    sha256 = "OX27NTUsceEC8kHqlM+oeGjPxguake6lwaXFYsoEqKU=";
+    sha256 = "sha256-AXqBdwu5ayzQPIVOhqspDHnQo422y3WGA+kmW1DzoL0=";
  };

  nativeBuildInputs = [ cmake ninja pkg-config ];
--- a/pkgs/applications/virtualization/cntr/default.nix
+++ b/pkgs/applications/virtualization/cntr/default.nix
@ -13,9 +13,7 @@ rustPlatform.buildRustPackage rec {

  cargoSha256 = "sha256-3e5wDne6Idu+kDinHPcAKHfH/d4DrGg90GkiMbyF280=";

-  passthru.tests = {
-    nixos = nixosTests.cntr;
-  };
+  passthru.tests = nixosTests.cntr;

  meta = with lib; {
    description = "A container debugging tool based on FUSE";
--- a/pkgs/applications/virtualization/nixpacks/default.nix
+++ b/pkgs/applications/virtualization/nixpacks/default.nix
@ -2,16 +2,16 @@

 rustPlatform.buildRustPackage rec {
  pname = "nixpacks";
-  version = "0.5.6";
+  version = "0.6.2";

  src = fetchFromGitHub {
    owner = "railwayapp";
    repo = pname;
    rev = "v${version}";
-    sha256 = "sha256-pYqaBLrGEZUhIqaoYhkXrf2OoaAfswQntSa8FnYMBLA=";
+    sha256 = "sha256-PMWaaCcguziQAnuBL5He2AQaAhCTmpNsOHUNnExK0mU=";
  };

-  cargoSha256 = "sha256-ud6bhyWePINiddSuWcpUkMjp3q6/Xd9TK3CaoFZFB20=";
+  cargoSha256 = "sha256-IVlOenWvy6BsUCsSMWuJj7H8XKQRQkJtTYnmUhcesNw=";

  # skip test due FHS dependency
  doCheck = false;
--- a/pkgs/applications/window-managers/qtile/default.nix
+++ b/pkgs/applications/window-managers/qtile/default.nix
@ -16,13 +16,13 @@
 let
  unwrapped = python3Packages.buildPythonPackage rec {
    pname = "qtile";
-    version = "0.21.0";
+    version = "0.22.1";

    src = fetchFromGitHub {
      owner = "qtile";
      repo = "qtile";
      rev = "v${version}";
-      sha256 = "3QCI1TZIh1LcWuklVQkqgR1MQphi6CzZKc1UZcytV0k=";
+      hash = "sha256-HOyExVKOqZ4OeNM1/AiXQeiUV+EbSJLEjWEibm07ff8=";
    };

    patches = [
--- a/pkgs/applications/window-managers/shod/default.nix
+++ b/pkgs/applications/window-managers/shod/default.nix
@ -13,13 +13,13 @@

 stdenv.mkDerivation rec {
  pname = "shod";
-  version = "2.4.0";
+  version = "2.5.0";

  src = fetchFromGitHub {
    owner = "phillbush";
    repo = "shod";
    rev = "v${version}";
-    sha256 = "sha256-jrPuI3ADppqaJ2y9GksiJZZd4LtN1P5yjWwlf9VuYDc=";
+    sha256 = "sha256-hunHcYWxboCWM+SYH5u09MKP0b7U/9CVfhC6vLVpc3Q=";
  };

  buildInputs = [
--- a/pkgs/data/fonts/glasstty-ttf/default.nix
+++ b/pkgs/data/fonts/glasstty-ttf/default.nix
@ -0,0 +1,18 @@
+{ runCommand, fetchurl, lib }:
+runCommand "glasstty-ttf" {
+  src = fetchurl {
+    url = "https://github.com/svofski/glasstty/raw/2c47ac1a0065f8b12d9732257993833d8227e3e5/Glass_TTY_VT220.ttf";
+    sha256 = "sha256-2NYJaSWNr1Seuqdd7nLjA7tAMs/SAvl3uAe3uDoLLO4=";
+  };
+  meta = with lib; {
+    maintainers = [ maintainers.pkharvey ];
+    homepage = "https://github.com/svofski/glasstty";
+    license = licenses.unlicense;
+    platforms = platforms.all;
+    description = "TrueType VT220 font";
+  };
+}
+''
+  mkdir -p $out/share/fonts/truetype
+  cp $src $out/share/fonts/truetype/Glass_TTY_VT220.ttf
+''
--- a/pkgs/data/misc/hackage/pin.json
+++ b/pkgs/data/misc/hackage/pin.json
@ -1,6 +1,6 @@
 {
-  "commit": "e456824564bb5457549a70dc03c7ae00b3dfaec3",
-  "url": "https://github.com/commercialhaskell/all-cabal-hashes/archive/e456824564bb5457549a70dc03c7ae00b3dfaec3.tar.gz",
-  "sha256": "0kvjhghjhs5b6ldp4yyyy158lqk54aahqqp4n0mm67p7qv09i5xr",
-  "msg": "Update from Hackage at 2022-09-19T12:29:18Z"
+  "commit": "12bd870a1ed095ff74dbe08ef4d5d930821e878d",
+  "url": "https://github.com/commercialhaskell/all-cabal-hashes/archive/12bd870a1ed095ff74dbe08ef4d5d930821e878d.tar.gz",
+  "sha256": "196pl60xyv4ij1nxz4hv5fhmliisb5dmxl8w1jfl07z22cpd92p5",
+  "msg": "Update from Hackage at 2022-09-21T15:25:15Z"
 }
--- a/pkgs/data/misc/v2ray-domain-list-community/default.nix
+++ b/pkgs/data/misc/v2ray-domain-list-community/default.nix
@ -3,12 +3,12 @@
 let
  generator = pkgsBuildBuild.buildGoModule rec {
    pname = "v2ray-domain-list-community";
-    version = "20220908131416";
+    version = "20220921050909";
    src = fetchFromGitHub {
      owner = "v2fly";
      repo = "domain-list-community";
      rev = version;
-      sha256 = "sha256-LXtdyLINmUcyT2x9w7KCoLLifcYrSq6JN+2J9wbKjCI=";
+      sha256 = "sha256-ujslsVqUQ16LFdCwwKmY2SnoqNTRenI5cEreupt/6c4=";
    };
    vendorSha256 = "sha256-CCY3CgjA1w4svzmkaI2Jt272Rrt5UOt5sbVDAWRRfzk=";
    meta = with lib; {
--- a/pkgs/data/themes/kwin-decorations/kde-rounded-corners/default.nix
+++ b/pkgs/data/themes/kwin-decorations/kde-rounded-corners/default.nix
@ -12,13 +12,13 @@

 stdenv.mkDerivation rec {
  pname = "kde-rounded-corners";
-  version = "unstable-2022-06-17";
+  version = "unstable-2022-09-17";

  src = fetchFromGitHub {
    owner = "matinlotfali";
    repo = "KDE-Rounded-Corners";
-    rev = "015ef5cd65e9ec89e4a1ae057f2251eda03715e2";
-    hash = "sha256-NJ7icavofSUPPww1Ro7p0yY2EQ78S4KVCuj9yPuYwd8=";
+    rev = "cdf7460d957e82dfd571cf0f2a20fd9553ac4c2e";
+    hash = "sha256-ubocO0Vr3g5kIuGNV6vH+ySP42gFps9gPi5d3EpQVFY=";
  };

  postConfigure = ''
--- a/Show More
+++ b/Show More
				`@ -0,0 +1 @@`
				`Daniel Løvbrøtte Olsen <me@dandellion.xyz> <daniel.olsen99@gmail.com>`