gnu: Use built-in delete-all-but.

* gnu/packages/astronomy.scm (phd2): Use built-in delete-all-but. * gnu/packages/bioinformatics.scm (pynsptools-examples-files): Likewise. * gnu/packages/debug.scm (fandango): Likewise. * gnu/packages/electronics.scm (librepcb, nextpnr): Likewise. * gnu/packages/emacs-xyz.scm (emacs-smartparens): Likewise. * gnu/packages/emulators.scm (dolphin-emu, libretro-dolphin-emu) (libretro-slang-shaders, mgba, pcsx2, retroarch-minimal): Likewise. * gnu/packages/game-development.scm (sfml): Likewise. * gnu/packages/golang-apps.scm (godoc): Likewise. * gnu/packages/golang-build.scm (go-golang-org-x-tools-go-expect) (go-golang-org-x-tools-go-packages-packagestest) (go-golang-org-x-tools-godoc): Likewise. * gnu/packages/golang-web.scm (go-github-com-containerd-containerd-api) (go-cloud-google-com-go-auth, go-cloud-google-com-go-auth-oauth2adapt) (go-cloud-google-com-go-iam, go-cloud-google-com-go-kms) (go-cloud-google-com-go-logging, go-cloud-google-com-go-longrunning) (go-cloud-google-com-go-monitoring, go-cloud-google-com-go-security) (go-cloud-google-com-go-spanner, go-cloud-google-com-go-storage) (go-cloud-google-com-go-trace) (go-github-com-aws-aws-sdk-go-v2-config) (go-github-com-aws-aws-sdk-go-v2-credentials) (go-github-com-aws-aws-sdk-go-v2-feature-ec2-imds) (go-github-com-aws-aws-sdk-go-v2-internal-configsources) (go-github-com-aws-aws-sdk-go-v2-internal-endpoints-v2) (go-github-com-aws-aws-sdk-go-v2-service-cloudwatchlogs) (go-github-com-aws-aws-sdk-go-v2-service-kms) (go-github-com-aws-aws-sdk-go-v2-service-sqs) (go-github-com-aws-aws-sdk-go-v2-service-ssm) (go-github-com-aws-smithy-go-metrics-smithyotelmetrics) (go-github-com-azure-azure-sdk-for-go-sdk-azcore) (go-github-com-azure-azure-sdk-for-go-sdk-azidentity) (go-github-com-azure-azure-sdk-for-go-sdk-internal) (go-github-com-azure-azure-sdk-for-go-sdk-security-keyvault-azkeys) (go-github-com-azure-azure-sdk-for-go-sdk-security-keyvault-internal) (go-github-com-azure-azure-sdk-for-go-sdk-storage-azblob) (go-github-com-azure-azure-sdk-for-go-sdk-storage-azfile) (go-github-com-envoyproxy-go-control-plane-envoy) (go-github-com-googlecloudplatform-opentelemetry-operations-go-exporter-metric) (go-github-com-googlecloudplatform-opentelemetry-operations-go-exporter-trace) (go-github-com-googlecloudplatform-opentelemetry-operations-go-internal-cloudmock) (go-github-com-googlecloudplatform-opentelemetry-operations-go-internal-resourcemapping) (go-github-com-grpc-ecosystem-go-grpc-middleware-providers-prometh) (go-github-com-hashicorp-go-secure-stdlib-parseutil) (go-github-com-jtolio-crawlspace-tools) (go-github-com-moby-moby-client) (go-github-com-sigstore-sigstore-pkg-signature-kms-aws) (go-github-com-sigstore-sigstore-pkg-signature-kms-azure) (go-github-com-sigstore-sigstore-pkg-signature-kms-gcp) (go-github-com-sigstore-sigstore-pkg-signature-kms-hashivault) (go-go-etcd-io-etcd-api-v3, go-go-etcd-io-etcd-client-pkg-v3) (go-go-opentelemetry-io-auto-sdk) (go-go-opentelemetry-io-contrib-detectors-aws-ec2-v2) (go-go-opentelemetry-io-contrib-detectors-aws-ecs) (go-go-opentelemetry-io-contrib-detectors-gcp) (go-go-opentelemetry-io-contrib-propagators-autoprop) (go-go-opentelemetry-io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc) (go-go-opentelemetry-io-otel-exporters-otlp-otlpmetric-otlpmetrichttp) (go-go-opentelemetry-io-otel-exporters-otlp-otlptrace) (go-go-opentelemetry-io-otel-exporters-otlp-otlptrace-otlptracegrpc) (go-go-opentelemetry-io-otel-exporters-otlp-otlptrace-otlptracehttp) (go-go-opentelemetry-io-otel-exporters-prometheus) (go-go-opentelemetry-io-otel-exporters-stdout-stdoutmetric) (go-go-opentelemetry-io-otel-exporters-stdout-stdouttrace) (go-go-opentelemetry-io-otel-exporters-zipkin) (go-go-opentelemetry-io-otel-log) (go-go-opentelemetry-io-otel-metric-x) (go-go-opentelemetry-io-otel-sdk, go-go-opentelemetry-io-otel-sdk-log) (go-go-opentelemetry-io-otel-sdk-metric) (go-google-golang-org-genproto-googleapis-api) (go-google-golang-org-genproto-googleapis-bytestream) (go-google-golang-org-grpc-cmd-protoc-gen-go-grpc) (go-google-golang-org-grpc-examples) (go-k8s-io-kube-openapi-test-integration): Likewise. * gnu/packages/golang-xyz.scm (go-github-com-ajstarks-deck-generate) (go-github-com-charmbracelet-x-ansi) (go-github-com-charmbracelet-x-cellbuf) (go-github-com-charmbracelet-x-errors) (go-github-com-charmbracelet-x-term) (go-github-com-charmbracelet-x-xpty) (go-github-com-containerd-errdefs-pkg) (go-github-com-moby-sys-atomicwriter) (go-github-com-moby-sys-mount, go-go-uber-org-zap-exp) (go-modernc-org-ccgo-v4, go-sigs-k8s-io-kustomize-cmd-config): Likewise. * gnu/packages/image-processing.scm (opencv): Likewise. * gnu/packages/ipfs.scm (go-github-com-ipfs-shipyard-nopfs-ipfs): Likewise. * gnu/packages/kubernetes.scm (go-go-etcd-io-etcd-client-v3) go-go-etcd-io-etcd-pkg-v3, go-go-etcd-io-etcd-server-v3): Likewise. * gnu/packages/mail.scm (neomutt): Likewise. * gnu/packages/mpi.scm (openmpi-5): Likewise. * gnu/packages/protobuf.scm (protobuf-6): Likewise. * gnu/packages/python-science.scm (python-vaex-core): Likewise. * gnu/packages/specifications.scm (specification-astropy-data): Likewise. * gnu/packages/version-control.scm (libfossil): Likewise. * gnu/packages/vnc.scm (turbovnc): Likewise. Change-Id: I6575463a072a6ee05751e23ebcee9a393529c8b1 Merges: https://codeberg.org/guix/guix/pulls/5312 Reviewed-by: Maxim Cournoyer <maxim@guixotic.coop> Reviewed-by: Cayetano Santos <csantosb@inventati.org> Reviewed-by: Gabriel Wicki <gabriel@erlikon.ch> Co-authored-by: Nguyễn Gia Phong <cnx@loang.net> Signed-off-by: Nguyễn Gia Phong <cnx@loang.net>
guix: build: utils: Add delete-all-but.
2026-07-07 19:24:08 +02:00 · 2026-05-29 11:34:18 +02:00 · 2026-05-29 11:34:18 +02:00 · 2026-05-29 11:34:18 +02:00 · 2026-05-29 11:34:18 +02:00 · 2026-05-29 11:34:18 +02:00
168 changed files with 2278 additions and 3462 deletions
@@ -42,12 +42,11 @@
     ;; For use with 'bug-reference-prog-mode'.  Extra bug-reference
     ;; configuration should be done in your Emacs user configuration file;
     ;; refer to (info (guix) The Perfect Setup).
-     (eval . (setq-local
-              ;; #8545, guix/guix#8545, guix/guix!8545, but not !8545
-              bug-reference-bug-regexp
-              (rx (group (or (seq (zero-or-more "guix/guix") "#")
-                             (seq (one-or-more "guix/guix") "!"))
-                         (group (one-or-more digit))))))
+     (eval . (setq-local bug-reference-bug-regexp
+                         ;; #8545 (issues), !8545 (PRs), guix/guix#8545 and
+                         ;; guix/guix!8545
+                         (rx (group (seq (? "guix/guix") (or "#" "!"))
+                                    (group (one-or-more digit))))))
     (bug-reference-url-format . "https://codeberg.org/guix/guix/issues/%s")

     (eval . (add-to-list 'completion-ignored-extensions ".go"))
@@ -1281,6 +1281,14 @@ $(GIT_HOOKS_DIR):
 $(GIT_HOOKS_DIR)/%: etc/git/% | $(GIT_HOOKS_DIR)/
 	if [ -n "$(GIT_HOOKS_DIR)" ]; then cp "$<" "$@"; fi

+# Special-case the pre-push hook installation, to ensure it is always
+# up-to-date with its source.
+.PHONY: $(GIT_HOOKS_DIR)/pre-push
+$(GIT_HOOKS_DIR)/pre-push: etc/git/pre-push | $(GIT_HOOKS_DIR)
+	@if [ -n "$(GIT_HOOKS_DIR)" ]; then \
+	  cmp "--silent" "$<" "$@" || cp "$<" "$@"; \
+	fi
+
 $(GIT_CONFIG_FILE): etc/git/gitconfig
 	if [ -n "$(GIT_CONFIG_FILE)" ]; then \
 	  git config --fixed-value --replace-all include.path \
@@ -53,7 +53,7 @@ Copyright @copyright{} 2017, 2019--2026 Maxim Cournoyer@*
 Copyright @copyright{} 2017–2022 Tobias Geerinckx-Rice@*
 Copyright @copyright{} 2017 George Clemmer@*
 Copyright @copyright{} 2017 Andy Wingo@*
-Copyright @copyright{} 2017, 2018, 2019, 2020, 2023, 2024, 2025 Arun Isaac@*
+Copyright @copyright{} 2017, 2018, 2019, 2020, 2023, 2024, 2025, 2026 Arun Isaac@*
 Copyright @copyright{} 2017 nee@*
 Copyright @copyright{} 2018 Rutger Helling@*
 Copyright @copyright{} 2018, 2021, 2023, 2025, 2026 Oleg Pykhalov@*
@@ -77,7 +77,7 @@ Copyright @copyright{} 2020 Damien Cassou@*
 Copyright @copyright{} 2020 Jakub Kądziołka@*
 Copyright @copyright{} 2020 Jack Hill@*
 Copyright @copyright{} 2020 Naga Malleswari@*
-Copyright @copyright{} 2020, 2021 Brice Waegeneire@*
+Copyright @copyright{} 2020, 2021, 2025 Brice Waegeneire@*
 Copyright @copyright{} 2020 R Veera Kumar@*
 Copyright @copyright{} 2020, 2021, 2022 Pierre Langlois@*
 Copyright @copyright{} 2020 pinoaffe@*
@@ -36741,13 +36741,16 @@ The Mumi package to use.
 Data directory to store Debbugs data from upstream Debbugs instance.

@item @code{rsync-remote}
-Remote rsync path from which to download Debbugs data.  The remote is
-polled every 5 minutes, unless a previous instance of rsync is already
-running.
+Remote rsync path from which to download Debbugs data.

@item @code{rsync-flags} (default: @code{'()})
 Additional flags to pass to @command{rsync}.

+@item @code{rsync-and-index-event} (default: @code{#~(calendar-event #:minutes '#$(iota 12 0 5))})
+Shepherd calendar event to run the rsync and indexing timer at.  By
+default, this is once every 5 minutes.  The timer job is not run if an
+earlier instance of it is still running.
+
@item @code{mailer?} (default: @code{#true})
 Whether to enable or disable the mailer component.

@@ -52976,7 +52979,8 @@ subset of applications.  This field will be ignored if @code{layout} is set
 to @code{'plain}.

@item @code{excluded} (default: @code{'(".*~" ".*\\.swp" "/\\.git/.*" "\\.gitignore")}) (type: list-of-strings)
-The list of file patterns @code{home-dotfiles-service-type} will exclude
+The list of file patterns (including directories)
+@code{home-dotfiles-service-type} will exclude
 while visiting each one of the @code{directories}.

@end table
@@ -54392,6 +54396,69 @@ Where the service will write its logs.  If unset, it defaults to
@end table
@end deftp

+@node XDG Home Services
+@subsection XDG Home Services
+
+The @code{(gnu home services xdg)} module provides services related to
+XDG specifications for the desktop.
+
+@subsubheading XDG User Directories
+
+@defvar{home-xdg-user-directories-service-type}
+
+This service sets the names of default user directories such as
+@samp{Downloads} and @samp{Documents}.  These settings are respected by
+most applications via @var{xdg-user-dirs}.
+
+To disable a directory, set it to @code{"$HOME"}.
+
+@end defvar
+
+@c %start of fragment
+
+@deftp {Data Type} home-xdg-user-directories-configuration
+Available @code{home-xdg-user-directories-configuration} fields are:
+
+@table @asis
+@item @code{desktop} (default: @code{"$HOME/Desktop"}) (type: string)
+Default @samp{Desktop} directory, this is what you see on your
+background when using a desktop environment, e.g.  KDE.
+
+@item @code{documents} (default: @code{"$HOME/Documents"}) (type: string)
+Default directory to put documents like PDFs.
+
+@item @code{download} (default: @code{"$HOME/Downloads"}) (type: string)
+Default directory downloaded files, this is where your Web-broser will
+put downloaded files in.
+
+@item @code{music} (default: @code{"$HOME/Music"}) (type: string)
+Default directory for audio files.
+
+@item @code{pictures} (default: @code{"$HOME/Pictures"}) (type: string)
+Default directory for pictures and images.
+
+@item @code{projects} (default: @code{"$HOME/Projects"}) (type: string)
+Default directory for projects.
+
+@item @code{publicshare} (default: @code{"$HOME/Public"}) (type: string)
+Default directory for shared files, which can be accessed by other users
+on local machine or via network.
+
+@item @code{templates} (default: @code{"$HOME/Templates"}) (type: string)
+Default directory for templates.  They can be used by graphical file
+manager or other apps for creating new files with some pre-populated
+content.
+
+@item @code{videos} (default: @code{"$HOME/Videos"}) (type: string)
+Default directory for videos.
+
+@end table
+
+@end deftp
+
+@c %end of fragment
+
+
@node Guix Home Services
@subsection Guix Home Services

@@ -1,5 +1,4 @@
 #!/bin/sh
-# From Gerrit Code Review 3.11.1.
 #
 # Part of Gerrit Code Review (https://www.gerritcodereview.com/)
 #
@@ -70,9 +69,9 @@ dest="$1.tmp.${random}"

 trap 'rm -f "$dest" "$dest-2"' EXIT

-if ! cat "$1" | sed -e '/>8/q' | git stripspace --strip-comments > "${dest}" ; then
-   echo "cannot strip comments from $1"
-   exit 1
+if ! sed -e '/>8/q' "$1" | git stripspace --strip-comments > "${dest}" ; then
+  echo "cannot strip comments from $1"
+  exit 1
 fi

 if test ! -s "${dest}" ; then
@@ -91,7 +90,7 @@ else
  pattern=".*"
 fi

-if git interpret-trailers --parse < "$1" | grep -q "^$token: $pattern$" ; then
+if git interpret-trailers --no-divider --parse < "$1" | grep -q "^$token: $pattern$" ; then
  exit 0
 fi

@@ -99,6 +98,7 @@ fi
 # sentinel at the end to make sure there is one.
 # Avoid the --in-place option which only appeared in Git 2.8
 if ! git interpret-trailers \
+         --no-divider \
         --trailer "Signed-off-by: SENTINEL" < "$1" > "$dest-2" ; then
  echo "cannot insert Signed-off-by sentinel line in $1"
  exit 1
@@ -110,6 +110,7 @@ fi
 # Avoid the --in-place option which only appeared in Git 2.8
 # Avoid the --where option which only appeared in Git 2.15
 if ! git -c trailer.where=before interpret-trailers \
+         --no-divider \
         --trailer "Signed-off-by: $token: $value" < "$dest-2" |
     sed -e "s/^Signed-off-by: \($token: \)/\1/" \
         -e "/^Signed-off-by: SENTINEL/d" > "$dest" ; then
@@ -1,6 +1,7 @@
 ;;; GNU Guix --- Functional package management for GNU
 ;;; Copyright © 2024 Ludovic Courtès <ludo@gnu.org>
 ;;; Copyright © 2024, 2026 Giacomo Leidi <therewasa@fishinthecalculator.me>
+;;; Copyright © 2025 Brice Waegeneire <brice@waegenei.re>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -126,18 +127,21 @@ user's home directory, excluding files that match any of the patterns in EXCLUDE

 (define (home-dotfiles-configuration->files config)
  "Return a list of objects compatible with @code{home-files-service-type}'s
-value, excluding files that match any of the patterns configured."
+value, excluding files and directories that match any of the patterns configured."
  (define stow? (eq? (home-dotfiles-configuration-layout config) 'stow))
  (define excluded
    (home-dotfiles-configuration-excluded config))
  (define exclusion-rx
    (make-regexp (string-append "^.*(" (string-join excluded "|") ")$")))
+  (define* (excluded-file? file stat #:optional result)
+    (not (regexp-exec exclusion-rx file)))

  (define* (directory-contents directory #:key (packages #f))
    (define (filter-files directory)
      (find-files directory
-                  (lambda (file stat)
-                    (not (regexp-exec exclusion-rx file)))))
+                  excluded-file?
+                  #:enter?
+                  excluded-file?))
    (if (and stow? packages (maybe-value-set? packages))
        (append-map filter-files
                    (map (lambda (pkg)
@@ -204,9 +204,8 @@ for example).")))
 (define-configuration home-xdg-user-directories-configuration
  (desktop
   (string "$HOME/Desktop")
-   "Default ``desktop'' directory, this is what you see on your
-desktop when using a desktop environment,
-e.g. GNOME (@pxref{XWindow,,,guix.info}).")
+   "Default @samp{Desktop} directory, this is what you see on your background
+when using a desktop environment, e.g. KDE.")
  (documents
   (string "$HOME/Documents")
   "Default directory to put documents like PDFs.")
@@ -220,6 +219,9 @@ will put downloaded files in.")
  (pictures
   (string "$HOME/Pictures")
   "Default directory for pictures and images.")
+  (projects
+   (string "$HOME/Projects")
+   "Default directory for projects.")
  (publicshare
   (string "$HOME/Public")
   "Default directory for shared files, which can be accessed by other
@@ -1174,7 +1174,6 @@ dist_patch_DATA =						\
  %D%/packages/patches/cube-nocheck.patch			\
  %D%/packages/patches/cups-relax-root-ownership-check.patch		\
  %D%/packages/patches/cura-engine-gcc-14.patch			\
-  %D%/packages/patches/curl-CVE-2024-8096.patch			\
  %D%/packages/patches/curl-use-ssl-cert-env.patch		\
  %D%/packages/patches/curlftpfs-fix-error-closing-file.patch	\
  %D%/packages/patches/curlftpfs-fix-file-names.patch		\
@@ -1832,7 +1831,6 @@ dist_patch_DATA =						\
  %D%/packages/patches/libtgvoip-disable-webrtc.patch 		\
  %D%/packages/patches/libtheora-config-guess.patch		\
  %D%/packages/patches/libtiff-CVE-2022-34526.patch		\
-  %D%/packages/patches/libtirpc-CVE-2021-46828.patch		\
  %D%/packages/patches/libtirpc-hurd.patch			\
  %D%/packages/patches/libtool-grep-compat.patch		\
  %D%/packages/patches/libtool-skip-tests2.patch		\
@@ -1967,7 +1965,7 @@ dist_patch_DATA =						\
  %D%/packages/patches/mswebrtc-cmake.patch			\
  %D%/packages/patches/mtools-mformat-uninitialized.patch	\
  %D%/packages/patches/mupen64plus-ui-console-notice.patch	\
-  %D%/packages/patches/musl-cross-locale.patch			\
+  %D%/packages/patches/musl-CVE-2026-40200.patch		\
  %D%/packages/patches/mutt-store-references.patch		\
  %D%/packages/patches/m17n-lib-1.8.0-use-pkg-config-for-freetype.patch	\
  %D%/packages/patches/nanosvg-prusa-slicer.patch		\
@@ -2005,7 +2003,6 @@ dist_patch_DATA =						\
  %D%/packages/patches/nss-getcwd-nonnull.patch			\
  %D%/packages/patches/nss-increase-test-timeout.patch		\
  %D%/packages/patches/nss-3.56-pkgconfig.patch			\
-  %D%/packages/patches/nss-disable-broken-tests.patch           \
  %D%/packages/patches/nss-3.115-disable-broken-tests.patch     \
  %D%/packages/patches/nss-3.115-disable-pkix-ocsp-tests.patch  \
  %D%/packages/patches/ntp-fix-dereferencing-the-wrong-variable.patch   \
@@ -144,7 +144,7 @@
  #:use-module (gnu packages elf)
  #:use-module (gnu packages file)
  #:use-module (gnu packages file-systems)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fonts)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gawk)
@@ -2979,7 +2979,7 @@ system is under heavy load.")
 (define-public stress-ng
  (package
    (name "stress-ng")
-    (version "0.20.01")
+    (version "0.21.01")
    (source
     (origin
       (method git-fetch)
@@ -2988,7 +2988,7 @@ system is under heavy load.")
             (commit (string-append "V" version))))
       (file-name (git-file-name name version))
       (sha256
-        (base32 "1jkinrxh9ppv7xfii9xlisnd2679wnj4ljq12h8y0nvwrm8fkm0b"))))
+        (base32 "11w8xjm53lgnxfvg286lavqjh0il3bfr1fsgyk915167r4vlabqq"))))
    (build-system gnu-build-system)
    (arguments
     ;; XXX The test suite seems to cause instability on the VisionFive 2
@@ -4434,7 +4434,7 @@ buffers.")
 (define-public igt-gpu-tools
  (package
    (name "igt-gpu-tools")
-    (version "2.3")
+    (version "2.4")
    (source
     (origin
       (method git-fetch)
@@ -4443,7 +4443,7 @@ buffers.")
             (commit (string-append "v" version))))
       (file-name (git-file-name name version))
       (sha256
-        (base32 "1vyqrsvxraib98r4i6cjmxq7nis480s2ns95v78dscygcci42i8a"))))
+        (base32 "0ijvfa5wamihzbl8l29sc27ml0kmgzlld83jm5mln6bb4bvny4gs"))))
    (build-system meson-build-system)
    (arguments
     `(#:tests? #f              ; many of the tests try to load kernel modules
@@ -4461,6 +4461,7 @@ buffers.")
           libdrm
           libpciaccess
           libunwind
+           pciutils
           procps
           python))
    (native-inputs
@@ -7071,7 +7072,7 @@ network, which causes enabled computers to power on.")
 (define-public witr
  (package
    (name "witr")
-    (version "0.3.1")
+    (version "0.3.2")
    (source
     (origin
       (method git-fetch)
@@ -7080,7 +7081,7 @@ network, which causes enabled computers to power on.")
              (commit (string-append "v" version))))
       (file-name (git-file-name name version))
       (sha256
-        (base32 "03v9n4mdvqm0knqjl4s64321i5clqpmlrlkkdb87glzb9p28sg00"))))
+        (base32 "06vxrgd0j2v6s4snmyviwpp66hm5zai7xca9318inhyg4jw3ngg5"))))
    (build-system go-build-system)
    (arguments
     (list
@@ -7227,6 +7228,38 @@ has a focus on performance.  It can be used as a greeter by starting
 it from @file{~/.bashrc} for example.")
    (license license:agpl3+)))

+(define-public zeptofetch
+  (package
+    (name "zeptofetch")
+    (version "1.21")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://gitlab.archlinux.org/gurov/zeptofetch")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1f1dm9nrp0z0prqy90csrkbk98ixp0jx76ax473qb0qsbb7ys4g7"))))
+    (build-system gnu-build-system)
+    (arguments
+     (list
+      #:tests? #f ; No tests available.
+      #:make-flags
+      #~(list (string-append "PREFIX="
+                             #$output))
+      #:phases
+      #~(modify-phases %standard-phases
+          (delete 'configure)))) ; No configure script.
+    (home-page "https://gitlab.archlinux.org/gurov/zeptofetch")
+    (synopsis
+     "Fast, minimal system information tool for Linux.")
+    (description
+     "This package provides a system fetch tool, similar to
+@command{neofetch}, @command{fastfetch}, etc.  It is lightweight and
+has a focus on performance.")
+    (license license:gpl3+)))
+
 (define-public zzz
  (package
    (name "zzz")
@@ -52,7 +52,7 @@
  #:use-module (gnu packages cpp)
  #:use-module (gnu packages curl)
  #:use-module (gnu packages documentation)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fltk)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages gcc)
@@ -22,7 +22,7 @@
  #:use-module (gnu packages base)
  #:use-module (gnu packages bison)
  #:use-module (gnu packages dejagnu)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages linux)
@@ -52,7 +52,7 @@
 (define-public aspell
  (package
    (name "aspell")
-    (version "0.60.8.1")
+    (version "0.60.8.2")
    (source
     (origin
      (method url-fetch)
@@ -60,7 +60,7 @@
                          version ".tar.gz"))
      (sha256
       (base32
-        "06yjhwlgpcvbrl5g83qjrpzjwjx7hka5lhsfc3x5gm229nri5nnn"))
+        "06b9szgm9cj1zh58r7sbl5fbi3vi9fs7b1as4ir8y176x9ilizjp"))
      (patches (search-patches "aspell-default-dict-dir.patch"))))
    (build-system gnu-build-system)
    (arguments
@@ -50,7 +50,7 @@
  #:use-module (gnu packages base)
  #:use-module (gnu packages bison)
  #:use-module (gnu packages compression)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages image)
  #:use-module (gnu packages linux)
@@ -276,9 +276,7 @@ has strong support for macros.")
     '(#:parallel-tests? #f))           ; Some tests fail
                                        ; non-deterministically when run in
                                        ; parallel
-    (inputs
-     `(("python" ,python-wrapper)
-       ("xmlto" ,xmlto)))
+    (inputs (list python-wrapper xmlto))
    (home-page "https://yasm.tortall.net/")
    (synopsis "Rewrite of the NASM assembler")
    (description
@@ -66,7 +66,7 @@
  #:use-module (gnu packages curl)
  #:use-module (gnu packages databases)
  #:use-module (gnu packages documentation)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages fortran-xyz)
  #:use-module (gnu packages freedesktop)
@@ -1858,18 +1858,9 @@ R. Seaman's protocol}
         (file-name (git-file-name name version))
         (sha256
          (base32 "0n2jzlpwvjgj8ydg7hsqxnvy8s9pdi5z96id0231kgi87pyfkh7s"))
-         (modules '((guix build utils)
-                    (ice-9 ftw)
-                    (srfi srfi-26)))
+         (modules '((guix build utils)))
         (snippet
          #~(begin
-              ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-              (define (delete-all-but directory . preserve)
-                (with-directory-excursion directory
-                  (let* ((pred (negate (cut member <>
-                                            (cons* "." ".." preserve))))
-                         (items (scandir "." pred)))
-                    (for-each (cut delete-file-recursively <>) items))))
              (delete-all-but "thirdparty" "thirdparty.cmake")))))
      (build-system cmake-build-system)
      (arguments
@@ -103,7 +103,7 @@
  #:use-module (gnu packages elf)
  #:use-module (gnu packages emacs)
  #:use-module (gnu packages file)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fltk)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
@@ -98,24 +98,24 @@
                 (cut patch-shebang <> path)
                 (find-files (string-append #$output "/etc/avahi"))))))))
    (inputs
-     `(("bash-minimal" ,bash-minimal)
-       ("dbus" ,dbus)
-       ("expat" ,expat)
-       ("gdbm" ,gdbm)
-       ("glib" ,glib)
-       ;; Do not use libcap when cross-compiling since it's not quite
-       ;; cross-compilable; and use it only for supported systems.
-       ,@(if (and (not (%current-target-system))
-                  (member (%current-system)
-                          (package-supported-systems libcap)))
-             `(("libcap" ,libcap))   ;to enable chroot support in avahi-daemon
-             '())
-       ("libdaemon" ,libdaemon)
-       ("libevent" ,libevent)))
+     (cons* bash-minimal
+            dbus
+            expat
+            gdbm
+            glib
+            libdaemon
+            libevent
+            ;; Do not use libcap when cross-compiling since it's not quite
+            ;; cross-compilable; and use it only for supported systems.
+            (if (and (not (%current-target-system))
+                     (member (%current-system)
+                             (package-supported-systems libcap)))
+                (list libcap)        ;to enable chroot support in avahi-daemon
+                (list))))
    (native-inputs
-     `(("gettext" ,gettext-minimal)
-       ("glib" ,glib "bin")
-       ("pkg-config" ,pkg-config)))
+     (list gettext-minimal
+           (list glib "bin")
+           pkg-config))
    (synopsis "Implementation of mDNS/DNS-SD protocols")
    (description
     "Avahi is a system which facilitates service discovery on a local
@@ -96,7 +96,7 @@
  #:use-module (gnu packages datastructures)
  #:use-module (gnu packages dlang)
  #:use-module (gnu packages file)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages gd)
@@ -3864,20 +3864,13 @@ familiar to anyone with experience of scikit-learn or scipy.")
      (file-name (git-file-name name version))
      (sha256
       (base32 "0hznpj15kx2sla16wlmcqz21n2vi2qb1493v30vz75hnm1m4iwm1"))
-      (modules '((guix build utils)
-                 (ice-9 ftw)))
+      (modules '((guix build utils)))
      (snippet
       #~(begin
           ;; Delete everything except for examples directory:
-           (define (delete-except exceptions)
-             (lambda (file)
-               (unless (member file `("." ".." ,@exceptions))
-                 (delete-file-recursively file))))
-           (for-each (delete-except '("pysnptools" "tests")) (scandir "."))
-           (with-directory-excursion "pysnptools"
-             (for-each (delete-except '("examples")) (scandir ".")))
-           (with-directory-excursion "tests"
-             (for-each (delete-except '("datasets")) (scandir "."))))))))
+           (delete-all-but ".""pysnptools" "tests")
+           (delete-all-but "pysnptools" "examples")
+           (delete-all-but "tests" "datasets"))))))

 (define-public python-pysnptools
  (package
@@ -6710,20 +6703,20 @@ meso, or continuum scale.")
                "09693dmf1scdac5pyq6qyn8b4mcipvnmc370k9a5z41z81m3dcsj"))))
    (build-system gnu-build-system)
    (arguments
-     `(#:test-target "test"
+     (list
+       #:test-target "test"
       #:tests? #f ; tests require access to the web
       #:make-flags
-       ,#~(list "CC=gcc"
-                (string-append "prefix=" #$output))
+       #~(list "CC=gcc"
+               (string-append "prefix=" #$output))
       #:phases
-       (modify-phases %standard-phases
+       #~(modify-phases %standard-phases
         (delete 'configure))))
    (inputs
     (list zlib curl))
    (native-inputs
-     `(("doxygen" ,doxygen)
-       ;; Need for tests
-       ("python" ,python-2)))
+     (list doxygen
+           python)) ;for tests
    (home-page "https://github.com/dpryan79/libBigWig")
    (synopsis "C library for handling bigWig files")
    (description
@@ -17839,94 +17832,99 @@ once.  This package provides tools to perform Drop-seq analyses.")
    (license license:expat)))

 (define-public pigx-rnaseq
-  (package
-    (name "pigx-rnaseq")
-    (version "0.1.1")
-    (source (origin
-              (method url-fetch)
-              (uri (string-append "https://github.com/BIMSBbioinfo/pigx_rnaseq/"
-                                  "releases/download/v" version
-                                  "/pigx_rnaseq-" version ".tar.gz"))
-              (sha256
-               (base32
-                "0mlas0srl04mvgsyydm67gg5syijf1k2f6dy7bdqqxc70fywfd08"))))
-    (build-system gnu-build-system)
-    (arguments
-     `(#:parallel-tests? #f             ; not supported
-       #:phases
-       (modify-phases %standard-phases
-         ;; "test.sh" runs the whole pipeline, which takes a long time and
-         ;; might fail due to OOM.  The MultiQC is also resource intensive.
-         (add-after 'unpack 'disable-resource-intensive-test
-           (lambda _
-             (substitute* "Makefile.in"
-               (("^  tests/test_multiqc/test.sh") "")
-               (("^  test.sh") ""))))
-         (add-before 'bootstrap 'autoreconf
-           (lambda _
-             (invoke "autoreconf" "-vif")))
-         (add-before 'configure 'set-PYTHONPATH
-           (lambda _
-             (setenv "PYTHONPATH" (getenv "GUIX_PYTHONPATH"))))
-         (add-before 'check 'set-timezone
-           ;; The readr package is picky about timezones.
-           (lambda* (#:key inputs #:allow-other-keys)
-             (setenv "TZ" "UTC+1")
-             (setenv "TZDIR"
-                     (search-input-directory inputs
-                                             "share/zoneinfo"))))
-         (add-before 'check 'pre-check
-           (lambda _
-             ;; Needed for tests
-             (setenv "HOME" "/tmp"))))))
-    (inputs
-     (list coreutils
-           sed
-           gzip
-           snakemake-7
-           megadepth
-           multiqc
-           star-for-pigx
-           hisat2
-           fastp
-           htseq
-           samtools
-           r-minimal
-           r-rmarkdown
-           r-genomeinfodb
-           r-ggplot2
-           r-ggpubr
-           r-ggrepel
-           r-gprofiler2
-           r-deseq2
-           r-dt
-           r-knitr
-           r-pheatmap
-           r-corrplot
-           r-reshape2
-           r-plotly
-           r-scales
-           r-summarizedexperiment
-           r-crosstalk
-           r-tximport
-           r-rtracklayer
-           r-rjson
-           salmon
-           pandoc
-           python-wrapper
-           python-deeptools
-           python-pyyaml))
-    (native-inputs
-     (list tzdata automake autoconf))
-    (home-page "https://bioinformatics.mdc-berlin.de/pigx/")
-    (synopsis "Analysis pipeline for RNA sequencing experiments")
-    (description "PiGX RNAseq is an analysis pipeline for preprocessing and
+  (let ((commit "1605b541da090e13d58dae6fed38ae8dda09f002"))
+    (package
+      (name "pigx-rnaseq")
+      (version (git-version "0.1.1" "0" commit))
+      (source (origin
+                (method git-fetch)
+                (uri (git-reference
+                       (url "https://github.com/BIMSBbioinfo/pigx_rnaseq/")
+                       (commit commit)
+                       (recursive? #true)))
+                (file-name (git-file-name name version))
+                (sha256
+                 (base32
+                  "1j5c0wlasmxvz9z64yga56m2hhbybl149kknsrpvmq0v2gl31rn5"))))
+      (build-system gnu-build-system)
+      (arguments
+       (list
+        #:parallel-tests? #f             ; not supported
+        #:phases
+        '(modify-phases %standard-phases
+           ;; "test.sh" runs the whole pipeline, which takes a long time and
+           ;; might fail due to OOM.  The MultiQC is also resource intensive.
+           (add-after 'unpack 'disable-resource-intensive-test
+             (lambda _
+               (substitute* "Makefile.am"
+                 (("^  tests/test_multiqc/test.sh.*") "")
+                 (("^  tests/test_hisat2/test.sh.*") "  tests/test_hisat2/test.sh\n")
+                 (("^  test.sh") ""))))
+           (add-before 'bootstrap 'autoreconf
+             (lambda _
+               (invoke "autoreconf" "-vif")))
+           (add-before 'configure 'set-PYTHONPATH
+             (lambda _
+               (setenv "PYTHONPATH" (getenv "GUIX_PYTHONPATH"))))
+           (add-before 'check 'set-timezone
+             ;; The readr package is picky about timezones.
+             (lambda* (#:key inputs #:allow-other-keys)
+               (setenv "TZ" "UTC+1")
+               (setenv "TZDIR"
+                       (search-input-directory inputs
+                                               "share/zoneinfo"))))
+           (add-before 'check 'pre-check
+             (lambda _
+               ;; Needed for tests
+               (setenv "HOME" "/tmp"))))))
+      (inputs
+       (list coreutils
+             sed
+             gzip
+             snakemake
+             megadepth
+             multiqc
+             star-for-pigx
+             hisat2
+             fastp
+             htseq
+             samtools
+             r-minimal
+             r-rmarkdown
+             r-genomeinfodb
+             r-ggplot2
+             r-ggpubr
+             r-ggrepel
+             r-gprofiler2
+             r-deseq2
+             r-dt
+             r-knitr
+             r-pheatmap
+             r-corrplot
+             r-reshape2
+             r-plotly
+             r-scales
+             r-summarizedexperiment
+             r-crosstalk
+             r-tximport
+             r-rtracklayer
+             r-rjson
+             salmon
+             pandoc
+             python-wrapper
+             python-deeptools
+             python-pyyaml))
+      (native-inputs
+       (list tzdata automake autoconf))
+      (home-page "https://bioinformatics.mdc-berlin.de/pigx/")
+      (synopsis "Analysis pipeline for RNA sequencing experiments")
+      (description "PiGX RNAseq is an analysis pipeline for preprocessing and
 reporting for RNA sequencing experiments.  It is easy to use and produces high
 quality reports.  The inputs are reads files from the sequencing experiment,
 and a configuration file which describes the experiment.  In addition to
 quality control of the experiment, the pipeline produces a differential
 expression report comparing samples in an easily configurable manner.")
-    (license license:gpl3+)))
+      (license license:gpl3+))))

 (define-public pigx-chipseq
  (package
@@ -18132,7 +18130,7 @@ methylation and segmentation.")
           python-loompy
           pandoc
           samtools
-           snakemake-5
+           snakemake-6
           star-for-pigx
           r-minimal
           r-argparser
@@ -28,7 +28,7 @@
  #:use-module (guix build-system gnu)
  #:use-module (gnu packages m4)
  #:use-module (gnu packages perl)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (srfi srfi-1))

 (define-public bison
@@ -271,7 +271,8 @@ across a broad spectrum of applications.")
                "0yrgn6syk260ckq9ld44vjv1bl6bamhy3jbp10kikcipcv0d5na6"))))))

 (define-public boost-1.83
-  (hidden-package (package (inherit boost)
+  (package
+    (inherit boost)
    (name "boost")
    (version "1.83.0")
    (source (origin
@@ -282,7 +283,7 @@ across a broad spectrum of applications.")
              (patches
                 (list (boost-patch
                        "0001-unordered-fix-copy-assign.patch" version
-                        "09j61m5xh7099k5na9i43x5rra51znf7vm2nyh89yqpizcll9q66")))
+                        "0l520lqh2vxdlyzvpki6hy2ylqimag8v18n2sdbmliifxiiha4gl")))
              (patch-flags '("-p2"))
              (sha256
               (base32
@@ -312,7 +313,7 @@ across a broad spectrum of applications.")
                            (else
                             #~())))
                     ;; Not cross-compiling.
-                     #~()))))))))
+                     #~())))))))

 (define-deprecated-package boost-with-python3
  boost)
@@ -55,7 +55,7 @@
  #:use-module (gnu packages cross-base)
  #:use-module (gnu packages disk)
  #:use-module (gnu packages firmware)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages gettext)
@@ -76,7 +76,7 @@
  #:use-module (gnu packages python-crypto)
  #:use-module (gnu packages python-web)
  #:use-module (gnu packages python-xyz)
-  #:use-module (gnu packages re2c)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages regex)
  #:use-module (gnu packages rpc)
  #:use-module (gnu packages serialization)
@@ -63,7 +63,6 @@
  #:use-module (gnu packages bison)
  #:use-module (gnu packages check)
  #:use-module (gnu packages compiler-tools)
-  #:use-module (gnu packages flex)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages perl)
@@ -52,7 +52,7 @@
  #:use-module (gnu packages bash)
  #:use-module (gnu packages bison)
  #:use-module (gnu packages compression)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages docbook)
@@ -1139,8 +1139,7 @@ Anything Protocol} compliant programs can also be executed through Kyua.")
    (arguments
     `(#:tests? #f
       #:configure-flags '("-DBUILD_SHARED_LIBS=ON")))
-    (native-inputs
-     `(("python" ,python-wrapper)))
+    (native-inputs (list python-wrapper))
    (home-page "https://github.com/google/googletest/")
    (synopsis "Test discovery and XUnit test framework")
    (description "Google Test features an XUnit test framework, automated test
@@ -46,7 +46,7 @@
  #:use-module (gnu packages compression)
  #:use-module (gnu packages cpp)
  #:use-module (gnu packages documentation)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fonts)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages fortran-xyz)
@@ -32,7 +32,7 @@
  #:use-module (gnu packages check)
  #:use-module (gnu packages compression)
  #:use-module (gnu packages docbook)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages libevent)
  #:use-module (gnu packages linux)
@@ -25,7 +25,7 @@
  #:use-module (guix gexp)
  #:use-module (gnu packages bison)
  #:use-module (gnu packages dbm)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages multiprecision)
  #:use-module (gnu packages ncurses)
  #:use-module (gnu packages perl)
@@ -66,7 +66,7 @@
  #:use-module (gnu packages curl)
  #:use-module (gnu packages elf)
  #:use-module (gnu packages emacs)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages golang-build)
@@ -42,7 +42,7 @@
  #:use-module (gnu packages m4)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages bison)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages guile)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages multiprecision)
@@ -1,8 +1,11 @@
 ;;; GNU Guix --- Functional package management for GNU
+;;; Copyright © 2012-2014, 2019, 2022 Ludovic Courtès <ludo@gnu.org>
+;;; Copyright © 2016, 2024-2025 Efraim Flashner <efraim@flashner.co.il>
+;;; Copyright © 2017, 2020, 2021 Sergei Trofimovich <slyfox@inbox.ru>
+;;; Copyright © 2018, 2022 Tobias Geerinckx-Rice <me@tobias.gr>
 ;;; Copyright © 2021 Foo Chuan Wei <chuanwei.foo@hotmail.com>
-;;; Copyright © 2022 Ludovic Courtès <ludo@gnu.org>
-;;; Copyright © 2022 Tobias Geerinckx-Rice <me@tobias.gr>
-;;; Copyright © 2024-2025 Efraim Flashner <efraim@flashner.co.il>
+;;; Copyright © 2024 Janneke Nieuwenhuizen <janneke@gnu.org>
+;;; Copyright © 2025 Alexey Abramov <levenson@mmer.org>
 ;;; Copyright © 2025 Anderson Torres <anderson.torres.8519@gmail.com>
 ;;;
 ;;; This file is part of GNU Guix.
@@ -22,14 +25,21 @@

 (define-module (gnu packages compiler-tools)
  #:use-module (gnu packages autotools)
+  #:use-module (gnu packages bison)
  #:use-module (gnu packages gawk)
+  #:use-module (gnu packages m4)
+  #:use-module (gnu packages man)
+  #:use-module (gnu packages python)
+  #:use-module (gnu packages)
  #:use-module (guix build-system gnu)
  #:use-module (guix build-system trivial)
  #:use-module (guix download)
  #:use-module (guix gexp)
  #:use-module (guix git-download)
  #:use-module ((guix licenses) #:prefix license:)
-  #:use-module (guix packages))
+  #:use-module (guix packages)
+  #:use-module (guix utils)
+  #:use-module (srfi srfi-1))

 (define-public byacc
  (package
@@ -65,6 +75,59 @@ consist of a set of LALR(1) parsing tables and a driver routine written in the
 C programming language.")
    (license license:public-domain)))

+(define-public flex
+  (package
+    (name "flex")
+    (version "2.6.4")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append
+             "https://github.com/westes/flex"
+             "/releases/download/v" version "/"
+             "flex-" version ".tar.gz"))
+       (sha256
+        (base32
+         "15g9bv236nzi665p9ggqjlfn4dwck5835vf0bbw2cz7h5c1swyp8"))))
+    (build-system gnu-build-system)
+    (arguments
+     (if (%current-target-system)
+         (list #:configure-flags
+               #~'("ac_cv_func_malloc_0_nonnull=yes"
+                   "ac_cv_func_realloc_0_nonnull=yes"))
+         '()))
+    (native-inputs
+     (list help2man
+           ;; m4 is not present in PATH when cross-building
+           m4))
+    (inputs
+     (list
+      (package
+        (inherit bison)
+        (arguments
+         ;; Disable tests, since they require flex.
+         (substitute-keyword-arguments arguments
+           ((#:tests? _ #f) #f)))
+        (inputs (modify-inputs inputs
+                  (delete "flex"))))))
+    (propagated-inputs (list m4))
+    (home-page "https://github.com/westes/flex")
+    (synopsis "Fast lexical analyser generator")
+    (description
+     "Flex is a tool for generating scanners.  A scanner, sometimes
+called a tokenizer, is a program which recognizes lexical patterns in
+text.  The flex program reads user-specified input files, or its standard
+input if no file names are given, for a description of a scanner to
+generate.  The description is in the form of pairs of regular expressions
+and C code, called rules.  Flex generates a C source file named,
+\"lex.yy.c\", which defines the function yylex().  The file \"lex.yy.c\"
+can be compiled and linked to produce an executable.  When the executable
+is run, it analyzes its input for occurrences of text matching the
+regular expressions for each rule.  Whenever it finds a match, it
+executes the corresponding C code.")
+    (license (license:non-copyleft "file://COPYING"
+                                   "See COPYING in the distribution."))))
+
 (define-public oyacc
  (package
    (name "oyacc")
@@ -112,3 +175,42 @@ besides libc.")
    (description
     "This package provides the @command{yacc} command, implemented as a
 symbolic link to the @command{oyacc} command from the same-named package.")))
+
+(define-public re2c
+  (package
+    (name "re2c")
+    (version "4.2")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "https://github.com/skvadrik/" name
+                           "/releases/download/" version "/"
+                           name "-" version ".tar.xz"))
+       (sha256
+        (base32
+         "07ysqgdm0h566a8lwnpdgycp93vz7zskzihsgah3bla0ycj2pp69"))))
+    (build-system gnu-build-system)
+    (arguments
+     (list
+      #:tests?
+      (not (or (%current-target-system)
+               ;; TODO: run_tests.py hangs
+               (system-hurd?)))
+      #:phases
+      (if (target-arm32?)
+          #~(modify-phases %standard-phases
+              (add-after 'unpack 'patch-sources
+                (lambda _
+                  (invoke "patch" "-p1" "--force" "--input"
+                          #$(local-file (search-patch
+                                         "re2c-Use-maximum-alignment.patch"))))))
+          #~%standard-phases)))
+    (native-inputs
+     (list python))             ; for the test driver
+    (home-page "https://re2c.org/")
+    (synopsis "Lexer generator")
+    (description
+     "@code{re2c, Regular Expressions to Code} is a flexible lexical analyser.
+Instead of using traditional table-driven approaches, it encodes a finite
+state machine directly in the code in the form of jumps and comparisons.")
+    (license license:public-domain)))
@@ -35,7 +35,7 @@
  #:use-module (gnu packages boost)
  #:use-module (gnu packages compression)
  #:use-module (gnu packages emacs)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages multiprecision)
  #:use-module (gnu packages ocaml)
@@ -23,7 +23,7 @@
 (define-module (gnu packages coreboot)
  #:use-module (gnu packages bison)
  #:use-module (gnu packages compression)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages pciutils)
  #:use-module ((guix licenses) #:prefix license:)
  #:use-module (guix build-system cargo)
@@ -68,16 +68,15 @@
 (define-public curl
  (package
    (name "curl")
-    (version "8.6.0")
+    (version "8.20.0")
    (source (origin
              (method url-fetch)
              (uri (string-append "https://curl.se/download/curl-"
                                  version ".tar.xz"))
              (sha256
               (base32
-                "05fv468yjrb7qwrxmfprxkrcckbkij0myql0vwwnalgr3bcmbk9w"))
-              (patches (search-patches "curl-use-ssl-cert-env.patch"
-                                       "curl-CVE-2024-8096.patch"))))
+                "15mqw8y9vdxlz9cpr2z7q9r6552wgs7q7vr2k7lfl35s930jvzk3"))
+              (patches (search-patches "curl-use-ssl-cert-env.patch"))))
    (outputs '("out"
               "doc"))                  ;1.2 MiB of man3 pages
    (build-system gnu-build-system)
@@ -106,36 +105,20 @@
              (mkdir-p (string-append #$output:doc "/share/man"))
              (rename-file (string-append #$output "/share/man/man3")
                           (string-append #$output:doc "/share/man/man3"))))
-          (replace 'check
-            (lambda* (#:key tests? parallel-tests? make-flags #:allow-other-keys)
+          (add-after 'unpack 'patch-runtests
+            (lambda _
              (substitute* "tests/runtests.pl"
-                (("/bin/sh") (which "sh")))
-              (when tests?
-                (let* ((job-count (string-append
-                                   "-j"
-                                   (if parallel-tests?
-                                       (number->string (parallel-job-count))
-                                       "1")))
-                       ;; Ignore test 1477 due to a missing file in the 8.5.0
-                       ;; release.  See
-                       ;; <https://github.com/curl/curl/issues/12462>.
-                       (arguments `("-C" "tests" "test"
-                                    ,@make-flags
-                                    ,(if #$(or (system-hurd?)
-                                               (target-arm32?)
-                                               (target-aarch64?))
-                                         ;; protocol FAIL
-                                         (string-append "TFLAGS=~1474 "
-                                                        "!1477 "
-                                                        job-count)
-                                         (string-append "TFLAGS=\"~1477 "
-                                                        job-count "\"")))))
-                  ;; The top-level "make check" does "make -C tests quiet-test", which
-                  ;; is too quiet.  Use the "test" target instead, which is more
-                  ;; verbose.
-                  (apply invoke "make" arguments)))))
-          #$@(if (system-hurd?)
+                (("/bin/sh") (which "sh")))))
+          #$@(if (or (target-arm32?)
+                     (target-aarch64?))
                 #~((add-after 'unpack 'skip-tests
+                      (lambda _
+                        (let ((port (open-file "tests/data/DISABLED" "a")))
+                          (display "1474\n" port)
+                          (close port)))))
+                 #~())
+          #$@(if (system-hurd?)
+                 #~((add-after 'unpack 'skip-tests/hurd
                      (lambda _
                        (let ((port (open-file "tests/data/DISABLED" "a")))
                          (display "526\n" port)
@@ -147,11 +130,20 @@
                          (display "564\n" port)
                          (display "575\n" port)
                          (display "1021\n" port)
+                          (display "1474\n" port)
                          (display "1501\n" port)
                          (close port)))))
-                 #~()))))
+                 #~())
+          (add-after 'install 'sanitize-libcurl.pc
+            (lambda _
+              ;; The pkgconfig file has all dependencies in Requires.private
+              ;; which is unnecessary for our shared library use and would
+              ;; require propagating them.
+              (substitute* (string-append #$output "/lib/pkgconfig/libcurl.pc")
+                (("^Requires.private:.*") "")))))))
    (native-inputs
-     (list nghttp2 perl pkg-config python-minimal-wrapper))
+     (list nghttp2 perl pkg-config python-minimal-wrapper
+           openssl))                    ;for tests
    (inputs
     (list gnutls libidn libpsl mit-krb5 `(,nghttp2 "lib") zlib))
    (native-search-paths
@@ -32,7 +32,7 @@
 ;;; Copyright © 2017 Kristofer Buffington <kristoferbuffington@gmail.com>
 ;;; Copyright © 2018 Amirouche Boubekki <amirouche@hypermove.net>
 ;;; Copyright © 2018 Joshua Sierles, Nextjournal <joshua@nextjournal.com>
-;;; Copyright © 2018, 2021, 2022, 2023 Maxim Cournoyer <maxim@guixotic.coop>
+;;; Copyright © 2018, 2021-2023, 2026 Maxim Cournoyer <maxim@guixotic.coop>
 ;;; Copyright © 2019 Jack Hill <jackhill@jackhill.us>
 ;;; Copyright © 2019 Alex Griffin <a@ajgrf.com>
 ;;; Copyright © 2019 Gábor Boskovits <boskovits@gmail.com>
@@ -109,7 +109,7 @@
  #:use-module (gnu packages dbm)
  #:use-module (gnu packages docbook)
  #:use-module (gnu packages emacs)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages gcc)
@@ -131,6 +131,7 @@
  #:use-module (gnu packages guile-xyz)
  #:use-module (gnu packages icu4c)
  #:use-module (gnu packages jemalloc)
+  #:use-module (gnu packages kerberos)
  #:use-module (gnu packages language)
  #:use-module (gnu packages libedit)
  #:use-module (gnu packages libevent)
@@ -147,6 +148,7 @@
  #:use-module (gnu packages networking)
  #:use-module (gnu packages node)
  #:use-module (gnu packages onc-rpc)
+  #:use-module (gnu packages openldap)
  #:use-module (gnu packages openstack)
  #:use-module (gnu packages pantheon)
  #:use-module (gnu packages parallel)
@@ -175,6 +177,7 @@
  #:use-module (gnu packages ruby)
  #:use-module (gnu packages ruby-check)
  #:use-module (gnu packages ruby-xyz)
+  #:use-module (gnu packages security-token)
  #:use-module (gnu packages serialization)
  #:use-module (gnu packages sphinx)
  #:use-module (gnu packages ssh)
@@ -1183,50 +1186,81 @@ autocompletion and syntax highlighting.")
 auto-completion and syntax highlighting.")
    (license license:bsd-3)))

-;; XXX When updating, check whether boost-for-mysql is still needed.
-;; It might suffice to patch ‘cmake/boost.cmake’ as done in the past.
 (define-public mysql
  (package
    (name "mysql")
-    (version "5.7.33")
+    (version "9.7.0")
    (source (origin
              (method url-fetch)
              (uri (list (string-append
-                          "https://dev.mysql.com/get/Downloads/MySQL-"
+                          "https://cdn.mysql.com/Downloads/MySQL-"
                          (version-major+minor version) "/"
-                          name "-" version ".tar.gz")
-                         (string-append
-                          "https://downloads.mysql.com/archives/get/file/"
                          name "-" version ".tar.gz")))
              (sha256
               (base32
-                "1bb343mf7n0qg2qz497gxjsqprygrjz1q1pbz76hgqxnsy08sfxd"))))
+                "0v9hc8yzp0f5pwl4kr1a8k7lwyf62g95klxb6avfrc2npjx79dbl"))
+              (modules '((guix build utils)
+                         (ice-9 ftw)
+                         (srfi srfi-26)))
+              (snippet
+               #~(begin
+                   (define (delete-all-but directory . preserve)
+                     (with-directory-excursion directory
+                       (let* ((pred (negate (cut member <>
+                                                 (cons* "." ".." preserve))))
+                              (items (scandir "." pred)))
+                         (for-each (cut delete-file-recursively <>) items))))
+
+                   ;; Delete bundled source libraries.
+                   (delete-all-but "extra"
+                                   ;; XXX: The build system doesn't currently
+                                   ;; support unbundling these.
+                                   "json" ;used by bundled opentelemetry
+                                   "libbacktrace"
+                                   "libcno"
+                                   "opentelemetry-cpp"
+                                   "opentelemetry-proto"
+                                   "rapidjson"
+                                   "unordered_dense"
+                                   "xxhash")))))
    (build-system cmake-build-system)
    (arguments
     (list
+      #:tests? #f          ;FIXME: teach build system to use system googletest
      #:configure-flags
      #~(list "-DBUILD_CONFIG=mysql_release"
-              "-DWITH_SSL=system"
-              "-DWITH_ZLIB=system"
-              "-DDEFAULT_CHARSET=utf8"
-              "-DDEFAULT_COLLATION=utf8_general_ci"
+              "-DWITH_AUTHENTICATION_LDAP=ON"
+              "-DWITH_AUTHENTICATION_WEBAUTHN=ON"
+              "-DWITH_BENCHMARK=OFF"
+              ;; XXX: BUILD_ID is disabled so that the INFO_BIN target is not
+              ;; run; this target relies on running mysqld before it is
+              ;; installed, which fails in our case.
+              "-DWITH_BUILD_ID=OFF"
+              "-DWITH_FIDO=system"
+              "-DWITH_SYSTEM_LIBS=ON"
+              "-DWITH_UNIT_TESTS=OFF"   ;avoid bundled googletest
+              "-DREPRODUCIBLE_BUILD=ON"
              "-DMYSQL_DATADIR=/var/lib/mysql"
              "-DMYSQL_UNIX_ADDR=/run/mysqld/mysqld.sock"
-              "-DINSTALL_INFODIR=share/mysql/docs"
+              "-DINSTALL_INFODIR=share/info"
              "-DINSTALL_MANDIR=share/man"
              "-DINSTALL_PLUGINDIR=lib/mysql/plugin"
-              "-DINSTALL_SCRIPTDIR=bin"
              "-DINSTALL_INCLUDEDIR=include/mysql"
              "-DINSTALL_DOCREADMEDIR=share/mysql/docs"
              "-DINSTALL_SUPPORTFILESDIR=share/mysql"
              "-DINSTALL_MYSQLSHAREDIR=share/mysql"
+              "-DINSTALL_MYSQLTESTDIR=OFF"
              "-DINSTALL_DOCDIR=share/mysql/docs"
-              "-DINSTALL_SHAREDIR=share/mysql"
-              ;; Get rid of test data.
-              "-DINSTALL_MYSQLTESTDIR="
-              "-DINSTALL_SQLBENCHDIR=")
+              "-DINSTALL_SHAREDIR=share/mysql")
      #:phases
      #~(modify-phases %standard-phases
+          (add-before 'configure 'disable-broken-abi-check
+            (lambda _
+              ;; The ABI check started failing with MySQL 9.7.0 for unknown
+              ;; reasons.
+              (substitute* "cmake/abi_check.cmake"
+                (("RUN_ABI_CHECK 1")
+                 "RUN_ABI_CHECK 0"))))
          (add-after 'install 'remove-extra-binaries
            (lambda _
              ;; Remove the 3 *_embedded files, which weigh in at
@@ -1253,35 +1287,51 @@ auto-completion and syntax highlighting.")
                           (dirname coreutils)
                           (dirname grep)
                           (dirname ps)
-                           (dirname sed))))))))))
+                           (dirname sed)))))))
+          (add-after 'install 'fix-permissions
+            ;; XXX: Otherwise, the guix daemon reports: "suspicious ownership
+            ;; or permission on `/gnu/store/...-mysql-9.7.0'; rejecting this
+            ;; build output".
+            (lambda _
+              (chmod #$output #o755))))))
    (native-inputs
     (list bison perl pkg-config))
    (inputs
     (list bash-minimal
-           boost-for-mysql
+           boost
           coreutils
+           curl
+           cyrus-sasl
           gawk
           grep
+           icu4c
           libaio
+           libedit
+           libfido2
           libtirpc
+           lz4
+           mit-krb5
           ncurses
-           openssl-1.1
+           openldap
+           openssl
+           protobuf
           procps
           rpcsvc-proto                 ; rpcgen
           sed
-           zlib))
+           zlib
+           `(,zstd "lib")))
    (home-page "https://www.mysql.com/")
    (synopsis "Fast, easy to use, and popular database")
    (description
     "MySQL is a fast, reliable, and easy to use relational database
 management system that supports the standardized Structured Query
 Language.")
-    (license license:gpl2)))
+    (license license:gpl2)))    ;v2 only -- see 'Election of GPLv2' in LICENSE

 (define-public mysql-connector-python
  (package
    (name "mysql-connector-python")
-    (version "8.3.0")
+    (version "9.7.0")
    (source
     (origin
       (method git-fetch)
@@ -1290,66 +1340,23 @@ Language.")
              (commit version)))
       (file-name (git-file-name name version))
       (sha256
-        (base32 "18jvpnnwmfrn961rvqmsygp7dw3spf3swhxhal4hhj5hqddckj5f"))))
+        (base32 "0zdm35apj1cfraxwlqfmr04pm87qpw73ilb8p88cn08zsa8q11hg"))))
    (build-system pyproject-build-system)
    (arguments
     (list
-      ;; tests: 1371 passed
      #:phases
      #~(modify-phases %standard-phases
-          (add-after 'unpack 'compatibility
-            (lambda _
-              (substitute* "src/mysql_capi.c"
-                (("res = mysql_options\\(&self->session, MYSQL_OPT_LOAD_DATA_LOCAL_DIR.*")
-                 "res = 0;")
-                (("mysql_options\\(&self->session, MYSQL_OPT_LOAD_DATA_LOCAL_DIR.*")
-                 "")
-                (("mysql_options\\(&self->session, MYSQL_OPT_TLS_CIPHERSUITES.*")
-                 "")
-                ;; The C API does not have mysql_bind_param, so we produce an
-                ;; error here.
-                (("status = mysql_bind_param.*") "status = 1;")
-                (("#include \"mysql_capi_conversion\\.h\"" all)
-                 (string-append all "\n" "#include <stdbool.h>")))))
          (add-after 'unpack 'chdir
            (lambda _
+              ;; Our protobuf is too old for the mysqlx dev API, so use the
+              ;; classic one without the C modules.
              (chdir "mysql-connector-python")))
-          (add-before 'build 'prepare-build
-            (lambda _
-              (setenv "MYSQL_CAPI" #$(this-package-input "mysql"))))
          (replace 'check
            (lambda* (#:key tests? #:allow-other-keys)
              (when tests?
                ;; Some of these tests might be failing due to the build
                ;; container's restrictions, others are due to the version
                ;; mismatch.
-                (substitute* "tests/cext/test_cext_api.py"
-                  (("def test_change_user") "def _do_not_test_change_user")
-                  (("def test_get_character_set_info")
-                   "def _do_not_test_get_character_set_info"))
-                (substitute* "tests/test_bugs.py"
-                  (("def test_change_user") "def _do_not_test_change_user")
-                  (("def test_lost_connection") "def _do_not_test_lost_connection")
-                  (("def test_kill_query") "def _do_not_test_kill_query")
-                  ;; These all fail because of expired certificates.
-                  (("def test_cext_verify_server_certificate")
-                   "def _do_not_test_cext_verify_server_certificate")
-                  (("def test_pure_verify_server_certificate")
-                   "def _do_not_test_pure_verify_server_certificate")
-                  (("def test_verify_server_name_cext_cnx")
-                   "def _do_not_test_verify_server_name_cext_cnx")
-                  (("def test_verify_server_name_pure_cnx")
-                   "def _do_not_test_verify_server_name_pure_cnx"))
-                (substitute* '("tests/test_connection.py"
-                               "tests/test_aio_connection.py")
-                  (("def test_allow_local_infile_in_path")
-                   "def _do_not_test_allow_local_infile_in_path")
-                  ;; This fails because of expired certificates.
-                  (("def test_connect_with_unix_socket")
-                   "def _do_not_test_connect_with_unix_socket"))
-                (substitute* "tests/test_constants.py"
-                  (("def test_deprecated")
-                   "def _do_not_test_deprecated"))
                (mkdir-p "/tmp/datadir")
                (invoke "python3" "unittests.py"
                        "--verbosity=3"
@@ -1357,9 +1364,8 @@ Language.")
                        "--keep"
                        "--mysql-topdir=/tmp/datadir"
                        "--unix-socket=/tmp/datadir")))))))
-    (propagated-inputs (list python-protobuf))
-    (inputs (list mysql protobuf-3.20 openssl-1.1 zlib))
    (native-inputs (list python-setuptools))
+    (inputs (list mysql openssl zlib `(,zstd "lib")))
    (home-page "https://dev.mysql.com/doc/connector-python/en/index.html")
    (synopsis "MySQL driver written in Python")
    (description "MySQL Connector/Python enables Python programs to access
@@ -1666,14 +1672,14 @@ and high-availability (HA).")
 (define-public postgresql-17
  (package
    (name "postgresql")
-    (version "17.7")
+    (version "17.10")
    (source (origin
              (method url-fetch)
              (uri (string-append "https://ftp.postgresql.org/pub/source/v"
                                  version "/postgresql-" version ".tar.bz2"))
              (sha256
               (base32
-                "1dg9labqgph2idaypb8khdvbag29pr3h4bqv5w8k7kgc08rk97pg"))
+                "144cb40gn1lasvz0jvz4i72mda8k7pm1bx6azq2vggfddm8h72h7"))
              (patches (search-patches
                        "postgresql-disable-normalize_exec_path.patch"))))
    (build-system gnu-build-system)
@@ -1736,14 +1742,14 @@ pictures, sounds, or video.")
  (package
    (inherit postgresql-17)
    (name "postgresql")
-    (version "16.10")
+    (version "16.14")
    (source (origin
              (method url-fetch)
              (uri (string-append "https://ftp.postgresql.org/pub/source/v"
                                  version "/postgresql-" version ".tar.bz2"))
              (sha256
               (base32
-                "0hib575m9x3z8c71gkcv9jsyq77d3qk7q2zgzvfy6clwrvs8b16y"))
+                "0w9lgsn03m4k0v3m622v7fk3gqbfbjvwv34mrrc0i4ip4wa7gl7n"))
              (patches (search-patches
                        "postgresql-disable-normalize_exec_path.patch"))))
    (arguments
@@ -1767,14 +1773,14 @@ pictures, sounds, or video.")
  (package
    (inherit postgresql-16)
    (name "postgresql")
-    (version "15.15")
+    (version "15.18")
    (source (origin
              (method url-fetch)
              (uri (string-append "https://ftp.postgresql.org/pub/source/v"
                                  version "/postgresql-" version ".tar.bz2"))
              (sha256
               (base32
-                "1ais46b2ij38y75i1w336as03pybyndsd2pp2q8gdjq9igmsllsp"))
+                "1d13qckpslfqamdmp23q3rbzxlp1rqwszylilyllpsp3gzwhvpqi"))
              (patches (search-patches
                        "postgresql-disable-resolve_symlinks.patch"))))
    (native-inputs (modify-inputs native-inputs
@@ -1787,6 +1793,7 @@ pictures, sounds, or video.")
    (inherit postgresql-15)
    (name "postgresql")
    (version "14.20")
+    (replacement postgresql-14.23)
    (source (origin
              (inherit (package-source postgresql-15))
              (uri (string-append "https://ftp.postgresql.org/pub/source/v"
@@ -1795,6 +1802,19 @@ pictures, sounds, or video.")
               (base32
                "0sv45dsmyplfys6dfdjdwmrczl46s82x35xdh311nxj02q7z29vm"))))))

+(define-public postgresql-14.23
+  (package
+    (inherit postgresql-14)
+    (name "postgresql")
+    (version "14.23")
+    (source (origin
+              (inherit (package-source postgresql-14))
+              (uri (string-append "https://ftp.postgresql.org/pub/source/v"
+                                  version "/postgresql-" version ".tar.bz2"))
+              (sha256
+               (base32
+                "19clihp73ak2p5di90jhg50lqjkkr0iy349gkki30qsl5f11cwnc"))))))
+
 (define-deprecated/public postgresql-13 #f
  (package
    (inherit postgresql-14)
@@ -20,7 +20,7 @@
  #:use-module (gnu packages bison)
  #:use-module (gnu packages compression)
  #:use-module (gnu packages cpp)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages libffi)
  #:use-module (gnu packages ncurses)
  #:use-module (gnu packages python)
@@ -58,7 +58,7 @@
  #:use-module (gnu packages code)
  #:use-module (gnu packages compression)
  #:use-module (gnu packages digest)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages gdb)
@@ -1112,17 +1112,9 @@ to aid in debugging.")
             (commit (string-append "v" version))))
       (file-name (git-file-name name version))
       (sha256 (base32 "0ppx8r9isc772y0ahpgl8g5b3yxka7ffqzlcsa920aib5nj39lrg"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
            (substitute* "pyproject.toml"
              ;; Python is linked with GNU readline on all Guix targets.
              ((".*gnureadline.*") "")
@@ -56,7 +56,7 @@
  #:use-module (gnu packages curl)
  #:use-module (gnu packages education)
  #:use-module (gnu packages emacs)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fribidi)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages glib)
@@ -56,7 +56,7 @@
  #:use-module (gnu packages datastructures)
  #:use-module (gnu packages documentation)
  #:use-module (gnu packages elf)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages glib)
@@ -57,7 +57,7 @@
  #:use-module (gnu packages bison)
  #:use-module (gnu packages kde-frameworks)
  #:use-module (gnu packages docbook)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages ghostscript)
  #:use-module (gnu packages graphviz)
  #:use-module (gnu packages gettext)
@@ -29,7 +29,7 @@
  #:use-module (gnu packages compression)
  #:use-module (gnu packages curl)
  #:use-module (gnu packages databases)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages pkg-config)
  #:use-module (gnu packages base)
@@ -42,7 +42,7 @@
  #:use-module (gnu packages curl)
  #:use-module (gnu packages databases)
  #:use-module (gnu packages django)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fonts)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
@@ -90,7 +90,7 @@
  #:use-module (gnu packages elf)
  #:use-module (gnu packages embedded)
  #:use-module (gnu packages engineering)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gawk)
@@ -1750,31 +1750,21 @@ exploration and optimization.")
              (commit version)
              (recursive? #t)))
       (file-name (git-file-name name version))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
-        #~(begin
-            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "libs"
-                            "delaunay-triangulation"
-                            "dxflib"
-                            ;; "fontobene-qt"
-                            ;; "googletest"
-                            ;; "hoedown"
-                            "librepcb"
-                            ;; "muparser"
-                            "optional"
-                            "parseagle"
-                            ;; "polyclipping"
-                            ;; "quazip"
-                            "type_safe")))
+        #~(delete-all-but "libs"
+            "delaunay-triangulation"
+            "dxflib"
+            ;; "fontobene-qt"
+            ;; "googletest"
+            ;; "hoedown"
+            "librepcb"
+            ;; "muparser"
+            "optional"
+            "parseagle"
+            ;; "polyclipping"
+            ;; "quazip"
+            "type_safe"))
       (sha256
        (base32 "1g3k2g2p5yy7zk971bg7qh4k38p30aydp27c5bfb02gn7djknz7w"))))
    (build-system cmake-build-system)
@@ -2358,18 +2348,9 @@ layout of a circuit corresponds to the desired netlists.")
              ;; no longer have their original upstream.
              (recursive? #t)))
       (file-name (git-file-name name version))
+       (modules '((guix build utils)))
       (snippet
        #~(begin
-            (use-modules (guix build utils)
-                         (ice-9 ftw)
-                         (srfi srfi-26))
-            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
            (delete-all-but "3rdparty"
                            ;; The following sources have all been patched, so
                            ;; cannot easily be unbundled.
@@ -4547,43 +4547,6 @@ boilerplate code from defining new Flymake backend functions.")
    (description "This package adds Clojure syntax checker clj-kondo.")
    (license license:gpl3+)))

-(define-public emacs-flymake-shellcheck
-  ;; No tag, version grabbed from source .el file.
-  (let ((commit "ac534e9ef15c82ac86ae65fe5004d29dbc8c92c7")
-        (revision "1"))
-    (package
-      (name "emacs-flymake-shellcheck")
-      (version (git-version "0.1" revision commit))
-      (source
-       (origin
-         (method git-fetch)
-         (uri (git-reference
-               (url "https://github.com/federicotdn/flymake-shellcheck")
-               (commit commit)))
-         (file-name (git-file-name name version))
-         (sha256
-          (base32 "04yfb4sy41spjzk9mhm4gy0h8vnjx09p2g6nm1yzgd9a5ph9sqgl"))))
-      (build-system emacs-build-system)
-      (arguments
-       '(#:phases
-         (modify-phases %standard-phases
-           (add-after 'unpack 'substitute-shellcheck-path
-             (lambda* (#:key inputs #:allow-other-keys)
-               (make-file-writable "flymake-shellcheck.el")
-               (emacs-substitute-sexps "flymake-shellcheck.el"
-                 ("defcustom flymake-shellcheck-path"
-                  `(or (executable-find "shellcheck")
-                       ,(search-input-file inputs "bin/shellcheck")))))))))
-      (inputs
-       (list shellcheck))
-      (home-page "https://github.com/federicotdn/flymake-shellcheck")
-      (synopsis "Flymake backend for Bash/Sh powered by ShellCheck")
-      (description
-       "This package provides a backend for Flymake to use the
-tool ShellCheck for static analyzing @command{bash} and @command{sh}
-scripts.")
-      (license license:gpl3+))))
-
 (define-public emacs-a
  (package
    (name "emacs-a")
@@ -5303,6 +5266,39 @@ to prevent advertisers from tracking you when you open URLs (or listen to
 podcasts) in Emacs.")
      (license (list license:gpl3+)))))

+(define-public emacs-emcp
+  (let ((commit "a91016452ef73813ea4a7e84cde233176d87a97f")
+        (revision "0"))
+    (package
+      (name "emacs-emcp")
+      (version (git-version "0.1.0" revision commit))
+      (source
+       (origin
+         (method git-fetch)
+         (uri (git-reference
+                (url "https://codeberg.org/martenlienen/emcp")
+                (commit commit)))
+         (file-name (git-file-name name version))
+         (sha256
+          (base32
+           "08wbpj95l38fsdihxhgryb74psl11agw5n9swnpf1j3qyhwa13cn"))))
+      (build-system emacs-build-system)
+      (arguments
+       (list
+        #:test-command
+        #~(list "emacs" "-Q" "-batch"
+                "-l" "emcp-tests.el"
+                "-f"
+                "ert-run-tests-batch-and-exit")))
+      (propagated-inputs
+       (list emacs-elisp-refs emacs-magit emacs-http-server))
+      (home-page "https://codeberg.org/martenlienen/emcp")
+      (synopsis "Emacs MCP client")
+      (description
+       "@code{emacs-emcp} is an Emacs client for the @acronym{Model Context
+Protocol, MCP}, designed to connect LLM agents directly to Emacs.")
+      (license license:gpl3+))))
+
 (define emacs-emms-print-metadata
  (package
    (name "emacs-emms-print-metadata")
@@ -16152,18 +16148,9 @@ placed at the margin of the minibuffer for your completion candidates.")
               (url "https://github.com/Fuco1/smartparens")
               (commit commit)))
         (file-name (git-file-name name version))
-         (modules '((guix build utils)
-                    (ice-9 ftw)
-                    (srfi srfi-26)))
+         (modules '((guix build utils)))
         (snippet
          '(begin
-             ;; Taken from nextpnr package.
-             (define (delete-all-but directory . preserve)
-               (with-directory-excursion directory
-                 (let* ((pred
-                         (negate (cut member <> (append '("." "..") preserve))))
-                        (items (scandir "." pred)))
-                   (for-each delete-file items))))
             ;; Only activate basic tests.
             (delete-all-but "test"
                             "test-helper.el"
@@ -16794,6 +16781,51 @@ line program.")
 requests library that uses the url library.")
      (license license:gpl2+))))

+(define-public emacs-http-server
+  (let ((commit "00e746baf4a622a7545b4af5c5237a55d51f801b")
+        (revision "0"))
+    (package
+      (name "emacs-http-server")
+      (version (git-version "0.1.0" revision commit))
+      (source
+       (origin
+         (method git-fetch)
+         (uri (git-reference
+                (url "https://codeberg.org/martenlienen/http-server.el")
+                (commit commit)))
+         (file-name (git-file-name name version))
+         (sha256
+          (base32
+           "0j7ls15ljk22qxy6hs2qzcjnbdfvrq4qwly8s6kfbczi74mw5iji"))))
+      (build-system emacs-build-system)
+      (arguments
+       (list
+        #:test-command
+        #~(list "emacs" "-Q" "-batch"
+                "-l" "http-server.el"
+                "-l" "http-server-ws.el"
+                "-l" "http-server-tests.el"
+                "-l" "http-server-ws-tests.el"
+                "--eval"
+                (string-append
+                 "(ert-run-tests-batch-and-exit "
+                 "'(and (not http-server-accepts-extra-methods)
+                        (not http-server-rejects-unsupported-methods)))"))
+        #:phases
+        #~(modify-phases %standard-phases
+            (add-after 'unpack 'build-info-manual
+              (lambda _
+                (invoke "makeinfo" "--no-split"
+                        "-o" "http-server.info" "docs/http-server.texi"))))))
+      (native-inputs
+       (list emacs-package-lint emacs-plz emacs-websocket texinfo))
+      (home-page "https://codeberg.org/martenlienen/http-server.el")
+      (synopsis "Emacs HTTP server")
+      (description
+       "This library implements an HTTP server inside of Emacs to communicate
+with the user or other external programs.")
+      (license license:gpl3+))))
+
 (define-public emacs-rtfm-mode
  (package
   (name "emacs-rtfm-mode")
@@ -42079,7 +42111,7 @@ add popup descriptions to existing keymaps
 (define-public emacs-forgejo
  (package
    (name "emacs-forgejo")
-    (version "0.2.2")
+    (version "0.2.3")
    (source (origin
              (method git-fetch)
              (uri (git-reference
@@ -42088,7 +42120,7 @@ add popup descriptions to existing keymaps
              (file-name (git-file-name name version))
              (sha256
               (base32
-                "0hf4sckxdygxa84g3pi3m2qy16ngx76jsrf192q5l4fppsyirnws"))))
+                "1c8s8a0hwb44jddxsrd74bh8rwaz8z5mn9ga8jmwxy7w045xfln1"))))
    (build-system emacs-build-system)
    (arguments
     (list #:lisp-directory "lisp"
@@ -57,7 +57,7 @@
  #:use-module (gnu packages compression)
  #:use-module (gnu packages cross-base)
  #:use-module (gnu packages dejagnu)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages gdb)
  #:use-module (gnu packages guile)
@@ -81,7 +81,7 @@
  #:use-module (gnu packages engineering)
  #:use-module (gnu packages elf)
  #:use-module (gnu packages file-systems)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fltk)
  #:use-module (gnu packages fonts)
  #:use-module (gnu packages fontutils)
@@ -464,13 +464,6 @@ It aims to support Nintendo DSi and 3DS as well.")
                    (srfi srfi-26)))
         (snippet
          #~(begin
-              (define (delete-all-but directory . preserve)
-                (with-directory-excursion directory
-                  (let* ((pred (negate (cut member <>
-                                            (cons* "." ".." preserve))))
-                         (items (scandir "." pred)))
-                    (for-each (cut delete-file-recursively <>) items))))
-
              ;; Clean up the source from bundled libraries we don't need.
              (delete-all-but "Externals"
                              ;; XXX: The build system is currently hard-coded
@@ -660,14 +653,6 @@ turbo speed, networked multiplayer, and graphical enhancements.")
                    (srfi srfi-26)))
         (snippet
          #~(begin
-              ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-              (define (delete-all-but directory . preserve)
-                (with-directory-excursion directory
-                  (let* ((pred (negate (cut member <>
-                                            (cons* "." ".." preserve))))
-                         (items (scandir "." pred)))
-                    (for-each (cut delete-file-recursively <>) items))))
-
              ;; Clean up the source from bundled libraries we don't need.
              (delete-all-but "Externals"
                              ;; XXX: The build system is currently hard-coded
@@ -1083,17 +1068,9 @@ The following systems are supported:
         (sha256
          (base32
           "0dfsz4dsh49dc9xx9rjhfzfkg4h91i2ksgp2inlr9yhgldw9q8h3"))
-         (modules '((guix build utils)
-                    (ice-9 ftw)
-                    (srfi srfi-26)))
+         (modules '((guix build utils)))
         (snippet
          #~(begin
-              (define (delete-all-but directory . preserve)
-                (with-directory-excursion directory
-                  (let* ((pred (negate (cut member <> (cons* "." ".." preserve))))
-                         (items (scandir "." pred)))
-                    (for-each (cut delete-file-recursively <>) items))))
-
              (delete-all-but "src/third-party"
                              "blip_buf"
                              "inih")))))
@@ -2324,42 +2301,9 @@ physical device and the RetroPad virtual controller.")
         (modules '((guix build utils)))
         (snippet
          '(begin
-             (use-modules (guix build utils)
-                          (ice-9 ftw)
-                          (srfi srfi-1)
-                          (srfi srfi-26))
-             (define (delete-all-but . preserve)
-               ;; Walk the file tree and delete everything except the paths
-               ;; listed in PRESERVE.  Directories listed PRESERVE will cause
-               ;; their whole contents to be preserved.
-               (let ((preserve (map (compose (cut string-trim-right <> #\/)
-                                             (cut string-append "./" <>))
-                                    preserve)))
-                 (file-system-fold
-                  (lambda (path stat result) ;enter
-                    (or (any (lambda (x)
-                               (or (string-prefix? path x)
-                                   (string-prefix? x path)))
-                             preserve)
-                        (begin
-                          (delete-file-recursively path)
-                          #f)))
-                  (lambda (path stat result) ;leaf (file)
-                    (unless (any (cut string-prefix? <> path) preserve)
-                      (delete-file path)))
-                  (const #t)                 ;down (directory)
-                  (const #t)                 ;up (directory)
-                  (lambda (path stat result) ;skip
-                    (when (file-exists? path)
-                      (error "could not enter unreadable directory" path)))
-                  (lambda (path stat errno result) ;error
-                    (error "error processing" path (strerror errno)))
-                  0
-                  ".")))
-
             ;; This is an allow-list of the shaders explicitly licensed as
             ;; free software.
-             (delete-all-but
+             (delete-all-but "."
              "anamorphic/shaders/anamorphic.slang" ;expat
              "anamorphic/anamorphic.slangp"
              "annotated_passthru.slang" ;public license
@@ -3016,16 +2960,7 @@ GLSL (@file{.slang}) shaders for use with RetroArch.")
             (commit (string-append "v" version))))
       (snippet
        #~(begin
-            (use-modules (guix build utils)
-                         (ice-9 ftw)
-                         (srfi srfi-26))
-            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
+            (use-modules (guix build utils))
            ;; Remove as much bundled sources as possible, shaving off about
            ;; 65 MiB.
            (delete-all-but "deps"
@@ -3834,24 +3769,14 @@ de-interlacing patches for use with PCSX2.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0nr53cjifqwnz3icxsj01yd3aw1vfsfxga4zz5zi8aqr175mvq27"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
        #~(begin
            (substitute* "cmake/Pcsx2Utils.cmake"
              (("(PCSX2_GIT_REV \")Unknown" _ prefix)
               (string-append prefix #$version "-guix")))
            (delete-file "3rdparty/include/Packet32.h") ;"not open source"
-            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but
-             "3rdparty"
+            (delete-all-but "3rdparty"
             ;; asl2.0 and cc0
             "glad"                     ;Is tailored.
             ;; bsd-3
@@ -113,7 +113,7 @@
  #:use-module (gnu packages emacs-build)
  #:use-module (gnu packages emacs-xyz)
  #:use-module (gnu packages file)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gawk)
@@ -24,7 +24,7 @@
 (define-module (gnu packages esolangs)
  #:use-module (gnu packages)
  #:use-module (gnu packages bison)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages ncurses)
  #:use-module (gnu packages python)
  #:use-module (gnu packages python-build)
@@ -30,7 +30,7 @@
  #:use-module (gnu packages)
  #:use-module (gnu packages autotools)
  #:use-module (gnu packages bison)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages glib)
  #:use-module (gnu packages graphviz)
  #:use-module (gnu packages linux)
@@ -78,7 +78,7 @@
  #:use-module (gnu packages docbook)
  #:use-module (gnu packages elf)
  #:use-module (gnu packages file)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages gettext)
@@ -99,7 +99,7 @@
  #:use-module (gnu packages emacs)
  #:use-module (gnu packages emacs-xyz)
  #:use-module (gnu packages dbm)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages glib)
@@ -68,7 +68,7 @@
  #:use-module (gnu packages elf)
  #:use-module (gnu packages embedded)
  #:use-module (gnu packages flashing-tools)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gawk)
@@ -72,7 +72,7 @@
  #:use-module (gnu packages electronics)
  #:use-module (gnu packages elf)
  #:use-module (gnu packages embedded)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages ghostscript)
  #:use-module (gnu packages gnupg)
  #:use-module (gnu packages golang-xyz)
@@ -1,7 +1,5 @@
 ;;; GNU Guix --- Functional package management for GNU
-;;; Copyright © 2012, 2013, 2014, 2019 Ludovic Courtès <ludo@gnu.org>
-;;; Copyright © 2016 Efraim Flashner <efraim@flashner.co.il>
-;;; Copyright © 2024 Janneke Nieuwenhuizen <janneke@gnu.org>
+;;; Copyright © 2026 Anderson Torres <anderson.torres.8519@gmail.com>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -19,65 +17,9 @@
 ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

 (define-module (gnu packages flex)
-  #:use-module (guix licenses)
-  #:use-module (guix packages)
-  #:use-module (guix download)
-  #:use-module (guix build-system gnu)
-  #:use-module (guix gexp)
-  #:use-module (guix utils)
-  #:use-module (gnu packages)
-  #:use-module (gnu packages m4)
-  #:use-module (gnu packages man)
-  #:use-module (gnu packages bison)
-  #:use-module (srfi srfi-1))
+  #:use-module (gnu packages compiler-tools)
+  #:use-module (guix deprecation))

-(define-public flex
-  (package
-    (name "flex")
-    (version "2.6.4")
-    (source (origin
-              (method url-fetch)
-              (uri (string-append
-                    "https://github.com/westes/flex"
-                    "/releases/download/v" version "/"
-                    "flex-" version ".tar.gz"))
-              (sha256
-               (base32
-                "15g9bv236nzi665p9ggqjlfn4dwck5835vf0bbw2cz7h5c1swyp8"))))
-    (build-system gnu-build-system)
-    (inputs
-     (let ((bison-for-tests
-            (package
-              (inherit bison)
-              (arguments
-               ;; Disable tests, since they require flex.
-               (substitute-keyword-arguments arguments
-                 ((#:tests? _ #f) #f)))
-              (inputs (alist-delete "flex" (package-inputs bison))))))
-       `(("bison" ,bison-for-tests))))
-    (arguments
-     (if (%current-target-system)
-         (list #:configure-flags
-               #~'("ac_cv_func_malloc_0_nonnull=yes"
-                   "ac_cv_func_realloc_0_nonnull=yes"))
-         '()))
-    ;; m4 is not present in PATH when cross-building
-    (native-inputs
-     (list help2man m4))
-    (propagated-inputs (list m4))
-    (home-page "https://github.com/westes/flex")
-    (synopsis "Fast lexical analyser generator")
-    (description
-     "Flex is a tool for generating scanners.  A scanner, sometimes
-called a tokenizer, is a program which recognizes lexical patterns in
-text.  The flex program reads user-specified input files, or its standard
-input if no file names are given, for a description of a scanner to
-generate.  The description is in the form of pairs of regular expressions
-and C code, called rules.  Flex generates a C source file named,
-\"lex.yy.c\", which defines the function yylex().  The file \"lex.yy.c\"
-can be compiled and linked to produce an executable.  When the executable
-is run, it analyzes its input for occurrences of text matching the
-regular expressions for each rule.  Whenever it finds a match, it
-executes the corresponding C code.")
-    (license (non-copyleft "file://COPYING"
-                           "See COPYING in the distribution."))))
+;; XXX: Deprecated on 2026-05-28.
+(define-deprecated/public-alias flex
+  (@ (gnu packages compiler-tools) flex))
@@ -23,7 +23,6 @@
 ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

 (define-module (gnu packages fltk)
-  #:use-module ((guix licenses) #:select (lgpl2.0 lgpl2.0+))
  #:use-module (gnu packages)
  #:use-module (gnu packages autotools)
  #:use-module (gnu packages build-tools)
@@ -35,8 +34,10 @@
  #:use-module (gnu packages pkg-config)
  #:use-module (gnu packages python)
  #:use-module (gnu packages python-xyz)
-  #:use-module (guix packages)
  #:use-module (guix download)
+  #:use-module (guix gexp)
+  #:use-module ((guix licenses) #:prefix license:)
+  #:use-module (guix packages)
  #:use-module (guix git-download)
  #:use-module (guix build-system gnu)
  #:use-module (guix build-system waf)
@@ -56,63 +57,63 @@
      (sha256
       (base32 "0pnifyhhvcqfjd6iaa4m14kvfyqhjjdw0aqbcizcdhhqrl6q4pjg"))))
   (build-system gnu-build-system)
-   (native-inputs
-    (list autoconf
-          automake
-          pkg-config))
-   (inputs
-    `(("libjpeg" ,libjpeg-turbo)
-      ("libpng" ,libpng)
-      ("libx11" ,libx11)
-      ("libxft" ,libxft)
-      ("mesa" ,mesa)
-      ("zlib" ,zlib)))
    (arguments
-     `(#:tests? #f                      ;TODO: compile programs in "test" dir
-       #:configure-flags
-       (list "--enable-shared"
-             (string-append "DSOFLAGS=-Wl,-rpath=" %output "/lib"))
-       #:phases
-       (modify-phases %standard-phases
-         (add-before 'configure 'patch-makeinclude
-           (lambda _
-             (substitute* "makeinclude.in"
-               (("/bin/sh") (which "sh")))
-             #t))
-         (add-after 'install 'patch-config
-           ;; Provide -L flags for image libraries when querying fltk-config to
-           ;; avoid propagating inputs.
-           (lambda* (#:key inputs outputs #:allow-other-keys)
-             (let ((conf (string-append (assoc-ref outputs "out")
-                                        "/bin/fltk-config"))
-                   (jpeg (assoc-ref inputs "libjpeg"))
-                   (png  (assoc-ref inputs "libpng"))
-                   (zlib (assoc-ref inputs "zlib")))
-               (substitute* conf
-                 (("-ljpeg") (string-append "-L" jpeg "/lib -ljpeg"))
-                 (("-lpng") (string-append "-L" png "/lib -lpng"))
-                 (("-lz") (string-append "-L" zlib "/lib -lz"))))
-             #t)))))
+     (list
+      #:tests? #f ;TODO: compile programs in "test" dir
+      #:configure-flags
+      #~(list "--enable-shared"
+              (string-append "DSOFLAGS=-Wl,-rpath=" %output "/lib"))
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-before 'configure 'patch-makeinclude
+            (lambda _
+              (substitute* "makeinclude.in"
+                (("/bin/sh")
+                 (which "sh")))))
+          (add-after 'install 'patch-config
+            ;; Provide -L flags for image libraries when querying fltk-config to
+            ;; avoid propagating inputs.
+            (lambda* (#:key inputs #:allow-other-keys)
+              (let ((conf (string-append #$output "/bin/fltk-config"))
+                    (libjpeg-so (search-input-file inputs "lib/libjpeg.so"))
+                    (libpng-so (search-input-file inputs "lib/libpng.so"))
+                    (libz-so (search-input-file inputs "lib/libz.so")))
+                (substitute* conf
+                  (("-ljpeg")
+                   (string-append "-L" (dirname libjpeg-so) " -ljpeg"))
+                  (("-lpng")
+                   (string-append "-L" (dirname libpng-so) " -lpng"))
+                  (("-lz")
+                   (string-append "-L" (dirname libz-so) " -lz")))))))))
+    (native-inputs (list autoconf automake pkg-config))
+    (inputs
+     (list libjpeg-turbo
+           libpng
+           libx11
+           libxft
+           mesa
+           zlib))
    (home-page "https://www.fltk.org")
    (synopsis "3D C++ GUI library")
-    (description "FLTK is a C++ GUI toolkit providing modern GUI functionality
-without the bloat.  It supports 3D graphics via OpenGL and its built-in GLUT
-emulation.  FLTK is designed to be small and modular enough to be statically
-linked, but works fine as a shared library.  FLTK also includes an excellent
-UI builder called FLUID that can be used to create applications in minutes.")
-    (license lgpl2.0))) ; plus certain additional permissions
+    (description
+     "FLTK is a C++ GUI toolkit providing modern GUI functionality without the
+bloat.  It supports 3D graphics via OpenGL and its built-in GLUT emulation.
+FLTK is designed to be small and modular enough to be statically linked, but
+works fine as a shared library.  FLTK also includes an excellent UI builder
+called FLUID that can be used to create applications in minutes.")
+    (license license:lgpl2.0))) ; plus certain additional permissions

 (define-public fltk
  (package
    (inherit fltk-1.3)
-    (version "1.4.4")
+    (version "1.4.5")
    (source (origin
      (method git-fetch)
      (uri (git-reference
              (url "https://github.com/fltk/fltk")
              (commit (string-append "release-" version))))
      (sha256
-       (base32 "1nfl37c9yplp4gxjjlajysfj2vsr47xjlcq78ambd7im4wbjgj76"))))))
+       (base32 "19bl0ryarg31wkhw01ryilp9iwwh6vwnsq9mnzmarzm0dkwhjc7c"))))))


 (define-public ntk
@@ -162,4 +163,4 @@ UI builder called FLUID that can be used to create applications in minutes.")
 library, adding improved graphics rendering via Cairo, a streamlined and
 enhanced widget set, and other features designed to improve the appearance and
 performance of the Non applications.")
-    (license lgpl2.0+))) ; plus certain additional permissions
+    (license license:lgpl2.0+))) ; plus certain additional permissions
@@ -335,14 +335,14 @@ mediums.")
    (version "4.1")
    (source
     (origin
-       (method git-fetch)
-       (uri (git-reference
-              (url "https://github.com/rsms/inter")
-              (commit (string-append "v" version))))
-       (file-name (git-file-name name version))
+       (method url-fetch)
+       (uri (string-append
+             "https://github.com/rsms/inter/releases/download/"
+             "v" version "/Inter-" version ".zip"))
       (sha256
-        (base32 "1g54vl3jkpan0s1mzrb1s8zjqzy9787ffjg9sfy6yjy4k3qg8xhx"))))
+        (base32 "07miarbl5ain7pg7sxlrb2j4m9prbriacyqpv1mvckwxlkagv0wq"))))
    (build-system font-build-system)
+    (outputs '("out" "ttf" "woff"))
    (home-page "https://rsms.me/inter")
    (synopsis "Variable font family optimized for screen readability")
    (description
@@ -400,6 +400,30 @@ Lisnoti is available in regular, italic, bold and bold-italic
 variants.")
      (license license:silofl1.1))))

+(define-public font-literata
+  (package
+    (name "font-literata")
+    (version "3.103")
+    (source (origin
+              (method git-fetch)
+              (uri (git-reference
+                     (url "https://github.com/googlefonts/literata")
+                     (commit version)))
+              (file-name (git-file-name name version))
+              (sha256
+               (base32
+                "1nnr5y6fz7da06ihinmna2a1g79q8l41bgr62l6jpl43p1dw93dn"))))
+    (build-system font-build-system)
+    (outputs (list "out" "woff"))
+    (home-page "https://github.com/googlefonts/literata")
+    (synopsis "Contemporary serif typeface for long-form reading")
+    (description
+     "Literata is a serif screen font family.  It was conceived for intensive
+editorial use, especially on screens of all sorts.  Its main potential is in
+digital publishing, whether on the web, electronic press, or mobile
+applications.")
+    (license license:silofl1.1)))
+
 (define-public font-inconsolata
  (package
    (name "font-inconsolata")
@@ -52,7 +52,7 @@
  #:use-module (gnu packages compression)
  #:use-module (gnu packages datastructures)
  #:use-module (gnu packages docbook)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fonts)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages fribidi)
@@ -792,16 +792,16 @@ the freedesktop.org XDG Base Directory specification.")
 (define-public elogind
  (package
    (name "elogind")
-    (version "255.17")
+    (version "255.22")
    (source (origin
              (method git-fetch)
              (uri (git-reference
                    (url "https://github.com/elogind/elogind")
-                    (commit (string-append "v" version))))
+                    (commit (string-append "V" version))))
              (file-name (git-file-name name version))
              (sha256
               (base32
-                "0cb6p559281dzh24is91v6d4v4kz45yhyizibi4sfql9nign865h"))))
+                "0hnzks8f0jl2hkf954pqky5490zacqaipz20k38qvzl5g8i1if5l"))))
    (build-system meson-build-system)
    (arguments
     `(#:configure-flags
@@ -2733,18 +2733,20 @@ Rendering Manager devices.")
 (define-public xdg-user-dirs
  (package
    (name "xdg-user-dirs")
-    (version "0.17")
+    (version "0.20")
    (source (origin
-              (method url-fetch)
-              (uri (string-append "http://user-dirs.freedesktop.org/releases/"
-                                    name "-" version ".tar.gz"))
+              (method git-fetch)
+              (uri (git-reference
+                     (url "https://gitlab.freedesktop.org/xdg/xdg-user-dirs.git")
+                     (commit (string-append "v" version))))
+              (file-name (git-file-name name version))
              (sha256
-               (base32 "13216b8rfkzak5k6bvpx6jvqv3cnbgpijnjwj8a8d3kq4cl0a1ra"))))
-    (build-system gnu-build-system)
+               (base32
+                "1s235wp6z0d94z5qhwf408ppli1p3s3zah8rynm9ljh3hmmv0p2g"))))
+    (build-system meson-build-system)
    (native-inputs
     (list gettext-minimal
           docbook-xsl
-           docbook-xml-4.3
           libxslt))
    (home-page "https://www.freedesktop.org/wiki/Software/xdg-user-dirs/")
    (synopsis "Tool to help manage \"well known\" user directories")
@@ -1181,17 +1181,9 @@ It is capable of creating games for SCUMM version 6 and partially version 7.")
       (sha256
        (base32
         "12f1d45995qf5sazjmmfdydllcd6alhqs1s4xwv3jiq1fw66hcy9"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
        '(begin
-           ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-           (define (delete-all-but directory . preserve)
-             (with-directory-excursion directory
-               (let* ((pred (negate (cut member <> (cons* "." ".." preserve))))
-                      (items (scandir "." pred)))
-                 (for-each (cut delete-file-recursively <>) items))))
           (delete-all-but "extlibs/headers"
                           "glad")))))  ;pre-generated headers
    (build-system cmake-build-system)
@@ -144,7 +144,7 @@
  #:use-module (gnu packages documentation)
  #:use-module (gnu packages emacs)
  #:use-module (gnu packages emulators)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fltk)
  #:use-module (gnu packages fonts)
  #:use-module (gnu packages fontutils)
@@ -6959,7 +6959,7 @@ tactics.")
 (define-public widelands
  (package
    (name "widelands")
-    (version "1.3")
+    (version "1.3.1")
    (source
     (origin
       (method git-fetch)
@@ -6968,7 +6968,7 @@ tactics.")
             (commit (string-append "v" version))))
       (file-name (git-file-name name version))
       (sha256
-        (base32 "1j288rkflqmzxbacrrx35y8qm4mvbvd30c03cmkvh8b29jkgz3gp"))
+        (base32 "0ab9s1imqdq1krfwlba1ipx3pwnvy91aqqzr15ssfzixy4wj5mww"))
       (modules '((guix build utils)))
       (snippet
        #~(delete-file-recursively "src/third_party/minizip"))))
@@ -51,7 +51,7 @@
  #:use-module (gnu packages docbook)
  #:use-module (gnu packages graphviz)
  #:use-module (gnu packages elf)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages perl)
  #:use-module (guix packages)
  #:use-module (guix download)
@@ -31,7 +31,7 @@
  #:use-module (gnu packages bison)
  #:use-module (gnu packages cross-base)
  #:use-module (gnu packages dejagnu)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages guile)
  #:use-module (gnu packages hurd)
  #:use-module (gnu packages llvm)
@@ -91,7 +91,7 @@
  #:use-module (gnu packages docbook)
  #:use-module (gnu packages documentation)
  #:use-module (gnu packages elf)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fonts)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
@@ -50,7 +50,7 @@
  #:use-module (gnu packages compression)
  #:use-module (gnu packages documentation)
  #:use-module (gnu packages elf)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gettext)
@@ -56,7 +56,7 @@
  #:use-module (gnu packages elf)
  #:use-module (gnu packages enlightenment)
  #:use-module (gnu packages file)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages gnome)
@@ -136,7 +136,7 @@
  #:use-module (gnu packages documentation)
  #:use-module (gnu packages elf)
  #:use-module (gnu packages enchant)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fonts)
  #:use-module (gnu packages file-systems)
  #:use-module (gnu packages firmware)
@@ -324,7 +324,7 @@ applications and libraries.  It is used by AqBanking.")
 (define-public aqbanking
  (package
    (name "aqbanking")
-    (version "6.8.5")
+    (version "6.9.2")
    (source
     (origin
       (method git-fetch)
@@ -333,7 +333,7 @@ applications and libraries.  It is used by AqBanking.")
              (commit version)))
       (sha256
        (base32
-         "1xqhhxhr1azqvdn47389h469d3srl5l3n1nx82jx2djbx9sdzdq9"))
+         "1n1867vdml71p9dbcx70rmf10b12l7l0vq847bbizrkq7b0ha8w0"))
       (file-name (git-file-name name version))))
    (build-system gnu-build-system)
    (arguments
@@ -693,14 +693,14 @@ and signature functionality from Python programs.")
 (define-public perl-gnupg-interface
  (package
    (name "perl-gnupg-interface")
-    (version "1.05")
+    (version "1.06")
    (source (origin
              (method url-fetch)
              (uri (string-append "mirror://cpan/authors/id/B/BP/BPS/"
                                  "GnuPG-Interface-" version ".tar.gz"))
              (sha256
               (base32
-                "0ig0ra2s1v2rw2ikm1hd0iwf2phhcr8kbc90jhr8kdpvlkymshsl"))))
+                "07946rsmz0ibasd53l4qiwg0dl1h65p8byja4d7fiflxsklxccs4"))))
    (build-system perl-build-system)
    (inputs
     (list gnupg))
@@ -764,7 +764,7 @@ parties.")
 (define-public signing-party
  (package
    (name "signing-party")
-    (version "2.11")
+    (version "2.12")
    (home-page "https://salsa.debian.org/signing-party-team/signing-party")
    (source (origin
              (method git-fetch)
@@ -774,7 +774,7 @@ parties.")
              (file-name (git-file-name name version))
              (sha256
               (base32
-                "1aig5ssabzbk4mih7xd04vgr931bw0flbi8dz902wlr610gyv5s5"))))
+                "1a4x02rcs5ryvfnhb6naiwc5jsil5k1fh8b01fkijkbzbh54qjc5"))))
    (build-system gnu-build-system)
    (native-inputs
     ;; autoconf-wrapper is required due to the non-standard
@@ -788,56 +788,57 @@ parties.")
                  perl-net-idn-encode
                  libmd))
    (arguments
-     `(#:tests? #f                      ; no test suite
-       #:phases
-       (modify-phases %standard-phases
-         (replace 'configure
-           (lambda* (#:key outputs #:allow-other-keys)
-             (let ((out (assoc-ref outputs "out")))
-               (substitute* "keyanalyze/Makefile"
-                 (("LDLIBS") (string-append "CC=" (which "gcc") "\nLDLIBS")))
-               (substitute* "keyanalyze/Makefile"
-                 (("\\./configure") (string-append "./configure --prefix=" out)))
-               (substitute* "gpgwrap/Makefile"
-                 (("\\} clean")
-                  (string-append "} clean\ninstall:\n\tinstall -D bin/gpgwrap "
-                                 out "/bin/gpgwrap\n")))
-               (substitute* '("gpgsigs/Makefile" "keyanalyze/Makefile"
-                              "keylookup/Makefile" "sig2dot/Makefile"
-                              "springgraph/Makefile")
-                 (("/usr") out))
-               (setenv "CONFIG_SHELL" (which "sh")))))
-         (replace 'install
-           (lambda* (#:key outputs #:allow-other-keys #:rest args)
-             (let ((out (assoc-ref outputs "out"))
-                   (install (assoc-ref %standard-phases 'install)))
-               (apply install args)
-               (for-each
-                (lambda (dir file)
-                  (copy-file (string-append dir "/" file)
-                             (string-append out "/bin/" file)))
-                '("caff" "caff" "caff" "gpgdir" "gpg-key2ps"
-                  "gpglist" "gpg-mailkeys" "gpgparticipants")
-                '("caff" "pgp-clean" "pgp-fixkey" "gpgdir" "gpg-key2ps"
-                  "gpglist" "gpg-mailkeys" "gpgparticipants"))
-               (for-each
-                (lambda (dir file)
-                  (copy-file (string-append dir "/" file)
-                             (string-append out "/share/man/man1/" file)))
-                '("caff" "caff" "caff" "gpgdir"
-                  "gpg-key2ps" "gpglist" "gpg-mailkeys"
-                  "gpgparticipants" "gpgsigs" "gpgwrap/doc"
-                  "keyanalyze" "keyanalyze/pgpring" "keyanalyze")
-                '("caff.1" "pgp-clean.1" "pgp-fixkey.1" "gpgdir.1"
-                  "gpg-key2ps.1" "gpglist.1" "gpg-mailkeys.1"
-                  "gpgparticipants.1" "gpgsigs.1" "gpgwrap.1"
-                  "process_keys.1" "pgpring.1" "keyanalyze.1")))))
-         (add-after 'install 'wrap-programs
-           (lambda* (#:key outputs #:allow-other-keys)
-             (let* ((out (assoc-ref outputs "out")))
-               (wrap-program
-                   (string-append out "/bin/caff")
-                 `("PERL5LIB" ":" prefix (,(getenv "PERL5LIB"))))))))))
+     (list #:tests? #f                      ; no test suite
+           #:phases
+           #~(modify-phases %standard-phases
+               (replace 'configure
+                 (lambda _
+                   (substitute* "keyanalyze/Makefile"
+                     (("LDLIBS")
+                      (string-append "CC=" (which "gcc") "\nLDLIBS")))
+                   (substitute* "keyanalyze/Makefile"
+                     (("\\./configure")
+                      (string-append "./configure --prefix=" #$output)))
+                   (substitute* "gpgwrap/Makefile"
+                     (("\\} clean")
+                      (string-append
+                       "} clean\ninstall:\n\tinstall -D bin/gpgwrap "
+                       #$output "/bin/gpgwrap\n")))
+                   (substitute* '("gpgsigs/Makefile" "keyanalyze/Makefile"
+                                  "keylookup/Makefile" "sig2dot/Makefile"
+                                  "springgraph/Makefile")
+                     (("/usr") #$output))
+                   (setenv "CONFIG_SHELL" (which "sh"))))
+               (replace 'install
+                 (lambda* (#:key #:allow-other-keys #:rest args)
+                   (let ((install (assoc-ref %standard-phases 'install)))
+                     (apply install args)
+                     (for-each
+                      (lambda (dir file)
+                        (copy-file (string-append dir "/" file)
+                                   (string-append #$output "/bin/" file)))
+                      '("caff" "caff" "caff" "gpgdir" "gpg-key2ps"
+                        "gpglist" "gpg-mailkeys" "gpgparticipants")
+                      '("caff" "pgp-clean" "pgp-fixkey" "gpgdir" "gpg-key2ps"
+                        "gpglist" "gpg-mailkeys" "gpgparticipants"))
+                     (for-each
+                      (lambda (dir file)
+                        (copy-file
+                         (string-append dir "/" file)
+                         (string-append #$output "/share/man/man1/" file)))
+                      '("caff" "caff" "caff" "gpgdir"
+                        "gpg-key2ps" "gpglist" "gpg-mailkeys"
+                        "gpgparticipants" "gpgsigs" "gpgwrap/doc"
+                        "keyanalyze" "keyanalyze/pgpring" "keyanalyze")
+                      '("caff.1" "pgp-clean.1" "pgp-fixkey.1" "gpgdir.1"
+                        "gpg-key2ps.1" "gpglist.1" "gpg-mailkeys.1"
+                        "gpgparticipants.1" "gpgsigs.1" "gpgwrap.1"
+                        "process_keys.1" "pgpring.1" "keyanalyze.1")))))
+               (add-after 'install 'wrap-programs
+                 (lambda _
+                   (wrap-program
+                       (string-append #$output "/bin/caff")
+                     `("PERL5LIB" ":" prefix (,(getenv "PERL5LIB")))))))))
    (synopsis "Collection of scripts for simplifying gnupg key signing")
    (description
     "Signing-party is a collection for all kinds of PGP/GnuPG related things,
@@ -1149,25 +1150,24 @@ however, pgpdump produces more detailed and easier to understand output.")
 (define-public gpa
  (package
    (name "gpa")
-    (version "0.11.0")
+    (version "0.11.1")
    (source (origin
              (method url-fetch)
              (uri (string-append "mirror://gnupg/gpa/"
                                  name "-" version ".tar.bz2"))
              (sha256
               (base32
-                "1k1kvxffyb4nm83yp3mnx9bfmcciwb7vfw8c3xscnh85yxdzma16"))))
+                "02sx9my3s4yjxzxzs8pfif8wvpjrjsh75wwa5mxd0h867v6v5i8b"))))
    (build-system gnu-build-system)
    (arguments
-     `(#:make-flags '("CFLAGS=-Wno-implicit-function-declaration")
-       #:phases
-       (modify-phases %standard-phases
-         (add-after 'install 'wrap-program
-           (lambda* (#:key inputs outputs #:allow-other-keys)
-             (let ((out (assoc-ref outputs "out"))
-                   (gnupg (assoc-ref inputs "gnupg")))
-               (wrap-program (string-append out "/bin/gpa")
-                 `("PATH" ":" prefix (,(string-append gnupg "/bin"))))))))))
+     (list #:make-flags #~(list "CFLAGS=-Wno-implicit-function-declaration")
+           #:phases
+           #~(modify-phases %standard-phases
+               (add-after 'install 'wrap-program
+                 (lambda* (#:key inputs #:allow-other-keys)
+                   (let ((gnupg (assoc-ref inputs "gnupg")))
+                     (wrap-program (string-append #$output "/bin/gpa")
+                       `("PATH" ":" prefix (,(string-append gnupg "/bin"))))))))))
    (native-inputs (list pkg-config))
    (inputs
     (list bash-minimal
@@ -192,17 +192,9 @@ definitions in Go programs.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0c1rxbj3v3m0fqb8q96xlbawxm9scyx6vvr8pddkiwp7zkx4ajym"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
            (delete-all-but "cmd" "godoc")
            (delete-all-but "." "cmd")))))
    (build-system go-build-system)
@@ -1535,17 +1535,9 @@ Go programming language.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0sjvngpahkb5x573i855fjlb1fdmr6n269nmb5xxnbabjb27mnvg"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
            (delete-all-but "go" "expect")
            (delete-all-but "." "go")))))
    (build-system go-build-system)
@@ -1575,17 +1567,9 @@ Go source code (including go.mod and go.work files) as test expectations.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0sjvngpahkb5x573i855fjlb1fdmr6n269nmb5xxnbabjb27mnvg"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
            (delete-all-but "go" "packages")
            (delete-all-but "go/packages" "packagestest")
            (delete-all-but "." "go")))))
@@ -1618,18 +1602,9 @@ tools on.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "1blk22apy424j9v58lfy4pxnrgh93yqchqhxsnf78dmx4vx5yi9r"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
-        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "godoc")))))
+        #~(begin (delete-all-but "." "godoc")))))
    (build-system go-build-system)
    (arguments
     (list
@@ -1304,26 +1304,8 @@ may be interactive or produce standard formats such as SVG or PDF.")
         (file-name (git-file-name name version))
         (sha256
          (base32 "1np11if704xzyhsx9mqhz7djx23g6wnz62r1v9ra6xaz91yfic0n"))
-         (modules '((guix build utils)
-                    (ice-9 ftw)
-                    (srfi srfi-26)))
-         (snippet
-          #~(begin
-              ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-              (define (delete-all-but directory . preserve)
-                (define (directory? x)
-                  (and=> (stat x #f)
-                         (compose (cut eq? 'directory <>) stat:type)))
-                (with-directory-excursion directory
-                  (let* ((pred
-                          (negate (cut member <> (append '("." "..") preserve))))
-                         (items (scandir "." pred)))
-                    (for-each (lambda (item)
-                                (if (directory? item)
-                                    (delete-file-recursively item)
-                                    (delete-file item)))
-                              items))))
-              (delete-all-but "." "generate")))))
+         (modules '((guix build utils)))
+         (snippet #~(delete-all-but "." "generate"))))
      (build-system go-build-system)
      (arguments
       (list
@@ -5065,18 +5047,8 @@ and multi-selects with a focus on user experience and aesthetics.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "1nr09574rdrgnsj7c2z11233zljl3gcqax0jb3na6v4ixl7gnhq2"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
-       (snippet
-        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "ansi")))))
+       (modules '((guix build utils)))
+       (snippet #~(delete-all-but "." "ansi"))))
    (build-system go-build-system)
    (arguments
     (list
@@ -5113,14 +5085,7 @@ ECMA-48} specs.")
                  (ice-9 ftw)
                  (srfi srfi-26)))
       (snippet
-        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "cellbuf")))))
+        #~(begin (delete-all-but "." "cellbuf")))))
    (build-system go-build-system)
    (arguments
     (list
@@ -5178,18 +5143,8 @@ ECMA-48} specs.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "088786ak8jsgvssbb5y16z066vfq9f6078sjc7iv766knfr2i0x2"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
-       (snippet
-        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "errors")))))
+       (modules '((guix build utils)))
+       (snippet #~(delete-all-but "." "errors"))))
    (build-system go-build-system)
    (arguments
     (list
@@ -5341,18 +5296,9 @@ package provides an API for comparing Golden files.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "1shw55110fnn4xz80wmgr18czmiil6z1j064m90iw8c7j9llfzn5"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
-        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "term")))))
+        #~(begin (delete-all-but "." "term")))))
    (build-system go-build-system)
    (arguments
     (list
@@ -5440,21 +5386,8 @@ package provides an API for comparing Golden files.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0blpb8vpl7sc6pb43h0730wdcwrkvnhly6qhik6wljrzn2nqz5g2"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
-       (snippet
-        #~(begin
-            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-            ;; Consider implementing it as a reusable procedure in
-            ;; guix/build/utils or guix/build-system/go.
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "xpty")))))
+       (modules '((guix build utils)))
+       (snippet #~(delete-all-but "." "xpty"))))
    (build-system go-build-system)
    (arguments
     (list
@@ -6537,21 +6470,8 @@ packages.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0afaljkkd388f6igr3f2vjnd14yr8h20fcfzglw8j5q1q7a1cvik"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
-       (snippet
-        #~(begin
-            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-            ;; Consider implementing it as a reusable procedure in
-            ;; guix/build/utils or guix/build-system/go.
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "pkg")))))
+       (modules '((guix build utils)))
+       (snippet #~(delete-all-but "." "pkg"))))
    (build-system go-build-system)
    (arguments
     (list
@@ -16136,18 +16056,9 @@ Twisted's manhole library} .")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0xj782ghf0iv8r2xxmg2vrh72b02h216y4yfyi60y9z0691lrsip"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
-        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "tools")))))
+        #~(begin (delete-all-but "." "tools")))))
    (build-system go-build-system)
    (arguments
     (list
@@ -19932,18 +19843,9 @@ publish–subscribe pattern}.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0an8ypp8v9gfxbbb71mpimb1g9labl4v7lgazcphysn6c5smgmiw"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
-        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "atomicwriter")))))
+        #~(begin (delete-all-but "." "atomicwriter")))))
    (build-system go-build-system)
    (arguments
     (list
@@ -19998,18 +19900,9 @@ https://github.com/syndtr/gocapability.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "1nh1disclgydvq7k10awzks6k8kw9cjj3q19f83ksi4b76p5l475"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
-        #~(begin
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "mount")))))
+        #~(begin (delete-all-but "." "mount")))))
    (build-system go-build-system)
    (arguments
     (list
@@ -31067,21 +30960,8 @@ when they'd prefer a more familiar, loosely typed API.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "05i15278swdmpif3p6g18sy0sn7rnfdl3m2rj5p30cnyb0j29vig"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
-       (snippet
-        #~(begin
-            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-            ;; Consider implementing it as a reusable procedure in
-            ;; guix/build/utils or guix/build-system/go.
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "exp")))))
+       (modules '((guix build utils)))
+       (snippet #~(delete-all-but "." "exp"))))
    (build-system go-build-system)
    (arguments
     (list
@@ -32562,18 +32442,9 @@ code.")
    (name "go-modernc-org-ccgo-v4")
    (source (origin
              (inherit (package-source go-modernc-org-ccgo-v3))
-              (modules '((guix build utils)
-                         (ice-9 ftw)
-                         (srfi srfi-26)))
+              (modules '((guix build utils)))
              (snippet
-               #~(begin
-                   (define (delete-all-but directory . preserve)
-                     (with-directory-excursion directory
-                       (let* ((pred (negate (cut member <>
-                                                 (cons* "." ".." preserve))))
-                              (items (scandir "." pred)))
-                         (for-each (cut delete-file-recursively <>) items))))
-                   (delete-all-but "." "v4")))))
+               #~(begin (delete-all-but "." "v4")))))
    (arguments
     (substitute-keyword-arguments
         (package-arguments go-modernc-org-ccgo-v3)
@@ -33529,20 +33400,9 @@ unmarshaling functions based on @code{encoding/json} @code{Unmarshal()}.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "12n8ij4gisah5mvxcgq263iic61gjpxdj3ml03826zckzn7wlv46"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
        #~(begin
-            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-            ;; Consider implementing it as a reusable procedure in
-            ;; guix/build/utils or guix/build-system/go.
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
            (delete-all-but "." "cmd")
            (delete-all-but "cmd" "config")))))
    (build-system go-build-system)
@@ -55,7 +55,7 @@
  #:use-module (gnu packages cran)
  #:use-module (gnu packages datastructures)
  #:use-module (gnu packages docbook)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages gd)
  #:use-module (gnu packages graphics)
@@ -44,6 +44,7 @@
 ;;; Copyright © 2025 James Smith <jsubuntuxp@disroot.org>
 ;;; Copyright © 2026 Cayetano Santos <csantosb@inventati.org>
 ;;; Copyright © 2026 Jan Wielkiewicz <tona_kosmicznego_smiecia@interia.pl>
+;;; Copyright © 2026 Sughosha <sughosha@disroot.org>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -78,7 +79,7 @@
  #:use-module (gnu packages crypto)
  #:use-module (gnu packages datastructures)
  #:use-module (gnu packages documentation)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fonts)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
@@ -1532,77 +1533,71 @@ frames per second (FPS), temperatures, CPU/GPU load and more.")
 (define-public openexr
  (package
    (name "openexr")
-    (version "3.2.4")
-    (source (origin
-              (method git-fetch)
-              (uri (git-reference
-                    (url
-                     "https://github.com/AcademySoftwareFoundation/openexr")
-                    (commit (string-append "v" version))))
-              (file-name (git-file-name name version))
-              (sha256
-               (base32
-                "00s1a05kggk71vfbnsvykyjc2j7y6yyzgl63sy4yiddshz2k2mcr"))))
+    (version "3.4.11")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/AcademySoftwareFoundation/openexr")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256 (base32 "0c0l62s42i4jxp6bsf47fqlmdrazpk783jfpgj4jnprsm2spdp75"))
+       (modules '((guix build utils)))
+       ;; Unbundle third party libraries.
+       (snippet #~(with-directory-excursion "external"
+                    (for-each delete-file-recursively
+                      '("deflate" "OpenJPH"))))))
    (build-system cmake-build-system)
    (arguments
-     (list #:configure-flags
-           #~(list #$@(match (%current-system)
-                        ;; A test explicitly checks for SSE2 (would fail on
-                        ;; i686-linux), so make sure it is enabled for both C
-                        ;; and CPP.
-                        ((or "x86_64-linux" "i686-linux")
-                         '("-DCMAKE_CXX_FLAGS=-mfpmath=sse -msse2"
-                           "-DCMAKE_C_FLAGS=-mfpmath=sse -msse2"))
-                        (_ '())))
-           #:phases
-           #~(modify-phases %standard-phases
-               (add-after 'unpack 'patch-test-directory
-                 (lambda _
-                   (substitute* (list
-                                 "src/test/OpenEXRTest/tmpDir.h"
-                                 "src/test/OpenEXRCoreTest/main.cpp")
-                     (("/var/tmp")
-                      "/tmp"))))
-               #$@(if (target-32bit?)
-                      #~((add-after 'patch-test-directory 'disable-broken-tests
-                           (lambda _
-                             ;; Disable tests that fail at least on i686-linux.
-                             (substitute* '("src/test/OpenEXRCoreTest/main.cpp"
-					    "src/test/OpenEXRTest/main.cpp")
-                               (("TEST \\(testCompression, \"basic\"\\);")
-                                "")
-                               (("TEST\\( testNoCompression, \"core_compression\" \\);")
-                                "")
-                               (("TEST\\( testRLECompression, \"core_compression\" \\);")
-                                "")
-                               (("TEST\\( testZIPCompression, \"core_compression\" \\);")
-                                "")
-                               (("TEST\\( testZIPSCompression, \"core_compression\" \\);")
-                                "")
-                               (("TEST\\( testB44Compression, \"core_compression\" \\);")
-                                "")
-                               (("TEST\\( testB44ACompression, \"core_compression\" \\);")
-                                "")
-                               (("TEST \\(testOptimizedInterleavePatterns, \"basic\"\\);")
-                                "")))))
-                      #~())
-               #$@(if (target-aarch64?)
-                      #~((add-after 'patch-test-directory 'disable-broken-aarch64-tests
-                           ;; Disable tests known to fail on aarch64. Remove once
-                           ;; https://github.com/AcademySoftwareFoundation/openexr/issues/1460
-                           ;; is fixed.
-                           (lambda _
-                             (substitute* '("src/test/OpenEXRCoreTest/main.cpp")
-                               (("TEST \\(testDWAACompression, \"core_compression\"\\);")
-                                "")
-                               (("TEST \\(testDWABCompression, \"core_compression\"\\);")
-                                "")))))
-                      #~()))))
-    (inputs (list imath))
+     (list
+      #:configure-flags
+      #~(list #$@(match (%current-system)
+                   ;; A test explicitly checks for SSE2 (would fail on
+                   ;; i686-linux), so make sure it is enabled for both C
+                   ;; and CPP.
+                   ((or "x86_64-linux" "i686-linux")
+                    '("-DCMAKE_CXX_FLAGS=-mfpmath=sse -msse2"
+                      "-DCMAKE_C_FLAGS=-mfpmath=sse -msse2"))
+                   (_ '())))
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-after 'unpack 'patch-test-directory
+            (lambda _
+              (substitute* '("src/test/OpenEXRTest/tmpDir.h"
+                             "src/test/OpenEXRCoreTest/main.cpp")
+                (("/var/tmp") "/tmp"))))
+          ;; Disable tests that fail at least on i686-linux.
+          #$@(if (target-32bit?)
+                 #~((add-after 'patch-test-directory 'disable-broken-tests
+                      (lambda _
+                        (substitute* "src/test/OpenEXRCoreTest/main.cpp"
+                          ((".*testNoCompression, .*") "")
+                          ((".*testRLECompression, .*") "")
+                          ((".*testZIPCompression, .*") "")
+                          ((".*testZIPSCompression, .*") "")
+                          ((".*testB44Compression, .*") "")
+                          ((".*testB44ACompression, .*") ""))
+                        (substitute* "src/test/OpenEXRTest/main.cpp"
+                          ((".*testCompression, .*") "")
+                          ((".*testOptimizedInterleavePatterns, .*") "")))))
+                 #~())
+          ;; Disable tests known to fail on aarch64.  Remove once
+          ;; https://github.com/AcademySoftwareFoundation/openexr/issues/1460
+          ;; is fixed.
+          #$@(if (target-aarch64?)
+                 #~((add-after 'patch-test-directory 'disable-broken-tests
+                      (lambda _
+                        (substitute* '("src/test/OpenEXRCoreTest/main.cpp")
+                          (("TEST \\(testDWAACompression, \"core_compression\"\\);")
+                           "")
+                          (("TEST \\(testDWABCompression, \"core_compression\"\\);")
+                           "")))))
+                 #~()))))
    (propagated-inputs
-     (list libdeflate ; Marked as Requires.private in OpenEXR.pc.
-           imath)) ; Marked as Requires in OpenEXR.pc.
-    (home-page "https://www.openexr.com/")
+     (list libdeflate ;marked as Requires.private in OpenEXR.pc
+           imath      ;marked as Requires in OpenEXR.pc
+           openjph))  ;marked as Requires.private in OpenEXR.pc
+    (home-page "https://openexr.com")
    (synopsis "High-dynamic-range file format library")
    (description
     "OpenEXR provides the specification and reference implementation of the
@@ -37,7 +37,7 @@
  #:use-module (gnu packages bash)
  #:use-module (gnu packages ruby-xyz)
  #:use-module (gnu packages bison)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages ghostscript)
  #:use-module (gnu packages netpbm)
  #:use-module (gnu packages perl)
@@ -47,13 +47,13 @@
 (define-public groff
  (package
   (name "groff")
-   (version "1.22.4")
+   (version "1.24.0")
   (source (origin
            (method url-fetch)
            (uri (string-append "mirror://gnu/groff/groff-" version
                                ".tar.gz"))
            (sha256 (base32
-                     "14q2mldnr1vx0l9lqp9v2f6iww24gj28iyh4j2211hyynx67p3p7"))))
+                     "0w3mf9jb5j1gbw1160lr5498q4ayl5i3jpf5g8721l1yzzcbr6z7"))))
   (build-system gnu-build-system)
   (outputs '("out"
              "doc"))                    ;12MiB of PS, PDF, HTML, and examples
@@ -56,7 +56,7 @@
  #:use-module (gnu packages compression)
  #:use-module (gnu packages documentation)
  #:use-module (gnu packages elf)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages ghostscript)
@@ -44,7 +44,7 @@
  #:use-module (gnu packages compression)
  #:use-module (gnu packages crypto)
  #:use-module (gnu packages dbm)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages gperf)
@@ -61,7 +61,7 @@
  #:use-module (gnu packages debian)
  #:use-module (gnu packages disk)
  #:use-module (gnu packages documentation)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages gettext)
@@ -52,7 +52,7 @@
  #:use-module (gnu packages compression)
  #:use-module (gnu packages elf)
  #:use-module (gnu packages file)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages ghostscript)
@@ -33,7 +33,7 @@
  #:use-module (gnu packages base)
  #:use-module (gnu packages bash)
  #:use-module (gnu packages compression)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages bison)
  #:use-module (gnu packages elf)
  #:use-module (gnu packages m4)
@@ -38,7 +38,7 @@
  #:use-module (gnu packages cross-base)
  #:use-module (gnu packages crypto)
  #:use-module (gnu packages disk)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages gnupg)
  #:use-module (gnu packages bison)
@@ -713,7 +713,7 @@ exec ${system}/rc \"$@\"
       ("libpciaccess" ,libpciaccess-static)

       ;; For NFS support
-       ("libtirpc" ,libtirpc/hurd)
+       ("libtirpc" ,libtirpc)

       ;; Tools for the /libexec/* scripts.
       ("bash-minimal" ,bash-minimal)
@@ -72,7 +72,7 @@
  #:use-module (gnu packages docbook)
  #:use-module (gnu packages documentation)
  #:use-module (gnu packages engineering)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages game-development)
  #:use-module (gnu packages gcc)
@@ -600,24 +600,16 @@ different data arrays similar to those available in the numdiff software.")
              (file-name (git-file-name name version))
              (snippet
               #~(begin
-                   (use-modules (guix build utils)
-                                (ice-9 ftw)
-                                (srfi srfi-26))
+                   (use-modules (guix build utils))
                   ;; Delete any bundled .jar files.
                   (for-each delete-file (find-files "." "\\.jar$"))
-                   (define (delete-all-but directory . preserve)
-                     (with-directory-excursion directory
-                       (let* ((pred (negate (cut member <>
-                                                 (cons* "." ".." preserve))))
-                              (items (scandir "." pred)))
-                         (for-each (cut delete-file-recursively <>) items))))
                   (delete-all-but "3rdparty"
-                                   "fastcv"     ;TODO: Unbundle these
-                                   "libspng"
-                                   "libtim-vx"
-                                   "orbbecsdk"
-                                   "quirc"
-                                   "zlib-ng")))
+                     "fastcv"           ;TODO: Unbundle these
+                     "libspng"
+                     "libtim-vx"
+                     "orbbecsdk"
+                     "quirc"
+                     "zlib-ng")))
              (sha256
               (base32
                "15w4fqjqv5k1yw70jbjsnlgiky39mqpy05rvmm2fbyjrif4kbgkl"))))
@@ -2987,86 +2987,101 @@ by AOM, including with alpha.")
 Format) file format decoder and encoder.")
    (license license:lgpl3+)))

+(define libjxl-testdata
+  (origin
+    (method git-fetch)
+    (uri (git-reference
+          (url "https://github.com/libjxl/testdata")
+          (commit "ff8d743aaba05b3014f17e5475e576242fa979fc")))
+    (sha256
+     (base32 "05nba2h0m74n5f9jzl3vzvnj74fj3si09ncwk2dqg41qdc49d1ng"))))
+
 (define-public libjxl
  (package
    (name "libjxl")
-    (version "0.11.1")
+    (version "0.11.2")
    (outputs (list "out" "pixbuf-loader"))
    (source
     (origin
       (method git-fetch)
       (uri (git-reference
             (url "https://github.com/libjxl/libjxl")
-             (commit (string-append "v" version))
-             (recursive? #t)))
+             (commit (string-append "v" version))))
       (file-name (git-file-name name version))
       (sha256
-        (base32 "1wfxzrhj8a19z6x47ib1qbmgyg56jsxjs955xcvqhdkrx8l2271r"))
-       (modules '((guix build utils)))
-       (snippet
-        ;; Delete the bundles that will not be used.
-        '(begin
-           (for-each (lambda (directory)
-                       (delete-file-recursively
-                        (string-append "third_party/" directory)))
-                     '("brotli" "googletest" "highway" "lcms" "libjpeg-turbo"
-                       "libpng" "zlib"))))))
+        (base32 "0a6fg2v81rqsbrzi97x1d7wadcikh2fizr64rsza668cwvsk631q"))))
    (build-system cmake-build-system)
    (arguments
-     `(#:modules ((guix build cmake-build-system)
-                  (guix build utils)
-                  (srfi srfi-26))
-       #:configure-flags
-       (list "-DJPEGXL_FORCE_SYSTEM_GTEST=true"
-             "-DJPEGXL_FORCE_SYSTEM_BROTLI=true"
-             "-DJPEGXL_FORCE_SYSTEM_LCMS2=true"
-             "-DJPEGXL_FORCE_SYSTEM_HWY=true"
-             "-DJPEGXL_BUNDLE_LIBPNG=false"
-             "-DJPEGXL_ENABLE_PLUGINS=true")
-       #:phases
-       (modify-phases %standard-phases
-         ,@(cond
-             ((target-riscv64?)
-              '((add-after 'unpack 'fix-atomic
-                  (lambda _
-                    (substitute* "lib/jxl/enc_xyb.cc"
-                      (("#include \"lib/jxl/enc_xyb.h\"" a)
-                       (string-append a "\n#include <atomic>")))))))
-             ((target-x86-32?)
-              '((add-after 'unpack 'loosen-test-parameter
-                  (lambda _
-                    ;; This test fails likely due to a floating point
-                    ;; rounding difference.
-                    (substitute* "lib/jxl/color_management_test.cc"
-                      (("8\\.7e-4") "8.7e-3"))))))
-             (#t '()))
+     (list
+      #:configure-flags
+      #~'("-DJPEGXL_FORCE_SYSTEM_GTEST=true"
+          "-DJPEGXL_FORCE_SYSTEM_BROTLI=true"
+          "-DJPEGXL_FORCE_SYSTEM_LCMS2=true"
+          "-DJPEGXL_FORCE_SYSTEM_HWY=true"
+          "-DJPEGXL_BUNDLE_LIBPNG=false"
+          "-DJPEGXL_ENABLE_PLUGINS=true")
+      #:phases
+      #~(modify-phases %standard-phases
+          #$@(cond
+               ((target-riscv64?)
+                #~((add-after 'unpack 'fix-atomic
+                     (lambda _
+                       (substitute* "lib/jxl/enc_xyb.cc"
+                         (("#include \"lib/jxl/enc_xyb.h\"" a)
+                          (string-append a "\n#include <atomic>")))))))
+               ((target-x86-32?)
+                #~((add-after 'unpack 'loosen-test-parameter
+                     (lambda _
+                       ;; This test fails likely due to a floating point
+                       ;; rounding difference.
+                       (substitute* "lib/jxl/color_management_test.cc"
+                         (("8\\.7e-4") "8.7e-3"))))))
+               (#t
+                #~()))
+         (add-after 'unpack 'patch-dependencies
+           (lambda* (#:key inputs #:allow-other-keys)
+             (with-directory-excursion "third_party"
+               ;; HACK: Create dummy files to pretend the bundled sjpeg and
+               ;; skcms exist.
+               (apply invoke "touch"
+                      '("sjpeg/CMakeLists.txt"
+                        "sjpeg/COPYING"
+                        "skcms/skcms.h"
+                        "skcms/LICENSE"))
+               (substitute* "CMakeLists.txt"
+                 (("include\\(skcms\\.cmake\\)")
+                  "find_library(SKCMS_LIB NAMES skcms REQUIRED)")
+                 (("include\\(sjpeg\\.cmake\\)")
+                  "find_package(sjpeg REQUIRED)")))
+             (with-directory-excursion "lib"
+               (substitute* "jxl_cms.cmake"
+                 (("target_link_skcms\\(jxl_cms\\)")
+                  "target_link_libraries(jxl_cms PRIVATE ${SKCMS_LIB})"))
+               (substitute* "jxl_extras.cmake"
+                 (("\\.\\.\\/third_party\\/sjpeg\\/src")
+                  (dirname (search-input-file inputs "src/sjpegi.h")))))))
+         (add-after 'unpack 'unpack-testdata
+           (lambda _
+             (rmdir "testdata")
+             (copy-recursively #$libjxl-testdata "testdata")))
         (add-after 'install 'split
-           (lambda* (#:key outputs #:allow-other-keys)
-              (let* ((out            (assoc-ref outputs "out"))
-                     (out:pixbuf     (assoc-ref outputs "pixbuf-loader"))
-                     (thumbnailer    (string-append
-                                      out
-                                      "/share/thumbnailers/jxl.thumbnailer"))
-                     (thumbnailer*   (string-append
-                                      out:pixbuf
-                                      "/share/thumbnailers/jxl.thumbnailer"))
-                     (pixbuf-loader  (string-append
-                                      out
-                                      "/lib/gdk-pixbuf-2.0/2.10.0/loaders/"
-                                      "libpixbufloader-jxl.so"))
-                     (pixbuf-loader* (string-append
-                                      out:pixbuf
-                                      "/lib/gdk-pixbuf-2.0/2.10.0/loaders/"
-                                      "libpixbufloader-jxl.so")))
-
-                (for-each (lambda (old new)
-                            (install-file old (dirname new))
-                            (delete-file old)
-                            (chmod new #o555))
-                          (list thumbnailer pixbuf-loader)
-                          (list thumbnailer* pixbuf-loader*))))))))
+           (lambda _
+             (for-each
+              (lambda (path)
+                (let ((old (string-append #$output path))
+                      (new (string-append #$output:pixbuf-loader path)))
+                  (install-file old (dirname new))
+                  (delete-file old)
+                  (chmod new #o555)))
+              '("/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-jxl.so"
+                "/share/thumbnailers/jxl.thumbnailer")))))))
    (native-inputs
-     (list asciidoc doxygen googletest pkg-config python))
+     (list asciidoc
+           doxygen
+           googletest
+           pkg-config
+           python
+           (package-source sjpeg)))     ;for sjpegi.h
    (inputs
     (list freeglut
           gdk-pixbuf
@@ -3079,6 +3094,8 @@ Format) file format decoder and encoder.")
           libpng
           libwebp
           openexr
+           sjpeg
+           skcms
           zlib))
    ;; These are in Requires.private of libjxl.pc.
    (propagated-inputs
@@ -34,7 +34,7 @@
  #:use-module (gnu packages elf)
  #:use-module (gnu packages engineering)
  #:use-module (gnu packages file)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gawk)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages glib)
@@ -1362,21 +1362,9 @@ code prior to it getting merged into @code{go-cid}.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "00lwizzdfdx6kynxddal3all6q9dhwqanpkw0d0vxlwik4nkvxa5"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet
-        #~(begin
-            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
-            ;; Consider to implement it as re-usable procedure in
-            ;; guix/build/utils or guix/build-system/go.
-            (define (delete-all-but directory . preserve)
-              (with-directory-excursion directory
-                (let* ((pred (negate (cut member <>
-                                          (cons* "." ".." preserve))))
-                       (items (scandir "." pred)))
-                  (for-each (cut delete-file-recursively <>) items))))
-            (delete-all-but "." "ipfs")))))
+        #~(begin (delete-all-but "." "ipfs")))))
    (build-system go-build-system)
    (arguments
     (list
@@ -36,7 +36,7 @@
 (define-public jemalloc
  (package
    (name "jemalloc")
-    (version "5.3.0")
+    (version "5.3.1")
    (source (origin
              (method url-fetch)
              (uri (string-append
@@ -44,7 +44,7 @@
                    version "/jemalloc-" version ".tar.bz2"))
              (sha256
               (base32
-                "1apyxjd1ixy4g8xkr61p0ny8jiz8vyv1j0k4nxqkxpqrf4g2vf1d"))))
+                "14kgf0hs864hp5xxqfqh37l1d8wwg57h7wv28rffs8ig4f0bq9iq"))))
    (build-system gnu-build-system)
    (arguments
     (list
@@ -58,7 +58,7 @@
  #:use-module (gnu packages databases)
  #:use-module (gnu packages docbook)
  #:use-module (gnu packages ebook)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gettext)
  #:use-module (gnu packages gl)
@@ -57,7 +57,7 @@
  #:use-module (gnu packages djvu)
  #:use-module (gnu packages documentation)
  #:use-module (gnu packages ebook)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages fribidi)
@@ -588,14 +588,11 @@ This package is part of the KDE multimedia module.")
          (add-after 'install 'wrap-executable
            (lambda _
              (let* ((ffmpeg #$(this-package-input "ffmpeg"))
-                     (frei0r #$(this-package-input "frei0r-plugins"))
                     (ladspa #$(this-package-input "ladspa"))
                     (qtbase #$(this-package-input "qtbase")))
                (wrap-program (string-append #$output "/bin/kdenlive")
                  `("PATH" ":" prefix
                    ,(list (string-append ffmpeg "/bin")))
-                  `("FREI0R_PATH" ":" =
-                    (,(string-append frei0r "/lib/frei0r-1")))
                  `("LADSPA_PATH" ":" =
                    (,(string-append ladspa "/lib/ladspa")))
                  `("QT_QPA_PLATFORM_PLUGIN_PATH" ":" =
@@ -603,13 +600,12 @@ This package is part of the KDE multimedia module.")
                  `("MLT_PREFIX" ":" =
                    (,#$(this-package-input "mlt"))))))))))
    (native-inputs
-     (list extra-cmake-modules kdoctools pkg-config qttools))
+     (list extra-cmake-modules frei0r-api kdoctools pkg-config qttools))
    (inputs
     (list bash-minimal
           breeze                       ; make dark theme available easily
           breeze-icons                 ; recommended icon set
           ffmpeg
-           frei0r-plugins
           imath
           karchive
           kcrash
@@ -638,6 +634,10 @@ This package is part of the KDE multimedia module.")
           qtsvg
           qtwayland
           shared-mime-info))
+    (native-search-paths
+     (list (search-path-specification
+            (variable "FREI0R_PATH")
+            (files (list "lib/frei0r-1")))))
    (home-page "https://kdenlive.org")
    (synopsis "Non-linear video editor")
    (description "Kdenlive is an acronym for KDE Non-Linear Video Editor.
@@ -46,7 +46,7 @@
  #:use-module (gnu packages cyrus-sasl)
  #:use-module (gnu packages databases)
  #:use-module (gnu packages documentation)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages geo)
  #:use-module (gnu packages glib)
@@ -36,7 +36,7 @@
  #:use-module (guix packages)
  #:use-module (gnu packages)
  #:use-module (gnu packages bison)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages apr)
  #:use-module (gnu packages boost)
  #:use-module (gnu packages code)
@@ -36,7 +36,7 @@
  #:use-module (gnu packages bison)
  #:use-module (gnu packages crypto)
  #:use-module (gnu packages dbm)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages perl)
  #:use-module (gnu packages python)
  #:use-module (gnu packages gettext)
@@ -92,16 +92,8 @@ tree for exported @acronym{CustomResourceDefinition, CRD} types.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0d9rjyl5h0xm9isgr8b2fz8528wk3pds71rjl8g08fgsmsa5kicb"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet #~(begin
-                    (define (delete-all-but directory . preserve)
-                      (with-directory-excursion directory
-                        (let* ((pred (negate (cut member <>
-                                                  (cons* "." ".." preserve))))
-                               (items (scandir "." pred)))
-                          (for-each (cut delete-file-recursively <>) items))))
                    ;; Replace symlinks to tests with file contents
                    (for-each
                     (lambda (f)
@@ -182,16 +174,8 @@ tree for exported @acronym{CustomResourceDefinition, CRD} types.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0d9rjyl5h0xm9isgr8b2fz8528wk3pds71rjl8g08fgsmsa5kicb"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet #~(begin
-                    (define (delete-all-but directory . preserve)
-                      (with-directory-excursion directory
-                        (let* ((pred (negate (cut member <>
-                                                  (cons* "." ".." preserve))))
-                               (items (scandir "." pred)))
-                          (for-each (cut delete-file-recursively <>) items))))
                    (delete-all-but "." "server")
                    (rename-file "server" "server.tmp")
                    (mkdir-p "server/v3")
@@ -265,16 +249,8 @@ system.")
       (file-name (git-file-name name version))
       (sha256
        (base32 "0d9rjyl5h0xm9isgr8b2fz8528wk3pds71rjl8g08fgsmsa5kicb"))
-       (modules '((guix build utils)
-                  (ice-9 ftw)
-                  (srfi srfi-26)))
+       (modules '((guix build utils)))
       (snippet #~(begin
-                    (define (delete-all-but directory . preserve)
-                      (with-directory-excursion directory
-                        (let* ((pred (negate (cut member <>
-                                                  (cons* "." ".." preserve))))
-                               (items (scandir "." pred)))
-                          (for-each (cut delete-file-recursively <>) items))))
                    (delete-all-but "." "pkg")
                    (rename-file "pkg" "pkg.tmp")
                    (mkdir-p "pkg/v3")
@@ -27,7 +27,7 @@
  #:use-module (gnu packages)
  #:use-module (gnu packages bison)
  #:use-module (gnu packages compression)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages gl)
  #:use-module (gnu packages qt))

@@ -25,7 +25,7 @@
  #:use-module (guix git-download)
  #:use-module (gnu packages autotools)
  #:use-module (gnu packages c)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages gcc)
  #:use-module (gnu packages pkg-config)
@@ -69,17 +69,6 @@
       (search-patches "libcanberra-sound-theme-freedesktop.patch"
                       "libcanberra-wayland-crash.patch"))))
    (build-system gnu-build-system)
-    (inputs
-     `(("alsa-lib" ,alsa-lib)
-       ("gstreamer" ,gstreamer)
-       ("gtk+" ,gtk+)
-       ("libltdl" ,libltdl)
-       ("libvorbis" ,libvorbis)
-       ("pulseaudio" ,pulseaudio)
-       ("udev" ,eudev)
-       ("sound-theme-freedesktop" ,sound-theme-freedesktop)))
-    (native-inputs
-     (list pkg-config))
    (arguments
     `(#:phases
       (modify-phases %standard-phases
@@ -87,10 +76,21 @@
           (lambda* (#:key inputs #:allow-other-keys)
             (substitute* "src/sound-theme-spec.c"
               (("@SOUND_THEME_DIRECTORY@")
-                (string-append
-                 (assoc-ref inputs "sound-theme-freedesktop")
-                 "/share")))
-             #t)))))
+                (dirname
+                 (dirname
+                  (search-input-directory inputs
+                                          "share/sounds/freedesktop"))))))))))
+    (inputs
+     (list alsa-lib
+           gstreamer
+           gtk+
+           libltdl
+           libvorbis
+           pulseaudio
+           eudev
+           sound-theme-freedesktop))
+    (native-inputs
+     (list pkg-config))
    (home-page "https://0pointer.de/lennart/projects/libcanberra/")
    (synopsis
     "Implementation of the XDG Sound Theme and Name Specifications")
@@ -59,7 +59,7 @@
  #:use-module (gnu packages databases)
  #:use-module (gnu packages datastructures)
  #:use-module (gnu packages documentation)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages game-development)
@@ -125,14 +125,14 @@
  ;; ex:
  ;; tar xf /gnu/store/...-firefox-123.4.source.tar.xz -O \
  ;;     firefox-123.4/browser/locales/l10n-changesets.json | grep revision
-  (let ((commit "a8799feda04a221a2c552576501975662c5350bb"))
+  (let ((commit "a867076ab29cc0777b14d0448707629cdb825d81"))
    (origin
      (method git-fetch)
      (uri (git-reference
            (url "https://github.com/mozilla-l10n/firefox-l10n.git")
            (commit commit)))
      (file-name (git-file-name "firefox-l10n" commit))
-      (sha256 (base32 "1625rh1w5fdq6nl7fpwgiln29hkqcj0zksmnwcfj34y5cvhwrq2z")))))
+      (sha256 (base32 "1j6gzzq1y5nx7iv3p173fmc4b87d5lwb0hnaiq1lmc6ryjnzk3wm")))))

 (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n)
  (let* ((ff-src (firefox-source-origin
@@ -244,17 +244,17 @@
 ;; It's used for cache validation and therefore can lead to strange bugs.
 ;; ex: date '+%Y%m%d%H%M%S'
 ;; or: (format-time-string "%Y%m%d%H%M%S")
-(define %librewolf-build-id "20260524201108")
+(define %librewolf-build-id "20260527211539")

 (define-public librewolf
  (package
    (name "librewolf")
-    (version "151.0.1-2")
+    (version "151.0.2-1")
    (source
     (make-librewolf-source
      #:version version
-      #:firefox-hash "1h440pkdqkx3085ij9nz9n9h1b6c2p92bg3lf983my6b711f62m8"
-      #:librewolf-hash "1hy4p1336igy8p73hrgvmv7krbr15ap9ain79n340d3sapqkhbg8"
+      #:firefox-hash "1j7q00fwdijvg5b01jmadhqabwmwdcqd15srmkbqsqgjk5vjdi33"
+      #:librewolf-hash "0fm11phcpp2xggwdhdl044f4a015adg8bplw4cj0in5hq1zqkbi2"
      #:l10n firefox-l10n))
    (build-system gnu-build-system)
    (arguments
@@ -29,7 +29,7 @@
  #:use-module (gnu packages check)
  #:use-module (gnu packages compression)
  #:use-module (gnu packages gnunet)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages libftdi)
  #:use-module (gnu packages libusb)
  #:use-module (gnu packages linux)
@@ -86,6 +86,7 @@
 ;;; Copyright © 2025 Mathieu Laparie <mlaparie@disr.it>
 ;;; Copyright © 2025 John Kehayias <john.kehayias@protonmail.com>
 ;;; Copyright © 2025 Arjan Adriaanse <arjan@adriaan.se>
+;;; Copyright © 2025 Dariqq <dariqq@posteo.net>
 ;;; Copyright © 2026 Justin Veilleux <terramorpha@cock.li>
 ;;; Copyright © 2026 Simen Endsjø <contact@simendsjo.me>
 ;;;
@@ -135,7 +136,7 @@
  #:use-module (gnu packages documentation)
  #:use-module (gnu packages elf)
  #:use-module (gnu packages file)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages fontutils)
  #:use-module (gnu packages freedesktop)
  #:use-module (gnu packages gawk)
@@ -3036,57 +3037,45 @@ which need to be installed separately.")
 (define-public linux-pam
  (package
    (name "linux-pam")
-    (version "1.5.2")
+    (version "1.7.2")
    (source
     (origin
-       (method url-fetch)
-       (uri (string-append
-             "https://github.com/linux-pam/linux-pam/releases/download/v"
-             version "/Linux-PAM-" version ".tar.xz"))
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/linux-pam/linux-pam")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
       (sha256
        (base32
-         "0kgrsj2scv5mx6w925h9hxf11jnqqs9z8s22aw94b90xm4qp3v74"))
+         "1z5apric696zsci28c7651spvdll0zrpfm9z574gcjf45mp22gmi"))
       (patches (search-patches "linux-pam-unix_chkpwd.patch"
                                "linux-pam-no-setfsuid.patch"))))
-
-    (build-system gnu-build-system)
+    (build-system meson-build-system)
+    (outputs '("out" "doc")) ;; 0.8 MiB of html
    (inputs (list libxcrypt))
    (native-inputs
-     (list flex
-           ;; TODO: optional dependencies
-           ;; ("cracklib" ,cracklib)
-           ))
+     (list gettext-minimal
+           flex bison
+           ;; manpages
+           libxslt
+           libxml2
+           docbook-xml
+           docbook-xsl))
    (arguments
     (list
-      ;; Most users, such as `shadow', expect the headers to be under
-      ;; `security'.
-      #:configure-flags #~(list (string-append "--includedir="
-                                               (assoc-ref %outputs "out")
-                                               "/include/security")
-                                ;; explicit libdir for pkgconfig files
-                                ;; drop with 1.5.3, which fixes
-                                ;; https://github.com/linux-pam/linux-pam/issues/466
-                                (string-append "--libdir="
-                                               (assoc-ref %outputs "out")
-                                               "/lib")
-
-                                ;; XXX: <rpc/rpc.h> is missing from glibc when
-                                ;; cross-compiling, so we have to disable NIS
-                                ;; support altogether.
-                                #$@(if (%current-target-system)
-                                       #~("--disable-nis")
-                                       #~()))
-
-      #:phases (if (target-hurd?)
-                   #~(modify-phases %standard-phases
-                       (add-after 'unpack 'skip-pam-limits
-                         (lambda _
-                           ;; 'pam_limits.c' uses <sys/prctl.h>, which is
-                           ;; Linux-specific.  Skip it on GNU/Hurd.
-                           (substitute* "modules/Makefile.in"
-                             (("pam_limits") "")))))
-                   #~%standard-phases)
-
+      #:configure-flags
+      #~(list
+         ;; lastlog is deprecated since 1.5.3
+         "-Dpam_lastlog=enabled"
+         (string-append "-Dvendordir=" #$output "/share/pam")
+         (string-append "-Ddocbook-rng="
+                        #$(let ((docbook-xml (this-package-native-input
+                                              "docbook-xml")))
+                            (file-append docbook-xml
+                                         "/xml/docbook/"
+                                         (package-version docbook-xml)
+                                         "/rng/docbookxi.rng")))
+         (string-append "-Dhtmldir=" #$output:doc "/share/doc/" #$name "/html"))
      ;; XXX: Tests won't run in chroot, presumably because /etc/pam.d
      ;; isn't available.
      #:tests? #f))
@@ -4561,7 +4550,7 @@ that the Ethernet protocol is much simpler than the IP protocol.")
 (define-public iproute
  (package
    (name "iproute2")
-    (version "6.4.0")
+    (version "7.0.0")
    (source (origin
              (method url-fetch)
              (uri (string-append
@@ -4569,7 +4558,7 @@ that the Ethernet protocol is much simpler than the IP protocol.")
                    version ".tar.xz"))
              (sha256
               (base32
-                "0wm2g70vfhnf8wb6py3zmzwxp4zv1icny1pvkwaxmr67rggbhlac"))))
+                "0kiggxwnjsglxnj43wqkc0rmq0acxf6xqcgk7ddc0qyynpvr0a76"))))
    (build-system gnu-build-system)
    (arguments
     (list
@@ -4581,6 +4570,7 @@ that the Ethernet protocol is much simpler than the IP protocol.")
                "HOSTCC=gcc"
                (string-append "BASH_COMPDIR=" out
                               "/etc/bash_completion.d")
+                (string-append "PREFIX=" out)
                (string-append "LIBDIR=" out "/lib")
                (string-append "HDRDIR=" out "/include")
                (string-append "SBINDIR=" out "/sbin")
@@ -4605,7 +4595,7 @@ that the Ethernet protocol is much simpler than the IP protocol.")
              (substitute* "Makefile"
                (("^.*ARPDDIR.*$") "")))))))
    (inputs
-     (list bdb iptables libmnl))
+     (list bdb iptables libbpf libcap libelf libmnl libselinux libtirpc))
    (native-inputs
     (list bison flex pkg-config))
    ;; For tests.
@@ -4634,65 +4624,62 @@ inadequately in modern network environments, and both should be deprecated.")
        (revision "0"))
    (package
      (name "net-tools")
-      (version (string-append "1.60-" revision "." (string-take commit 7)))
-      (source (origin
-               (method url-fetch)
-               (uri (string-append "https://sourceforge.net/code-snapshots/git/"
-                                   "n/ne/net-tools/code.git/net-tools-code-"
-                                   commit ".zip"))
-               (file-name (string-append name "-" version ".zip"))
-               (sha256
-                (base32
-                 "0hz9fda9d78spp774b6rr5xaxav7cm4h0qcpxf70rvdbrf6qx7vy"))))
+      (version (string-append "1.60-" revision "."
+                              (string-take commit 7)))
+      (source
+       (origin
+         (method url-fetch)
+         (uri (string-append "https://sourceforge.net/code-snapshots/git/"
+                             "n/ne/net-tools/code.git/net-tools-code-" commit
+                             ".zip"))
+         (file-name (string-append name "-" version ".zip"))
+         (sha256
+          (base32 "0hz9fda9d78spp774b6rr5xaxav7cm4h0qcpxf70rvdbrf6qx7vy"))))
      (home-page "https://net-tools.sourceforge.net/")
      (build-system gnu-build-system)
      (arguments
-       `(#:modules ((guix build gnu-build-system)
+       (list
+        ;; Binaries that depend on libnet-tools.a don't declare that
+        ;; dependency, making it parallel-unsafe.
+        #:parallel-build? #f
+
+        #:tests? #f ;no test suite
+        #:make-flags
+        #~(list #$(string-append "CC=" (cc-for-target))
+                (string-append "BASEDIR=" #$output)
+                (string-append "INSTALLNLSDIR=" #$output "/share/locale")
+                (string-append "mandir=/share/man"))
+        #:modules `((guix build gnu-build-system)
                    (guix build utils)
                    (srfi srfi-1)
                    (srfi srfi-26))
-         #:phases
-         (modify-phases %standard-phases
-           (replace 'configure
-             (lambda* (#:key outputs #:allow-other-keys)
-               (let ((out (assoc-ref outputs "out")))
-                 (mkdir-p (string-append out "/bin"))
-                 (mkdir-p (string-append out "/sbin"))
+        #:phases
+        #~(modify-phases %standard-phases
+            (replace 'configure
+              (lambda _
+                (mkdir-p (string-append #$output "/bin"))
+                (mkdir-p (string-append #$output "/sbin"))

-                 ;; Pretend we have everything...
-                 (system "yes | make config")
+                ;; Pretend we have everything...
+                (system "yes | make config")

-                 ;; ... except for the things we don't have.
-                 ;; HAVE_AFDECnet requires libdnet, which we don't have.
-                 ;; HAVE_HWSTRIP and HAVE_HWTR require kernel headers
-                 ;; that have been removed.
-                 ;; XXX SELINUX and AFBLUETOOTH are removed for now, but we should
-                 ;; think about adding them later.
-                 (substitute* '("config.make" "config.h")
-                   (("^.*HAVE_(AFDECnet|HWSTRIP|HWTR|SELINUX|AFBLUETOOTH)[ =]1.*$")
-                    ""))
-                 #t)))
-           (add-after 'install 'remove-redundant-commands
-             (lambda* (#:key outputs #:allow-other-keys)
-               ;; Remove commands and man pages redundant with Inetutils.
-               (let* ((out (assoc-ref outputs "out"))
-                      (dup (append-map (cut find-files out <>)
-                                       '("^hostname"
-                                         "^(yp|nis|dns)?domainname"))))
-                 (for-each delete-file dup)
-                 #t))))
-         ;; Binaries that depend on libnet-tools.a don't declare that
-         ;; dependency, making it parallel-unsafe.
-         #:parallel-build? #f
-
-         #:tests? #f                                ; no test suite
-         #:make-flags (let ((out (assoc-ref %outputs "out")))
-                        (list ,(string-append "CC=" (cc-for-target))
-                              (string-append "BASEDIR=" out)
-                              (string-append "INSTALLNLSDIR=" out "/share/locale")
-                              (string-append "mandir=/share/man")))))
-      (native-inputs `(("gettext" ,gettext-minimal)
-                       ("unzip" ,unzip)))
+                ;; ... except for the things we don't have.
+                ;; HAVE_AFDECnet requires libdnet, which we don't have.
+                ;; HAVE_HWSTRIP and HAVE_HWTR require kernel headers
+                ;; that have been removed.
+                ;; XXX SELINUX and AFBLUETOOTH are removed for now, but we should
+                ;; think about adding them later.
+                (substitute* '("config.make" "config.h")
+                  (("^.*HAVE_(AFDECnet|HWSTRIP|HWTR|SELINUX|AFBLUETOOTH)[ =]1.*$")
+                   ""))))
+            (add-after 'install 'remove-redundant-commands
+              (lambda _
+                ;; Remove commands and man pages redundant with Inetutils.
+                (for-each delete-file
+                          (append-map (cute find-files #$output <>)
+                                      '("^hostname"
+                                        "^(yp|nis|dns)?domainname"))))))))
+      (native-inputs (list gettext-minimal unzip))
      (supported-systems (remove target-hurd? %supported-systems))
      (synopsis "Tools for controlling the network subsystem in Linux")
      (description
@@ -46,7 +46,7 @@
  #:use-module (gnu packages curl)
  #:use-module (gnu packages cyrus-sasl)
  #:use-module (gnu packages databases)
-  #:use-module (gnu packages flex)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages geo)
  #:use-module (gnu packages gnupg)
  #:use-module (gnu packages kerberos)
@@ -77,7 +77,7 @@
  #:use-module (gnu packages pkg-config)
  #:use-module (gnu packages pretty-print)
  #:use-module (gnu packages rdf)
-  #:use-module (gnu packages re2c)
+  #:use-module (gnu packages compiler-tools)
  #:use-module (gnu packages readline)
  #:use-module (gnu packages rsync)
  #:use-module (gnu packages ssh)
--- a/Show More
+++ b/Show More