gnu: dmd: Support GNU/Hurd.

* gnu/packages/patches/dmd-hurd.patch, gnu/packages/patches/phobos-hurd.patch
: New patches.
* gnu/local.mk: Register them.
* gnu/packages/dlang.scm (dmd-bootstrap): Add dmd patch.
[native-inputs]: Make gdb/pinned linux-only, add patch to phobos.
[#:make-flags]: Set DISABLED_TESTS.
[#:phases]: In 'patch-tests disable more tests.
Change-Id: Id5e2fee30bb48a27785682d1b6a30666f33e37c5

Change-Id: I16ad0cba2666fe475cd4028287316e9f8cbad2fe

.guix-authorizations

@@ -16,6 +16,8 @@
   ( ;; primary: "D0C2 EAC1 3310 822D 98DE  B57C E9C5 A2D9 0898 A02F"
    "01FD 85F4 1A7B 7F82 0583  06A5 935E BE07 36DC 857E"
    (name "avp"))
+  ("5D54 CF25 57B2 38E8 8DC1  80A2 2D22 3241 0AB7 4043"
+   (name "baleine"))
   ( ;; primary: "34FF 38BC D151 25A6 E340  A0B5 3453 2F9F AFCA 8B8E"
    "A3A4 B419 0074 087C A7DE  5698 BC45 CA67 E2F8 D007"
    (name "bavier"))

CODEOWNERS

@@ -264,6 +264,7 @@ gnu/installer(\.scm$|/)                            @guix/installer
 gnu/packages/clojure\.scm                          @guix/java
 gnu/packages/java(-.+|)\.scm$                      @guix/java
 gnu/packages/maven(-.+|)\.scm$                     @guix/java
+gnu/packages/netbeans\.scm                         @guix/java
 guix/build/ant-build-system\.scm                   @guix/java
 guix/build/clojure-build-system\.scm               @guix/java
 guix/build/clojure-utils\.scm                      @guix/java
@@ -274,6 +275,7 @@ guix/build-system/ant\.scm                         @guix/java
 guix/build-system/clojure\.scm                     @guix/java
 guix/build-system/maven\.scm                       @guix/java
 
+gnu/packages/javascript\.scm                       @guix/javascript
 gnu/packages/node-xyz\.scm                         @guix/javascript
 gnu/packages/node\.scm                             @guix/javascript
 guix/build-system/node\.scm                        @guix/javascript

Makefile.am

@@ -457,6 +457,8 @@ AUX_FILES =						\
   gnu/packages/aux-files/findclass.php			\
   gnu/packages/aux-files/guix.vim			\
   gnu/packages/aux-files/guix-nvim.vim			\
+  gnu/packages/aux-files/linux-libre/7.0-arm64.conf	\
+  gnu/packages/aux-files/linux-libre/7.0-x86_64.conf	\
   gnu/packages/aux-files/linux-libre/6.19-arm64.conf	\
   gnu/packages/aux-files/linux-libre/6.19-i686.conf	\
   gnu/packages/aux-files/linux-libre/6.19-x86_64.conf	\

doc/build.scm

@@ -1,5 +1,5 @@
 ;;; GNU Guix --- Functional package management for GNU
-;;; Copyright © 2019-2025 Ludovic Courtès <ludo@gnu.org>
+;;; Copyright © 2019-2026 Ludovic Courtès <ludo@gnu.org>
 ;;; Copyright © 2020 Björn Höfling <bjoern.hoefling@bjoernhoefling.de>
 ;;; Copyright © 2022 Maxim Cournoyer <maxim@guixotic.coop>
 ;;; Copyright © 2025 Florian Pelz <pelzflorian@pelzflorian.de>
@@ -324,17 +324,31 @@ actual file name."
                     ((('span ('@ ('class "category")) ;raw Texinfo 6.8
                              (? string-or-entity?) ...) rest ...)
                      #t)
-                    ((('span ('@ ('class "symbol-definition-category"))
+                    ((('span                      ;Texinfo 6, post-processed
-                             (? string-or-entity?) ...) rest ...)
+                       ('@ ('class "symbol-definition-category"))
+                       (? string-or-entity?) ...) rest ...)
+                     #t)
+                    ((('span                      ;Texinfo 7
+                       ('@ ('class "category-def")) _ ...)
+                      ('span ('strong ('@ ('class "def-name")) _ ...)
+                             _ ...)
+                      rest ...)
                      #t)
                     (x
                      #f))))
 
+              (define (definition-class? class)
+                ;; Return true for "deffn def-line", "deftp def-line", etc.
+                (string-suffix? " def-line" class))
+
               (let ((shtml (call-with-input-file file html->shtml)))
                 (let loop ((shtml shtml)
                            (anchors anchors))
                   (match shtml
-                    (('dt ('@ ('id id) _ ...) rest ...)
+                    ((or ('dt ('@ ('id id) _ ...) rest ...)      ;Texinfo 6
+                         ('dt ('@ ('class (? definition-class?)) ;Texinfo 7
+                                  ('id id))
+                              rest ...))
                      (if (and (string-prefix? "index-" id)
                               (worthy-entry? rest))
                          (alist-cons (anchor-id->key id)
@@ -505,10 +519,16 @@ its <pre class=\"lisp\"> blocks (as produced by 'makeinfo --html')."
                    (loop rest (cons str strings)))
                   ((('*ENTITY* "additional" entity) . rest)
                    (loop rest (cons (entity->string entity) strings)))
+                  ((('*ENTITY* "additional-char" entity) . rest)
+                   (loop rest (cons (string
+                                     (integer->char (string->number entity)))
+                                    strings)))
                   ((('span _ lst ...) . rest)     ;for <span class="roman">
                    (loop (append lst rest) strings))
-                  ((('var name) . rest)           ;for @var{name} within @lisp
+                  ((('var ('@ _) name) . rest)    ;for @var{name} within @lisp
                    (loop rest (cons name strings))) ;XXX: losing formatting
+                  ((('var name) . rest)           ;likewise (Texinfo 6)
+                   (loop rest (cons name strings)))
                   (something
                    (pk 'unsupported-code-snippet something)
                    (primitive-exit 1)))))
@@ -537,7 +557,10 @@ its <pre class=\"lisp\"> blocks (as produced by 'makeinfo --html')."
                           (link (@ (rel "stylesheet")
                                    (type "text/css")
                                    (href #$syntax-css-url)))))
-                  (('pre ('@ ('class "lisp")) code-snippet ...)
+                  ((or ('pre ('@ ('class "lisp")) ;Texinfo 6
+                             code-snippet ...)
+                       ('pre ('@ ('class "lisp-preformatted"))
+                             code-snippet ...))
                    `(pre (@ (class "lisp"))
                          ,@(highlights->sxml*
                             (pair-open/close
@@ -545,14 +568,16 @@ its <pre class=\"lisp\"> blocks (as produced by 'makeinfo --html')."
                                         (concatenate-snippets code-snippet)))
                             anchors)))
 
-                  ;; Replace the ugly <strong> used for @deffn etc., which
+                  ;; For Texinfo 6: Replace the ugly <strong> used for @deffn
-                  ;; translate to <dt>, with more stylable markup.
+                  ;; etc., which translate to <dt>, with more stylable
+                  ;; markup.  No such post-processing is needed for @deffn
+                  ;; with Texinfo 7.
                   (('dt ('@ ('id id))             ;raw Texinfo 6.8
                         ('span ('@ ('class "category")) category ...)
                         ('span ('strong thing)
                                anchor))
                    (highlight-definition id category thing '()))
-                  (('dt (@ ('id id))
+                  (('dt ('@ ('id id))             ;ditto
                         ('span ('@ ('class "category")) category ...)
                         ('span ('strong thing)
                                (? space?) ('em args ...)
@@ -808,16 +833,9 @@ in SOURCE."
                 (match sxml
                   (('*TOP* decl body ...)
                    `(*TOP* ,decl ,@(map loop body)))
-                  (('head elements ...)
+                  ((or ('body ('@ _) elements ...)
-                   ;; Add reference to our own manual CSS, which provides
+                       ('body elements ...))
-                   ;; support for the language menu.
+                   `(body ,(navigation-bar
-                   `(head ,@elements
-                          (link (@ (rel "stylesheet")
-                                   (type "text/css")
-                                   (href #$manual-css-url)))))
-                  (('body ('@ attributes ...) elements ...)
-                   `(body (@ ,@attributes)
-                          ,(navigation-bar
                             ;; TODO: Add "Contribute" menu, to report
                             ;; errors, etc.
                             (list (menu-dropdown
@@ -952,12 +970,12 @@ makeinfo OPTIONS."
                         (mkdir-p (string-append #$output "/"
                                                 (normalize language)))
                         (setenv "LANGUAGE" language)
-                        (apply invoke #$(file-append texinfo "/bin/makeinfo")
+                        (apply invoke #$(file-append texinfo-7 "/bin/makeinfo")
                                "-o" (string-append #$output "/"
                                                    (normalize language)
                                                    "/html_node")
                                opts)
-                        (apply invoke #$(file-append texinfo "/bin/makeinfo")
+                        (apply invoke #$(file-append texinfo-7 "/bin/makeinfo")
                                "--no-split"
                                "-o"
                                (string-append #$output "/"
@@ -1409,7 +1427,7 @@ commit date (an integer)."
                                  (string-append #+tar "/bin:"
                                                 #+xz "/bin:"
                                                 #+zstd "/bin:"
-                                                #+texinfo "/bin"))
+                                                #+texinfo-7 "/bin"))
                          (invoke "tar" "xf" #$(package-source guile))
                          (mkdir-p (string-append #$output "/en/html_node"))
 
@@ -1428,7 +1446,7 @@ commit date (an integer)."
                               (string-append #$output "/en/html_node")))))))))
 
 (define %guile-manual-base-url
-  "https://www.gnu.org/software/guile/manual")
+  "https://doc.guix.gnu.org/guile/latest/en")
 
 (define (for-all-languages index)
   (map (lambda (language)

doc/guix-cookbook.texi

@@ -3256,8 +3256,8 @@ your Linode Summary section.) Now you can run the "install guix from
 
 @example
 sudo apt-get install gpg
-wget https://sv.gnu.org/people/viewgpg.php?user_id=15145 -qO - | gpg --import -
+wget https://codeberg.org/efraim.gpg -qO - | gpg --import -
-wget https://git.savannah.gnu.org/cgit/guix.git/plain/etc/guix-install.sh
+wget https://guix.gnu.org/guix-install.sh
 chmod +x guix-install.sh
 ./guix-install.sh
 guix pull
@@ -3436,7 +3436,7 @@ Now you can run the "install guix from @pxref{Binary Installation,,,
 guix, GNU Guix}" steps:
 
 @example
-wget https://git.savannah.gnu.org/cgit/guix.git/plain/etc/guix-install.sh
+wget https://guix.gnu.org/guix-install.sh
 chmod +x guix-install.sh
 ./guix-install.sh
 guix pull
@@ -4491,7 +4491,7 @@ network.  Assuming your interface is named @samp{enp2s0}, the following
 command can be used to do so:
 
 @example sh
-# nmcli con add type bridge-slave ifname enp2s0 master br0
+# nmcli con add type bridge-slave autoconnect yes ifname enp2s0 master br0
 @end example
 
 @quotation Important
@@ -4527,8 +4527,8 @@ bridge interface, as the default is to deny all.  Add the following to
 your list of services to do so:
 
 @example lisp
-(extra-special-file "/etc/qemu/host.conf"
+(extra-special-file "/etc/qemu/bridge.conf"
-                    (plain-file "host.conf" "allow br0\n"))
+                    (plain-file "bridge.conf" "allow br0\n"))
 @end example
 
 @subsection Invoking QEMU with the right command line options
@@ -4546,7 +4546,7 @@ machine making use of the bridge would cause networking issues.
 @example sh
 $ qemu-system-x86_64 [...] \
     -device virtio-net-pci,netdev=user0,mac=XX:XX:XX:XX:XX:XX \
-    -netdev bridge,id=user0,br=br0 \
+    -netdev bridge,helper=/run/privileged/bin/qemu-bridge-helper,id=user0,br=br0 \
     [...]
 @end example
 

doc/guix.texi

@@ -10,8 +10,8 @@
 @include version.texi
 
 @c Identifier of the OpenPGP key used to sign tarballs and such.
-@set OPENPGP-SIGNING-KEY-ID 3CE464558A84FDC69DB40CFB090B11993D9AEBB5
+@set OPENPGP-SIGNING-KEY-ID A28BF40C3E551372662D14F741AAE7DCCA3D8351
-@set OPENPGP-SIGNING-KEY-URL https://sv.gnu.org/people/viewgpg.php?user_id=15145
+@set OPENPGP-SIGNING-KEY-URL https://codeberg.org/efraim.gpg
 
 @c Base URL for downloads.
 @set BASE-URL https://ftpmirror.gnu.org/gnu/guix
@@ -2658,12 +2658,13 @@ bootloaders.
 
 Once you are done partitioning the target hard disk drive, you have to
 create a file system on the relevant partition(s)@footnote{Currently
-Guix System supports only ext4, btrfs, bcachefs, JFS, F2FS, and XFS
+Guix System can mount only ext4, btrfs, JFS, F2FS, and XFS file systems
-file systems.  In particular, code that reads file system UUIDs and
+at boot time.  In particular, code that reads file system UUIDs and
-labels works only for these file system types.  For bcachefs, also add
+labels works only for these file system types.  The code for bcachefs is
-the @code{bcachefs-linux-module} to your @code{operating-system}'s
+in place, but support for loading out-of-tree kernel modules in the
-@code{initrd-modules}.}.  For the ESP, if you have one and assuming it is
+initrd is not.}.
-@file{/dev/sda1}, run:
+
+For the ESP, if you have one and assuming it is @file{/dev/sda1}, run:
 
 @example
 mkfs.fat -F32 /dev/sda1
@@ -4779,14 +4780,91 @@ These options are provided for convenience, but you can also specify your
 configuration in the @file{~/.config/guix/channels.scm} file or using the
 @option{--channels} option (see below).
 
-@item --channels=@var{file}
+@item --channels=@var{file-or-uri}
-@itemx -C @var{file}
+@itemx -C @var{file-or-uri}
-Read the list of channels from @var{file} instead of
+Read the list of channels from @var{file-or-uri} instead of
 @file{~/.config/guix/channels.scm} or @file{/etc/guix/channels.scm}.
-@var{file} must contain Scheme code that
+@var{file-or-uri} must contain Scheme code that
 evaluates to a list of channel objects.  @xref{Channels}, for more
 information.
 
+As you can guess, @var{file-or-uri} can be a URL, in which case the
+given channels file is transparently downloaded.  In the example below,
+we pull from the latest revision of Guix that was successfully
+evaluated:
+
+@example
+guix pull \
+  -C https://ci.guix.gnu.org/eval/latest/channels.scm?spec=master
+@end example
+
+@cindex SWHID, for channel files
+Alternatively, you can refer to a channel file by its
+@uref{https://swhid.org,Software Hash Identifier}, or SWHID, which
+uniquely and unambiguously identifies contents, as in this example:
+
+@example
+guix pull \
+  -C swh:1:cnt:ae02d8ba3538a385ee799e61cdd0dfc5e14a8d1b
+@end example
+
+This command downloads the data designated by the given identifier from
+@uref{https://archive.softwareheritage.org, the Software Heritage
+archive}.
+
+@anchor{trusted-channels}
+@cindex trusted channels, for downloaded channel files
+In both cases, the command errors out if the returned channels are not
+among the user's @dfn{trusted channels}, defined as:
+
+@itemize
+@item
+the channels returned by @file{~/.config/guix/trusted-channels.scm},
+which has the same format as any channel file;
+
+@item
+or, if the above file doesn't exist, the currently-used channels as
+returned by @command{guix describe}.
+@end itemize
+
+@item --allow-untrusted-channels[=yes|no]
+Whether to allow pulls from untrusted channels.
+
+By default, @command{guix pull} aborts when downloading a channel file
+that specifies an untrusted channel and merely warns if the list of
+channels comes from a local file.  This option allows you to change
+that.
+
+@quotation Warning
+Allowing untrusted channels can effectively lead to arbitrary code
+execution on your system.
+@end quotation
+
+@anchor{unsafe-channel-evaluation}
+@item --unsafe-channel-evaluation
+Allow arbitrary code execution from channel files, both the default
+@file{channels.scm} files and those passed with @option{--channels} as
+mentioned above.
+
+@cindex sandboxing, of channel evaluation
+By default, channel files are evaluated in an isolated ``sandbox''
+where only trivial declarative code returning a list of channels is
+allowed---calls to procedures such as @code{list}, @code{cons},
+@code{string-append}, as well as the @code{channel} constructor.
+Attempts from a channel file to access unauthorized bindings such as
+@code{system} (to run shell code) or to use additional modules with
+@code{use-modules} are impossible.
+
+The @option{--unsafe-channel-evaluation} option disables these
+safeguards.
+
+@quotation Warning
+When using @code{--unsafe-channel-evaluation}, channel files can
+@emph{run arbitrary code on your machine}.  While this is useful in some
+cases, only use @code{--unsafe-channel-evaluation} when you fully
+understand the code of the channel files you use!
+@end quotation
+
 @item --no-channel-files
 @itemx -q
 Inhibit loading of the user and system channel files,
@@ -4921,6 +4999,17 @@ information.
 In addition, @command{guix pull} supports all the common build options
 (@pxref{Common Build Options}).
 
+Every time the user invokes a Guix command, Guix detects if the current
+installation has exceeded a certain duration (7 days by default) and
+alerts the user to update with @command{guix pull} if necessary.
+The duration can be configured with the following environment variable:
+
+@defvr {Environment Variable} GUIX_DISTRO_AGE_WARNING
+This environment variable, if set, should be a string representing a
+duration. If the current Guix installation exceeds the duration, Guix
+will raise a warning for outdated installation.
+@end defvr
+
 @node Invoking guix time-machine
 @section Invoking @command{guix time-machine}
 
@@ -5017,12 +5106,68 @@ Use the @code{guix} channel from the specified @var{url}, at the
 given @var{commit} (a valid Git commit ID represented as a hexadecimal
 string or the name of a tag), or @var{branch}.
 
-@item --channels=@var{file}
+@item --channels=@var{file-or-uri}
-@itemx -C @var{file}
+@itemx -C @var{file-or-uri}
-Read the list of channels from @var{file}.  @var{file} must contain
+Read the list of channels from @var{file-or-uri}.  @var{file-or-uri}
-Scheme code that evaluates to a list of channel objects.
+must contain Scheme code that evaluates to a list of channel objects.
 @xref{Channels} for more information.
 
+When @var{file-or-uri} is a URL, channels are transparently downloaded.
+In the example below, we pull from the latest revision of Guix that was
+successfully evaluated:
+
+@example
+guix time-machine \
+  -C https://ci.guix.gnu.org/eval/latest/channels.scm?spec=master \
+  -- describe
+@end example
+
+@cindex SWHID, for channel files
+Note that downloading a channel file potentially harms reproducibility:
+the file might vanish or be modified on the server behind your back.
+From a reproducibility viewpoint the safe approach is to keep channel
+files under version control, or to refer to them by their
+@uref{https://swhid.org,Software Hash Identifier}, or SWHID, which
+uniquely and unambiguously identifies contents.  Here is an example:
+
+@example
+guix time-machine \
+  -C swh:1:cnt:ae02d8ba3538a385ee799e61cdd0dfc5e14a8d1b \
+  -- @dots{}
+@end example
+
+This command downloads the data designated by the identifier from
+@uref{https://archive.softwareheritage.org, the Software Heritage
+archive}; it is fully reproducible because the data it refers to is
+immutable.
+
+@xref{Invoking guix pull}, for more information, and @pxref{Invoking
+guix hash}, for info on how to compute the SWHID of a file.
+
+@item --allow-untrusted-channels[=yes|no]
+Whether to allow pulls from untrusted channels.
+
+@quotation Warning
+Allowing untrusted channels can effectively lead to arbitrary code
+execution on your system.
+@end quotation
+
+@xref{trusted-channels, @command{guix pull} documentation}, for more
+info.
+
+@item --unsafe-channel-evaluation
+Allow arbitrary code execution from channels files.
+
+@quotation Warning
+When using @code{--unsafe-channel-evaluation}, channel files can
+@emph{run arbitrary code on your machine}.  Only use
+@code{--unsafe-channel-evaluation} when you fully understand the code of
+the channel files you use!
+
+@xref{unsafe-channel-evaluation, @option{--unsafe-channel-evaluation} in
+@command{guix pull}}, for background information.
+@end quotation
+
 @item --no-channel-files
 @itemx -q
 Inhibit loading of the user and system channel files,
@@ -5751,6 +5896,7 @@ pull} uses the latest commit with available substitutes for the package
 definitions: this is done by querying the continuous integration
 server at @url{https://ci.guix.gnu.org}.
 
+@findex channel-with-substitutes-available
 @lisp
 (use-modules (guix ci))
 
@@ -5765,6 +5911,21 @@ substitutes.  It only ensures that @command{guix pull} will not try to
 compile package definitions.  This is particularly useful when using
 machines with limited resources.
 
+@quotation Warning
+Use of this functionality in your channel file requires it to be
+evaluated in ``unsafe'' mode, with the
+@option{--unsafe-channel-evaluation} option.
+@xref{unsafe-channel-evaluation, the @command{guix pull} documentation},
+for more info.
+
+However, a similar result can be achieved by running, say:
+
+@example
+guix pull \
+  -C https://ci.guix.gnu.org/eval/latest/channels.scm?spec=master
+@end example
+@end quotation
+
 @node Creating a Channel
 @section Creating a Channel
 
@@ -6590,6 +6751,21 @@ directory within the container.  If this is undesirable,
 be automatically shared and will change to the user's home directory
 within the container instead.  See also @option{--user}.
 
+@item --cwd=@var{directory}
+For containers, change to @var{directory} inside the container instead
+of the default location.  The default location is the current working
+directory when @option{--no-cwd} is not used, or the user's home
+directory when @option{--no-cwd} is used.  When @var{directory} is a
+relative file name, it is interpreted relative to the current working
+directory on the host.  Note that @option{--cwd} does not automatically
+share @var{directory}---you must ensure it is accessible via the default
+current directory sharing or explicit @option{--share}/@option{--expose}
+options.  For example:
+
+@example
+guix shell --container --cwd=/tmp --share=/tmp coreutils
+@end example
+
 @item --writable-root
 When using @option{--container}, this option makes the root file system
 writable (it is read-only by default).
@@ -7091,6 +7267,17 @@ directory within the container.  If this is undesirable,
 be automatically shared and will change to the user's home directory
 within the container instead.  See also @option{--user}.
 
+@item --cwd=@var{directory}
+For containers, change to @var{directory} inside the container instead
+of the default location.  The default location is the current working
+directory when @option{--no-cwd} is not used, or the user's home
+directory when @option{--no-cwd} is used.  When @var{directory} is a
+relative file name, it is interpreted relative to the current working
+directory on the host.  Note that @option{--cwd} does not automatically
+share @var{directory}---you must ensure it is accessible via the default
+current directory sharing or explicit @option{--share}/@option{--expose}
+options.
+
 @item --expose=@var{source}[=@var{target}]
 @itemx --share=@var{source}[=@var{target}]
 For containers, @option{--expose} (resp. @option{--share}) exposes the
@@ -14648,8 +14835,32 @@ guix hash @var{option} @var{file} ...
 @end example
 
 When @var{file} is @code{-} (a hyphen), @command{guix hash} computes the
-hash of data read from standard input.  @command{guix hash} has the
+hash of data read from standard input.
-following options:
+
+Here are a few examples:
+
+@table @asis
+@item SHA256 of a file for use in an @code{origin} record:
+@example
+guix hash example.tar.gz
+@end example
+
+@item SHA256 of directory @var{checkout} for use in an @code{origin} record:
+@example
+guix hash -rx @var{checkout}
+@end example
+
+@item SHA1 hash of @var{file} like the @code{sha1sum} command:
+@example
+guix hash -H sha1 -f hex @var{file}
+@end example
+
+@cindex SWHID, computing
+@item SHA1 hash of @var{file} for a @code{swh:1:cnt} @uref{https://swhid.org, SWHID}:
+guix hash -S git -H sha1 -f hex @var{file}
+@end table
+
+@command{guix hash} has the following options:
 
 @table @code
 
@@ -14857,7 +15068,7 @@ provided through NuGet's v3 API at @code{api.nuget.org} and includes
 most relevant information, including package dependencies.
 There are some caveats, however.  The metadata does not always include
 repository information, in which case the importer attempts to extract
-it from the symbol package (@file{.snupkg}) if available. 
+it from the symbol package (@file{.snupkg}) if available.
 Additionally, dependencies are grouped by target framework in NuGet,
 but the importer flattens all dependency groups into a single list.
 
@@ -15956,51 +16167,10 @@ Use @var{host} as the OpenPGP key server when importing a public key.
 @cindex format conventions
 The @command{guix style} command helps users and packagers alike style
 their package definitions and configuration files according to the
-latest fashionable trends.  It can either reformat whole files, with the
+latest fashionable trends, or patch them with specific rewrites.  It can
-@option{--whole-file} option, or apply specific @dfn{styling rules} to
+either reformat whole files, with the @option{--whole-file} option, or
-individual package definitions.  The command currently provides the
+apply specific @dfn{styling rules} to individual package definitions.
-following styling rules:
+The command provides multiple styling rules, explained below.
-
-@itemize
-@item
-formatting package definitions according to the project's conventions
-(@pxref{Formatting Code});
-
-@item
-rewriting package inputs to the ``new style'', as explained below.
-@end itemize
-
-The way package inputs are written is going through a transition
-(@pxref{package Reference}, for more on package inputs).  Until version
-1.3.0, package inputs were written using the ``old style'', where each
-input was given an explicit label, most of the time the package name:
-
-@lisp
-(package
-  ;; @dots{}
-  ;; The "old style" (deprecated).
-  (inputs `(("libunistring" ,libunistring)
-            ("libffi" ,libffi))))
-@end lisp
-
-Today, the old style is deprecated and the preferred style looks like
-this:
-
-@lisp
-(package
-  ;; @dots{}
-  ;; The "new style".
-  (inputs (list libunistring libffi)))
-@end lisp
-
-Likewise, uses of @code{alist-delete} and friends to manipulate inputs
-is now deprecated in favor of @code{modify-inputs} (@pxref{Defining
-Package Variants}, for more info on @code{modify-inputs}).
-
-In the vast majority of cases, this is a purely mechanical change on the
-surface syntax that does not even incur a package rebuild.  Running
-@command{guix style -S inputs} can do that for you, whether you're working on
-packages in Guix proper or in an external channel.
 
 The general syntax is:
 
@@ -16063,14 +16233,45 @@ definition of the Coreutils package like so:
 @end example
 
 @item inputs
-Rewrite package inputs to the ``new style'', as described above.  This
+Rewrite package inputs to the ``new style''. This is how you would
-is how you would rewrite inputs of package @code{whatnot} in your own
+rewrite inputs of package @code{whatnot} in your own channel:
-channel:
 
 @example
 guix style -L ~/my/channel -S inputs whatnot
 @end example
 
+The way package inputs are written is going through a transition
+(@pxref{package Reference}, for more on package inputs).  Until version
+1.3.0, package inputs were written using the ``old style'', where each
+input was given an explicit label, most of the time the package name:
+
+@lisp
+(package
+  ;; @dots{}
+  ;; The "old style" (deprecated).
+  (inputs `(("libunistring" ,libunistring)
+            ("libffi" ,libffi))))
+@end lisp
+
+Today, the old style is deprecated and the preferred style looks like
+this:
+
+@lisp
+(package
+  ;; @dots{}
+  ;; The "new style".
+  (inputs (list libunistring libffi)))
+@end lisp
+
+Likewise, uses of @code{alist-delete} and friends to manipulate inputs
+is now deprecated in favor of @code{modify-inputs} (@pxref{Defining
+Package Variants}, for more info on @code{modify-inputs}).
+
+In the vast majority of cases, this is a purely mechanical change on the
+surface syntax that does not even incur a package rebuild.  Running
+@command{guix style -S inputs} can do that for you, whether you're working on
+packages in Guix proper or in an external channel.
+
 Rewriting is done in a conservative way: preserving comments and bailing
 out if it cannot make sense of the code that appears in an inputs field.
 The @option{--input-simplification} option described below provides
@@ -16109,6 +16310,29 @@ rebuild of the affected packages.  Furthermore, if a package definition
 happens to be using G-expressions already, @command{guix style} leaves
 it unchanged.
 
+@item remove-input
+@itemx remove-native-input
+@itemx remove-propagated-input
+These styling rules remove an input from the given package(s).
+
+Removing these packages respects the package syntax, doesn't affect
+margin comments or parentheses, and will put all remaining inputs on a
+single line if there are less than three.
+
+This is a focused styling rule for use in teams, when updating
+build-systems, or removing unwanted development inputs from
+native-inputs.
+
+To remove package @var{whatnot} from all inputs, use the
+@code{--parameter} option:
+
+@example
+guix style -S remove-input --parameter=@var{whatnot}
+@end example
+
+It is also possible to do that for a collection of packages by appending
+them to the above invocation.
+
 @item git-source
 If the @code{home-page} is a Git repository (as per
 @code{git-repository-url?}), and the actual Git repository is tagged
@@ -19215,7 +19439,7 @@ Partitioning}, for an example.
 
 When using GRUB as the bootloader, the LUKS password is only requested
 once: GRUB passes the master key to the initial RAM disk automatically.
-@xref{Bootloader Configuration, Automatic LUKS Master Key Passing}, for
+@xref{grub-luks-root-device-key, Automatic LUKS Master Key Passing}, for
 details.
 
 @end defvar
@@ -20678,6 +20902,9 @@ The syslog configuration file to use.
 @xref{syslogd invocation,,, inetutils, GNU Inetutils}, for more
 information on the configuration file syntax.
 
+@item @code{pid-file} (default: @code{"/var/run/syslog.pid"})
+The pid file for @command{syslogd}.
+
 @item @code{extra-options} (default: @code{'()})
 List of extra command-line options for @command{syslog}.
 
@@ -45250,6 +45477,12 @@ Extra command line options for @code{guix-data-service}.
 @item @code{extra-process-jobs-options} (default: @var{'()})
 Extra command line options for @code{guix-data-service-process-jobs}.
 
+@item @code{extra-environment-variables} (default: @var{'()})
+Extra environment variables for @code{guix-data-service}.
+
+@item @code{extra-process-jobs-environment-variables} (default: @var{'()})
+Extra environment variables for @code{guix-data-service-process-jobs}.
+
 @item @code{git-repositories} (default: @var{#f})
 List of git-repository information to insert into the database.
 
@@ -46179,6 +46412,26 @@ up not being used much for the reasons described there.
 @end deftp
 @end defvar
 
+@cindex fwupd
+@cindex firmware update
+@subsubheading fwupd Service
+
+@defvar fwupd-service-type
+This service allows users of supported hardware to update their firmware.  The
+service's value is a @code{fwupd-configuration} record.
+
+@deftp {Data Type} fwupd-configuration
+This is the data type representing the configuration for the fwupd
+service.
+
+@table @asis
+@item @code{fwupd} (default @code{fwupd})
+The fwupd package that will be installed in the system profile.
+@end table
+
+@end deftp
+@end defvar
+
 @node Hurd Services
 @subsection Hurd Services
 
@@ -48959,8 +49212,28 @@ This option in enabled by default.  In some cases involving the
 in RAM, it can be handy to disable the option by setting it to
 @code{#f}.
 
-@subsubheading Automatic LUKS Master Key Passing
+@item @code{extra-initrd} (default: @code{#f})
+File name of an additional initrd to load during the boot.  It may or
+may not point to a file in the store, but the main use case is for
+out-of-store files containing secrets.
 
+For any use case not involving secrets, you should use regular initrd
+(@pxref{operating-system Reference, @code{initrd}}) instead.
+
+Be careful when using this option, since pointing to a file that is not
+readable by the grub while booting will cause the boot to fail and
+require a manual edit of the initrd line in the grub menu.
+
+Currently only supported by GRUB.
+@end table
+
+@end deftp
+
+@anchor{grub-luks-root-device-key}
+@unnumberedsubsec Automatic LUKS Master Key Passing
+
+@cindex LUKS, root file system encryption
+@cindex passphrase, for LUKS-encrypted root
 When booting from a LUKS-encrypted device using GRUB, the password is
 normally requested twice: once by GRUB to access @file{/boot}, and a
 second time by the initial RAM disk to mount the root file system.
@@ -49001,22 +49274,7 @@ No configuration is required: GRUB's @code{procfs} and @code{luks}
 modules are loaded automatically when encrypted devices are declared
 via @code{luks-device-mapping} (@pxref{Mapped Devices}).
 
-@item @code{extra-initrd} (default: @code{#f})
+@unnumberedsubsec Additional Boot Entries
-File name of an additional initrd to load during the boot.  It may or
-may not point to a file in the store, but the main use case is for
-out-of-store files containing secrets.
-
-For any use case not involving secrets, you should use regular initrd
-(@pxref{operating-system Reference, @code{initrd}}) instead.
-
-Be careful when using this option, since pointing to a file that is not
-readable by the grub while booting will cause the boot to fail and
-require a manual edit of the initrd line in the grub menu.
-
-Currently only supported by GRUB.
-@end table
-
-@end deftp
 
 @cindex dual boot
 @cindex boot menu
@@ -49145,9 +49403,13 @@ example of chainloading a different GNU/Linux system.
 @end table
 @end deftp
 
+@unnumberedsubsec Themes
+
 @cindex HDPI
 @cindex HiDPI
 @cindex resolution
+@cindex themes, for GRUB
+@cindex bootloader themes
 @c FIXME: Write documentation once it's stable.
 For now only GRUB has theme support.  GRUB themes are created using
 the @code{grub-theme} form, which is not fully documented yet.
@@ -49167,8 +49429,8 @@ Return the default GRUB theme used by the operating system if no
 @code{theme} field is specified in @code{bootloader-configuration}
 record.
 
-It comes with a fancy background image displaying the GNU and Guix
+It comes with a fancy background image displaying the Guix
-logos.
+logo.
 @end deffn
 
 For example, to override the default resolution, you may use something
@@ -49542,7 +49804,7 @@ how to generate an image that uses the @code{grub-efi-bootloader}
 bootloader and boot it with QEMU:
 
 @example
-image=$(guix system image --image-type=qcow2 \
+image=$(guix system image --image-type=qcow2-gpt \
         gnu/system/examples/lightweight-desktop.tmpl)
 cp $image /tmp/my-image.qcow2
 chmod +w /tmp/my-image.qcow2
@@ -51228,7 +51490,7 @@ after receiving @code{SIGHUP}.
 
 After adding
 @lisp
-(shepherd-signal-action 'reload SIGHUP))
+(shepherd-signal-action 'reload SIGHUP)
 @end lisp
 
 the @code{reload} action will be available and can be used with

doc/local.mk

@@ -30,7 +30,7 @@ COOKBOOK_LANGUAGES = de es fr it ko pt_BR ru sk sv ta zh_CN
 
 # Arg1: A list of languages codes.
 # Arg2: The file name stem.
-lang_to_texinfo = $(foreach lang,$(1),%D%/$(2).$(lang).texi)
+lang_to_texinfo = $(foreach lang,$(1),$(srcdir)/%D%/$(2).$(lang).texi)
 
 # Automake does not understand GNU Make non-standard extensions,
 # unfortunately, so we cannot use the above patsubst-based function here.
@@ -104,7 +104,7 @@ MAINTAINERCLEANFILES  = $(OS_CONFIG_EXAMPLES_TEXI) $(TRANSLATED_INFO)
 # reference is not translated, which means it references a section that does not
 # exist.
 define xref_command
-$(top_srcdir)/pre-inst-env $(GUILE) --no-auto-compile	\
+$(top_builddir)/pre-inst-env $(GUILE) --no-auto-compile	\
   "$(top_srcdir)/build-aux/convert-xref.scm"		\
   $@.tmp $<
 endef
@@ -116,21 +116,21 @@ dummy_pot = $(shell mktemp --suffix=.pot)
 $(srcdir)/%D%/guix.%.texi: po/doc/guix-manual.%.po $(srcdir)/%D%/contributing.%.texi guix/build/po.go
 	-$(AM_V_PO4A)$(PO4A) --no-update			\
 	    --variable localized="$@.tmp"			\
-	    --variable master="%D%/guix.texi"			\
+	    --variable master="$(srcdir)/%D%/guix.texi"		\
 	    --variable po="$<"					\
 	    --variable pot=$(dummy_pot)			\
-	    po/doc/po4a.cfg
+	    $(srcdir)/po/doc/po4a.cfg
 	-sed -i "s|guix\.info|$$(basename "$@" | sed 's|texi$$|info|')|" "$@.tmp"
 	-$(AM_V_POXREF)LC_ALL=en_US.UTF-8 $(xref_command)
 	-mv "$@.tmp" "$@"
 
 $(srcdir)/%D%/guix-cookbook.%.texi: po/doc/guix-cookbook.%.po guix/build/po.go
-	-$(AM_V_PO4A)$(PO4A) --no-update			\
+	-$(AM_V_PO4A)$(PO4A) --no-update				\
-	    --variable localized="$@.tmp"			\
+	    --variable localized="$@.tmp"				\
-	    --variable master="%D%/guix-cookbook.texi"		\
+	    --variable master="$(srcdir)/%D%/guix-cookbook.texi"	\
-	    --variable po="$<"					\
+	    --variable po="$<"						\
 	    --variable pot=$(dummy_pot)			\
-	    po/doc/po4a.cfg
+	    $(srcdir)/po/doc/po4a.cfg
 	-sed -i "s|guix-cookbook\.info|$$(basename "$@" | sed 's|texi$$|info|')|" "$@.tmp"
 	-$(AM_V_POXREF)LC_ALL=en_US.UTF-8 $(xref_command)
 	-mv "$@.tmp" "$@"
@@ -138,10 +138,10 @@ $(srcdir)/%D%/guix-cookbook.%.texi: po/doc/guix-cookbook.%.po guix/build/po.go
 $(srcdir)/%D%/contributing.%.texi: po/doc/guix-manual.%.po guix/build/po.go
 	-$(AM_V_PO4A)$(PO4A) --no-update			\
 	    --variable localized="$@.tmp"			\
-	    --variable master="%D%/contributing.texi"		\
+	    --variable master="$(srcdir)/%D%/contributing.texi"		\
 	    --variable po="$<"					\
 	    --variable pot=$(dummy_pot)			\
-	    po/doc/po4a.cfg
+	    $(srcdir)/po/doc/po4a.cfg
 	-$(AM_V_POXREF)LC_ALL=en_US.UTF-8 $(xref_command)
 	-mv "$@.tmp" "$@"
 

etc/teams.scm

@@ -828,6 +828,7 @@ and the maven-build-system."
               (make-regexp* "^gnu/packages/java(-.+|)\\.scm$")
               ;; Match maven.scm and maven-*.scm
               (make-regexp* "^gnu/packages/maven(-.+|)\\.scm$")
+              "gnu/packages/netbeans.scm"
               "guix/build/ant-build-system.scm"
               "guix/build/clojure-build-system.scm"
               "guix/build/clojure-utils.scm"
@@ -844,7 +845,8 @@ and the maven-build-system."
         #:name "JavaScript team"
         #:description
         "JavaScript/Node.js packages, the node build system."
-        #:scope (list "gnu/packages/node-xyz.scm"
+        #:scope (list "gnu/packages/javascript.scm"
+                      "gnu/packages/node-xyz.scm"
                       "gnu/packages/node.scm"
                       "guix/build-system/node.scm"
                       "guix/build/node-build-system.scm"
@@ -1637,7 +1639,7 @@ the \"texlive\" importer."
 (define-member (person "Thanos Apollo"
                        "public@thanosapollo.org"
                        "thanosapollo")
-  vcs)
+  vcs emacs)
 
 (define-member (person "Ashish SHUKLA"
                        "ashish.is@lostca.se"
@@ -1659,6 +1661,16 @@ the \"texlive\" importer."
                        "tok")
   electronics)
 
+(define-member (person "gemmaro"
+                       "gemmaro.dev@gmail.com"
+                       "gemmaro")
+  ruby)
+
+(define-member (person "bdunahu"
+                       "bdunahu@operationnull.com"
+                       "bdunahu")
+  games)
+
 
 (define (find-team name)
   (or (hash-ref %teams (string->symbol name))

gnu/bootloader/grub.scm

@@ -446,9 +446,11 @@ when booting a root file system on a Btrfs subvolume."
                (modules (menu-entry-multiboot-modules entry)))
           #~(format port "
 menuentry ~s {
+  ~a
   multiboot ~a root=~a~a~a
 }~%"
                     #$label
+                    #$(grub-root-search device kernel)
                     #$kernel
                     #$(device-name->hurd-device-name device-name #:disk disk)
                     (string-join (list #$@arguments) " " 'prefix)

gnu/build/file-systems.scm

@@ -1226,10 +1226,12 @@ file name or an nfs-root containing ':/')."
 
   (match spec
     ((? string?)
-     (if (string-prefix? "/dev/" spec)
+     (if (string-match "^/dev/[a-zA-Z0-9]+$" spec)
          ;; Nothing to do, but wait until SPEC shows up.
          (resolve device-exists? spec identity)
-         spec)) ; do not resolve NFS / CIFS / tmpfs devices
+         ;; Do not resolve NFS / CIFS / tmpfs devices
+         ;; or bcachefs multi-device specifications.
+         spec))
     ((? file-system-label?)
      ;; Resolve the label.
      (resolve find-partition-by-label

gnu/build/linux-container.scm

@@ -445,10 +445,14 @@ load path must be adjusted as needed."
           ;; Behave like an init process: create a sub-process that calls
           ;; THUNK, and wait for child processes.  Furthermore, forward
           ;; RELAYED-SIGNALS to the child process.
-          (match (primitive-fork)
+          ;; We presently use `safe-clone` here due to a bug in the interaction
-            (0
+          ;; between Guix and `primitive-fork` in Guile 3.0.11:
+          ;; https://codeberg.org/guix/guix/issues/7690#issuecomment-12744123
+          (safe-clone
+            SIGCHLD
+            (lambda ()
              (call-with-clean-exit thunk))
-            (pid
+            (lambda (pid)
              (install-signal-handlers pid)
              (let loop ()
                (match (wait-child-process)

gnu/local.mk

@@ -57,7 +57,7 @@
 # Copyright © 2022 ( <paren@disroot.org>
 # Copyright © 2022, 2026 jgart <jgart@dismail.de>
 # Copyright © 2022-2023, 2025-2026 Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
-# Copyright © 2023-2025 Zheng Junjie <z572@z572.online>
+# Copyright © 2023-2026 Zheng Junjie <z572@z572.online>
 # Copyright © 2023 Ivana Drazovic <iv.dra@hotmail.com>
 # Copyright © 2023 Andy Tai <atai@atai.org>
 # Copyright © 2023 B. Wilson <elaexuotee@wilsonb.com>
@@ -502,6 +502,7 @@ GNU_SYSTEM_MODULES =				\
   %D%/packages/myrddin.scm			\
   %D%/packages/ncdu.scm				\
   %D%/packages/ncurses.scm			\
+  %D%/packages/netbeans.scm			\
   %D%/packages/netpbm.scm			\
   %D%/packages/nettle.scm			\
   %D%/packages/networking.scm			\
@@ -755,6 +756,7 @@ GNU_SYSTEM_MODULES =				\
   %D%/services/docker.scm			\
   %D%/services/authentication.scm		\
   %D%/services/file-sharing.scm			\
+  %D%/services/firmware.scm			\
   %D%/services/games.scm			\
   %D%/services/ganeti.scm			\
   %D%/services/getmail.scm				\
@@ -1093,6 +1095,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/catdoc-CVE-2017-11110.patch		\
   %D%/packages/patches/chez-irregex-import-cond-expand.patch	\
   %D%/packages/patches/chez-scheme-bin-sh.patch			\
+  %D%/packages/patches/cianna-remove-error-for-missing-cuda.patch		\
   %D%/packages/patches/circos-remove-findbin.patch		\
   %D%/packages/patches/cdparanoia-fpic.patch			\
   %D%/packages/patches/cdrkit-libre-cross-compile.patch	\
@@ -1166,7 +1169,6 @@ dist_patch_DATA =						\
   %D%/packages/patches/cryfs-boost-1.89-fix.patch		\
   %D%/packages/patches/csvkit-set-locale-for-tests.patch			\
   %D%/packages/patches/ctranslate2-local-build.patch		\
-  %D%/packages/patches/ctune-cmake-disable-git-clone.patch		\
   %D%/packages/patches/cube-nocheck.patch			\
   %D%/packages/patches/cups-relax-root-ownership-check.patch		\
   %D%/packages/patches/cura-engine-gcc-14.patch			\
@@ -1177,7 +1179,6 @@ dist_patch_DATA =						\
   %D%/packages/patches/curlftpfs-fix-memory-leak.patch		\
   %D%/packages/patches/curlftpfs-fix-no_verify_hostname.patch	\
   %D%/packages/patches/cursynth-wave-rand.patch			\
-  %D%/packages/patches/cvc5-reproducible-build.patch		\
   %D%/packages/patches/cvs-CVE-2017-12836.patch		\
   %D%/packages/patches/cyrus-sasl-fix-time-h.patch              \
   %D%/packages/patches/d-feet-drop-unused-meson-argument.patch	\
@@ -1198,6 +1199,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/directfb-davinci-glibc-228-compat.patch	\
   %D%/packages/patches/django-compressor-build-with-beautifulsoup-4.14+.patch	\
   %D%/packages/patches/dkimproxy-add-ipv6-support.patch		\
+  %D%/packages/patches/dmd-hurd.patch				\
   %D%/packages/patches/doc++-gcc-14.patch			\
   %D%/packages/patches/docbook-utils-documentation-edits.patch	\
   %D%/packages/patches/docbook-utils-escape-characters.patch	\
@@ -1240,7 +1242,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/python-treelib-remove-python2-compat.patch	\
   %D%/packages/patches/elm-offline-package-registry.patch	\
   %D%/packages/patches/elm-reactor-static-files.patch		\
-  %D%/packages/patches/emacs-buttercup-1.38-native-comp-spy-on-trampoline-scope.patch	\
+  %D%/packages/patches/emacs-agent-shell-fix-tests.patch        \
   %D%/packages/patches/emacs-deferred-fix-number-of-arguments.patch	\
   %D%/packages/patches/emacs-disable-jit-compilation.patch			\
   %D%/packages/patches/emacs-doc-toc-shell-commands.patch	\
@@ -1374,6 +1376,8 @@ dist_patch_DATA =						\
   %D%/packages/patches/ganeti-template-haskell-2.17.patch	\
   %D%/packages/patches/ganeti-template-haskell-2.18.patch	\
   %D%/packages/patches/gawk-shell.patch				\
+  %D%/packages/patches/gdc-11-druntime-hurd.patch		\
+  %D%/packages/patches/gdc-14-druntime-hurd.patch		\
   %D%/packages/patches/gcc-arm-bug-71399.patch			\
   %D%/packages/patches/gcc-arm-link-spec-fix.patch		\
   %D%/packages/patches/gcc-asan-missing-include.patch		\
@@ -1423,6 +1427,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/gcc-11-libstdc++-hurd-libpthread.patch   \
   %D%/packages/patches/gcc-12-cross-environment-variables.patch \
   %D%/packages/patches/gcc-11-libstdc++-powerpc.patch           \
+  %D%/packages/patches/gcc-11-x86_64-gnu.patch			\
   %D%/packages/patches/gcc-13-cross-system-header-dir.patch     \
   %D%/packages/patches/gcc-12-libsanitizer-no-crypt.patch	\
   %D%/packages/patches/gcc-13-libsanitizer-no-crypt.patch	\
@@ -1512,6 +1517,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/glibc-reinstate-prlimit64-fallback.patch	\
   %D%/packages/patches/glibc-supported-locales.patch     	\
   %D%/packages/patches/glibc-versioned-locpath.patch		\
+  %D%/packages/patches/glycin-sandbox-Adapt-bwrap-invocation.patch	\
   %D%/packages/patches/gmime-disable-tests.patch		\
   %D%/packages/patches/gmp-arm-asm-nothumb.patch		\
   %D%/packages/patches/gmp-faulty-test.patch			\
@@ -1664,6 +1670,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/isl-0.11.1-aarch64-support.patch		\
   %D%/packages/patches/ispell-for-linphone-cmake.patch		\
   %D%/packages/patches/jami-avutil-link.patch   		\
+  %D%/packages/patches/jami-libjami-cmake.patch			\
   %D%/packages/patches/jamvm-1.5.1-aarch64-support.patch	\
   %D%/packages/patches/jamvm-1.5.1-armv7-support.patch	\
   %D%/packages/patches/jamvm-2.0.0-aarch64-support.patch	\
@@ -1675,6 +1682,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/java-commons-collections-fix-java8.patch \
   %D%/packages/patches/java-guava-remove-annotation-deps.patch \
   %D%/packages/patches/java-jeromq-fix-tests.patch		\
+  %D%/packages/patches/java-jtidy-remove-xerces-dependency.patch	\
   %D%/packages/patches/java-openjfx-build-jdk_version.patch     \
   %D%/packages/patches/java-powermock-fix-java-files.patch		\
   %D%/packages/patches/java-simple-xml-fix-tests.patch		\
@@ -1683,6 +1691,8 @@ dist_patch_DATA =						\
   %D%/packages/patches/java-xerces-build_dont_unzip.patch	\
   %D%/packages/patches/java-xerces-xjavac_taskdef.patch	\
   %D%/packages/patches/jbr-17-xcursor-no-dynamic.patch	\
+  %D%/packages/patches/jbr-25-wayland-drag-icon.patch	\
+  %D%/packages/patches/jbr-25-wayland-intra-jvm-dnd.patch	\
   %D%/packages/patches/jdk-currency-time-bomb.patch		\
   %D%/packages/patches/jdk-currency-time-bomb2.patch		\
   %D%/packages/patches/jfsutils-add-sysmacros.patch		\
@@ -1713,7 +1723,6 @@ dist_patch_DATA =						\
   %D%/packages/patches/libretro-dolphin-emu-libusb-assert.patch \
   %D%/packages/patches/libretro-dolphin-emu-vulkan-headers.patch        \
   %D%/packages/patches/libretranslate-use-flasgger.patch	\
-  %D%/packages/patches/librewolf-150.0-encoding_rs-rust-fix.patch       \
   %D%/packages/patches/librewolf-add-store-to-rdd-allowlist.patch       \
   %D%/packages/patches/librewolf-compare-paths.patch		\
   %D%/packages/patches/librewolf-neuter-locale-download.patch	\
@@ -1975,6 +1984,12 @@ dist_patch_DATA =						\
   %D%/packages/patches/netcdf-date-time.patch			\
   %D%/packages/patches/netdde-build-fix.patch			\
   %D%/packages/patches/netdde-csum.patch			\
+  %D%/packages/patches/java-apache-xml-commons-resolver-1.2-netbeans.patch \
+  %D%/packages/patches/java-simplevalidation-1.14.1.patch	\
+  %D%/packages/patches/netbeans-25-nativeexecution-paths.patch \
+  %D%/packages/patches/netbeans-25-terminal-no-login-shell.patch \
+  %D%/packages/patches/netbeans-25-source-only-build.patch	\
+  %D%/packages/patches/netbeans-25-wayland-font-rendering.patch	\
   %D%/packages/patches/netpbm-CVE-2017-2586.patch		\
   %D%/packages/patches/netpbm-CVE-2017-2587.patch		\
   %D%/packages/patches/netsurf-message-timestamp.patch		\
@@ -2004,6 +2019,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/nvi-assume-preserve-path.patch		\
   %D%/packages/patches/nvi-dbpagesize-binpower.patch		\
   %D%/packages/patches/nvi-db4.patch				\
+  %D%/packages/patches/obs-advanced-masks-nlohmann-json.patch	\
   %D%/packages/patches/obs-modules-location.patch		\
   %D%/packages/patches/ocaml-ctypes-test-oo.patch		\
   %D%/packages/patches/ocaml-multiple-definitions.patch		\
@@ -2069,6 +2085,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/open-zwave-hidapi.patch			\
   %D%/packages/patches/opusfile-CVE-2022-47021.patch		\
   %D%/packages/patches/orbit2-fix-array-allocation-32bit.patch \
+  %D%/packages/patches/orca-fix-gst-init-check-call.patch \
   %D%/packages/patches/orpheus-cast-errors-and-includes.patch	\
   %D%/packages/patches/ots-no-include-missing-file.patch	\
   %D%/packages/patches/owncloud-disable-updatecheck.patch	\
@@ -2085,6 +2102,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/pdl-2.100-reproducibility.patch	\
   %D%/packages/patches/petri-foo-0.1.87-fix-recent-file-not-exist.patch			\
   %D%/packages/patches/pharo-vm-cmake.patch                     \
+  %D%/packages/patches/phobos-hurd.patch			\
   %D%/packages/patches/plasma-framework-fix-KF5PlasmaMacros.cmake.patch \
   %D%/packages/patches/plasp-fix-normalization.patch \
   %D%/packages/patches/plasp-include-iostream.patch \
@@ -2171,6 +2189,8 @@ dist_patch_DATA =						\
   %D%/packages/patches/perl-www-curl-remove-symbol.patch	\
   %D%/packages/patches/perl-xml-libxml-fix-function-prototypes.patch	\
   %D%/packages/patches/phoronix-test-suite-fsdg.patch		\
+  %D%/packages/patches/php-01-fix-expired-certificate.patch	\
+  %D%/packages/patches/php-02-fix-sni-tests.patch		\
   %D%/packages/patches/picprog-non-intel-support.patch		\
   %D%/packages/patches/pidgin-add-search-path.patch		\
   %D%/packages/patches/pinball-system-ltdl.patch		\
@@ -2274,8 +2294,6 @@ dist_patch_DATA =						\
   %D%/packages/patches/qtbase-5-use-TZDIR.patch			\
   %D%/packages/patches/qtscript-disable-tests.patch		\
   %D%/packages/patches/quagga-reproducible-build.patch          \
-  %D%/packages/patches/quickjs-ng-64-bits-precision-on-i686.patch	\
-  %D%/packages/patches/quickjs-ng-fix-atomics.pause-on-32-bit.patch	\
   %D%/packages/patches/quilt-grep-compat.patch 			\
   %D%/packages/patches/qmk-firmware-fix-hacker-dvorak.patch 	\
   %D%/packages/patches/qtwayland-update-wayland-xml.patch	\
@@ -2349,8 +2367,16 @@ dist_patch_DATA =						\
   %D%/packages/patches/renpy-fix-integer-slots.patch			\
   %D%/packages/patches/reposurgeon-add-missing-docbook-files.patch	\
   %D%/packages/patches/rdkit-unbundle-external-dependencies.patch	\
+  %D%/packages/patches/r-biostrings-r4.6.0-compat.patch		\
+  %D%/packages/patches/r-h5mread-0001-h5mread-1.3.2-Get-rid-of-non-API-calls-to-R.patch \
   %D%/packages/patches/r-httpuv-1.6.6-unvendor-libuv.patch	\
+  %D%/packages/patches/r-mscoreutils-0001-fix-non-API-call-to-R-SETLENGTH-by-using-lengthgets.patch \
+  %D%/packages/patches/r-rsamtools-r-4.6.0-compat.patch		\
+  %D%/packages/patches/r-snpstats-0001-fixed-non-API-except-for-IS_S4_OBJECT.patch \
+  %D%/packages/patches/r-snpstats-0002-fixed-IS_S4_OBJECT.patch \
   %D%/packages/patches/r-sapa-lapack.patch			\
+  %D%/packages/patches/r-shortread-0001-ShortRead-1.69.3-Get-rid-of-non-API-calls-to-R.patch \
+  %D%/packages/patches/r-sparsearray-r-4.6.0-compat.patch	\
   %D%/packages/patches/ripperx-missing-file.patch		\
   %D%/packages/patches/rpcbind-CVE-2017-8779.patch		\
   %D%/packages/patches/rtosc-0.3.1-fix-invalid-comparison-operator.patch	\
@@ -2400,6 +2426,9 @@ dist_patch_DATA =						\
   %D%/packages/patches/rust-codex-0.120.0-connectors-cache-test-race.patch	\
   %D%/packages/patches/rust-codex-0.120.0-remove-libwebrtc.patch	\
   %D%/packages/patches/rust-codex-0.120.0-test-timeout.patch	\
+  %D%/packages/patches/rust-codex-0.124.0-code-mode-stub-toolname.patch	\
+  %D%/packages/patches/rust-codex-0.124.0-remove-patch-sections.patch	\
+  %D%/packages/patches/rust-librocksdb-sys-unbundled-sources.patch	\
   %D%/packages/patches/rust-ring-0.17-ring-core.patch		\
   %D%/packages/patches/rw-igraph-0.10.patch			\
   %D%/packages/patches/rxvt-unicode-fix-cursor-position.patch	\
@@ -2598,6 +2627,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/webrtc-audio-processing-big-endian.patch	\
   %D%/packages/patches/webrtc-audio-processing-byte-order-pointer-size.patch \
   %D%/packages/patches/webrtc-audio-processing-x86-no-sse.patch	\
+  %D%/packages/patches/websocketpp-boost-compat.patch		\
   %D%/packages/patches/websocketpp-fix-for-cmake-3.15.patch	\
   %D%/packages/patches/wmctrl-64-fix.patch			\
   %D%/packages/patches/wmfire-dont-inline-draw-fire.patch	\

gnu/machine/hetzner.scm

@@ -202,7 +202,7 @@ Have you run 'guix archive --generate-key'?")
   (build-locally? hetzner-configuration-build-locally? ; boolean
                   (default #t))
   (delete? hetzner-configuration-delete? ; boolean
-           (default #f))
+           (default #t))
   (labels hetzner-configuration-labels ; list of strings
           (default '()))
   (location hetzner-configuration-location ; #f | string
@@ -395,9 +395,7 @@ Available locations:~%~%~a~%~%For more details, see: ~a")
                                        (type ,root-fs-type))
                                      %base-file-systems))))
        (services
-        ;; guix 1.4.0 does not have dhcpcd-service-type,
+        (cons* (service dhcpcd-service-type)
-        ;; so we use dhcp-client-service-type here.
-        (cons* (service dhcp-client-service-type)
                (service openssh-service-type
                         (openssh-configuration
                          (openssh openssh-sans-x)
@@ -592,6 +590,14 @@ mkdir -p /gnu/store
 mount --bind /mnt/tmp/gnu/store /gnu/store
 
 wget -O /tmp/guix-install.sh https://guix.gnu.org/guix-install.sh
+
+# Modify the install script to point the systemd unit of the /gnu/store
+# mountpoint to the same /mnt/tmp/gnu/store which was introduced above.
+store_fix=\"sed -i 's#Where=/gnu/store#Where=/mnt/tmp/gnu/store#'
+ ~~root/.config/guix/current/lib/systemd/system/gnu-store.mount\"
+sed -i \"s@install_unit gnu-store.mount\"\\
+\"@$(printf \"%q \" $store_fix)\\ninstall_unit gnu-store.mount@\" /tmp/guix-install.sh
+
 chmod +x /tmp/guix-install.sh
 set +o pipefail # avoid hangup on 'yes' killing this script
 yes '' | /tmp/guix-install.sh

gnu/packages/accessibility.scm

@@ -185,7 +185,7 @@ terminals.")
     (native-inputs
      (append
        (list clisp
-             python-cython
+             python-cython-0 ;; See https://bugzilla.redhat.com/show_bug.cgi?id=2231865
              doxygen
              gettext-minimal)
        ;; icedtea doesn't build reliably on all architectures.

gnu/packages/admin.scm

@@ -1,5 +1,5 @@
 ;;; GNU Guix --- Functional package management for GNU
-;;; Copyright © 2012-2025 Ludovic Courtès <ludo@gnu.org>
+;;; Copyright © 2012-2026 Ludovic Courtès <ludo@gnu.org>
 ;;; Copyright © 2013 Cyril Roelandt <tipecaml@gmail.com>
 ;;; Copyright © 2014, 2015, 2016, 2018, 2019, 2020 Mark H Weaver <mhw@netris.org>
 ;;; Copyright © 2014, 2015-2018, 2020-2023 Eric Bavier <bavier@posteo.net>
@@ -1158,7 +1158,7 @@ on memory usage on GNU/Linux systems.")
 (define-public htop
   (package
     (name "htop")
-    (version "3.5.0")
+    (version "3.5.1")
     (source
      (origin
        (method git-fetch)
@@ -1166,7 +1166,7 @@ on memory usage on GNU/Linux systems.")
              (url "https://github.com/htop-dev/htop")
              (commit version)))
        (sha256
-        (base32 "1r07ri0dl9xz0jn1hc2g8q3l0q4clvnxs05yagpzsz0zigp4flj5"))
+        (base32 "187gyj081n6qsidll5wdri3jkr4m2i4m461z3xv03y342f5yj3lv"))
        (file-name (git-file-name name version))))
     (build-system gnu-build-system)
     (arguments
@@ -1972,7 +1972,7 @@ maintenance releases.")
 (define-public dhcpcd
   (package
     (name "dhcpcd")
-    (version "10.3.0")
+    (version "10.3.2")
     (source
      (origin
        (method git-fetch)
@@ -1981,7 +1981,7 @@ maintenance releases.")
              (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "058k8wbzbjb6mm6qklv40z1y4k6sdb4ysap1xk6pny1m1f9xkdax"))))
+        (base32 "1z5rpi0n2vwhkh3c4d0dxwp38fl18br58jpy7kzh97gzg3gpk5dl"))))
     (inputs (list bash-minimal coreutils-minimal eudev sed))
     (build-system gnu-build-system)
     (arguments
@@ -3751,59 +3751,68 @@ summarizes network bandwidth by process and remote host.")
 (define-public munge
   (package
     (name "munge")
-    (version "0.5.14")
+    (version "0.5.18")
     (source (origin
-              (method url-fetch)
+              (method git-fetch)
-              (uri (string-append "https://github.com/dun/munge/releases/"
+              (uri (git-reference
-                                  "download/munge-" version "/munge-"
+                     (url "https://github.com/dun/munge")
-                                  version ".tar.xz"))
+                     (commit (string-append "munge-" version))))
+              (file-name (git-file-name name version))
               (sha256
                (base32
-                "0h06sghb4rqvv1ywyd6mzsmbcgh712v6ygrff0gzm440y4ca41k6"))
+                "1b7gm680dlvmgvj9vxy7n0cqmnv1rl9n4563vasxdxx54f78j30s"))
               (modules '((guix build utils)))
               (snippet
-               '(begin
+               ;; Don't insist on write access to /var.
-                  ;; Don't insist on write access to /var.
+               #~(substitute* "src/etc/Makefile.am"
-                  (substitute* "src/etc/Makefile.in"
+                   (("\\$\\(MKDIR_P\\) .*(local|run)statedir.*" all)
-                    (("\\$\\(INSTALL\\)(.*)localstatedir" _ middle)
+                    (string-append ": " all))))))
-                     (string-append "-$(INSTALL)" middle "localstatedir"))
-                    (("\\$\\(MKDIR_P\\) .*(local|run)statedir.*")
-                     ""))
-                  #t))))
     (inputs
      (list openssl libgcrypt))
+    (native-inputs
+     (list autoconf
+           automake
+           libtool
+           procps))                               ;for tests
     (build-system gnu-build-system)
     (arguments
-     `(#:configure-flags
+     (list #:configure-flags
-       (list "--localstatedir=/var"
+           #~(list "--localstatedir=/var"
-             (string-append "--with-pkgconfigdir="
+                   "--disable-static"
-                            (assoc-ref %outputs "out") "/lib/pkgconfig")
+                   #$@(if (%current-target-system)
-             (string-append "--with-libgcrypt-prefix="
+                          ;; Assume yes on pipes when cross compiling.
-                            (assoc-ref %build-inputs "libgcrypt"))
+                          `("ac_cv_file__dev_spx=yes"
-             ,@(if (%current-target-system)
+                            "x_ac_cv_check_fifo_recvfd=yes")
-                 ;; Assume yes on pipes when cross compiling.
+                          '())
-                 `("ac_cv_file__dev_spx=yes"
+
-                   "x_ac_cv_check_fifo_recvfd=yes")
+                   ;; The '.pc' file is not installed when omitting this flag.
-                 '()))
+                   (string-append "--with-pkgconfigdir="
-       #:phases
+                                  #$output "/lib/pkgconfig"))
-       (modify-phases %standard-phases
+           #:phases
-         ;; XXX Many test series fail.  Some might be fixable, others do no-no
+           #~(modify-phases %standard-phases
-         ;; things like invoking ‘sudo’.
+               (add-before 'bootstrap 'pre-bootstrap
-         (add-after 'unpack 'skip-failing-tests
+                 (lambda _
-           (lambda _
+                   (for-each patch-shebang (find-files "build-aux"))))
-             (for-each (lambda (test)
+               (add-after 'unpack 'skip-failing-tests
-                         (substitute* "t/Makefile.in"
+                 (lambda _
-                           (((string-append test "\\.t ")) "")))
+                   ;; Pass '--force' to 'munged'; without it, it fails with "Socket
-                       (list "0100-munged-lock"
+                   ;; is inaccessible" due to the build directory not being
-                             "0010-basic"
+                   ;; world-readable.
-                             "0011-munged-cmdline"
+                   (substitute* "tests/sharness.d/03-munged.sh"
-                             "0012-munge-cmdline"
+                     (("--group-update-time=-1" all)
-                             "0013-unmunge-cmdline"
+                      (string-append all " --force")))
-                             "0101-munged-security-socket"
+
-                             "0102-munged-security-keyfile"
+                   ;; The tests below invoke 'sudo' or have special expectations
-                             "0103-munged-security-logfile"
+                   ;; about network interfaces.
-                             "0110-munged-origin-addr"))
+                   (for-each (lambda (test)
-             #t)))))
+                               (substitute* "tests/Makefile.am"
+                                 (((string-append test "\\.t "))
+                                  "")))
+                             (list "0100-munged-lock"
+                                   "0101-munged-security-socket"
+                                   "0102-munged-security-keyfile"
+                                   "0103-munged-security-logfile"
+                                   "0110-munged-origin-addr")))))))
     (home-page "https://dun.github.io/munge/")
     (synopsis "Cluster computing authentication service")
     (description
@@ -7043,7 +7052,7 @@ network, which causes enabled computers to power on.")
 (define-public witr
   (package
     (name "witr")
-    (version "0.1.7")
+    (version "0.3.1")
     (source
      (origin
        (method git-fetch)
@@ -7052,7 +7061,7 @@ network, which causes enabled computers to power on.")
               (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "18xx01lxd5j019gy9jmpms3awv4snlr028w01bfkyfid6hlwxbq2"))))
+        (base32 "03v9n4mdvqm0knqjl4s64321i5clqpmlrlkkdb87glzb9p28sg00"))))
     (build-system go-build-system)
     (arguments
      (list

gnu/packages/algebra.scm

@@ -458,7 +458,7 @@ precision.")
     (inputs
      ;; TODO: Unbundle "libmicropython.a".
      (list ao
-           fltk-1.3
+           fltk
            glpk
            gmp
            gsl

gnu/packages/animation.scm

@@ -238,12 +238,12 @@ contains the graphical user interface for synfig.")
              (when tests?
                (invoke "./tests")))))))
     (native-inputs
-     (list gettext-minimal
+     (cons* gettext-minimal
-           `(,glib "bin")
+            `(,glib "bin")
-           nasm
+            perl
-           perl
+            pkg-config
-           pkg-config
+            python-wrapper
-           python-wrapper))
+            (maybe-nasm)))
     (inputs
      (list cairo
            curl

gnu/packages/assembly.scm

@@ -2,7 +2,7 @@
 ;;; Copyright © 2016 Jan Nieuwenhuizen <janneke@gnu.org>
 ;;; Copyright © 2013, 2015 Ludovic Courtès <ludo@gnu.org>
 ;;; Copyright © 2013 Andreas Enge <andreas@enge.fr>
-;;; Copyright © 2016, 2020, 2021, 2025 Efraim Flashner <efraim@flashner.co.il>
+;;; Copyright © 2016, 2020, 2021, 2025, 2026 Efraim Flashner <efraim@flashner.co.il>
 ;;; Copyright © 2017–2022 Tobias Geerinckx-Rice <me@tobias.gr>
 ;;; Copyright © 2019 Guy Fleury Iteriteka <hoonandon@gmail.com>
 ;;; Copyright © 2019, 2022, 2024 Andy Tai <atai@atai.org>
@@ -43,6 +43,7 @@
   #:use-module ((guix licenses) #:prefix license:)
   #:use-module (guix packages)
   #:use-module (guix gexp)
+  #:use-module (guix utils)
   #:use-module (gnu packages)
   #:use-module (gnu packages admin)
   #:use-module (gnu packages autotools)
@@ -248,6 +249,16 @@ complex.  It supports all currently known x86 architectural extensions, and
 has strong support for macros.")
     (license license:bsd-2)))
 
+(define* (maybe-nasm #:optional
+                     (system (or (%current-target-system)
+                                 (%current-system))))
+  ;; For some packages nasm is only needed when compiling to/for x86/x86_64.
+  (if (target-x86? system)
+      (list nasm)
+      '()))
+
+(export maybe-nasm)
+
 (define-public yasm
   (package
     (name "yasm")

gnu/packages/audio.scm

@@ -51,7 +51,7 @@
 ;;; Copyright © 2024 Nikita Domnitskii <nikita@domnitskii.me>
 ;;; Copyright © 2024 Roman Scherer <roman@burningswell.com>
 ;;; Copyright © 2024 Sughosha <sughosha@disroot.org>
-;;; Copyright © 2025 Junker <dk@junkeria.club>
+;;; Copyright © 2025, 2026 Junker <dk@junkeria.club>
 ;;; Copyright © 2025 Sughosha <sughosha@disroot.org>
 ;;; Copyright © 2025 Andrew Wong <wongandj@icloud.com>
 ;;; Copyright © 2025 Kjartan Oli Agustsson <kjartanoli@outlook.com>
@@ -127,6 +127,7 @@
   #:use-module (gnu packages linphone)
   #:use-module (gnu packages linux)
   #:use-module (gnu packages llvm)
+  #:use-module (gnu packages logging)
   #:use-module (gnu packages machine-learning)
   #:use-module (gnu packages man)
   #:use-module (gnu packages maths)
@@ -194,6 +195,45 @@
   #:use-module (srfi srfi-26)
   #:use-module (ice-9 match))
 
+(define-public adplug
+  (package
+    (name "adplug")
+    (version "2.4")
+    (source (origin
+              (method git-fetch)
+              (uri (git-reference
+                    (url "https://github.com/adplug/adplug")
+                    (commit (string-append "adplug-" version))))
+              (file-name (git-file-name name version))
+              (sha256
+               (base32
+                "0l31ya42g3q7ry2m0y5djgjb9ax8ciy8jn86252vdjkjswwqgscd"))))
+    (build-system cmake-build-system)
+    (arguments
+     (list #:configure-flags
+           #~(list "-DBUILD_SHARED_LIBS=ON")
+           #:modules
+           '((guix build cmake-build-system)
+             (guix build utils)
+             (srfi srfi-26))                 ;for cute
+           #:phases
+           #~(modify-phases %standard-phases
+               (add-after 'install 'install-headers
+                 (lambda _
+                   (for-each (cute install-file <>
+                                  (string-append #$output "/include/adplug"))
+                             (find-files "../source/src" "\\.h$")))))))
+    (propagated-inputs
+     (list libbinio))
+    (home-page "https://adplug.github.io/")
+    (synopsis "AdLib sound player library")
+    (description
+     "AdPlug is a hardware independent AdLib sound player library, mainly
+written in C++.  AdPlug plays sound data, originally created for the AdLib
+(OPL2/3) audio board, on top of an OPL2/3 emulator or by using the real
+hardware.  No OPL2/3 chips are required for playback.")
+    (license license:lgpl2.1+)))
+
 (define-public opensles
   (package
     (name "opensles")
@@ -1210,7 +1250,7 @@ PulseAudio clients, featuring:
 (define-public ardour
   (package
     (name "ardour")
-    (version "9.1")
+    (version "9.2")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -1227,7 +1267,7 @@ PulseAudio clients, featuring:
 namespace ARDOUR { const char* revision = \"" version "\" ; const char* date = \"\"; }")))))
               (sha256
                (base32
-                "00bramm8dq0ihr376n7l9rg0mjzxmzw6lxvsbsdlrdsimfwsy16p"))
+                "14s6cq3x7l7b682ah9k8cdr6plfirlgm882dc2nm51lxwl91zcfd"))
               (file-name (git-file-name name version))))
     (build-system waf-build-system)
     (arguments
@@ -4465,6 +4505,33 @@ This includes device enumeration and initialization, file loading, and
 streaming.")
     (license license:expat)))
 
+(define-public wp-notifyd
+  (package
+    (name "wp-notifyd")
+    (version "1.1.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/LDAP/wp-notifyd")
+              (commit version)))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1nkndz0li15maf0dc9x631p0dr8085wzz5358552wljv7chywrza"))))
+    (build-system meson-build-system)
+    (arguments
+     (list #:tests? #f)) ;there are no tests
+    (inputs (list libnotify
+                  wireplumber-minimal
+                  pipewire
+                  spdlog))
+    (native-inputs (list pkg-config))
+    (home-page "https://github.com/LDAP/wp-notifyd")
+    (synopsis "Notification daemon for Wireplumber")
+    (description "@command{wp-notifyd} is a lightweight notification daemon for
+@dfn{WirePlumber} (the session and policy manager for PipeWire).")
+    (license license:expat)))
+
 (define-public pa-notify
   (package
     (name "pa-notify")
@@ -4869,6 +4936,42 @@ using Guix System.")
     ;; GNU Library (not Lesser) General Public License.
     (license license:lgpl2.0+)))
 
+(define-public hiir
+  (let ((commit "4a9a1e67fa6f8ce7688e1c0c8a2b017cecd206a3")
+        (revision "0"))
+    (package
+      (name "hiir")
+      (version (git-version "0" revision commit))
+      (source
+       (origin
+         (method git-fetch)
+         (uri (git-reference
+               (url "https://github.com/LostRobotMusic/hiir")
+               (commit commit)))
+         (file-name (git-file-name name version))
+         (sha256
+          (base32 "1wzlg0di768mzcik6fij4pd6dnpmbw8q236h478c057d10qfp44g"))))
+      (build-system copy-build-system)
+      (arguments
+       (list
+        #:install-plan
+        #~`(("." "/include/hiir"))))
+      (home-page "https://github.com/LostRobotMusic/hiir")
+      (synopsis "Header-only version of Laurent de Soras's HIIR 1.40 library")
+      (description
+       "This package provides a header-only version of the
+@uref{http://ldesoras.free.fr/prod.html#src_hiir, HIIR library by Laurent De
+Soras}, updated to version 1.40.  HIIR is a C++ library for changing the
+sampling rate of a signal by a factor two, in both directions (upsampling and
+downsampling), obtaining two signals with a π/2 phase difference (Hilbert
+transform).  It is made of a two-path polyphase IIR filter, implemented with
+FPU, 3DNow!, SSE, SSE2, AVX, AVX-512 and NEON instruction sets.
+
+This package contains the same as the original library, except with the
+contents of one source file moved into a header file (and set as inline) to
+make the library header-only, and with the test folder removed.")
+      (license license:wtfpl2))))
+
 (define-public redumper
   (package
     (name "redumper")
@@ -7265,6 +7368,7 @@ as is the case with audio plugins.")
                                        (find-files "bin")))))))))
     (inputs
      (list alsa-lib
+           bash-minimal
            ffmpeg
            fluidsynth
            file
@@ -7322,8 +7426,8 @@ default and preferred audio driver but also supports native drivers like ALSA.")
 
 ;;; This package variant tracks the latest in-development 2.6 release.
 (define-public carla-2.6
-  (let ((commit "aa400535b31c67f4b6c1b28e6e20e4d4f82111a3")
+  (let ((commit "294a80145e39c0755ab9073d90fd8b9524fbfc84")
-        (revision "0"))
+        (revision "1"))
     (package
       (inherit carla)
       (name "carla")
@@ -7337,7 +7441,12 @@ default and preferred audio driver but also supports native drivers like ALSA.")
            (commit commit)))
          (file-name (git-file-name name version))
          (sha256
-          (base32 "0cnj2sgr60f5h6wdfmihc214wf3n74686sipl3iyzmylqrcyhbjn")))))))
+          (base32 "053yfwf9l9vqvq95c354by6nm8ym0wgkv3fr1434x5w9n1344z0z"))))
+      (inputs
+       (modify-inputs (package-inputs carla)
+         (replace "python-pyqt" python-pyqt-6)
+         (replace "qtbase" qtbase)
+         (replace "qtwayland" qtwayland))))))
 
 ;; This source is a fork of vst3sdk with the documentation and VSTGUI
 ;; submodules removed and a dummy `meson.build` file that just lists all

gnu/packages/aux-files/linux-libre/6.12-riscv.conf

@@ -1989,7 +1989,7 @@ CONFIG_SCSI_LOWLEVEL=y
 # CONFIG_SCSI_DEBUG is not set
 # CONFIG_SCSI_PMCRAID is not set
 # CONFIG_SCSI_PM8001 is not set
-# CONFIG_SCSI_VIRTIO is not set
+CONFIG_SCSI_VIRTIO=m
 # CONFIG_SCSI_DH is not set
 # end of SCSI device support
 

gnu/packages/benchmark.scm

@@ -14,6 +14,7 @@
 ;;; Copyright © 2022 Tomasz Jeneralczyk <tj@schwi.pl>
 ;;; Copyright © 2024 Nicolas Graves <ngraves@ngraves.fr>
 ;;; Copyright © 2025 Artyom V. Poptsov <poptsov.artyom@gmail.com>
+;;; Copyright © 2026 Sughosha <sughosha@disroot.org>
 ;;; Copyright © 2023 Advanced Micro Devices, Inc.
 ;;;
 ;;; This file is part of GNU Guix.
@@ -41,6 +42,7 @@
   #:use-module (guix amd-gpu)
   #:use-module (guix search-paths)
   #:use-module (guix build-system cmake)
+  #:use-module (guix build-system qt)
   #:use-module (guix build-system gnu)
   #:use-module (guix build-system python)
   #:use-module (guix build-system pyproject)
@@ -730,7 +732,7 @@ and options.  With careful benchmarking, different hardware can be compared.")
 (define-public kdiskmark
   (package
     (name "kdiskmark")
-    (version "3.1.4")
+    (version "3.2.0")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -739,14 +741,13 @@ and options.  With careful benchmarking, different hardware can be compared.")
               (file-name (git-file-name name version))
               (sha256
                (base32
-                "1x8vd6swmf0i7f6m6wl2154n6plx8jkmcqfq6zxbdy255f1da74c"))))
+                "161yyy4fcy5bnzhbcd7p90nlcslcsfp7n3m3bz9bygch7bdjw46g"))))
-    (build-system cmake-build-system)
+    (build-system qt-build-system)
     (arguments
      (list
+      #:qtbase qtbase
       #:configure-flags
-      ;; Drop runtime dependency on KDE's KFAuth.
+      #~(list (string-append "-DPOLKITQT-1_INSTALL_DIR=" #$output))
-      #~(list "-DPERFORM_PAGECACHE_CLEARING_USING_KF5AUTH=no"
-              (string-append "-DPOLKITQT-1_INSTALL_DIR=" #$output))
       #:tests? #f                       ;no test suite
       #:phases
       #~(modify-phases %standard-phases
@@ -759,10 +760,10 @@ and options.  With careful benchmarking, different hardware can be compared.")
             (lambda _
               (rmdir "src/singleapplication")
               (symlink #$(package-source
-                          (this-package-input "single-application-qt5"))
+                          (this-package-input "single-application"))
                        "src/singleapplication"))))))
-    (native-inputs (list extra-cmake-modules qttools-5))
+    (native-inputs (list extra-cmake-modules qttools))
-    (inputs (list fio polkit-qt qtbase-5 single-application-qt5))
+    (inputs (list fio polkit-qt6 single-application qtwayland))
     (home-page "https://github.com/JonMagon/KDiskMark")
     (synopsis "Simple disk benchmark tool")
     (description "KDiskMark is an HDD and SSD benchmark tool.  KDiskMark

gnu/packages/bioinformatics.scm

@@ -913,7 +913,7 @@ suite native in R.")
 (define-public r-bpcells
   (package
     (name "r-bpcells")
-    (version "0.3.0")
+    (version "0.3.1")
     (source
      (origin
        (method git-fetch)
@@ -922,7 +922,7 @@ suite native in R.")
              (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "12h1di45fg06nhsliii7v0h1z567pkpis1xm4ar1qr8ns1n8iljw"))
+        (base32 "0yqgcajq83g25mznwcngaw7pi6vcqxqdnynpgb95yci57k3wrp6j"))
        (modules '((guix build utils)))
        (snippet
         '(delete-file-recursively "r/src/vendor/highway"))))
@@ -931,13 +931,15 @@ suite native in R.")
     (arguments
      (list
       #:phases
-      '(modify-phases %standard-phases
+      `(modify-phases %standard-phases
          (add-after 'unpack 'chdir
-           (lambda _
+           (lambda _ (chdir "r")))
-             (substitute* "r/configure"
+         ,@(if (target-x86-32?)
-               (("tools/hwy-test.cpp" m)
+               '((add-after 'chdir 'require-sse2
-                (string-append m " $HWY_LIBS $HWY_CFLAGS")))
+                   ;; This avoids falling back to the scalar backend in
-             (chdir "r"))))))
+                   ;; highway, which fails to build.
+                   (lambda _ (setenv "CFLAGS" "-msse2"))))
+               '()))))
     (propagated-inputs
      (list r-dplyr
            r-ggplot2
@@ -7649,78 +7651,6 @@ reads at a typical sensitivity of 90-99% relative to BLAST depending on the
 data and settings.")
     (license license:gpl3+)))
 
-(define-public discrover
-  (package
-    (name "discrover")
-    (version "1.6.0")
-    (source
-     (origin
-       (method git-fetch)
-       (uri (git-reference
-             (url "https://github.com/maaskola/discrover")
-             (commit version)))
-       (file-name (git-file-name name version))
-       (sha256
-        (base32
-         "173fwi2vb6a5kp406hm3jj6j7v4whww796f2qcygp4rpvamh307y"))))
-    (build-system cmake-build-system)
-    (arguments
-     `(#:tests? #f                      ; there are no tests
-       #:phases
-       (modify-phases %standard-phases
-         (add-before 'build 'set-force-source-date
-           ;; for reproducible dates, texlive needs this to respect
-           ;; SOURCE_DATE_EPOCH
-           (lambda _
-             (setenv "FORCE_SOURCE_DATE" "1")))
-         (add-before 'build 'use-writable-texmfvar
-           ;; Use writable TEXMFVAR to generate fonts.
-           (lambda _
-             (setenv "TEXMFVAR" "/tmp")))
-         (add-after 'unpack 'fix-latex-errors
-           (lambda _
-             (with-fluids ((%default-port-encoding #f))
-               (substitute* "doc/references.bib"
-                 (("\\{S\\}illanp[^,]+,")
-                  "{S}illanp{\\\"a}{\\\"a},")))
-             ;; XXX: I just can't get pdflatex to not complain about these
-             ;; characters.  They end up in the manual via the generated
-             ;; discrover-cli-help.txt.
-             (substitute* "src/hmm/cli.cpp"
-               (("µ") "mu")
-               (("η") "eta")
-               (("≤") "<="))
-             ;; This seems to be a syntax error.
-             (substitute* "doc/discrover-manual.tex"
-               (("theverbbox\\[t\\]") "theverbbox"))))
-         (add-after 'unpack 'add-missing-includes
-           (lambda _
-             (substitute* "src/executioninformation.hpp"
-               (("#define EXECUTIONINFORMATION_HPP" line)
-                (string-append line "\n#include <random>")))
-             (substitute* "src/plasma/fasta.hpp"
-               (("#define FASTA_HPP" line)
-                (string-append line "\n#include <random>"))))))))
-    (inputs
-     (list boost cairo rmath-standalone))
-    (native-inputs
-     (list (texlive-local-tree
-            (list texlive-doi
-                  texlive-etoolbox
-                  texlive-examplep
-                  texlive-forloop
-                  texlive-listofitems
-                  texlive-natbib
-                  texlive-pgf           ;tikz
-                  texlive-readarray
-                  texlive-verbatimbox))
-           imagemagick))
-    (home-page "https://dorina.mdc-berlin.de/public/rajewsky/discrover/")
-    (synopsis "Discover discriminative nucleotide sequence motifs")
-    (description "Discrover is a motif discovery method to find binding sites
-of nucleic acid binding proteins.")
-    (license license:gpl3+)))
-
 (define-public eddylab-squid
   (package
     (name "eddylab-squid")

gnu/packages/browser-extensions.scm

@@ -328,15 +328,15 @@ with the @uref{https://keepassxc.org, KeePassXC} password manager.")
 (define noscript
   (package
     (name "noscript")
-    (version "13.2.2")
+    (version "13.6.18.1984")
     (source (origin
               (method url-fetch/zipbomb)
               (uri (string-append
-                    "https://noscript.net/download/releases/noscript-" version
+                    "https://archive.torproject.org/tor-package-archive/torbrowser/noscript/noscript-"
-                    ".xpi"))
+                    version ".xpi"))
               (sha256
                (base32
-                "0w2w0a76dk01bkh83mqwgs9ky02rjqk15z5sxg4a6mw0hpr81bpm"))))
+                "0assv8v89hhg302q81vvv7ln3q8k9m6rzjkbprv2j05ghb23kkvm"))))
     (build-system copy-build-system)
     (properties '((addon-id . "{73a6fe31-595d-460b-a920-fcc0f8843232}")))
     (arguments

gnu/packages/c.scm

@@ -1327,25 +1327,6 @@ for the @acronym{AWS,Amazon Web Services} SDK.")
     (home-page "https://github.com/awslabs/aws-c-sdkutils")
     (license license:asl2.0)))
 
-(define-public pcl
-  (package
-    (name "pcl")
-    (version "1.12")
-    (source
-     (origin
-       (method url-fetch)
-       (uri (string-append
-              "http://www.xmailserver.org/pcl-" version ".tar.gz"))
-       (sha256
-        (base32
-         "06ly65rq4iyj2p4704i215c8y4rgspwl8sxfaifmf4ahfr30bcz7"))))
-    (build-system gnu-build-system)
-    (home-page "http://www.xmailserver.org/libpcl.html")
-    (synopsis "Portable Coroutine Library")
-    (description "The @acronym{PCL, Portable Coroutine Library} implements the
-low level functionality for coroutines.")
-    (license license:gpl2+)))
-
 (define-public aws-c-http
   (package
     (name "aws-c-http")

gnu/packages/chromium.scm

@@ -79,12 +79,9 @@
   '("base/third_party/cityhash" ;Expat
     "base/third_party/double_conversion" ;BSD-3
     "base/third_party/icu" ;Unicode, X11-style
-    "base/third_party/nspr" ;MPL-2.0
     "base/third_party/superfasthash" ;BSD-3
     "base/third_party/symbolize" ;BSD-3
     "base/third_party/xdg_user_dirs" ;Expat
-    "buildtools/third_party/libc++" ;BSD
-    "buildtools/third_party/libc++abi" ;BSD
     "net/third_party/mozilla_security_manager" ;MPL-1.1/GPL2+/LGPL2.1+
     "net/third_party/quiche" ;BSD-3
     "net/third_party/uri_template" ;ASL2.0
@@ -222,7 +219,6 @@
     "third_party/libaom/source/libaom/third_party/fastfeat" ;BSD-3
     "third_party/libaom/source/libaom/third_party/vector" ;Expat
     "third_party/libaom/source/libaom/third_party/x86inc" ;ISC
-    "third_party/libc++" ;Expat
     "third_party/libdrm" ; Expat
     "third_party/libgav1" ;ASL2.0
     "third_party/libjingle_xmpp" ;BSD-3
@@ -248,8 +244,6 @@
     "third_party/libzip" ;BSD-3
     "third_party/lit" ;BSD-3
     "third_party/lit/v3_0" ;BSD-3
-    "third_party/llvm-libc" ;ASL2.0
-    "third_party/llvm-libc/src/shared" ;ASL2.0
     "third_party/lottie" ;Expat
     "third_party/lss" ;BSD-3
     "third_party/lzma_sdk" ;public domain
@@ -400,7 +394,7 @@
   ;; run the Blink performance tests, just remove everything to save ~70MiB.
   '("third_party/blink/perf_tests"))
 
-(define %chromium-version "147.0.7727.55")
+(define %chromium-version "147.0.7727.137")
 (define %ungoogled-revision (string-append %chromium-version "-1"))
 (define %debian-revision (string-append "debian/" %ungoogled-revision))
 
@@ -412,7 +406,7 @@
     (file-name (git-file-name "ungoogled-chromium" %ungoogled-revision))
     (sha256
      (base32
-      "0l6v4wf16067igawjlh90f3d287mkw0cq4j5lvrxxy17y1skynzc"))))
+      "1ha84j3zckdv2l8dpicqhmr6a8mq3bqwalw0bmgamvlmns9i7nrj"))))
 
 (define %debian-origin
   (origin
@@ -425,7 +419,7 @@
                                 ((_ version) version))))
     (sha256
      (base32
-      "0gqarll08i7rcs1amapciv263xvzglc8p44ikavq3xd12yyvcd98"))))
+      "04lqbclkvn9nsksgjpjilh78a8y17mwwq4pmhr6h8gvpp2y3bhhc"))))
 
 (define (origin-file origin file)
   (computed-file
@@ -570,7 +564,7 @@
                                   %chromium-version "-lite.tar.xz"))
               (sha256
                (base32
-                "1salvlw5sykx3zmsbp7cgmf7y8yy6jlgb4b4zswzsbjrprk4jnap"))
+                "1m22whg5n9lw9gqhalm95jwfm45lqp4a7cs3mn3f4n8w0rvr0r5j"))
               (modules '((guix build utils)))
               (snippet (force ungoogled-chromium-snippet))))
     (build-system gnu-build-system)
@@ -596,6 +590,7 @@
               "use_custom_libcxx=false" ; support for this is deprecated and to be removed.
               "optimize_webui=false"
               "webnn_use_tflite=false"
+              "build_tflite_with_xnnpack=false"
               "safe_browsing_use_unrar=false"
               "chrome_pgo_phase=0"
               "use_sysroot=false"
@@ -688,7 +683,7 @@
               "use_gnome_keyring=false" ;deprecated by libsecret
               "use_pulseaudio=true"
               "link_pulseaudio=true"
-              "icu_use_data_file=false"
+              "icu_use_data_file=true"
 
               ;; VA-API acceleration is currently only supported on x86_64-linux.
               #$@(if (string-prefix? "x86_64" (or (%current-target-system)
@@ -696,6 +691,13 @@
                      '("use_vaapi=true")
                      '())
 
+              #$@(if (string-prefix? "aarch64" (or (%current-target-system)
+                                                   (%current-system)))
+                     '("use_v4l2_codec=true"
+                       "use_vaapi=false"
+                       "use_av1_hw_decoder=true")
+                     '())
+
               ;; Do not artificially restrict formats supported by system ffmpeg.
               "proprietary_codecs=true"
               "ffmpeg_branding=\"Chrome\""
@@ -769,12 +771,7 @@
                    (string-append libclang "clang_base_path"))
                   (("(_rustfmt_path = \")\\$\\{rust_bindgen_root\\}" _ rustfmt)
                    (string-append rustfmt "${rust_sysroot_absolute}"))))))
-          (add-after 'patch-stuff 'include-pthreadpool
+          (add-after 'patch-stuff 'add-absolute-references
-            ;; FIXME: Somehow the build system cannot locate this header.
-            (lambda _
-              (copy-file "third_party/pthreadpool/src/include/pthreadpool.h"
-                         "pthreadpool.h")))
-          (add-after 'include-pthreadpool 'add-absolute-references
             (lambda* (#:key inputs #:allow-other-keys)
               (let ((cups-config (search-input-file inputs "/bin/cups-config"))
                     (libnssckbi.so (search-input-file inputs
@@ -892,13 +889,15 @@
                                        "resources.pak"
                                        "v8_context_snapshot.bin"
                                        "chrome_crashpad_handler"
+                                       "icudtl.dat"
 
                                        ;; Swiftshader ICD.
                                        "libvk_swiftshader.so"
                                        "vk_swiftshader_icd.json"
 
-                                       ;; Chromium ships its own libGL
+                                       ;; Chromium ships its own libGL and
-                                       ;; implementation called ANGLE.
+                                       ;; vulkan implementation called ANGLE.
+                                       "libvulkan.so.1"
                                        "libEGL.so" "libGLESv2.so"))
                      (locales        (string-append lib "/locales"))
                      (resources      (string-append lib "/resources"))
@@ -914,9 +913,11 @@
 
                 (substitute* '("chrome/app/resources/manpage.1.in"
                                "chrome/installer/linux/common/desktop.template")
-                  (("@@MENUNAME@@") "Chromium")
+                  (("@@MENUNAME") "Chromium")
-                  (("@@PACKAGE@@") "chromium")
+                  (("@@PACKAGE") "chromium")
-                  (("/usr/bin/@@USR_BIN_SYMLINK_NAME@@") exe))
+                  (("/usr/bin/@@usr_bin_symlink_name") exe)
+                  (("@@uri_scheme") "x-scheme-handler/chromium;")
+                  (("@@extra_desktop_entries") ""))
 
                 (mkdir-p man)
                 (copy-file "chrome/app/resources/manpage.1.in"

gnu/packages/codex.scm

@@ -18,10 +18,10 @@
 
 ;;; This module is separate from (gnu packages rust-apps) to avoid a
 ;;; circular module dependency: (gnu packages rust-sources), which
-;;; defines rust-codex-0.120.0, transitively loads (gnu packages
+;;; defines rust-codex-0.124.0, transitively loads (gnu packages
 ;;; rust-apps) through its #:use-module chain.  If the codex package
 ;;; lived in rust-apps.scm, loading rust-sources would trigger loading
-;;; rust-apps before rust-codex-0.120.0 is defined, causing an unbound
+;;; rust-apps before rust-codex-0.124.0 is defined, causing an unbound
 ;;; variable error.
 
 (define-module (gnu packages codex)
@@ -54,14 +54,14 @@
 (define-public codex
   (package
     (name "codex")
-    (version (package-version rust-codex-0.120.0))
+    (version (package-version rust-codex-0.124.0))
     (source
      (origin
-       (inherit (package-source rust-codex-0.120.0))
+       (inherit (package-source rust-codex-0.124.0))
        (patches (search-patches
                  "codex-acp-0.11.1-disable-code-mode.patch"
-                 "rust-codex-0.117.0-remove-patch-sections.patch"
+                 "rust-codex-0.124.0-code-mode-stub-toolname.patch"
-                 "rust-codex-0.120.0-connectors-cache-test-race.patch"
+                 "rust-codex-0.124.0-remove-patch-sections.patch"
                  "rust-codex-0.120.0-remove-libwebrtc.patch"
                  "rust-codex-0.98.0-test-shebangs.patch"
                  "rust-codex-0.120.0-test-timeout.patch"))))
@@ -69,7 +69,12 @@
     (arguments
      (list
       #:install-source? #f
-      #:cargo-install-paths '(list "cli" "exec" "exec-server"
+      ;; exec-server is library-only in 0.124 (no [[bin]] in
+      ;; exec-server/Cargo.toml); cargo install --path exec-server fails
+      ;; with "no packages found with binaries or examples".  Drop it
+      ;; from the install paths -- the library is consumed via the
+      ;; workspace by other binaries here, not installed standalone.
+      #:cargo-install-paths '(list "cli" "exec"
                                    "linux-sandbox" "mcp-server"
                                    "app-server" "tui")
       ;; schema_fixtures_match_generated (upstream fixture is stale:
@@ -317,7 +322,164 @@
                                 ;; (chatgpt.com, api.github.com) wait
                                 ;; for TCP timeout instead of failing
                                 ;; instantly at TLS, eating the budget.
-                                "--skip" "mcp_server_status_list_tools_and_auth_only_skips_slow_inventory_calls")
+                                "--skip" "mcp_server_status_list_tools_and_auth_only_skips_slow_inventory_calls"
+                                ;;; BEGIN Stack overflow in 'current_thread'
+                                ;;; tokio runtime.  The sibling tests in
+                                ;;; tracing_tests.rs use the local helper
+                                ;;; run_current_thread_test_with_stack
+                                ;;; (4 MiB) but this one uses bare
+                                ;;; #[tokio::test] on the 2 MiB default
+                                ;;; test-thread stack, and TurnStart's
+                                ;;; future graph exceeds it.  With
+                                ;;; RUST_MIN_STACK raised the overflow is
+                                ;;; gone but the test then deterministically
+                                ;;; times out waiting for a span tagged
+                                ;;; codex.op = "user_input" on the remote
+                                ;;; trace that upstream never emits on that
+                                ;;; trace in our environment.
+                                "--skip" "turn_start_jsonrpc_span_parents_core_turn_spans"
+                                ;;; END tracing test stack/timeout
+                                ;;; BEGIN The upstream loader resolves the
+                                ;;; MCP OAuth credentials store mode by
+                                ;;; calling
+                                ;;; resolve_mcp_oauth_credentials_store_mode
+                                ;;; with env!("CARGO_PKG_VERSION") -- which
+                                ;;; in the released 0.124.0 tarball is
+                                ;;; "0.124.0".  These fixture tests
+                                ;;; construct the expected Config by
+                                ;;; passing the LOCAL_DEV_BUILD_VERSION
+                                ;;; constant ("0.0.0") to the same
+                                ;;; resolver, and the resolver only returns
+                                ;;; File for "0.0.0" -- Auto otherwise.
+                                ;;; Upstream CI builds from a checkout
+                                ;;; still carrying version = "0.0.0" so the
+                                ;;; tests pass there; they cannot pass
+                                ;;; against a released tag.
+                                "--skip" "test_precedence_fixture_with_gpt3_profile"
+                                "--skip" "test_precedence_fixture_with_gpt5_profile"
+                                "--skip" "test_precedence_fixture_with_o3_profile"
+                                "--skip" "test_precedence_fixture_with_zdr_profile"
+                                ;;; END LOCAL_DEV_BUILD_VERSION fixture mismatch
+                                ;;; BEGIN Verifies that Codex's user-shell
+                                ;;; spawn produces a child where
+                                ;;; CODEX_SANDBOX_NETWORK_DISABLED is unset
+                                ;;; (asserts stdout == "not-set").  We
+                                ;;; deliberately set that env var at the
+                                ;;; check phase to trigger upstream's
+                                ;;; skip_if_no_network! guards; the var then
+                                ;;; leaks into the spawned shell and the
+                                ;;; assertion fails.  The guix skip is a
+                                ;;; direct cost of the network-gate fix --
+                                ;;; trading one broken test for two that
+                                ;;; now skip cleanly.
+                                "--skip" "user_shell_command_does_not_set_network_sandbox_env_var"
+                                ;;; END CODEX_SANDBOX_NETWORK_DISABLED leak
+                                ;;; BEGIN The exec-server/tests/file_system
+                                ;;; integration tests invoke the real
+                                ;;; system bwrap, which tries to execvp the
+                                ;;; test binary at the cargo target path
+                                ;;; under the build dir.  Same root cause
+                                ;;; as the existing
+                                ;;; sandbox_reenables_writable_subpaths_under_unreadable_parents
+                                ;;; skip: guix builds live under /tmp but
+                                ;;; bwrap's mount namespace excludes /tmp,
+                                ;;; making the binary invisible inside the
+                                ;;; namespace.
+                                "--skip" "file_system_copy_preserves_symlink_source"
+                                "--skip" "file_system_copy_rejects_symlink_escape_destination"
+                                "--skip" "file_system_copy_rejects_symlink_escape_source"
+                                "--skip" "file_system_create_directory_rejects_symlink_escape"
+                                "--skip" "file_system_read_directory_rejects_symlink_escape"
+                                "--skip" "file_system_remove_rejects_symlink_escape"
+                                "--skip" "file_system_remove_removes_symlink_not_target"
+                                "--skip" "file_system_sandboxed_read_allows_readable_root"
+                                "--skip" "file_system_sandboxed_read_rejects_symlink_escape"
+                                "--skip" "file_system_sandboxed_read_rejects_symlink_parent_dotdot_escape"
+                                "--skip" "file_system_sandboxed_write_allows_additional_write_root"
+                                "--skip" "file_system_sandboxed_write_rejects_symlink_escape"
+                                "--skip" "file_system_sandboxed_write_rejects_unwritable_path"
+                                ;;; END bwrap-cant-see-/tmp file_system tests
+                                ;;; BEGIN Landlock is unavailable on Guix,
+                                ;;; so the sandbox cannot deny network
+                                ;;; syscalls.  These tests expect
+                                ;;; SandboxErr::Denied for the nc, ping,
+                                ;;; ssh, getent, and dev_tcp_redirection
+                                ;;; commands but those commands instead
+                                ;;; block on connect() until the test's 2s
+                                ;;; timeout fires (Timeout, exit 124).
+                                ;;; Same root cause as the Landlock skips
+                                ;;; at the top of this list; new test names
+                                ;;; in 0.124.
+                                "--skip" "sandbox_blocks_nc"
+                                "--skip" "sandbox_blocks_ping"
+                                "--skip" "sandbox_blocks_dev_tcp_redirection"
+                                "--skip" "sandbox_blocks_getent"
+                                "--skip" "sandbox_blocks_ssh"
+                                ;;; END Landlock network block
+                                ;;; BEGIN Requires github.com network access.
+                                ;;; With no "extraKnownMarketplaces" entry
+                                ;;; in settings.json,
+                                ;;; collect_marketplace_import_sources
+                                ;;; inserts a fallback entry for the
+                                ;;; "claude-plugins-official" marketplace
+                                ;;; pointing at the github shorthand
+                                ;;; "anthropics/claude-plugins-official".
+                                ;;; add_marketplace -> parse_marketplace_source
+                                ;;; expands that to a github.com/.git URL
+                                ;;; and clone_git_source runs 'git clone'.
+                                ;;; The Guix build sandbox has no network,
+                                ;;; so the clone fails and the marketplace
+                                ;;; lands in failed_marketplaces.  No mock
+                                ;;; cloner is injected via
+                                ;;; ExternalAgentConfigService::new_for_test,
+                                ;;; so there is no in-tree way to satisfy
+                                ;;; the test offline.
+                                "--skip" "import_plugins_infers_claude_official_marketplace_when_missing_from_settings"
+                                ;;; END github.com network access
+                                ;;; BEGIN Async race between the rollout
+                                ;;; writer task and a direct SQLite read.
+                                ;;; The test calls
+                                ;;; update_memory_settings_with_app_server,
+                                ;;; which routes through the in-memory
+                                ;;; thread path on the app-server's
+                                ;;; ThreadMemoryModeSet handler ->
+                                ;;; Session::set_thread_memory_mode ->
+                                ;;; persist_thread_memory_mode_update,
+                                ;;; which writes a RolloutItem::SessionMeta
+                                ;;; with the new mode to the rollout file
+                                ;;; via recorder.record_items + flush.  The
+                                ;;; rollout writer task then asynchronously
+                                ;;; calls sync_thread_state_after_write,
+                                ;;; which calls state_db::apply_rollout_items
+                                ;;; to mirror the SessionMeta into SQLite.
+                                ;;; flush() only awaits the rollout-file
+                                ;;; write, not the subsequent SQLite sync.
+                                ;;; The test opens a fresh StateRuntime and
+                                ;;; reads get_thread_memory_mode
+                                ;;; immediately, so it observes the creation
+                                ;;; default of "enabled" written by
+                                ;;; upsert_thread_with_creation_memory_mode
+                                ;;; instead of the new "disabled".  Upstream
+                                ;;; CI wins this race; we lose.
+                                "--skip" "update_memory_settings_updates_current_thread_memory_mode"
+                                ;;; END memory-mode rollout/sqlite race
+                                ;;; BEGIN The Stopwatch::new constructor in
+                                ;;; codex_shell_escalation anchors
+                                ;;; T0 = Instant::now() at construction;
+                                ;;; the spawned cancellation task fires at
+                                ;;; T0 + limit.  The test captures
+                                ;;; start = Instant::now() at T1 > T0 (after
+                                ;;; cancellation_token() returns) and
+                                ;;; asserts start.elapsed() >= limit,
+                                ;;; i.e. (T0 + limit) - T1 >= limit, which
+                                ;;; is always false by the offset T1 - T0.
+                                ;;; The test only passes when scheduler
+                                ;;; jitter on the sleep wakeup happens to
+                                ;;; exceed that offset.  Upstream wins the
+                                ;;; race; we don't always.
+                                "--skip" "cancellation_receiver_fires_after_limit"
+                                ;;; END Stopwatch construction/start offset race
+                                )
       #:cargo-package-crates
       ''(;;; Tier 0: No internal deps.
          "codex-ansi-escape"
@@ -358,22 +520,31 @@
          "codex-debug-client"
          "codex-analytics"
          "codex-rollout"
+         "codex-rollout-trace"
          "codex-terminal-detection"
          "codex-utils-approval-presets"
          "codex-utils-cli"
+         "codex-uds"
+         "codex-install-context"
+         "codex-device-key"
          ;;; Tier 2.
          "codex-app-server-protocol"
          "codex-rmcp-client"
          "codex-otel"
+         "codex-thread-store"
          "codex-state"
          "codex-features"
+         "codex-model-provider"
          "codex-config"
+         "codex-agent-identity"
+         "codex-aws-auth"
          "codex-hooks"
-         "codex-instructions"
          "codex-code-mode"
          "codex-feedback"
          "codex-skills"
+         "codex-test-binary-support"
          "codex-core"
+         "codex-core-plugins"
          "codex-utils-sandbox-summary"
          "codex-linux-sandbox"
          "codex-sandboxing"
@@ -425,7 +596,7 @@
               ;; Update them to match the actual package version.
               (let ((snap-files (find-files "." "\\.snap$")))
                 (substitute* snap-files
-                  (("\\(v0\\.0\\.0\\)   ") "(v0.120.0) ")))))
+                  (("\\(v0\\.0\\.0\\)   ") "(v0.124.0) ")))))
           (add-after 'chdir-to-workspace 'patch-git-deps-to-vendor
             (lambda _
               ;; Replace git dependencies with version references so cargo
@@ -436,32 +607,55 @@
                 (("runfiles = \\{ git = [^}]+\\}")
                  "runfiles = \"0.1.0\""))
               ;; Remove workspace members that have unbuildable deps
-              ;; (libwebrtc requires git fetch, v8-poc requires V8).
+              ;; (v8-poc requires V8).  code-mode stays a workspace member
+              ;; so its codex-protocol resolves to the same local copy as
+              ;; the rest of the build; disabling its default features
+              ;; (below) avoids pulling in V8.
               (substitute* "Cargo.toml"
-                (("\"v8-poc\",") "")
+                (("\"v8-poc\",") ""))
-                (("\"code-mode\",") ""))
+              ;; Disable V8 runtime in codex-code-mode by turning off
-              ;; Disable V8 runtime in codex-code-mode: remove path
+              ;; default features.  Keep path= so code-mode is resolved
-              ;; so cargo resolves it from the vendor (where it has
+              ;; from the local source tree and shares codex-protocol
-              ;; optional = true on v8) and disable default features.
+              ;; (and other workspace crates) with the rest of the build;
+              ;; resolving it from the vendor instead introduces a
+              ;; duplicate codex-protocol and causes E0308 type
+              ;; mismatches in codex-tools.
               (substitute* "Cargo.toml"
                 (("codex-code-mode = \\{ path = \"code-mode\" \\}")
-                 "codex-code-mode = { version = \"0.120.0\", default-features = false }"))))
+                 "codex-code-mode = { path = \"code-mode\", default-features = false }"))
+              ;; cargo build at workspace root ignores per-dep
+              ;; default-features=false and builds code-mode with its
+              ;; own default features, which include v8-runtime and
+              ;; would pull in V8.  Make the default feature empty.
+              (substitute* "code-mode/Cargo.toml"
+                (("^default = \\[\"v8-runtime\"\\]") "default = []"))))
           (add-after 'patch-git-deps-to-vendor 'add-version-to-workspace-deps
             (lambda _
               ;; cargo package requires all dependencies to have versions.
-              ;; cargo package requires all dependencies to have versions.
+              ;; Add version = "0.124.0" to internal path dependencies.
-              ;; Add version = "0.120.0" to internal path dependencies.
               (let ((cargo-files (find-files "." "^Cargo\\.toml$")))
                 (substitute* cargo-files
                   ;; Handle inline deps: name = { path = "..." }
                   (("(codex-[a-z0-9-]+) = \\{ path = " all name)
-                   (string-append name " = { version = \"0.120.0\", path = "))
+                   (string-append name " = { version = \"0.124.0\", path = "))
                   ;; Handle inline deps with package: name = { package = "...", path = "..." }
                   (("(codex-[a-z0-9-]+) = \\{ package = " all name)
-                   (string-append name " = { version = \"0.120.0\", package = "))
+                   (string-append name " = { version = \"0.124.0\", package = "))
                   ;; Handle section deps: [dependencies.X] with path = "..."
                   (("^(path = \"\\.\\./[^\"]*\")" all path-line)
-                   (string-append path-line "\nversion = \"0.120.0\""))))))
+                   (string-append path-line "\nversion = \"0.124.0\""))))))
+          (add-after 'chdir-to-workspace 'use-gnu-store-in-sandbox
+            (lambda _
+              ;; LINUX_PLATFORM_DEFAULT_READ_ROOTS in linux-sandbox/src/
+              ;; bwrap.rs is the read-only baseline that codex's bwrap
+              ;; sandbox bind-mounts so commands can read /usr/bin/ls,
+              ;; libc, etc.  Upstream lists "/nix/store" for NixOS;
+              ;; Guix's equivalent is "/gnu/store".  Without this swap,
+              ;; the codex sandbox cannot locate any binaries on a Guix
+              ;; system because every "system" path resolves into
+              ;; /gnu/store/<hash>-pkg/bin/...
+              (substitute* "linux-sandbox/src/bwrap.rs"
+                (("\"/nix/store\"") "\"/gnu/store\""))))
           (add-after 'chdir-to-workspace 'patch-hardcoded-paths
             (lambda* (#:key inputs #:allow-other-keys)
               (let ((bash-bin (string-append
@@ -561,10 +755,12 @@
                 ;; double quotes.
                 (substitute*
                   (list "core/src/plugins/startup_sync_tests.rs"
+                        "core/src/tools/runtimes/shell/unix_escalation_tests.rs"
                         "core/tests/suite/client.rs"
                         "core/tests/suite/js_repl.rs"
                         "core/tests/suite/skill_approval.rs"
                         "core/tests/suite/user_notification.rs"
+                        "exec-server/tests/file_system.rs"
                         "login/src/auth/auth_tests.rs"
                         "models-manager/src/manager_tests.rs"
                         "sandboxing/src/bwrap_tests.rs")
@@ -613,7 +809,17 @@
               ;; ~/... and 30 snapshot tests fail.
               (setenv "HOME" "/tmp/guix-home")
               (mkdir-p "/tmp/guix-home")
-              (setenv "USER" "nixbld"))))))
+              (setenv "USER" "nixbld")
+              ;; Default libtest thread stack is 2 MiB, which is not
+              ;; enough for tokio current_thread tests that drive
+              ;; codex-core's full turn pipeline.  Upstream gates such
+              ;; tests through run_current_thread_test_with_stack (4 MiB)
+              ;; in app-server/src/message_processor/tracing_tests.rs;
+              ;; raise the global default so future additions that
+              ;; forget the wrapper still pass.
+              (setenv "RUST_MIN_STACK" "8388608")
+              ;; Disable network access.
+              (setenv "CODEX_SANDBOX_NETWORK_DISABLED" "1"))))))
     (native-inputs `(("bubblewrap" ,bubblewrap) ;tests need bwrap on PATH
                      ("clang" ,clang)
                      ("cmake-minimal" ,cmake-minimal)
@@ -628,6 +834,8 @@
     (inputs (cons* bash-minimal coreutils git-minimal sed
                    libcap oniguruma openssl sqlite zlib `(,zstd "lib")
                    (cargo-inputs 'codex)))
+    (properties '((timeout . 108000) ; 30  hours
+                  (max-silent-time . 54000))) ; 15 hours
     (home-page "https://github.com/openai/codex")
     (synopsis "AI-assisted coding CLI and TUI")
     (description

gnu/packages/compression.scm

@@ -2375,7 +2375,9 @@ non-Windows systems without running the actual installer using wine.")
      (sha256
       (base32 "17k679glx05v23n8kxbg9vmbf89i2252g5xj6w3dkz19asmh1zd6"))))
    (build-system gnu-build-system)
-   (native-inputs (list autoconf automake libtool nasm))
+   (native-inputs
+    (cons* autoconf automake libtool
+           (maybe-nasm)))
    (home-page "https://github.com/intel/isa-l")
    (synopsis "Intelligent storage acceleration library")
    (description "ISA-L is a collection of optimized low-level functions

gnu/packages/cpp.scm

@@ -52,6 +52,7 @@
 ;;; Copyright © 2025 Philippe Swartvagher <phil.swart@gmx.fr>
 ;;; Copyright © 2025 Murilo <murilo@disroot.org>
 ;;; Copyright © 2026 Justin Veilleux <terramorpha@cock.li>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -133,6 +134,7 @@
   #:use-module (gnu packages sdl)
   #:use-module (gnu packages tls)
   #:use-module (gnu packages tex)
+  #:use-module (gnu packages texinfo)
   #:use-module (gnu packages web)
   #:use-module (gnu packages webkit)
   #:use-module (gnu packages xdisorg)
@@ -1671,6 +1673,38 @@ maintained anymore.")
 concurrent queue for C++11.")
     (license license:bsd-2)))
 
+(define-public ringbuffer
+  (package
+    (name "ringbuffer")
+    (version "0.9.0")
+    (source (origin
+              (method git-fetch)
+              (uri (git-reference
+                    (url "https://github.com/JohannesLorenz/ringbuffer")
+                    (commit (string-append "v" version))))
+              (file-name (git-file-name name version))
+              (sha256
+               (base32
+                "1c57hj6zyvcjpcbwrq8c1hj5brk1bnh69ayd88ny1p0gx031sjpk"))))
+    (build-system cmake-build-system)
+    (arguments
+     (list #:configure-flags
+           #~(list "-DCMAKE_CXX_FLAGS=-Wno-error=array-bounds"
+                   (string-append "-DINSTALL_LIB_DIR=" #$output "/lib"))
+           #:phases
+           #~(modify-phases %standard-phases
+               (add-after 'install 'install-export-header
+                 (lambda _
+                   (install-file "src/lib/ringbuffer_export.h"
+                                 (string-append #$output
+                                                "/include/ringbuffer")))))))
+    (home-page "https://github.com/JohannesLorenz/ringbuffer")
+    (synopsis "Lock-free multi-reader ringbuffer")
+    (description
+     "@code{ringbuffer} is a library containing a ringbuffer.  It is lock-free
+(using atomics only), and allows multiple readers, but only one writer.")
+    (license license:gpl3+)))
+
 (define-public spscqueue
   (package
     (name "spscqueue")
@@ -3192,8 +3226,7 @@ pointers, containers, compiler building blocks, etc.")
     (native-inputs
      (list build))
     (inputs
-     `(("libcutl" ,libcutl)
+     (list libcutl xerces-c))
-       ("libxerces-c" ,xerces-c)))
     (synopsis "XSD Front-end")
     (description "@code{libxsd-frontend} is a compiler frontend for the W3C
 XML Schema definition language.  It includes a parser, semantic graph types
@@ -3668,6 +3701,39 @@ computing Fast Fourier transformations.  It supports multidimensional arrays,
 different floating point sizes and complex transformations.")
       (license license:bsd-3))))
 
+(define-public libbinio
+  ;; The latest tagged version does not support CMake build.  This commit has
+  ;; builds with CMake and has updated CMake version support.
+  (let ((commit "e88dad086265e179ab6aef7f479e19f3917c7a98")
+        (revision "0"))
+    (package
+      (name "libbinio")
+      (version (git-version "1.5" revision commit))
+      (source (origin
+                (method git-fetch)
+                (uri (git-reference
+                      (url "https://github.com/adplug/libbinio")
+                      (commit commit)))
+                (file-name (git-file-name name version))
+                (sha256
+                 (base32
+                  "0rb33jl6gpxb88zymzl996m43b7r6wyw4lq0ib3626kna3baqnha"))))
+      (native-inputs
+       (list autoconf automake libtool texinfo))
+      (build-system cmake-build-system)
+      (arguments
+       (list #:tests? #f ;no tests
+             #:configure-flags
+             #~(list "-DBUILD_SHARED_LIBS=ON")))
+      (home-page "http://adplug.github.io/libbinio/")
+      (synopsis "Binary I/O stream class library")
+      (description
+       "This binary I/O stream class library presents a platform-independent
+way to access binary data streams in C++.  The library is hardware independent
+in the form that it transparently converts between the different forms of
+machine-internal binary data representation.")
+      (license license:lgpl2.1+))))
+
 (define-public priocpp
   ;; Latest release is from 2022-08-14.
   (let ((commit "ea15402adcd0d9191dc29ca6f7e4dd0bff67b9b5")
@@ -4494,6 +4560,47 @@ meta data function.")
     ;; or the CECILL-C license:
     (license (list license:lgpl3 license:cecill-c))))
 
+(define-public tcbrindle-span
+  (let ((commit "836dc6a0efd9849cb194e88e4aa2387436bb079b")
+        (revision "0"))
+    (package
+      (name "tcbrindle-span")
+      (version (git-version "0" revision commit))
+      (source
+       (origin
+         (method git-fetch)
+         (uri (git-reference
+               (url "https://github.com/tcbrindle/span")
+               (commit commit)))
+         (file-name (git-file-name name version))
+         (sha256
+          (base32 "1v3x1mj4if8jrr7cmrcbhv8n8ygla0liqb0dic6g6ji7px2pr6jf"))
+         (modules '((guix build utils)))
+         ;; Unbundle catch.
+         (snippet
+          '(with-directory-excursion "test"
+             (delete-file "catch.hpp")
+             (substitute* (find-files "." "\\.cpp$")
+               (("\"catch\\.hpp\"") "<catch.hpp>"))))))
+      (build-system cmake-build-system)
+      (native-inputs (list catch-framework))
+      (arguments
+       (list
+        #:phases
+        #~(modify-phases %standard-phases
+            (replace 'install
+              (lambda _
+                (mkdir-p (string-append #$output))
+                (copy-recursively "../source/include"
+                                  (string-append #$output "/include")))))))
+      (home-page "https://github.com/tcbrindle/span")
+      (synopsis "Implementation of C++20's @code{std::span} for older compilers")
+      (description
+       "This package provides a single-header implementation of C++20's
+@code{std::span}, conforming to the C++20 committee draft.  It is compatible
+with C++11, but will use newer language features if they are available.")
+    (license license:boost1.0))))
+
 (define-public tsl-hopscotch-map
   (package
     (name "tsl-hopscotch-map")

gnu/packages/databases.scm

@@ -71,6 +71,7 @@
 ;;; Copyright © 2026 Spencer King <spencer.king@wustl.edu>
 ;;; Copyright © 2026 Peter Polidoro <peter@polidoro.io>
 ;;; Copyright © 2026 Josep Bigorra <jjbigorra@gmail.com>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -4159,8 +4160,8 @@ programmatically or as a standalone CLI application.")
        (file-name (git-file-name name version))))
     (build-system gnu-build-system)
     (inputs
-     `(("libcrypto" ,openssl)
+     (list openssl
-       ("libtcl8.6" ,tcl))) ; required for running the tests
+           tcl))                        ;for tests
     (native-inputs
      (list tcl))
     (arguments

gnu/packages/disk.scm

@@ -266,14 +266,14 @@ tmpfs/ramfs filesystems.")
 (define-public parted
   (package
     (name "parted")
-    (version "3.6")
+    (version "3.7")
     (source (origin
               (method url-fetch)
               (uri (string-append "mirror://gnu/parted/parted-"
                                   version ".tar.xz"))
               (sha256
                (base32
-                "04p6b4rygrfd1jrskwrx3bn2icajg1mvbfhyc0c9l3ya7kixnhrv"))))
+                "0yzga4cjq3yplqs47dl9714vwc3v3v8nxrj80rdc5wx4c5syb380"))))
     (build-system gnu-build-system)
     (arguments
      (list
@@ -296,6 +296,7 @@ tmpfs/ramfs filesystems.")
        (,util-linux "lib")))
     (native-inputs
      (list gettext-minimal
+           pkg-config
 
            ;; For the tests.
            e2fsprogs

gnu/packages/distributed.scm

@@ -51,7 +51,7 @@
 (define-public boinc-client
   (package
     (name "boinc-client")
-    (version "8.2.9")
+    (version "8.2.12")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -62,7 +62,7 @@
               (file-name (git-file-name "boinc" version))
               (sha256
                (base32
-                "0ik9423ii6kal29jdn907pxy8w86zpi8n158qx1gcsh8lsaif1v5"))))
+                "0531n0yij1gh06xy6plwivbpmhqfq15jizg3rdgri40nz41rzbgr"))))
     (build-system gnu-build-system)
     (arguments
      (list

gnu/packages/django.scm

@@ -201,13 +201,13 @@ your project into different processes.")
 (define-public python-django
   (package
     (name "python-django")
-    (version "5.2.11")
+    (version "5.2.13")
     (source
      (origin
        (method url-fetch)
        (uri (pypi-uri "django" version))
        (sha256
-        (base32 "1lq2dynfw6jmvzrzgfrlij2qnxcksaxgnrfr0pj3bvmrv0m2jbbz"))))
+        (base32 "1i1vlffzhwbzp6r6y8ycvwklc45diy4c6i897z379l48a7dqj5d3"))))
     (build-system pyproject-build-system)
     (arguments
      '(#:test-flags
@@ -298,22 +298,6 @@ to the @dfn{don't repeat yourself} (DRY) principle.")
                       ;; This CVE is fixed in 4.1.9.
                       "CVE-2023-31047"))))))
 
-(define-public python-django-4
-  (package
-    (inherit python-django)
-    (name "python-django-4")
-    (version "4.2.28")
-    (source
-      (origin
-        (method url-fetch)
-        (uri (pypi-uri "django" version))
-        (sha256
-         (base32 "1znc2q1m9p2kxz1rkfkh2hg2sx6i3aqv72zsraad7bci364cvfd4"))))
-    (arguments
-     (substitute-keyword-arguments arguments
-       ((#:phases phases)
-        #~(modify-phases #$phases (delete 'delete-sitecustomize)))))))
-
 (define-public python-django-cache-url
   (package
     (name "python-django-cache-url")

gnu/packages/dlang.scm

@@ -10,6 +10,7 @@
 ;;; Copyright © 2022 ( <paren@disroot.org>
 ;;; Copyright © 2022 Esther Flashner <esther@flashner.co.il>
 ;;; Copyright © 2025-2026 Jonas Meeuws <jonas.meeuws@gmail.com>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -320,11 +321,11 @@ integration tests...\n")
                                  "|core.thread.osthread-debug-shared")))
                            (#t `("")))))))))))))
     (native-inputs
-     (append (delete "llvm"
+     (modify-inputs native-inputs
-                     (alist-replace "ldc" (list ldc-bootstrap)
+       (delete "llvm")
-                                    (package-native-inputs ldc-bootstrap)))
+       (replace "ldc" ldc-bootstrap)
-         `(("clang" ,clang-17)          ;propagates llvm and clang-runtime
+       (append clang-17                 ;propagates llvm and clang-runtime
-           ("python-lit" ,python-lit))))
+               python-lit)))
     (properties
      (alist-delete 'hidden? (package-properties ldc-bootstrap)))))
 
@@ -341,7 +342,7 @@ integration tests...\n")
     ;; and their names must have the same length to avoid corrupting the
     ;; binary.
     (name "dmd")
-    (version "2.111.0")
+    (version "2.112.0")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -350,7 +351,9 @@ integration tests...\n")
               (file-name (git-file-name "dmd" version))
               (sha256
                (base32
-                "0cz5qdd1j89w2s7nzw9ahzwsqiraidg4ajy7syy7qkk7mwcyrf6r"))))
+                "0qvg2fb73kyng8k1wj482g07ar2qw5laa5fynwx7pdd610n0pjpc"))
+              (patches
+               (search-patches "dmd-hurd.patch"))))
     (build-system gnu-build-system)
     (arguments
      (list
@@ -371,7 +374,16 @@ integration tests...\n")
               ;; Do not build the shared libphobos2.so library, to avoid
               ;; retaining a reference to gcc:lib.
               "SHARED=0"
-              "DIFFABLE=1"              ;constant timestamp
+              #$@(if (target-hurd?)
+                     (list (string-append "DISABLED_TESTS=core/thread/osthread "
+                                          "std/parallelism " ;; pthread stubs
+                                          "std/file " ;;  rename (NULL, "")
+                                          "std/socket " ;; ENOPROTOOPT
+                                          "std/datetime/systime "
+                                          "std/datetime/timezone " ;; TZDIR
+                                          "std/net/curl ")) ;; dlopen curl
+                     '())
+                     "DIFFABLE=1"              ;constant timestamp
               "VERBOSE=1")
       #:modules
       `(,@%default-gnu-modules
@@ -469,7 +481,19 @@ integration tests...\n")
                                    "long_backtrace_trunc rt_trap_exceptions "))
                    ""))
                 (substitute* "dmd/druntime/test/gc/Makefile"
-                  ((" invariant ") " "))))
+                  ((" invariant ") " "))
+
+                #$@(if (target-hurd?)
+                       '((for-each
+                          delete-file
+                          ;; environment differs in LD_ORIGIN_PATH
+                          '("dmd/compiler/test/dshell/sameenv.d"
+                            ;; Non _GLIBCXX_USE_CXX98_ABI version prints a warning
+                            "dmd/compiler/test/runnable_cxx/cppa.d"))
+                         ;; Segfault
+                         (substitute* "dmd/druntime/test/shared/Makefile"
+                           (("loadDR host ") "")))
+                       '())))
             (delete 'bootstrap)
             (delete 'configure)
             (replace 'build
@@ -491,7 +515,8 @@ integration tests...\n")
               (phase-in-sub-dir 'check "phobos"))
             (replace 'install
               (lambda* (#:key outputs #:allow-other-keys)
-                (let* ((platform (cond (#$(target-linux?) "linux")))
+                (let* ((platform (cond (#$(target-linux?) "linux")
+                                       (#$(target-hurd?)  "hurd")))
                        (bits (if #$(target-64bit?) 64 32))
                        (build-sub-dir (format #f "generated/~a/release/~a"
                                               platform bits))
@@ -535,17 +560,22 @@ integration tests...\n")
     (inputs
      (list bash-minimal))
     (native-inputs
-     (list gdmd which
+     (append
-           gdb/pinned   ; for tests
+      (if (target-linux?)
-           (origin
+          ;; gdb tests only on on linux
-             (method git-fetch)
+          (list gdb/pinned)
-             (uri (git-reference
+          '())
-                    (url "https://github.com/dlang/phobos")
+      (list gdmd which
-                    (commit (string-append "v" version))))
+            (origin
-             (file-name (git-file-name "phobos" version))
+              (method git-fetch)
-             (sha256
+              (uri (git-reference
-              (base32
+                     (url "https://github.com/dlang/phobos")
-               "1ydls3ar6d3f7ffqvidr46x3zrz3wlzjln5qa0nbz843ndjr4g7n")))))
+                     (commit (string-append "v" version))))
+              (file-name (git-file-name "phobos" version))
+              (sha256
+               (base32
+                "0afi5glnf96242cbnr10ccjvfsgkh4k5y7qnmxv4ph5g0izvi1dc"))
+              (patches (search-patches "phobos-hurd.patch"))))))
     (outputs '("out" "lib" "debug"))
     (synopsis "Reference D Programming Language compiler")
     (description "@acronym{DMD, Digital Mars D compiler} is the reference
@@ -554,7 +584,8 @@ compiler for the D programming language.")
     (home-page "https://github.com/dlang/dmd")
     ;; As reported by upstream:
     ;; https://wiki.dlang.org/Compilers#Comparison
-    (supported-systems '("i686-linux" "x86_64-linux" "aarch64-linux"))
+    (supported-systems '("i686-linux" "x86_64-linux" "aarch64-linux"
+                         "i586-gnu" "x86_64-gnu"))
 
     ;; This variant exists only for bootstrapping purposes.
     (properties '((hidden? . #t)))))

gnu/packages/dns.scm

@@ -115,6 +115,7 @@
        (uri (git-reference
               (url "git://git.chiark.greenend.org.uk/~ianmdlvl/adns.git")
               (commit (string-append "adns-" version))))
+       (file-name (git-file-name name version))
        (sha256
         (base32
          "0ln3l5j7wb1xazrzl76p9xar52p6l2k1cwy7jazxw1acl71k9h5n"))))
@@ -840,14 +841,14 @@ to result in system-wide compromise.")
 (define-public unbound
   (package
     (name "unbound")
-    (version "1.24.2")
+    (version "1.25.0")
     (source
      (origin
        (method url-fetch)
        (uri (string-append "https://www.unbound.net/downloads/unbound-"
                            version ".tar.gz"))
        (sha256
-        (base32 "1nwwwmwazwx40nm88lhh7k1basml2ai6j9q30gnclvca00zbbrs4"))))
+        (base32 "1iyyplggqhh2h1sbssq65v8z2s8mk1v9n1z4pr0z1qizfbd6wah6"))))
     (build-system gnu-build-system)
     (outputs '("out" "python"))
     (native-inputs

gnu/packages/documentation.scm

@@ -1,5 +1,5 @@
 ;;; GNU Guix --- Functional package management for GNU
-;;; Copyright © 2014, 2018 Ludovic Courtès <ludo@gnu.org>
+;;; Copyright © 2014, 2018, 2026 Ludovic Courtès <ludo@gnu.org>
 ;;; Copyright © 2014, 2016 Andreas Enge <andreas@enge.fr>
 ;;; Copyright © 2016 Eric Bavier <bavier@member.fsf.org>
 ;;; Copyright © 2016 Roel Janssen <roel@gnu.org>
@@ -192,21 +192,20 @@ markup) can be customized and extended by the user.")
 
 (define-deprecated asciidoc-py3 asciidoc)
 
-(define-public doxygen
+(define-public doxygen-1.16
   (package
     (name "doxygen")
-    (version "1.14.0")
+    (version "1.16.1")
     (home-page "https://www.doxygen.nl/")
-    (source (origin
+    (source
-              (method url-fetch)
+     (origin
-              (uri (list (string-append home-page "files/doxygen-"
+       (method url-fetch)
-                                        version ".src.tar.gz")
+       (uri (list (string-append home-page "files/doxygen-" version
-                         (string-append "mirror://sourceforge/doxygen/rel-"
+                                 ".src.tar.gz")
-                                        version "/doxygen-" version
+                  (string-append "mirror://sourceforge/doxygen/rel-" version
-                                        ".src.tar.gz")))
+                                 "/doxygen-" version ".src.tar.gz")))
-              (sha256
+       (sha256
-               (base32
+        (base32 "1a33w82ln692qsf3ls0j31f6khljjs1cy3bwd70pra2fa4xy6710"))))
-                "0pbbdvc1zxps6mi58bry16rcrdw6b9gvf9nhv0kp60qkmc8nslyl"))))
     (build-system cmake-build-system)
     (native-inputs
      (list bison
@@ -250,6 +249,25 @@ IDL (Corba, Microsoft, and UNO/OpenOffice flavors), Fortran, VHDL, Tcl,
 and to some extent D.")
     (license license:gpl3+)))
 
+(define-public doxygen-1.14
+  (package
+    (inherit doxygen-1.16)
+    (name "doxygen")
+    (version "1.14.0")
+    (home-page "https://www.doxygen.nl/")
+    (source (origin
+              (method url-fetch)
+              (uri (list (string-append home-page "files/doxygen-"
+                                        version ".src.tar.gz")
+                         (string-append "mirror://sourceforge/doxygen/rel-"
+                                        version "/doxygen-" version
+                                        ".src.tar.gz")))
+              (sha256
+               (base32
+                "0pbbdvc1zxps6mi58bry16rcrdw6b9gvf9nhv0kp60qkmc8nslyl"))))))
+
+(define-public doxygen doxygen-1.14)
+
 (define-public halibut
   (package
     (name "halibut")

gnu/packages/duckdb.scm

@@ -148,13 +148,13 @@ system.")
 (define-public r-duckdb
   (package
     (name "r-duckdb")
-    (version "1.5.1")
+    (version "1.5.2")
     (source
      (origin
        (method url-fetch)
        (uri (cran-uri "duckdb" version))
        (sha256
-        (base32 "177621m08whqqk4yhj3zrr08l3d9hhlqh3gm9jzhi5cplg47cksq"))
+        (base32 "1dldlfwvc33czvlxfmwaj4p9y6sjjj5iqy98yda47a8kclrqmyam"))
        ;; This package bundles the duckdb sources and builds a custom variant
        ;; of duckdb.  I'd be happy to link it with our duckdb library instead,
        ;; but it does not seem possible to do that.

gnu/packages/electronics.scm

@@ -2331,7 +2331,7 @@ Automation}, portable and vendor neutral FPGA place and route tool.")
 (define-public nvc
   (package
     (name "nvc")
-    (version "1.19.3")
+    (version "1.20.1")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -2340,7 +2340,7 @@ Automation}, portable and vendor neutral FPGA place and route tool.")
               (file-name (git-file-name name version))
               (sha256
                (base32
-                "1zizz2dafm53lzpjayy6vig5pz5ri9cszdivg0jzzh8s3ggkpy1i"))))
+                "1b38x2ch468s4p6mrq6c8s0d95vb84p6w4v8in79l4w7sfy8jnr0"))))
     (build-system gnu-build-system)
     (arguments
      (list #:out-of-source? #t
@@ -3461,7 +3461,7 @@ form of AXI, AXI lite, and AXI stream modules.")
 (define-public python-edalize
   (package
     (name "python-edalize")
-    (version "0.6.6")
+    (version "0.6.8")
     (source
      (origin
        (method git-fetch)
@@ -3470,7 +3470,7 @@ form of AXI, AXI lite, and AXI stream modules.")
              (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "115nc15n2cx4x9irjim07zkg0287418djqd6ja7rm8jrnyldvln9"))))
+        (base32 "04m2lhkclw9fj92k43c06j003qnq9i1yhy2131fvcnkkr0d9438m"))))
     (build-system pyproject-build-system)
     (arguments
      (list
@@ -4516,7 +4516,7 @@ unique design feature of Trilinos is its focus on packages.")
 (define-public verilator
   (package
     (name "verilator")
-    (version "5.046")
+    (version "5.048")
     (source
      (origin
        (method git-fetch)
@@ -4525,7 +4525,7 @@ unique design feature of Trilinos is its focus on packages.")
               (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "1gr1qhxvl4856hnmnx46dqd2qp0jhdh959zm2qfmxzzh19np7xkm"))))
+        (base32 "16c1x66kqmc5ldqjij81kypj471fibfihcqn6kz4wbxvnn0smyn6"))))
     (native-inputs
      (list autoconf
            automake

gnu/packages/emacs-build.scm

@@ -62,7 +62,7 @@ as bold, underscore or italic.")
 (define-public emacs-buttercup
   (package
     (name "emacs-buttercup")
-    (version "1.38")
+    (version "1.40")
     (source
      (origin
        (method git-fetch)
@@ -72,9 +72,7 @@ as bold, underscore or italic.")
        (file-name (git-file-name name version))
        (sha256
         (base32
-         "09n8skr5wi8bs7x81d5bi6z89dd8s1zi9a5f4r2qadaz69slncxq"))
+         "1b55cfh4wr40max2c42crvaa6wid7a83g28yximsin98i32q5f5r"))))
-       (patches
-        (search-patches "emacs-buttercup-1.38-native-comp-spy-on-trampoline-scope.patch"))))
     (build-system emacs-build-system)
     (arguments
      (list

gnu/packages/emacs.scm

@@ -28,6 +28,7 @@
 ;;; Copyright © 2025 Nicolas Graves <ngraves@ngraves.fr>
 ;;; Copyright © 2025 Jake Forster <jakecameron.forster@gmail.com>
 ;;; Copyright © 2025 John Kehayias <john@guixotic.coop>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -701,8 +702,8 @@ editor (with wide ints)" )
         #~(cons "--with-wide-int" #$flags))))))
 
 (define-public emacs-next-minimal
-  (let ((commit "509228fc6c026921c67459f21164e0325efc583b")
+  (let ((commit "d969185878bf50faedbafbd609c361875b891b53")
-        (revision "2"))
+        (revision "3"))
   (package
     (inherit emacs-minimal)
     (name "emacs-next-minimal")
@@ -716,7 +717,7 @@ editor (with wide ints)" )
              (commit commit)))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "04aalyrx5jysk5fhlka98fhfx23sy99zp8j16i0ils20sflyig6n"))
+        (base32 "1pmx71b6pazjpyfs1d2ngby1idsviwbap3xbr5b7dgf0rngim32s"))
        (patches
         (search-patches "emacs-next-disable-jit-compilation.patch"
                         "emacs-next-exec-path.patch"
@@ -869,7 +870,7 @@ Started in 2014 as a GSOC project, Guile-Emacs was resurrected in 2024.")
          "0vfw7z9i2s9np6nmx1d4dlsywm044rkaqarn7akffmb6bf1j6zv5"))))
     (build-system gnu-build-system)
     (native-inputs
-     `(("gettext" ,gettext-minimal)))
+     (list gettext-minimal))
     (arguments
      `(#:configure-flags
        (list (string-append "--with-charmaps="

gnu/packages/emulators.scm

@@ -1264,7 +1264,8 @@ Enjoy all of your favorite Atari 2600 games on your PC thanks to Stella!")
         (base32 "1xf15b6c3i0vv92b420a92pfvfaxhji56ivin8pn5r7fajkqyfb7"))))
     (build-system gnu-build-system)
     (native-inputs
-     (list pkg-config nasm which))
+     (cons* pkg-config which
+            (maybe-nasm)))
     (inputs
      (list freetype
            glu
@@ -1289,8 +1290,6 @@ Enjoy all of your favorite Atari 2600 games on your PC thanks to Stella!")
                       (list "all" (string-append "PREFIX=" out)))
        ;; There are no tests.
        #:tests? #f))
-    ;; As per the Makefile (in projects/unix/Makefile):
-    (supported-systems '("i686-linux" "x86_64-linux"))
     (home-page "https://www.mupen64plus.org/")
     (synopsis "Nintendo 64 emulator core library")
     (description
@@ -2164,7 +2163,9 @@ as RetroArch.")
               (lambda _
                 (install-file "mupen64plus_next_libretro.so"
                               (string-append #$output "/lib/libretro/")))))))
-      (native-inputs (list nasm pkg-config))
+      (native-inputs
+       (cons* pkg-config
+              (maybe-nasm)))
       (inputs (list mesa libpng minizip unzip xxhash zlib))
       (home-page "https://github.com/libretro/mupen64plus-libretro-nx")
       (synopsis "Improved Mupen64Plus libretro core")

gnu/packages/fabric-management.scm

@@ -2,7 +2,7 @@
 ;;; Copyright © 2017 Dave Love <fx@gnu.org>
 ;;; Copyright © 2018, 2019 Tobias Geerinckx-Rice <me@tobias.gr>
 ;;; Copyright © 2019 Ricardo Wurmus <rekado@elephly.net>
-;;; Copyright © 2019, 2023 Ludovic Courtès <ludo@gnu.org>
+;;; Copyright © 2019, 2023, 2026 Ludovic Courtès <ludo@gnu.org>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -226,15 +226,19 @@ testing InfiniBand networks.")
 
                            (string-append "--with-rdmacm="
                                           #$(this-package-input "rdma-core"))
-                           (string-append "--with-rocm="
+
-                                          #$(this-package-input "rocr-runtime")))
+                           #$@(if (this-package-input "rocr-runtime")
+                                  #~((string-append "--with-rocm="
+                                                    #$(this-package-input
+                                                       "rocr-runtime")))
+                                  #~()))
 
       ;; Be verbose so that compiler flags are displayed.
       #:make-flags #~'("V=1")))
     (native-inputs
      (list autoconf automake libtool pkg-config))
     (inputs
-     (list numactl rdma-core rocr-runtime))
+     (list numactl rdma-core))
     (synopsis "Optimized communication layer for message passing in HPC")
     (description
      "Unified Communication X (UCX) provides an optimized communication layer
@@ -250,3 +254,13 @@ memory mechanisms for efficient intra-node communication.")
     ;; and x86_64 as supported.
     (supported-systems '("x86_64-linux" "aarch64-linux" "powerpc64le-linux"
                          "riscv64-linux"))))
+
+;; Note: ROCm support is kept separate to avoid a significant increase in
+;; closure size: <https://codeberg.org/guix/guix/issues/7225>.
+(define-public ucx-rocm
+  (package/inherit ucx
+    (name "ucx-rocm")
+    (inputs (modify-inputs inputs
+              (append rocr-runtime)))
+    (synopsis "Optimized communication layer for message passing in HPC (with
+ROCm support)")))

gnu/packages/file-systems.scm

@@ -20,6 +20,7 @@
 ;;; Copyright © 2025 45mg <45mg.writes@gmail.com>
 ;;; Copyright © 2025 Janneke Nieuwenhuizen <janneke@gnu.org>
 ;;; Copyright © 2026 Giacomo Leidi <therewasa@fishinthecalculator.me>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -1128,8 +1129,8 @@ transaction log.
      (inherit jfsutils)
      (name "jfsutils-static")
      (inputs
-      `(("util-linux:static" ,util-linux "static")
+      (modify-inputs inputs
-        ,@(package-inputs jfsutils))))))
+        (prepend (list util-linux "static")))))))
 
 (define-public jfs_fsck/static
   (package
@@ -1138,28 +1139,23 @@ transaction log.
     (source #f)
     (build-system trivial-build-system)
     (arguments
-     `(#:modules ((guix build utils))
+     (list
-       #:builder
+      #:modules '((guix build utils))
-       (begin
+      #:builder
-         (use-modules (guix build utils)
+      #~(begin
-                      (ice-9 ftw)
+          (use-modules (guix build utils))
-                      (srfi srfi-26))
+          (let* ((sbin (string-append #$output "/sbin"))
-         (let* ((jfsutils (assoc-ref %build-inputs "jfsutils"))
+                 (fsck (string-append sbin "/jfs_fsck")))
-                (fsck     "jfs_fsck")
+            (install-file (search-input-file %build-inputs "sbin/jfs_fsck")
-                (out      (assoc-ref %outputs "out"))
+                          sbin)
-                (sbin     (string-append out "/sbin")))
+            (remove-store-references fsck)
-           (mkdir-p sbin)
+            (chmod fsck #o555)))))
-           (with-directory-excursion sbin
-             (install-file (string-append jfsutils "/sbin/" fsck)
-                           ".")
-             (remove-store-references fsck)
-             (chmod fsck #o555))
-           #t))))
     (inputs
-     `(("jfsutils" ,jfsutils/static)))
+     (list jfsutils/static))
     (home-page (package-home-page jfsutils))
     (synopsis "Statically-linked jfs_fsck command from jfsutils")
-    (description "This package provides statically-linked jfs_fsck command taken
+    (description
+     "This package provides statically-linked jfs_fsck command taken
 from the jfsutils package.  It is meant to be used in initrds.")
     (license (package-license jfsutils))))
 

gnu/packages/finance.scm

@@ -2601,7 +2601,7 @@ mining.")
 (define-public p2pool
   (package
     (name "p2pool")
-    (version "4.14")
+    (version "4.15")
     (source
      (origin
        (method git-fetch)
@@ -2610,7 +2610,7 @@ mining.")
              (commit (string-append "v" version))
              (recursive? #t)))
        (file-name (git-file-name name version))
-       (sha256 (base32 "10dp6kxmvdx5lz4n144s9av32nzfxgfw28kf92dnmrv13q5p7id2"))
+       (sha256 (base32 "1jfrq3dnkkvrk9zsn3viix5dcjwk0nmp15y1m1vj5py89hm57rxq"))
        (modules '((guix build utils)))
        (snippet
         #~(for-each delete-file-recursively

gnu/packages/firmware.scm

@@ -1159,10 +1159,10 @@ Executables included are:
       (native-inputs
        (append
          (list acpica
-               nasm
                perl
                python-3
                (list util-linux "lib"))
+         (maybe-nasm (string-append arch "-" arch))
          (if (not (string-prefix? arch (%current-system)))
              (if (string=? arch "armhf")
                  (list (cross-gcc "arm-linux-gnueabihf")

gnu/packages/fonts.scm

@@ -3873,7 +3873,7 @@ typographical palette.")
 (define-public font-mona-sans
   (package
     (name "font-mona-sans")
-    (version "2.0.8")
+    (version "2.0.23")
     (source
      (origin
        (method git-fetch)
@@ -3883,7 +3883,7 @@ typographical palette.")
        (file-name (git-file-name name version))
        (sha256
         (base32
-         "1gdblparf0v5mdbp891wnsc5x4dxr433fg0dmz0mhzrdw9vaalig"))))
+         "1pa6bghch1y0drxmz627055fwgsbdyp9vsj0f3va64pmvgkyf5jl"))))
     (build-system font-build-system)
     (outputs '("out" "ttf" "woff"))
     (home-page "https://github.com/mona-sans")

gnu/packages/freedesktop.scm

@@ -43,6 +43,8 @@
 ;;; Copyright © 2024 Janneke Nieuwenhuizen <janneke@gnu.org>
 ;;; Copyright © 2025 wvlab <me@wvlab.xyz>
 ;;; Copyright © 2025 jgart <jgart@dismail.de>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
+;;; Copyright © 2026 Luis Guilherme Coelho <lgcoelho@disroot.org>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -3053,10 +3055,10 @@ useful with system integration.")
          "0zs4z7l9b57jldwz0ban77f3c2zq43ambd0dssf5qg9i216f9lmj"))))
     (build-system gnu-build-system)
     (native-inputs
-     `(("dbus-test-runner" ,dbus-test-runner)
+     (list dbus-test-runner
-       ("glib:bin" ,glib "bin")
+           (list glib "bin")
-       ("pkg-config" ,pkg-config)
+           pkg-config
-       ("xvfb" ,xorg-server-for-tests)))
+           xorg-server-for-tests))
     (inputs
      (list gtk+ glib))
     (arguments
@@ -3417,50 +3419,50 @@ interfaces.")
 (define-public xdg-desktop-portal-wlr
   (package
     (name "xdg-desktop-portal-wlr")
-    (version "0.7.1")
+    (version "0.8.2")
-    (source (origin
+    (source
-              (method git-fetch)
+     (origin
-              (uri (git-reference
+       (method git-fetch)
-                     (url "https://github.com/emersion/xdg-desktop-portal-wlr")
+       (uri (git-reference
-                     (commit (string-append "v" version))))
+             (url "https://github.com/emersion/xdg-desktop-portal-wlr")
-              (file-name (git-file-name name version))
+             (commit (string-append "v" version))))
-              (sha256
+       (file-name (git-file-name name version))
-               (base32
+       (sha256
-                "1mbq3czka9swwmfaasnaj89y2m254p3qa522ayclh688jdwh70hq"))
+        (base32 "1jj0a9s3h3i04qsxkhcpxjzbb17hs9ngdy7wkypja09233zdz10w"))
-              (patches (search-patches "xdg-desktop-portal-wlr-harcoded-length.patch"))))
+       (patches (search-patches "xdg-desktop-portal-wlr-harcoded-length.patch"))))
     (build-system meson-build-system)
     (arguments
-     `(#:configure-flags
+     (list
-       '("-Dsystemd=disabled"
+      #:configure-flags
-         "-Dsd-bus-provider=libelogind")
+      #~(list "-Dsystemd=disabled"
-       #:phases
+              "-Dsd-bus-provider=libelogind")
-       (modify-phases %standard-phases
+      #:phases
-         (add-after 'unpack 'hardcode-binaries
+      #~(modify-phases %standard-phases
-           (lambda* (#:key inputs #:allow-other-keys)
+          (add-after 'unpack 'hardcode-binaries
-             (let ((sh (search-input-file inputs "/bin/sh"))
+            (lambda* (#:key inputs #:allow-other-keys)
-                   (grim (search-input-file inputs "/bin/grim"))
+              (let ((sh (search-input-file inputs "/bin/sh"))
-                   (slurp (search-input-file inputs "/bin/slurp")))
+                    (grim (search-input-file inputs "/bin/grim"))
-               (substitute* "src/screenshot/screenshot.c"
+                    (slurp (search-input-file inputs "/bin/slurp")))
-                 (("grim") grim)
+                (substitute* '("src/screencast/chooser.c"
-                 (("slurp") slurp)
+                               "src/screenshot/screenshot.c")
-                 (("execl\\(\"/bin/sh\", \"/bin/sh\"")
+                  (("grim") grim)
-                  (string-append "execl(\"" sh "\", \"" sh "\"")))
+                  (("slurp") slurp)
-               (substitute* "src/screencast/screencast.c"
+                  (("/bin/sh") sh))
-                 (("execvp\\(\"sh")
+                (substitute* "src/screencast/screencast.c"
-                  (string-append "execvp(\"" sh))))))
+                  (("execvp\\(\"sh")
-         (add-after 'install 'install-documentation
+                   (format #f "execvp(\"~a" sh))))))
-           (lambda* (#:key outputs #:allow-other-keys)
+          (add-after 'install 'install-documentation
-             (install-file "../source/README.md"
+            (lambda _
-                           (string-append (assoc-ref outputs "out")
+              (install-file "../source/README.md"
-                                          "/share/doc/" ,name)))))))
+                            (string-append #$output "/share/doc/"
-    (native-inputs
+                                           #$name)))))))
-     (list cmake-minimal pkg-config scdoc))
+    (native-inputs (list cmake-minimal pkg-config scdoc))
-    (inputs (list elogind
+    (inputs (list bash-minimal
-                  bash-minimal
+                  elogind
                   grim
                   iniparser
-                  mesa
                   libinih
+                  mesa
                   pipewire
                   slurp
                   wayland
@@ -3474,6 +3476,45 @@ remote-desktop @code{xdg-desktop-portal} interfaces for wlroots based
 compositors.")
     (license license:expat)))
 
+(define-public xdg-desktop-portal-termfilechooser
+  (package
+    (name "xdg-desktop-portal-termfilechooser")
+    (version "1.3.0")
+    (source
+      (origin
+        (method git-fetch)
+        (uri (git-reference
+              (url "https://github.com/hunkyburrito/xdg-desktop-portal-termfilechooser")
+              (commit (string-append "v" version))))
+        (file-name (git-file-name name version))
+        (sha256
+         (base32 "1wvmwl678fr5pxz7x248pm5v4jd3bycz8nqa2q87akys5b9d1xpd"))))
+    (build-system meson-build-system)
+    (arguments
+      (list #:phases
+            #~(modify-phases %standard-phases
+                (add-after 'install 'fix-paths
+                  (lambda* (#:key inputs #:allow-other-keys)
+                    (let ((sed (search-input-file inputs "/bin/sed")))
+                      (substitute* (find-files #$output "-wrapper\\.sh")
+                        ((" sed") (string-append " " sed)))))))))
+    (native-inputs
+      (list cmake-minimal
+            pkg-config
+            scdoc))
+    (inputs
+      (list basu
+            libinih
+            sed))
+    (home-page "https://github.com/hunkyburrito/xdg-desktop-portal-termfilechooser")
+    (synopsis "@code{xdg-desktop-portal} backend for choosing files with your
+favorite terminal file chooser")
+    (description
+     "This package provides a backend implementation for xdg-desktop-portal that
+allows using your preferred terminal file manager as file chooser in other
+applications.")
+    (license license:expat)))
+
 (define-public poweralertd
   (package
     (name "poweralertd")

gnu/packages/games.scm

@@ -227,6 +227,7 @@
   #:use-module (gnu packages shells)
   #:use-module (gnu packages sqlite)
   #:use-module (gnu packages squirrel)
+  #:use-module (gnu packages stb)
   #:use-module (gnu packages swig)
   #:use-module (gnu packages tcl)
   #:use-module (gnu packages terminals)
@@ -552,14 +553,14 @@ use with @code{udev-service-type}.")
 (define-public armagetronad
   (package
     (name "armagetronad")
-    (version "0.2.9.2.3")
+    (version "0.2.9.3.0")
     (source (origin
               (method url-fetch)
               (uri (string-append "mirror://sourceforge/armagetronad/stable/"
                                   version "/armagetronad-" version ".tbz"))
               (sha256
                (base32
-                "0a6rlp2lj5bp7pg1yf8brjyb3mw7nqp3amj19wvz3xni21bbc31k"))))
+                "1q1zlbhbcimr6bw0ms1pr8hz4q850ivi3hvxn3467jfgiq22f3cy"))))
     (build-system gnu-build-system)
     (arguments
      (list #:configure-flags
@@ -576,6 +577,7 @@ use with @code{udev-service-type}.")
                      (("^install_link .*BINDIR.*") "")))))))
     (native-inputs (list pkg-config))
     (inputs (list libxml2
+                  curl
                   (sdl-union (list sdl sdl-image sdl-mixer))
                   freeglut
                   libpng
@@ -1233,11 +1235,11 @@ original rogue game found on 4.2BSD.")
     (license license:bsd-3)))
 
 (define-public sgt-puzzles
-  (let ((commit "28032bd5a0d3dc409eb225b8bdb23fd0b18a28d7")
+  (let ((commit "06e37f1e334d85c7c779f79ef9e484ff2f708269")
         (revision "0"))
     (package
       (name "sgt-puzzles")
-      (version (git-version "20251120" revision commit))
+      (version (git-version "20260308" revision commit))
       (source
        (origin
          (method git-fetch)
@@ -1246,7 +1248,7 @@ original rogue game found on 4.2BSD.")
                (commit commit)))
          (file-name (git-file-name name version))
          (sha256
-          (base32 "0533fzzagmi7g7sw1fdgpzy6gjpif77gxf3avz1qnjsma5gq7f2l"))))
+          (base32 "141d57s1va2ng7nxjzdgmsqh5mdb0mpy3yiqaj4rplya8xlhm34h"))))
       (build-system cmake-build-system)
       (arguments
        (list
@@ -3407,7 +3409,8 @@ and defeat them with your bubbles!")
                                  "SamTSE/Sources/Engine/Engine.cpp")
                 (("@OUTPUT_DIR@") #$output)))))))
     (inputs (list sdl2 libvorbis))
-    (native-inputs (list flex bison nasm imagemagick))
+    (native-inputs (cons* flex bison imagemagick
+                          (maybe-nasm)))
     (home-page "https://github.com/tx00100xt/SeriousSamClassic")
     (synopsis "SeriousSam engine and Serious Sam: TFE and TSE")
     (description
@@ -4128,7 +4131,7 @@ a C library, so they can easily be integrated into other programs.")
 (define-public taisei
   (package
     (name "taisei")
-    (version "1.4.2")
+    (version "1.4.4")
     (source
      (origin
        (method url-fetch)
@@ -4136,7 +4139,7 @@ a C library, so they can easily be integrated into other programs.")
                            "taisei/releases/download/v" version
                            "/taisei-" version ".tar.xz"))
        (sha256
-        (base32 "19sgm175clkvpcv0b9p4jkjpfxqw0kyl2i5p8w63kwzqcjp9m1jx"))))
+        (base32 "13b2ha8nsdzbydirvc7hw1q46jzhn6cx9b9spgk777swjlgx2vph"))))
     (build-system meson-build-system)
     (arguments
      (list
@@ -4145,7 +4148,8 @@ a C library, so they can easily be integrated into other programs.")
                                 "-Dr_gles30=enabled"
                                 "-Dshader_transpiler=enabled")))
     (native-inputs
-     (list pkg-config
+     (list cmake-minimal
+           pkg-config
            python
            python-docutils
            python-pygments
@@ -4153,24 +4157,29 @@ a C library, so they can easily be integrated into other programs.")
     (inputs
      (list cglm
            freetype
+           glslang
+           libdecor                     ; XXX: for sdl3
            libpng
            libwebp
            libzip
            mesa
            openssl
            opusfile
-           sdl2
+           sdl3
-           sdl2-mixer
            shaderc
            spirv-cross
+           spirv-tools                  ; for glslang
+           vulkan-loader                ; XXX: for sdl3?
            zlib
            (list zstd "lib")))
     (home-page "https://taisei-project.org/")
     (synopsis "Shoot'em up fangame and libre clone of Touhou Project")
     (description
-     "The player controls a character (one of three: Good, Bad, and Dead),
+     "Taisei is a vertical shoot'em up game, in which the player controls
-dodges the missiles (lots of it cover the screen, but the character's hitbox
+one of three characters.  While moving through stages, a large number of
-is very small), and shoot at the adversaries that keep appear on the screen.")
+enemies and even larger amounts of bullets appear that require careful
+maneuvers to dodge.  By shooting the enemies, players receive powerups
+for their characters, allowing them to shoot even more.")
     (license (list
               ;; game
               license:expat
@@ -4723,6 +4732,10 @@ for common mesh file formats, and collision detection.")
                       (url "https://github.com/thelaui/M.A.R.S.")
                       (commit commit)))
                 (file-name (git-file-name name version))
+                (modules '((guix build utils)))
+                (snippet
+                 #~(begin
+                     (delete-file-recursively "ext_libs_for_windows")))
                 (sha256
                  (base32
                   "0bdi4ja39rark742qvqixm8khai5k8qd84z5kzim9jcjdvvwyqj9"))))
@@ -4749,7 +4762,8 @@ for common mesh file formats, and collision detection.")
 attractive physics.  Players can battle each other or computer controlled
 enemies in different game modes such as space ball, death match, team death
 match, cannon keep, and grave-itation pit.")
-      (license license:gpl3+))))
+      (license (list license:gpl3+
+                     license:cc-by-sa3.0))))) ;/data/audio/music
 
 (define-public alienblaster
   (package
@@ -5335,54 +5349,124 @@ also available.")
        (sha256
         (base32 "05aj09rm50xb6910zx6imarj8k728x9bpvpa7ydwgb4sj1nypil8"))
        (modules '((guix build utils)))
-       (snippet '(begin
+       (snippet
-                   (with-directory-excursion "thirdparty"
+        '(begin
-                     (delete-file-recursively "glm")
+          (with-directory-excursion "thirdparty"
-                     (substitute* "CMakeLists.txt"
+            ;; Delete third party ibraries, except these libraries:
-                       (("add_subdirectory\\(glm\\)")
+            ;; glad: header file is not available in the system glad package.
-                        "find_package(glm REQUIRED)")))
+            ;; imgui: configured with "srb2_imconfig.h".
-                   (with-directory-excursion "src"
+            ;; libwebm: Not available in Guix.
-                     (substitute* "CMakeLists.txt"
+            ;; renamenoise: Not available in Guix.
-                       (("glm::glm")
+            ;; tracy: header files are not available in the system tracy
-                        "glm")))))))
+            ;; package.
+            (for-each delete-file-recursively
+                      '("discord-rpc"
+                        "glm"
+                        "nlohmann-json"
+                        "overlay-ports/libyuv"
+                        "tcbrindle_span"
+                        "vma"
+                        "volk"
+                        "vulkan-headers"
+                        "xmp-lite"))
+            ;; Unbundle stb.
+            (with-directory-excursion "stb"
+              (for-each delete-file
+                        '("include/stb_rect_pack.h"
+                          "stb_vorbis.c"))
+              (substitute* "stb_rect_pack.c"
+                (("\"include\\/stb_rect_pack\\.h\"") "<stb_rect_pack.h>"))
+              (substitute* "CMakeLists.txt"
+                (("include\\/stb_rect_pack\\.h ") "")))
+            ;; Find third party libraries from the system and do not add the
+            ;; deleted directories.
+            (substitute* "CMakeLists.txt"
+              (("add_subdirectory\\((glm|discord-rpc|xmp-lite|fmt|volk)\\)"
+                _ keep)
+               (string-append "find_package(" keep " REQUIRED)"))
+              (("xmp-lite") "libxmp")
+              ((".*nlohmann-json.*") "")
+              ((".*tcbrindle_span.*") "")
+              ((".*vulkan-headers.*") "")
+              ((".*vma.*") "")))
+          (with-directory-excursion "src"
+            ;; Link the system libraries instead of the unbundled ones.
+            (substitute* "CMakeLists.txt"
+              ((".*tcbrindle::span.*") "")
+              (("glm::glm") "glm")
+              (("xmp-lite::xmp-lite") "xmp")
+              (("fmt::fmt-header-only") "fmt")
+              ((".*nlohmann_json::nlohmann_json.*") "")))
+          ;; Rename the icon to match with the executable file.
+          (rename-file "srb2.png" "ringracers.png")))))
     (build-system cmake-build-system)
     (arguments
      (list
       #:tests? #f ;There are no tests.
       #:configure-flags
-      #~(list "-DCMAKE_C_FLAGS_RELWITHDEBINFO='-O3 -g -DNDEBUG'"
+      #~(list "-DSRB2_CONFIG_ENABLE_DISCORDRPC=OFF"
+              "-DCMAKE_C_FLAGS_RELWITHDEBINFO='-O3 -g -DNDEBUG'"
               "-DCMAKE_CXX_FLAGS_RELWITHDEBINFO='-O3 -g -DNDEBUG'")
       #:phases
       #~(modify-phases %standard-phases
-          (add-after 'install 'move-and-wrap-binary
+          (add-after 'unpack 'copy-stb_vorbis.c
-            ;; Install executable to $out/bin.
             (lambda* (#:key inputs #:allow-other-keys)
-              (with-directory-excursion #$output
+              (install-file (search-input-file inputs "/stb_vorbis.c")
-                (mkdir "bin")
+                            "thirdparty/stb")))
-                (rename-file "ringracers" "bin/ringracers")
+          (replace 'install
-                (wrap-program "bin/ringracers"
+            (lambda _
-                  `("RINGRACERSWADDIR" =
+              (install-file "bin/ringracers" (string-append #$output "/bin"))
-                    (,(assoc-ref inputs "ring-racers-data"))))))))))
+              (install-file "../source/ringracers.png"
-    (native-inputs (list pkg-config))
+                            (string-append #$output "/share/pixmaps"))))
-    (inputs (list glm
+          (add-after 'install 'wrap-program
+            (lambda* (#:key inputs #:allow-other-keys)
+              (wrap-program (string-append #$output "/bin/ringracers")
+                `("RINGRACERSWADDIR" =
+                  (,(assoc-ref inputs "ring-racers-data"))))))
+          (add-after 'wrap-program 'create-desktop-entry
+            (lambda _
+              (let* ((datadir (string-append #$output "/share"))
+                     (appdir (string-append datadir "/applications")))
+                (mkdir-p appdir)
+                (make-desktop-entry-file (string-append appdir
+                                                        "/ringracers.desktop")
+                  #:name "Dr. Robotnik's Ring Racers"
+                  #:comment "Technical kart racing game"
+                  #:icon "ringracers"
+                  #:exec (string-append #$output "/bin/ringracers")
+                  #:startup-notify #f
+                  #:categories '("Application" "Game"))))))))
+    (native-inputs
+     (list pkg-config
+           (package-source stb)))
+    (inputs (list bash-minimal
+                  curl
+                  fmt
+                  glm
                   libogg
                   libpng
                   libvorbis
                   libvpx
+                  libxmp
                   libyuv
+                  nlohmann-json
                   opus
                   ring-racers-data
                   sdl2
-                  zlib
+                  stb-rect-pack
-                  curl))
+                  tcbrindle-span
-    (home-page "https://kartkrew.org")
+                  vulkan-headers
+                  vulkan-memory-allocator
+                  vulkan-volk
+                  zlib))
+    (home-page "https://www.kartkrew.org/")
     (synopsis "Technical kart racing game")
     (description
-     "Dr. Robotnik's Ring Racers is a kart racing game drawing inspiration from
+     "Dr.@: Robotnik's Ring Racers is a kart racing game drawing inspiration
-``anti-gravity'' racers, fighting games, and traditional-style kart racing.
+from \"anti-gravity\" racers, fighting games, and traditional-style kart
-Ring Racers is designed with an emphasis on player agency in the face of highly
+racing.  Ring Racers is designed with an emphasis on player agency in the face
-technical game-play challenges in both single-player and online multiplayer
+of highly technical game-play challenges in both single-player and online
-modes.")
+multiplayer modes.")
     (license license:gpl2+)))
 
 (define-public unknown-horizons
@@ -5713,14 +5797,14 @@ world}, @uref{http://evolonline.org, Evol Online} and
 (define-public openttd-engine
   (package
     (name "openttd-engine")
-    (version "15.2")
+    (version "15.3")
     (source
      (origin (method url-fetch)
              (uri (string-append "https://cdn.openttd.org/openttd-releases/"
                                  version "/openttd-" version "-source.tar.xz"))
              (sha256
               (base32
-               "0xpzschcf562giqh3p8jj9gbi8chqrikdwgqqipabyn0nwbvd6nj"))))
+               "1rrvjxsr2dp9zr6b35ifiw41c0dwqqcaq90r0x18misrgpm1x8jy"))))
     (build-system cmake-build-system)
     (inputs
      (list allegro
@@ -5954,7 +6038,7 @@ Transport Tycoon Deluxe.")
   (package
     (inherit openttd)
     (name "openttd-jgrpp")
-    (version "0.71.1")
+    (version "0.72.0")
     (source
      (origin
        (method git-fetch)
@@ -5963,7 +6047,7 @@ Transport Tycoon Deluxe.")
              (commit (string-append "jgrpp-" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "1cy1ghc1mc61hdz8lykx2ggs5nld30jdgj8y4vdli2v1ffhy7xy9"))))
+        (base32 "0xbnnx03y8vhbgi6s7hsxhiqhsy6rhj7fypq6dfqh0z74m5bldkf"))))
     (inputs (modify-inputs inputs
               (append zstd harfbuzz)))
     (arguments

gnu/packages/gcc.scm

@@ -928,7 +928,8 @@ It also includes runtime support libraries for these languages.")
                                      "gcc-5.0-libvtv-runpath.patch"
                                      "gcc-10-libsanitizer-no-crypt.patch"
                                      "gcc-11-libstdc++-hurd-libpthread.patch"
-                                     "gcc-libstdc++-newer-gcc.patch"))
+                                     "gcc-libstdc++-newer-gcc.patch"
+                                     "gcc-11-x86_64-gnu.patch"))
             (modules '((guix build utils)))
             (snippet gcc-canadian-cross-objdump-snippet)))
    (properties
@@ -1408,8 +1409,21 @@ as the 'native-search-paths' field."
   (define version (package-version gdc))
   (define (since-version? since) (version>=? version since))
   (define (until-version? until) (version>? until version))
+  (define patches (cond ((and (since-version? "11")
+                              (until-version? "12"))
+                         (search-patches "gdc-11-druntime-hurd.patch"))
+                        ((and (since-version? "14")
+                              (until-version? "15"))
+                         (search-patches "gdc-14-druntime-hurd.patch"))
+                        (else '())))
   (package
     (inherit gdc)
+    (source
+     (origin
+       (inherit (package-source gdc))
+       (patches
+        (append (origin-patches (package-source gdc))
+                patches))))
     (arguments
      (substitute-keyword-arguments arguments
        ((#:modules modules)

gnu/packages/genealogy.scm

@@ -44,7 +44,7 @@
 (define-public gramps
   (package
     (name "gramps")
-    (version "5.2.3")
+    (version "6.0.8")
     (source
      (origin
        (method git-fetch)
@@ -53,7 +53,7 @@
              (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "1gzhi5hxpgc6pxs40xsxf67hndjifnfhm89s3ly68c70x83qmwhd"))))
+        (base32 "06kdcf6h9rqdcsx097a3n2z4q8yvln20ja7ajwrna1i133591bra"))))
     (build-system pyproject-build-system)
     (arguments
      (list
@@ -68,6 +68,11 @@
         (guix build utils))
       #:phases
       #~(modify-phases %standard-phases
+          (add-before 'build 'fix-gexiv2-dependency
+            (lambda _
+              ;; Use our own version
+              (substitute* (find-files "." ".*\\.py$")
+                (("\"GExiv2\", \"0.10\"") "\"GExiv2\", \"0.16\""))))
           (add-before 'check 'prepare-tests
             (lambda _
               (setenv "HOME" (getenv "TMPDIR"))
@@ -113,6 +118,7 @@
            python-bsddb3
            python-jsonschema
            python-lxml
+           python-orjson
            python-pillow
            python-pycairo
            python-pygobject

gnu/packages/geo.scm

@@ -425,14 +425,29 @@ hierarchical hexagonal geospatial indexing system")
                (base32
                 "00qdk9a4048pzfj2rhzkfw3lvm642znf6kr4x29i3d94494pxsnn"))))
     (build-system cmake-build-system)
-    (arguments `(#:phases
+    (arguments
-                 (modify-phases %standard-phases
+     `(#:phases
-                   (add-after
+       (modify-phases %standard-phases
-                    'unpack 'patch-test-shebangs
+         ,@(if (or (target-x86-32?) (target-arm32?))
-                    (lambda _
+               '((add-after 'unpack 'disable-broken-tests
-                      (substitute* '("tests/xmltester/testrunner.sh"
+                   (lambda _
-                                     "tests/xmltester/safe_to_xml.sh")
+                     ;; This test fails due to limited accuracy.
-                        (("/bin/sh") (which "sh"))))))))
+                     (delete-file "tests/xmltester/tests/general/TestCentroid.xml")
+                     (with-directory-excursion "tests/unit"
+                       ;; These also fail due to limited accuracy.
+                       (delete-file "algorithm/MinimumAreaRectangleTest.cpp")
+                       (delete-file "capi/GEOSMinimumRotatedRectangleTest.cpp")
+                       ;; It is unclear why these fail, but I'm guessing:
+                       ;; limited accuracy.
+                       (delete-file "linearref/LengthIndexedLineTest.cpp")
+                       (delete-file "math/DDTest.cpp")))))
+               '())
+         (add-after
+             'unpack 'patch-test-shebangs
+           (lambda _
+             (substitute* '("tests/xmltester/testrunner.sh"
+                            "tests/xmltester/safe_to_xml.sh")
+               (("/bin/sh") (which "sh"))))))))
     (inputs
      (list glib))
     (home-page "https://libgeos.org/")
@@ -955,6 +970,29 @@ hydrology and waste deposition.")
         (base32
          "03r6mspfv22fs4x4jcgv25v9gsj5k6zy8incvyf94qf50g47s2bc"))))
     (build-system cmake-build-system)
+    (arguments
+     (if (target-32bit?)
+         (list
+          #:phases
+          '(modify-phases %standard-phases
+             (add-after 'unpack 'patch-tests
+               (lambda _
+                 ;; These regression tests fail due to accuracy problems.
+                 (substitute* "test/unit/test_factory.cpp"
+                   (("^TEST\\(factory, AuthorityFactory_createUnitOfMeasure_linear_us_survey_foot\\) \\{" m)
+                    (string-append m "\nGTEST_SKIP();\n")))
+                 (substitute* "test/unit/test_grids.cpp"
+                   (("^TEST_F\\(GridTest, VerticalShiftGridSet_gtx\\) \\{" m)
+                    (string-append m "\nGTEST_SKIP();\n")))
+                 (substitute* "test/unit/test_defmodel.cpp"
+                   (("^TEST\\(defmodel, evaluator_horizontal_unit_metre\\) \\{" m)
+                    (string-append m "\nGTEST_SKIP();\n")))
+                 ;; These regression tests fail due to accuracy problems.
+                 (substitute* "test/CMakeLists.txt"
+                   (("proj_add_gie_test\\(\"4D-API-cs2cs-style\".+") "")
+                   (("proj_add_gie_test\\(\"Builtins\".+") "")
+                   (("proj_add_gie_test\\(\"peirce_q\".+") ""))))))
+         '()))
     (native-inputs (list googletest pkg-config))
     (propagated-inputs (list curl libtiff sqlite)) ;required by proj.pc
     (home-page "https://proj.org/")
@@ -984,7 +1022,34 @@ lets developers use the functionality of Proj in their own software.")
                            version ".tar.gz"))
        (sha256
         (base32
-         "1g0hkpiablvhsmw0kn5frwgdir3q7avc45p6lc1zhhhzkv5ikydh"))))))
+         "1g0hkpiablvhsmw0kn5frwgdir3q7avc45p6lc1zhhhzkv5ikydh"))))
+    (arguments
+     (if (target-32bit?)
+         (list
+          #:phases
+          '(modify-phases %standard-phases
+             (add-after 'unpack 'patch-tests
+               (lambda _
+                 ;; These regression tests fail due to accuracy problems.
+                 (substitute* "test/unit/test_factory.cpp"
+                   (("^TEST\\(factory, AuthorityFactory_createUnitOfMeasure_linear_us_survey_foot\\) \\{" m)
+                    (string-append m "\nGTEST_SKIP();\n")))
+                 (substitute* "test/unit/test_grids.cpp"
+                   (("^TEST_F\\(GridTest, VerticalShiftGridSet_gtx\\) \\{" m)
+                    (string-append m "\nGTEST_SKIP();\n")))
+                 (substitute* "test/unit/test_defmodel.cpp"
+                   (("^TEST\\(defmodel, evaluator_horizontal_unit_metre\\) \\{" m)
+                    (string-append m "\nGTEST_SKIP();\n")))
+                 ;; These regression tests fail due to accuracy problems.
+                 (substitute* "test/CMakeLists.txt"
+                   (("proj_add_gie_test\\(\"4D-API-cs2cs-style\".+") "")
+                   (("proj_add_gie_test\\(\"Builtins\".+") "")
+                   (("proj_add_gie_test\\(\"peirce_q\".+") "")
+                   (("proj_add_gie_test\\(\"adams_ws2\".+") ""))
+                 (substitute* "test/cli/CMakeLists.txt"
+                   (("proj_add_test_script_sh\\(\"testvarious\" CS2CS_BIN\\)") ""))))))
+         '()))))
+
 
 (define-public python-obspy
   (package
@@ -1219,20 +1284,23 @@ readily with other Python GIS packages such as pyproj, Rtree, and Shapely.")
 (define-public python-geopack
   (package
     (name "python-geopack")
-    (version "1.0.10")
+    (version "1.0.12")
     (source
      (origin
-       (method url-fetch)
+       (method git-fetch)
-       (uri (pypi-uri "geopack" version))
+       (uri (git-reference
+              (url "https://github.com/tsssss/geopack")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
        (sha256
-        (base32 "0mryjp7m4h99qlpvnn40s81sygr73qcv8rkmjp9pcli1gz829kjf"))))
+        (base32 "0ap5j4359xxjkbz06y097yq5d37sxcwlnlsfwrv6dvza7ydmgcgg"))))
     (build-system pyproject-build-system)
     (arguments
      (list
       ;; XXX Reported upstream <https://github.com/tsssss/geopack/issues/21>.
       #:tests? #f))
     (native-inputs
-     (list python-pytest python-setuptools python-wheel))
+     (list python-setuptools))
     (propagated-inputs
      (list python-numpy python-scipy))
     (home-page "https://github.com/tsssss/geopack")

gnu/packages/gnome-circle.scm

@@ -682,7 +682,7 @@ and a high score table.")
 (define-public komikku
   (package
     (name "komikku")
-    (version "50.1.0")
+    (version "50.3.0")
     (source
      (origin
        (method git-fetch)
@@ -692,7 +692,7 @@ and a high score table.")
        (file-name (git-file-name name version))
        (sha256
         (base32
-         "0q858zvpqy32nb2lxdfy1k6fgal46kp634534fg983192fyk1pqp"))))
+         "0hm1infvdsms193g2yp7qw7lrsxjsx5zziib8hgch34y6dbhfhf1"))))
     (build-system meson-build-system)
     (arguments
      (list
@@ -780,7 +780,7 @@ developed with the aim of being used with the Librem 5 phone.")
 (define-public komikku-servers
   (package
     (name "komikku-servers")
-    (version "50.1.0")
+    (version "50.3.0")
     (source
      (origin
        (method git-fetch)
@@ -790,7 +790,7 @@ developed with the aim of being used with the Librem 5 phone.")
        (file-name (git-file-name name version))
        (sha256
         (base32
-         "0q858zvpqy32nb2lxdfy1k6fgal46kp634534fg983192fyk1pqp"))))
+         "0hm1infvdsms193g2yp7qw7lrsxjsx5zziib8hgch34y6dbhfhf1"))))
     (build-system copy-build-system)
     (arguments
      (list

gnu/packages/gnome.scm

@@ -10674,6 +10674,7 @@ playing media, scanning, and much more.")
                             system-config-printer
                             xdg-desktop-portal
                             xdg-user-dirs
+                            xdg-user-dirs-gtk
                             yelp
                             zenity))
    (description "This package provides a list of packages required for
@@ -11575,7 +11576,8 @@ accessibility infrastructure.")
                     name "-" version ".tar.xz"))
               (sha256
                (base32
-                "0sfs06f66dsibvnp87jshhs7n3f8shkn9x7j3ygpk8409za2n2xy"))))
+                "0sfs06f66dsibvnp87jshhs7n3f8shkn9x7j3ygpk8409za2n2xy"))
+              (patches (search-patches "orca-fix-gst-init-check-call.patch"))))
     (build-system meson-build-system)
     (arguments
      '(#:glib-or-gtk? #t
@@ -11593,10 +11595,7 @@ accessibility infrastructure.")
                    (pgrep (string-append
                            (assoc-ref inputs "procps") "/bin/pgrep")))
                (substitute* "src/orca/orca_modifier_manager.py"
-                 (("'xkbcomp'") (format #f "'~a'" xkbcomp)))
+                 (("\"xkbcomp\"") (format #f "'~a'" xkbcomp)))
-               (substitute* "src/orca/debug.py"
-                 (("'pgrep %s'")
-                  (format #f "'~a %s'" pgrep)))
                (substitute* "src/orca/orca_bin.py.in"
                  (("'pgrep -u %s -x orca'")
                   (format #f "'~a -u %s -x orca'" pgrep))))))
@@ -11627,6 +11626,7 @@ accessibility infrastructure.")
            `(,liblouis "python")
            procps                       ; for pgrep
            python
+           python-dbus
            python-pygobject-3.50
            python-pyatspi
            speech-dispatcher

gnu/packages/gnupg.scm

@@ -26,6 +26,7 @@
 ;;; Copyright © 2024 Zheng Junjie <873216071@qq.com>
 ;;; Copyright © 2025 Antoine Côté <antoine.cote@posteo.net>
 ;;; Copyright © 2026 Luis Guilherme Coelho <lgcoelho@disroot.org>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -971,10 +972,8 @@ passphrase when @code{gpg} is run and needs it.")))
            (lambda _
              (invoke "sh" "autogen.sh"))))))
     (native-inputs
-     `(("autoconf" ,autoconf)
+     (modify-inputs native-inputs
-       ("automake" ,automake)
+       (prepend autoconf automake gettext-minimal)))
-       ("gettext" ,gettext-minimal)
-       ,@(package-native-inputs pinentry-tty)))
     (inputs
      (modify-inputs inputs
        (prepend efl)))

gnu/packages/gnuzilla.scm

@@ -605,9 +605,9 @@ in the case of Firefox, it is browser/locales/all-locales."
     "zh-TW"))
 
 ;;; Please keep these versions in sync with icedove.
-(define %icecat-base-version "140.10.0")
+(define %icecat-base-version "140.10.2")
 (define %icecat-version (string-append %icecat-base-version "-gnu1"))
-(define %icecat-build-id "20260421000000") ;must be of the form YYYYMMDDhhmmss
+(define %icecat-build-id "20260509000000") ;must be of the form YYYYMMDDhhmmss
 
 ;; 'icecat-source' is a "computed" origin that generates an IceCat tarball
 ;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat'
@@ -627,9 +627,9 @@ in the case of Firefox, it is browser/locales/all-locales."
                   "firefox-" upstream-firefox-version ".source.tar.xz"))
             (sha256
              (base32
-              "06996548nfmn4r4mfw3wvgb1mp35majc5hjyhs1krgp33ck2m1f0"))))
+              "0xsfy8b80mh6kb13928ym3pdrnfyfs98xwz6fwrc20p7f99zcsvr"))))
 
-         (gnuzilla-commit "02125f31250c0240ee2ab1aa629ce66d4ffb9f30")
+         (gnuzilla-commit "f04b721394b9d1103e92dbe989060f96756fe54c")
          (gnuzilla-source
           (origin
             (method git-fetch)
@@ -640,7 +640,7 @@ in the case of Firefox, it is browser/locales/all-locales."
                                       (string-take gnuzilla-commit 8)))
             (sha256
              (base32
-              "1hgx286gp0j46pklzzh5kvsnari1j3s0bff384m505m942k6l4hf"))))
+              "05d3793565pxz1h3wmwxk8j4cfqci4c0jic4q4ys8rbnfz98cj6z"))))
 
          ;; 'search-patch' returns either a valid file name or #f, so wrap it
          ;; in 'assume-valid-file-name' to avoid 'local-file' warnings.

gnu/packages/golang-check.scm

@@ -245,6 +245,55 @@ go-fuzz-headers.")
 @end itemize")
     (license license:expat)))
 
+(define-public go-github-com-alexkohler-prealloc
+  (package
+    (name "go-github-com-alexkohler-prealloc")
+    (version "1.0.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/alexkohler/prealloc")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "011i8yqzyjgwj17k44xvvg4bxfv8z20s0416r2d3yf4s3wqqygpq"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/alexkohler/prealloc"))
+    (home-page "https://github.com/alexkohler/prealloc")
+    (synopsis "Find slice declarations that could be preallocated")
+    (description
+     "This package is a Go static analysis tool to find slice declarations
+that could potentially be preallocated.")
+    (license license:expat)))
+
+(define-public go-github-com-alingse-asasalint
+  (package
+    (name "go-github-com-alingse-asasalint")
+    (version "0.0.11")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/alingse/asasalint")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1avz33cx3gcpps26rxijv7ic0njfmsdkbcp2mqg5yxhdcpq57s0q"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/alingse/asasalint"))
+    (propagated-inputs
+     (list go-golang-org-x-tools))
+    (home-page "https://github.com/alingse/asasalint")
+    (synopsis "Lint pass any slice as any in variadic function")
+    (description
+     "Golang linter, lint that pass any slice as any in variadic function.")
+    (license license:expat)))
+
 (define-public go-github-com-andreyvit-diff
   (package
     (name "go-github-com-andreyvit-diff")
@@ -603,6 +652,42 @@ time functions.")
 strings which may be used in mock tests.")
     (license license:unlicense)))
 
+(define-public go-github-com-daixiang0-gci
+  (package
+    (name "go-github-com-daixiang0-gci")
+    (version "0.13.7")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/daixiang0/gci")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1vhnqisf6d706qvswccb0d7bkbl53lyi84f5sl3zyaf6yk8ml9dx"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:import-path "github.com/daixiang0/gci"))
+    (native-inputs
+     (list go-github-com-stretchr-testify
+           go-github-com-spf13-cobra))
+    (propagated-inputs
+     (list go-gopkg-in-yaml-v3
+           go-golang-org-x-tools
+           go-golang-org-x-sync
+           go-golang-org-x-mod
+           go-go-uber-org-zap
+           go-github-com-pmezard-go-difflib
+           go-github-com-hexops-gotextdiff))
+    (home-page "https://github.com/daixiang0/gci")
+    (synopsis "Tool to make Go import order deterministic")
+    (description
+     "This package provides a tool that controls Go package import order and
+makes it always deterministic.")
+    (license license:bsd-3)))
+
 (define-public go-github-com-data-dog-go-sqlmock
   (package
     (name "go-github-com-data-dog-go-sqlmock")
@@ -676,6 +761,34 @@ style).
 @end itemize")
     (license license:isc)))
 
+(define-public go-github-com-denis-tingaikin-go-header
+  (package
+    (name "go-github-com-denis-tingaikin-go-header")
+    (version "1.0.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/denis-tingaikin/go-header")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0qzy2ps59dzsdn4ny8x48k9d1kscpddjilkxra1w16npsvix6mcm"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/denis-tingaikin/go-header"))
+    (native-inputs
+     (list go-github-com-stretchr-testify))
+    (propagated-inputs
+     (list go-golang-org-x-tools
+           go-gopkg-in-yaml-v3))
+    (home-page "https://github.com/denis-tingaikin/go-header")
+    (synopsis "Go linter for copyright headers")
+    (description
+     "Simple Go source code linter providing checks for copyright headers.")
+    (license license:gpl3)))
+
 (define-public go-github-com-dgryski-go-ddmin
   (package
     (name "go-github-com-dgryski-go-ddmin")
@@ -885,6 +998,31 @@ can use the mock clock.  This is a maintained fork of benbjohnson's
 @url{https://github.com/benbjohnson/clock, clock} package.")
     (license license:expat)))
 
+(define-public go-github-com-firefart-nonamedreturns
+  (package
+    (name "go-github-com-firefart-nonamedreturns")
+    (version "1.0.6")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/firefart/nonamedreturns")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1y9dz8rkd55p1rkib4y3b0czs44c2bb1pmlr4k53ms1k8d9bjgwk"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/firefart/nonamedreturns"))
+    (propagated-inputs
+     (list go-golang-org-x-tools))
+    (home-page "https://github.com/firefart/nonamedreturns")
+    (synopsis "Go linter to catch named returns")
+    (description
+     "This package provides a linter to find named returns in Go code.")
+    (license license:gpl3)))
+
 ;; XXX: The project looks like abandoned, see
 ;; <https://github.com/frankban/quicktest/issues/172>, remove when nothing
 ;; depends on it.
@@ -923,6 +1061,30 @@ can use the mock clock.  This is a maintained fork of benbjohnson's
 tests.")
     (license license:expat)))
 
+(define-public go-github-com-fzipp-gocyclo
+  (package
+    (name "go-github-com-fzipp-gocyclo")
+    (version "0.6.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/fzipp/gocyclo")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1w2h8qlifrskn8g8zcwb6banr9si0vck9y8irg1r51mc98cjv36l"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/fzipp/gocyclo"))
+    (home-page "https://github.com/fzipp/gocyclo")
+    (synopsis "Calculate cyclomatic complexity in Go")
+    (description
+     "This package calculates the cyclomatic complexities of functions and
+methods in Go source code.")
+    (license license:bsd-3)))
+
 (define-public go-github-com-gdey-tbltest
   (package
     (name "go-github-com-gdey-tbltest")
@@ -947,6 +1109,45 @@ tests.")
 tests.")
     (license license:expat)))
 
+(define-public go-github-com-ghostiam-protogetter
+  (package
+    (name "go-github-com-ghostiam-protogetter")
+    (version "0.3.20")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/ghostiam/protogetter")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1hap2ykmlnan5vz8sczdpiv93iidbgl13mlcdx468nhfprg2hbbm"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:tests? #f ;"module lookup disabled by GOPROXY=off"
+      #:import-path "github.com/ghostiam/protogetter"))
+    (propagated-inputs
+     (list go-golang-org-x-tools
+           go-github-com-gobwas-glob))
+    (home-page "https://github.com/ghostiam/protogetter")
+    (synopsis "Protobuf Golang linter")
+    (description
+     "This package is a linter developed specifically for Go programmers
+working with nested @code{protobuf} types.  It's designed to aid developers in
+preventing invalid memory address or nil pointer dereference errors arising
+from direct access of nested protobuf fields.
+
+When working with protobuf, it's quite common to have complex structures where
+a message field is contained within another message, which itself can be part
+of another message, and so on. If these fields are accessed directly and some
+field in the call chain will not be initialized, it can result in application
+panic.
+
+Protogetter addresses this issue by suggesting use of getter methods for field
+access.")
+    (license license:expat)))
+
 (define-public go-github-com-gkampitakis-ciinfo
   (package
     (name "go-github-com-gkampitakis-ciinfo")
@@ -1202,6 +1403,29 @@ kept in fixtures files.  Before the execution of every test, the test database
 is cleaned and the fixture data is loaded into the database.")
     (license license:expat)))
 
+(define-public go-github-com-go-xmlfmt-xmlfmt
+  (package
+    (name "go-github-com-go-xmlfmt-xmlfmt")
+    (version "1.1.3")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/go-xmlfmt/xmlfmt")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1cglrwmpg0lb7cnyvdz8js52h07rcvka7y9abksk9p5ajxj5rp1s"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/go-xmlfmt/xmlfmt"))
+    (home-page "https://github.com/go-xmlfmt/xmlfmt")
+    (synopsis "Go XML Formatter")
+    (description
+     "The Go XML Formatter, xmlfmt, will format the XML string in a readable way.")
+    (license license:expat)))
+
 ;; XXX: This repository has been archived by the owner
 ;; on May 9, 2021. It is now read-only. It's only used
 ;; by go-github-com-golang-gddo. Consider to remove when nothing
@@ -3967,6 +4191,20 @@ thoroughly
                     "  This package provides an command line interface (CLI)
 tool."))))
 
+(define-public go-gci
+  (package/inherit go-github-com-daixiang0-gci
+    (name "go-gci")
+    (arguments
+     (substitute-keyword-arguments arguments
+       ((#:tests? _ #t) #f)
+       ((#:install-source? _ #t) #f)
+       ((#:skip-build? _ #t) #f)))
+    (native-inputs
+     (append (package-native-inputs go-github-com-daixiang0-gci)
+             (package-propagated-inputs go-github-com-daixiang0-gci)))
+    (propagated-inputs '())
+    (inputs '())))
+
 (define-public go-pgmockproxy
   (package/inherit go-github-com-jackc-pgmock
     (name "go-pgmockproxy")
@@ -4090,6 +4328,21 @@ prints an ASCII fraphic representing the memory layout.")))
                     "  This package provides an command line interface (CLI)
 tool."))))
 
+(define-public protogetter
+  (package/inherit go-github-com-ghostiam-protogetter
+    (name "protogetter")
+    (arguments
+     (substitute-keyword-arguments arguments
+       ((#:tests? _ #f) #f)
+       ((#:skip-build? _ #t) #f)
+       ((#:install-source? _ #t) #f)
+       ((#:import-path _) "github.com/ghostiam/protogetter/cmd/protogetter")
+       ((#:unpack-path _ "") "github.com/ghostiam/protogetter")))
+    (native-inputs
+     (package-propagated-inputs go-github-com-ghostiam-protogetter))
+    (propagated-inputs '())
+    (inputs '())))
+
 (define-public unparam
   (package
     (inherit go-mvdan-cc-unparam)

gnu/packages/golang-crypto.scm

@@ -1600,7 +1600,7 @@ RSA, RSA-PSS, and ECDSA, though hooks are present for adding your own.")
 (define-public go-github-com-google-go-tpm
   (package
     (name "go-github-com-google-go-tpm")
-    (version "0.9.1")
+    (version "0.9.4")
     (source
      (origin
        (method git-fetch)
@@ -1609,7 +1609,7 @@ RSA, RSA-PSS, and ECDSA, though hooks are present for adding your own.")
              (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "1c5j5cvwl45ka93nknmv454ivd7kp9n8yql19gr6z01z0s1ph7sg"))))
+        (base32 "1sp1mbr6vz36zy9w36iksirbsj5p2jslsl8zs1cdj8s4ig4lkd9d"))))
     (build-system go-build-system)
     (arguments
      (list
@@ -3286,6 +3286,37 @@ to support the streaming mode required by Go's standard Hash interface.")
 @url{https://www.rfc-editor.org/errata/rfc7512, errata} specifications.")
     (license license:asl2.0)))
 
+(define-public go-github-com-tailscale-golang-x-crypto
+  (package
+    (name "go-github-com-tailscale-golang-x-crypto")
+    (version "0.91.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/tailscale/golang-x-crypto")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0m9qkk48mihrkmfh1fzfhc39l8957qkpfx8qbw4xdjws7dy4vzbz"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:tests? #f ;Tests have broken package imports (expected as per readme)
+      #:import-path "github.com/tailscale/golang-x-crypto"))
+    (propagated-inputs
+     (list go-golang-org-x-crypto
+           go-golang-org-x-term
+           go-golang-org-x-sys
+           go-golang-org-x-net))
+    (home-page "https://github.com/tailscale/golang-x-crypto")
+    (synopsis "Supplementary Go crypto libraries")
+    (description
+     "This package holds supplementary Go cryptography libraries, it's a fork
+of @code{golang.org/x/crypto} maintained by Tailscale.")
+    (license license:bsd-3)))
+
 (define-public go-github-com-tink-crypto-tink-go-v2
   (package
     (name "go-github-com-tink-crypto-tink-go-v2")

gnu/packages/golang-maths.scm

@@ -456,6 +456,29 @@ penalization.")
 FFT (Schonhage-Strassen method for multiplying integers).")
     (license license:bsd-3)))
 
+(define-public go-github-com-robinus2-golang-moving-average
+  (package
+    (name "go-github-com-robinus2-golang-moving-average")
+    (version "1.0.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/RobinUS2/golang-moving-average")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "02z3ad29653fz7whxkjjpq820ig9j8m68xj4kay14jyazkr5in1f"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/RobinUS2/golang-moving-average"))
+    (home-page "https://github.com/RobinUS2/golang-moving-average")
+    (synopsis "Moving average implementation for Go")
+    (description
+     "This package provides a moving average implementation for Go.")
+    (license license:asl2.0)))
+
 (define-public go-github-com-shopspring-decimal
   (package
     (name "go-github-com-shopspring-decimal")

gnu/packages/golang-xyz.scm

@@ -76,6 +76,7 @@
 ;;; Copyright © 2026 Giacomo Leidi <therewasa@fishinthecalculator.me>
 ;;; Copyright © 2026 Evgeny Pisemsky <mail@pisemsky.site>
 ;;; Copyright © 2026 Vinicius Monego <monego@posteo.net>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -120,7 +121,13 @@
   #:use-module (gnu packages serialization)
   #:use-module (gnu packages specifications)
   #:use-module (gnu packages xdisorg)
-  #:use-module (gnu packages xorg))
+  #:use-module (gnu packages xorg)
+
+  ;; TODO: Remove when go-github-com-containerd-containerd is moved to (gnu
+  ;; packages containers)
+  #:use-module (gnu packages docker)
+  #:use-module (gnu packages prometheus)
+  #:use-module (gnu packages kubernetes))
 
 ;;; Commentary:
 ;;;
@@ -525,6 +532,35 @@ file along with an index.html file.")
      "Package tcell provides a gruid Driver for making terminal apps.")
     (license license:isc)))
 
+(define-public go-codeberg-org-chavacava-garif
+  (package
+    (name "go-codeberg-org-chavacava-garif")
+    (version "0.2.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://codeberg.org/chavacava/garif.git")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0cz037yb9gnk9fd61pni6m0n9cbrwmlxxija5vm91mplyxlih05h"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "codeberg.org/chavacava/garif"))
+    (native-inputs
+     (list go-github-com-stretchr-testify))
+    (home-page "https://codeberg.org/chavacava/garif")
+    (synopsis "Create and manipulate SARIF logs")
+    (description
+     "This package defines all the Go structures required to model a log file.
+
+SARIF, from Static Analysis Results Interchange Format, is a standard
+JSON-based format for the output of static analysis tools defined and promoted
+by @url{https://www.oasis-open.org/, OASIS}.")
+    (license license:expat)))
+
 (define-public go-codeberg-org-emersion-go-scfg
   (package
     (name "go-codeberg-org-emersion-go-scfg")
@@ -613,6 +649,33 @@ recursively any exported one.  It also won't merge structs inside
 maps (because they are not addressable using Go reflection).")
     (license license:bsd-3)))
 
+(define-public go-fyne-io-systray
+  (package
+    (name "go-fyne-io-systray")
+    (version "1.11.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/fyne-io/systray")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0yrd4f3n8wrqcqradmqq9w0b31hd5hali876xkynfhm3nhaz4j1i"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "fyne.io/systray"))
+    (propagated-inputs
+     (list go-github-com-godbus-dbus-v5
+           go-golang-org-x-sys))
+    (home-page "https://fyne.io/systray/")
+    (synopsis "Place an icon and menu in the notification area")
+    (description
+     "This package is a cross-platform Go library to place an icon and menu in
+the notification area.")
+    (license license:asl2.0)))
+
 (define-public go-git-sr-ht-rjarry-go-opt
   (package
     (name "go-git-sr-ht-rjarry-go-opt")
@@ -2981,6 +3044,38 @@ input from the terminal while not echoing the input back (similar to
 and is therefore compatible with cross-compiling.")
     (license license:expat)))
 
+(define-public go-github-com-bitfield-script
+  (package
+    (name "go-github-com-bitfield-script")
+    (version "0.24.1")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/bitfield/script")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1pzmz7n39sh9sprclzd0m0l0flf626286fh51m065yjhkqzrjw89"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/bitfield/script"
+      #:test-flags #~(list "-vet=off")))
+    (native-inputs
+     (list go-github-com-google-go-cmp))
+    (propagated-inputs
+     (list go-github-com-itchyny-gojq
+           go-github-com-rogpeppe-go-internal
+           go-mvdan-cc-sh-v3))
+    (home-page "https://github.com/bitfield/script")
+    (synopsis "Making it easy to write shell-like scripts in Go")
+    (description
+     "Package script aims to make it easy to write shell-type scripts in Go,
+for general system administration purposes: reading files, counting lines,
+matching strings, and so on.")
+    (license license:expat)))
+
 (define-public go-github-com-bitly-go-hostpool
   (package
     (name "go-github-com-bitly-go-hostpool")
@@ -4433,6 +4528,34 @@ over strings.")
 @code{https://en.wikipedia.org/wiki/WebP, WebP} images.")
     (license license:bsd-3)))
 
+(define-public go-github-com-chainguard-dev-clog
+  (package
+    (name "go-github-com-chainguard-dev-clog")
+    (version "1.8.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/chainguard-dev/clog")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0b95vw8czs2r9lscyi85vppbyqj672zm6z2n9siy1s9yv6fkys62"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/chainguard-dev/clog"))
+    (home-page "https://github.com/chainguard-dev/clog")
+    (synopsis "Context aware slog")
+    (description
+     "This package provides a context-aware Go std lib
+@url{https://pkg.go.dev/log/slog, @code{slog}}.  The context Logger can be
+used to use Loggers from the context.  This is sometimes preferred over the
+@url{https://github.com/chainguard-dev/clog#context-handler, Context Handler},
+since this can make it easier to use different loggers in different
+contexts (e.g. testing).")
+    (license license:asl2.0)))
+
 (define-public go-github-com-charlievieth-fastwalk
   (package
     (name "go-github-com-charlievieth-fastwalk")
@@ -6039,6 +6162,7 @@ dependencies and a simple API.")
     (license license:asl2.0)))
 
 (define-public go-github-com-containerd-containerd
+  ;; TODO: Move to (gnu packages containers).
   (package
     (name "go-github-com-containerd-containerd")
     (version "1.7.22")
@@ -6046,110 +6170,156 @@ dependencies and a simple API.")
      (origin
        (method git-fetch)
        (uri (git-reference
-             (url "https://github.com/containerd/containerd")
+              (url "https://github.com/containerd/containerd")
-             (commit (string-append "v" version))))
+              (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
         (base32 "1yfda4qnygy4lcqb6cqc7v7h2lf0gl64xhvkp39zngmqm0lw30gh"))
        (snippet
         #~(begin
             (use-modules (guix build utils))
-            (delete-file-recursively "vendor")))))
+            (delete-file-recursively "vendor")
+            ;; Submodules with their own go.mod files and packaged separately:
+            ;;
+            ;; - github.com/containerd/containerd/api
+            (delete-file-recursively "api")))))
     (build-system go-build-system)
-
-    ;; For the forgejo-runner build, we only need the pkg/userns module which
-    ;; doesn't require the massive dependency tree for all of containerd, so
-    ;; we cheat and skip the build and avoid having to package a large number
-    ;; of additional dependencies.
     (arguments
      (list
       #:import-path "github.com/containerd/containerd"
       #:skip-build? #t
-      #:tests? #f))
+      #:test-subdirs
-    ;; (propagated-inputs
+      ;; XXX: Remove when all inputs are packaged.
-    ;;  (list go-tags-cncf-io-container-device-interface
+      #~(list "archive/compression"
-    ;;        go-k8s-io-utils
+              "cio"
-    ;;        go-k8s-io-klog-v2
+              "content"
-    ;;        go-k8s-io-cri-api
+              "content/local"
-    ;;        go-k8s-io-component-base
+              "contrib/apparmor"
-    ;;        go-k8s-io-client-go
+              "contrib/seccomp/kernelversion"
-    ;;        go-k8s-io-apiserver
+              "diff/apply"
-    ;;        go-k8s-io-apimachinery
+              "events/exchange"
-    ;;        go-k8s-io-api
+              "gc"
-    ;;        go-google-golang-org-protobuf
+              "gc/scheduler"
-    ;;        go-google-golang-org-grpc
+              "identifiers"
-    ;;        go-google-golang-org-genproto-googleapis-rpc
+              "images"
-    ;;        go-google-golang-org-genproto
+              "labels"
-    ;;        go-golang-org-x-sys
+              "leases"
-    ;;        go-golang-org-x-sync
+              "mount"
-    ;;        go-golang-org-x-net
+              "namespaces"
-    ;;        go-go-opentelemetry-io-otel-trace
+              "pkg/atomic"
-    ;;        go-go-opentelemetry-io-otel-sdk
+              "pkg/atomicfile"
-    ;;        go-go-opentelemetry-io-otel-exporters-otlp-otlptrace-otlptracehttp
+              "pkg/cap"
-    ;;        go-go-opentelemetry-io-otel-exporters-otlp-otlptrace-otlptracegrpc
+              "pkg/cleanup"
-    ;;        go-go-opentelemetry-io-otel-exporters-otlp-otlptrace
+              "pkg/cri/io"
-    ;;        go-go-opentelemetry-io-otel
+              "pkg/cri/store/label"
-    ;;        go-go-opentelemetry-io-contrib-instrumentation-net-http-otelhttp
+              "pkg/cri/store/snapshot"
-    ;;        go-go-opentelemetry-io-contrib-instrumentation-google-golang-org-grpc-otelgrpc
+              "pkg/cri/streaming/internal/wsstream"
-    ;;        go-go-etcd-io-bbolt
+              "pkg/cri/util"
-    ;;        go-github-com-vishvananda-netlink
+              "pkg/epoch"
-    ;;        go-github-com-urfave-cli
+              "pkg/failpoint"
-    ;;        go-github-com-tchap-go-patricia-v2
+              "pkg/ioutil"
-    ;;        go-github-com-stretchr-testify
+              "pkg/kmutex"
-    ;;        go-github-com-sirupsen-logrus
+              "pkg/registrar"
-    ;;        go-github-com-prometheus-client-golang
+              "pkg/snapshotters"
-    ;;        go-github-com-pelletier-go-toml
+              "pkg/transfer/image"
-    ;;        go-github-com-opencontainers-selinux
+              "pkg/transfer/streaming"
-    ;;        go-github-com-opencontainers-runtime-tools
+              "plugin"
-    ;;        go-github-com-opencontainers-runtime-spec
+              "protobuf"
-    ;;        go-github-com-opencontainers-image-spec
+              "reference"
-    ;;        go-github-com-opencontainers-go-digest
+              "remotes"
-    ;;        go-github-com-moby-sys-userns
+              "remotes/docker/auth"
-    ;;        go-github-com-moby-sys-user
+              "remotes/docker/config"
-    ;;        go-github-com-moby-sys-symlink
+              "runtime/v2/shim"
-    ;;        go-github-com-moby-sys-signal
+              "services/server/config"
-    ;;        go-github-com-moby-sys-sequential
+              "snapshots/benchsuite"
-    ;;        go-github-com-moby-sys-mountinfo
+              "snapshots/devmapper/dmsetup"
-    ;;        go-github-com-moby-locker
+              "snapshots/overlay/overlayutils"
-    ;;        go-github-com-minio-sha256-simd
+              "snapshots/storage")))
-    ;;        go-github-com-klauspost-compress
+    (native-inputs
-    ;;        go-github-com-intel-goresctrl
+     (list go-github-com-davecgh-go-spew
-    ;;        go-github-com-grpc-ecosystem-go-grpc-prometheus
+           go-github-com-google-go-cmp
-    ;;        go-github-com-grpc-ecosystem-go-grpc-middleware
+           go-github-com-stretchr-testify))
-    ;;        go-github-com-google-uuid
+    (propagated-inputs
-    ;;        go-github-com-google-go-cmp
+     (list go-dario-cat-mergo
-    ;;        go-github-com-fsnotify-fsnotify
+           go-github-com-adalogics-go-fuzz-headers
-    ;;        go-github-com-emicklei-go-restful-v3
+           go-github-com-adamkorcz-go-118-fuzz-build
-    ;;        go-github-com-docker-go-units
+           go-github-com-containerd-btrfs-v2
-    ;;        go-github-com-docker-go-metrics
+           go-github-com-containerd-cgroups-v3
-    ;;        go-github-com-docker-go-events
+           go-github-com-containerd-console
-    ;;        go-github-com-distribution-reference
+           go-github-com-containerd-containerd-api
-    ;;        go-github-com-davecgh-go-spew
+           go-github-com-containerd-continuity
-    ;;        go-github-com-coreos-go-systemd-v22
+           go-github-com-containerd-errdefs
-    ;;        go-github-com-containernetworking-plugins
+           go-github-com-containerd-fifo
-    ;;        go-github-com-containernetworking-cni
+           go-github-com-containerd-go-cni
-    ;;        go-github-com-containerd-zfs
+           go-github-com-containerd-go-runc
-    ;;        go-github-com-containerd-typeurl-v2
+           go-github-com-containerd-log
-    ;;        go-github-com-containerd-ttrpc
+           go-github-com-containerd-nri
-    ;;        go-github-com-containerd-platforms
+           go-github-com-containerd-platforms
-    ;;        go-github-com-containerd-nri
+           go-github-com-containerd-ttrpc
-    ;;        go-github-com-containerd-log
+           go-github-com-containerd-typeurl-v2
-    ;;        go-github-com-containerd-imgcrypt
+           go-github-com-containernetworking-cni
-    ;;        go-github-com-containerd-go-runc
+           go-github-com-containernetworking-plugins
-    ;;        go-github-com-containerd-go-cni
+           go-github-com-coreos-go-systemd-v22
-    ;;        go-github-com-containerd-fifo
+           go-github-com-distribution-reference
-    ;;        go-github-com-containerd-errdefs
+           go-github-com-docker-go-events
-    ;;        go-github-com-containerd-continuity
+           go-github-com-docker-go-metrics
-    ;;        go-github-com-containerd-containerd-api
+           go-github-com-docker-go-units
-    ;;        go-github-com-containerd-console
+           go-github-com-emicklei-go-restful-v3
-    ;;        go-github-com-containerd-cgroups-v3
+           go-github-com-fsnotify-fsnotify
-    ;;        go-github-com-containerd-btrfs-v2
+           go-github-com-google-uuid
-    ;;        go-github-com-containerd-aufs
+           go-github-com-grpc-ecosystem-go-grpc-middleware
-    ;;        go-github-com-microsoft-hcsshim
+           go-github-com-grpc-ecosystem-go-grpc-prometheus
-    ;;        go-github-com-microsoft-go-winio
+           go-github-com-intel-goresctrl
-    ;;        go-github-com-adamkorcz-go-118-fuzz-build
+           go-github-com-klauspost-compress
-    ;;        go-github-com-adalogics-go-fuzz-headers
+           go-github-com-minio-sha256-simd
-    ;;        go-dario-cat-mergo))
+           go-github-com-moby-locker
+           go-github-com-moby-sys-mountinfo
+           go-github-com-moby-sys-sequential
+           go-github-com-moby-sys-signal
+           go-github-com-moby-sys-symlink
+           go-github-com-moby-sys-user
+           go-github-com-moby-sys-userns
+           go-github-com-opencontainers-go-digest
+           go-github-com-opencontainers-image-spec
+           go-github-com-opencontainers-runtime-spec
+           go-github-com-opencontainers-runtime-tools
+           go-github-com-opencontainers-selinux
+           go-github-com-pelletier-go-toml
+           go-github-com-prometheus-client-golang
+           go-github-com-sirupsen-logrus
+           go-github-com-tchap-go-patricia-v2
+           go-github-com-urfave-cli
+           go-github-com-vishvananda-netlink
+           go-go-etcd-io-bbolt
+           go-go-opentelemetry-io-contrib-instrumentation-google-golang-org-grpc-otelgrpc
+           go-go-opentelemetry-io-contrib-instrumentation-net-http-otelhttp
+           go-go-opentelemetry-io-otel
+           go-go-opentelemetry-io-otel-exporters-otlp-otlptrace
+           go-go-opentelemetry-io-otel-exporters-otlp-otlptrace-otlptracegrpc
+           go-go-opentelemetry-io-otel-exporters-otlp-otlptrace-otlptracehttp
+           go-go-opentelemetry-io-otel-sdk
+           go-go-opentelemetry-io-otel-trace
+           go-golang-org-x-net
+           go-golang-org-x-sync
+           go-golang-org-x-sys
+           go-google-golang-org-genproto
+           go-google-golang-org-genproto-googleapis-rpc
+           go-google-golang-org-grpc
+           go-google-golang-org-protobuf
+           go-k8s-io-api
+           go-k8s-io-apimachinery
+           go-k8s-io-apiserver
+           go-k8s-io-client-go
+           go-k8s-io-component-base
+           go-k8s-io-cri-api
+           go-k8s-io-klog-v2
+           go-k8s-io-utils
+           go-tags-cncf-io-container-device-interface
+
+           ;; TODO: Complete packaging.
+           ;; go-github-com-containerd-aufs
+           ;; go-github-com-containerd-imgcrypt
+           #;go-github-com-containerd-zfs))
     (home-page "https://github.com/containerd/containerd")
     (synopsis "Container runtime support daemon")
     (description
@@ -6158,9 +6328,7 @@ robustness, and portability.  It is available as a daemon, which can manage
 the complete container lifecycle of its host system: image transfer and
 storage, container execution and supervision, low-level storage and network
 attachments, etc.")
-    (license license:asl2.0)
+    (license license:asl2.0)))
-    ;; Don't expose since it's a partial package.
-    (properties '((hidden? . #t)))))
 
 (define-public go-github-com-containerd-continuity
   (package
@@ -7103,6 +7271,155 @@ against various paths.  This is particularly useful when trying to filter
 files based on a .gitignore document.")
     (license license:expat)))
 
+(define-public go-github-com-creachadair-command
+  (package
+    (name "go-github-com-creachadair-command")
+    (version "0.2.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/creachadair/command")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0c2y7i8c7kwsqyi6rmql9jpc2xan8jp2cpxgx615safk6xvc41kp"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/creachadair/command"))
+    (native-inputs
+     (list go-github-com-google-go-cmp))
+    (propagated-inputs
+     (list go-github-com-creachadair-mds))
+    (home-page "https://github.com/creachadair/command")
+    (synopsis "Lightweight subcommand-handling library")
+    (description
+     "This package defines plumbing for command dispatch.  It is based on and
+similar in design to the @code{go} command-line tool.")
+    (license license:bsd-3)))
+
+(define-public go-github-com-creachadair-flax
+  (package
+    (name "go-github-com-creachadair-flax")
+    (version "0.0.5")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/creachadair/flax")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1r8s0jqayxglnmkffdpkxl72l594ja82wpa9ypxh1v437kv2gqc2"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/creachadair/flax"))
+    (home-page "https://github.com/creachadair/flax")
+    (synopsis "Bind flags to struct fields")
+    (description
+     "This package implements a helper for attaching flags to the fields of
+struct values.")
+    (license license:bsd-3)))
+
+(define-public go-github-com-creachadair-mds
+  (package
+    (name "go-github-com-creachadair-mds")
+    (version "0.25.15")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/creachadair/mds")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1zdidlcbjlx9aw5j3i73c3mxp7366yh66bn7s5a8p1zaw72k035n"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:go go-1.25
+      #:skip-build? #t
+      #:test-flags
+      #~(list "-skip" (string-join
+                       (list "TestNetwork" ;Needs network
+                             "TestNewHTTPServer"
+                             ;; Broken by read-only FS
+                             "TestDeepPathsWithGlobAndUmask")
+                       "|"))
+      #:import-path "github.com/creachadair/mds"))
+    (native-inputs
+     (list go-github-com-google-go-cmp))
+    (home-page "https://github.com/creachadair/mds")
+    (synopsis "Generic data structures and utility types in Go")
+    (description
+     "This repository defines generic data structures and utility types in Go.
+
+Data structures:
+@itemize
+@item heapq: a heap-structured priority queue
+@item mapset: a basic map-based set implementation
+@item mlink: basic linked sequences (list, queue)
+@item omap: ordered key-value map
+@item queue: an array-based FIFO queue
+@item ring: a circular doubly-linked sequence
+@item stack: an array-based LIFO stack
+@item stree: self-balancing binary-search tree
+@end itemize
+
+Utilities:
+@itemize
+@item cache: an in-memory key/value cache
+@item compare: provides helpers for comparison of values
+@item distinct: a probabilistic distinct-elements counter (CVM)
+@item mbits: helpful functions for manipulating bits and bytes
+@item mdiff: supports creating textual diffs
+@item mnet: provides an in-memory network implementation compatible with the net package
+@item mstr: helpful functions for manipulating strings
+@item mtest: a support library for writing tests
+@item shell: POSIX shell quoting and splitting
+@item slice: helpful functions for manipulating slices
+@item value: helpful functions for basic values and pointers
+@end itemize")
+    (license license:bsd-3)))
+
+(define-public go-github-com-creachadair-msync
+  (package
+    (name "go-github-com-creachadair-msync")
+    (version "0.8.3")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/creachadair/msync")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1z797dc0s99l7xf8zsbynwh1rjqw2w9119n81kjx39zkwrbmnc2w"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:go go-1.25
+      #:import-path "github.com/creachadair/msync"
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-before 'check 'pre-check
+            (lambda* (#:key tests? import-path #:allow-other-keys)
+              ;; See: <https://go.dev/blog/synctest>.
+              (setenv "GOEXPERIMENT" "synctest")
+              (setenv "GODEBUG" "asynctimerchan=0"))))))
+    (propagated-inputs
+     (list go-github-com-creachadair-mds))
+    (home-page "https://github.com/creachadair/msync")
+    (synopsis "Synchronization management types in Go")
+    (description
+     "This package defines two types for managing concurrency: @code{throttle},
+which allows calls to a function to be coalesced among multiple concurrent
+goroutines and @code{trigger}, that implements channel-based condition
+variable.")
+    (license license:bsd-3)))
+
 (define-public go-github-com-creack-pty
   (package
     (name "go-github-com-creack-pty")
@@ -8648,6 +8965,7 @@ interact with distribution components.")
     (license license:asl2.0)))
 
 (define-public go-github-com-docker-docker
+  ;; TODO: Move to (gnu packages docker).
   (package
     (name "go-github-com-docker-docker")
     (version "25.0.7")
@@ -8668,7 +8986,47 @@ interact with distribution components.")
      (list
       #:import-path "github.com/docker/docker"
       #:skip-build? #t
-      #:tests? #f))
+      #:test-subdirs
+      ;; XXX: Remove when all inputs are packaged.
+      #~(list "api/types/strslice"
+              "api/types/time"
+              "api/types/versions"
+              "builder/remotecontext/urlutil"
+              "cli/debug"
+              "daemon/links"
+              "daemon/network"
+              "errdefs"
+              "integration/plugin"
+              "integration/plugin/logging/cmd/discard"
+              "internal/mod"
+              "libnetwork/bitmap"
+              "libnetwork/etchosts"
+              "libnetwork/internal/caller"
+              "libnetwork/ipbits"
+              "libnetwork/options"
+              "libnetwork/portallocator"
+              "pkg/broadcaster"
+              "pkg/capabilities"
+              "pkg/directory"
+              "pkg/dmesg"
+              "pkg/fileutils"
+              "pkg/homedir"
+              "pkg/ioutils"
+              "pkg/longpath"
+              "pkg/meminfo"
+              "pkg/namesgenerator"
+              "pkg/parsers"
+              "pkg/parsers/kernel"
+              "pkg/pidfile"
+              "pkg/plugins/pluginrpc-gen"
+              "pkg/process"
+              "pkg/progress"
+              "pkg/stdcopy"
+              "pkg/stringid"
+              "pkg/useragent"
+              "plugin/v2"
+              "restartmanager"
+              "volume/drivers")))
     (propagated-inputs
      (list go-github-com-containerd-containerd
            go-github-com-containerd-log
@@ -8967,6 +9325,41 @@ sub-interfaces are also provided for cases where the full Channel interface
 cannot be met (for example, @code{InChannel} for write-only channels).")
     (license license:expat)))
 
+(define-public go-github-com-eapache-go-resiliency
+  (package
+    (name "go-github-com-eapache-go-resiliency")
+    (version "1.7.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/eapache/go-resiliency")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "07a1r3c2spd37k3riy4fxz8v8ibxiprf8a3vw788whz4mlp6gm40"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:import-path "github.com/eapache/go-resiliency"))
+    (home-page "https://github.com/eapache/go-resiliency")
+    (synopsis "Resiliency patterns for golang")
+    (description
+     "Resiliency patterns for golang.  Based in part on
+@url{https://github.com/Netflix/Hystrix, Hystrix},
+@@url{https://github.com/Shopify/semian, Semian}, and others.
+
+Currently implemented patterns include:
+@itemize
+@item circuit-breaker
+@item semaphore
+@item deadline/timeout
+@item batching
+@item retriable
+@end itemize")
+    (license license:expat)))
+
 (define-public go-github-com-eapache-queue
   (package
     (name "go-github-com-eapache-queue")
@@ -12570,11 +12963,10 @@ single @code{Tree} implementation, optimized for sparse nodes.")
      (list
       #:import-path "github.com/hashicorp/go-immutable-radix/v2"))
     (propagated-inputs
-     (modify-inputs (package-propagated-inputs
+     (modify-inputs propagated-inputs
-                     go-github-com-hashicorp-go-immutable-radix)
        (prepend go-golang-org-x-exp)
        (replace "go-github-com-hashicorp-golang-lru"
-         go-github-com-hashicorp-golang-lru-v2)))))
+                go-github-com-hashicorp-golang-lru-v2)))))
 
 (define-public go-github-com-hashicorp-go-memdb
   (package
@@ -13298,6 +13690,32 @@ subsystem in Linux.")
 used in other languages but absent in Go package strings.")
     (license license:expat)))
 
+(define-public go-github-com-huin-goutil
+  (package
+    (name "go-github-com-huin-goutil")
+    (version "0.0.0-20170803182201-1ca381bf3150")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/huin/goutil")
+              (commit (go-version->git-ref version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0alhyacsfqic2wxyqn4gvk9wzjl4pkmy8rhvqjk84xsghgx5xf12"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:import-path "github.com/huin/goutil"))
+    (home-page "https://github.com/huin/goutil")
+    (synopsis "Collection of Go utility code")
+    (description
+     "This package is a collection of miscellaneous Go utility code that is
+potentially useful across multiple projects, and has therefore been factored
+out.")
+    (license license:bsd-2)))
+
 (define-public go-github-com-iancoleman-orderedmap
   (package
     (name "go-github-com-iancoleman-orderedmap")
@@ -16374,6 +16792,29 @@ structure.  It can also produce a much more verbose, one-item-per-line
 representation suitable for computing diffs.")
     (license license:asl2.0)))
 
+(define-public go-github-com-kodeworks-golang-image-ico
+  (package
+    (name "go-github-com-kodeworks-golang-image-ico")
+    (version "0.0.0-20141118225523-73f0f4cfade9")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/Kodeworks/golang-image-ico")
+              (commit (go-version->git-ref version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0zfcvpf6pdqismq9j8nvismln1dbz2i22d7c00a2ygjxldbmnd3k"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/Kodeworks/golang-image-ico"))
+    (home-page "https://github.com/Kodeworks/golang-image-ico")
+    (synopsis "Golang support for Windows .ico file format")
+    (description
+     "This package provides Golang support for Windows' @code{.ico} file format.")
+    (license license:bsd-3)))
+
 (define-public go-github-com-labstack-gommon
   (package
     (name "go-github-com-labstack-gommon")
@@ -22390,6 +22831,88 @@ without configuration, but if desired, everything can be customized down to the
 smallest detail.")
     (license license:expat)))
 
+(define-public go-github-com-puzpuzpuz-xsync
+  (package
+    (name "go-github-com-puzpuzpuz-xsync")
+    (version "1.5.2")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/puzpuzpuz/xsync")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1qfmiyk5wypssr30nj5qp4izdav5gbaxf1324i70vjhn5g8g74mb"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/puzpuzpuz/xsync"))
+    (home-page "https://github.com/puzpuzpuz/xsync")
+    (synopsis "Concurrent data structures for Go")
+    (description
+     "This package is an extension for the standard @code{sync} package and
+provides the following concurrent data structures for Go: a concurrent
+counter, concurrent hash table, multiple concurrent queues and @code{mutex}.")
+    (license license:expat)))
+
+(define-public go-github-com-puzpuzpuz-xsync-v2
+  (package
+    (inherit go-github-com-puzpuzpuz-xsync)
+    (name "go-github-com-puzpuzpuz-xsync-v2")
+    (version "2.5.1")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/puzpuzpuz/xsync")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1almmzvkhyvhdwyhv9jphbhcm5yv45cmv9v39r3rcbkvl212igmz"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/puzpuzpuz/xsync/v2"))))
+
+(define-public go-github-com-puzpuzpuz-xsync-v3
+  (package
+    (inherit go-github-com-puzpuzpuz-xsync-v2)
+    (name "go-github-com-puzpuzpuz-xsync-v3")
+    (version "3.5.1")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/puzpuzpuz/xsync")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0k2ir8ixr5h0rwfd4i0nxlgmcrklld06jcbp5ghxk6hpxrhzs1y8"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/puzpuzpuz/xsync/v3"))))
+
+(define-public go-github-com-puzpuzpuz-xsync-v4
+  (package
+    (inherit go-github-com-puzpuzpuz-xsync-v3)
+    (name "go-github-com-puzpuzpuz-xsync-v4")
+    (version "4.5.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/puzpuzpuz/xsync")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "04caylbphjgq1qbpd09cg0b8h84y4zznsdfhi20w4f1628fq7077"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/puzpuzpuz/xsync/v4"))))
+
 (define-public go-github-com-quasilyte-go-ruleguard-dsl
   (package
     (name "go-github-com-quasilyte-go-ruleguard-dsl")
@@ -28603,6 +29126,30 @@ designed to work with the MySQL protocol version 4.1 or greater.  It definitely
 works well with MySQL server version 5.0 and 5.1.")
     (license license:bsd-3)))
 
+(define-public go-github-com-ziutek-telnet
+  (package
+    (name "go-github-com-ziutek-telnet")
+    (version "0.1.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/ziutek/telnet")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0w0zn8yhpmhrph41dlf9pn5h1zzhgajxwbx85fk4d0m55xp0r680"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/ziutek/telnet"))
+    (home-page "https://github.com/ziutek/telnet")
+    (synopsis "Telnet interface in Go")
+    (description
+     "This package provides a simple interface for interacting with Telnet
+connections.")
+    (license license:bsd-3)))
+
 (define-public go-github-com-zk-org-pretty
   (package
     (name "go-github-com-zk-org-pretty")
@@ -29757,49 +30304,25 @@ organization}.")
        (list
         #:skip-build? #t
         #:import-path "go4.org"
-        #:test-subdirs
+        #:test-flags #~(list "-vet=off")
-        #~(list "bytereplacer/..."
-                ;; "cloud/..." ; missing packages
-                "ctxutil/..."
-                "errorutil/..."
-                "fault/..."
-                "jsonconfig/..."
-                "legal/..."
-                "lock/..."
-                "media/..."
-                "must/..."
-                "net/..."
-                "net/throttle/..."
-                "oauthutil/..."
-                "osutil/..."
-                "readerutil/..."
-                "reflectutil/..."
-                "rollsum/..."
-                "sort/..."
-                "strutil/..."
-                "syncutil/..."
-                "testing/..."
-                "testing/functest/..."
-                "types/..."
-                ;; "wkfs/..." ; missing packages
-                "writerutil/..."
-                "xdgdir/...")
         #:phases
         #~(modify-phases %standard-phases
             (add-after 'unpack 'remove-examples
               (lambda* (#:key import-path #:allow-other-keys)
                 (with-directory-excursion (string-append "src/" import-path)
                   (for-each delete-file
-                            (find-files "." "example.*_test\\.go$"))))))
+                            (find-files "." "example.*_test\\.go$"))))))))
-        #:test-flags #~(list "-vet=off")))
+      (native-inputs
+       ;; XXX: Remove when cycle is fixed.
+       (list go-github-com-envoyproxy-go-control-plane))
       (propagated-inputs
-       (list ;; go-cloud-google-com-go
+       (list go-cloud-google-com-go
-             ;; go-cloud-google-com-go-storage
+             go-cloud-google-com-go-storage
              go-github-com-rwcarlsen-goexif
              go-golang-org-x-net
              go-golang-org-x-oauth2
              go-golang-org-x-sys
-             #; go-google-golang-org-api))
+             go-google-golang-org-api))
       (home-page "https://github.com/go4org/go4")
       (synopsis "Collection of packages for Go programmers")
       (description
@@ -29846,6 +30369,30 @@ for locating directories
 @end itemize")
       (license (list license:asl2.0 license:bsd-3)))))
 
+(define-public go-go4-org-mem
+  (package
+    (name "go-go4-org-mem")
+    (version "0.0.0-20240501181205-ae6ca9944745")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/go4org/mem")
+              (commit (go-version->git-ref version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1h2bam1h6xi0lx9s0k44fvd28vkb6rh9vndz3srhwi6axvm8ir0s"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "go4.org/mem"))
+    (home-page "https://go4.org/mem")
+    (synopsis "Cheap read-only memory types in Go")
+    (description
+     "Package mem provides the @code{mem.RO} type that allows you to cheaply
+pass & access either a read-only @code{[]byte} or a @code{string}.")
+    (license license:asl2.0)))
+
 (define-public go-golang-org-rainycape-unidecode
   (let ((commit "cb7f23ec59bec0d61b19c56cd88cee3d0cc1870c")
         (revision "1"))
@@ -30438,8 +30985,8 @@ The yaml package supports most of YAML 1.2, but preserves some behavior from
 ;; to build NNCP and remove vendor) dependency for Golang.  Full build depends
 ;; on Bazel <https://bazel.build/>.
 (define-public go-gvisor-dev-gvisor
-  (let ((commit "634ce95eed8d5b8e6b3e2ea30542c34cb30af148")
+  (let ((commit "9414b50a5633100fd7299a5a7998742575dcb669")
-        (revision "0"))
+        (revision "1"))
     (package
       (name "go-gvisor-dev-gvisor")
       (version (git-version "0.0.0" revision commit))
@@ -30451,7 +30998,7 @@ The yaml package supports most of YAML 1.2, but preserves some behavior from
                (commit commit)))
          (file-name (git-file-name name version))
          (sha256
-          (base32 "1l3si6qlchwgsvaq6lxyvj8iq8n8pqxlayb1hbdf3pynxi52hfkw"))))
+          (base32 "0vqaclb2ignkcs7n463bj349m0xybdsv71i6afhzh8r05hdywzax"))))
       (build-system go-build-system)
       (arguments
        (list

gnu/packages/gtk.scm

@@ -2763,6 +2763,43 @@ entire output.  It supports all Layer Shell features including popups and
 popovers.")
     (license license:expat)))
 
+(define-public xdg-user-dirs-gtk
+  (package
+    (name "xdg-user-dirs-gtk")
+    (version "0.16")
+    (source (origin
+              (method git-fetch)
+              (uri (git-reference
+                     (url "https://gitlab.gnome.org/GNOME/xdg-user-dirs-gtk.git")
+                     (commit version)))
+              (file-name (git-file-name name version))
+              (sha256
+               (base32
+                "11h1164mkajpfrp6mkky2gvx3xd7dw0c9f2785jf4lys4jmmj4c3"))))
+    (build-system meson-build-system)
+    (arguments
+     (list
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-after 'unpack 'fix-exec-path
+            (lambda* (#:key inputs #:allow-other-keys)
+              (substitute* "update.c"
+                (("xdg-user-dirs-update")
+                 (search-input-file inputs "/bin/xdg-user-dirs-update"))))))))
+    (native-inputs
+     (list gettext-minimal
+           pkg-config))
+    (inputs
+     (list gtk+
+           xdg-user-dirs))
+    (home-page "https://gitlab.gnome.org/GNOME/xdg-user-dirs-gtk")
+    (synopsis "Integration of xdg-user-dirs with GTK")
+    (description "This package is a companion to @code{xdg-user-dirs} to
+integrate it with the GNOME desktop and GTK applications.  It gets run during
+login to create default GTK bookmarks files containing the user directories, and
+to rename these directories if the locale changes.")
+    (license license:gpl2+)))
+
 (define-public goocanvas
   (package
     (name "goocanvas")

gnu/packages/guile-xyz.scm

@@ -340,6 +340,49 @@ more.")
 currently does not do much, but it might in the future.")
     (license license:gpl3+)))
 
+(define-public guile-arguments
+  (package
+    (name "guile-arguments")
+    (version "0.1.1")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://codeberg.org/fishinthecalculator/arguments")
+              (commit version)))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32
+         "1r71l6099afk017a3ck5mpp2xhb3bm45s6nga24lhby52rxbkayl"))))
+    (build-system gnu-build-system)
+    (arguments
+     (list
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-before 'build 'generate-api-reference
+            (lambda _
+              (invoke "scripts/generate_api_reference.sh")))
+          (add-after 'build 'build-html-manual
+            (lambda* (#:key make-flags #:allow-other-keys)
+              (apply invoke `("make" "html" ,@make-flags))))
+          (add-after 'install 'install-html-manual
+            (lambda* (#:key make-flags #:allow-other-keys)
+              (apply invoke `("make" "install-html" ,@make-flags)))))))
+    (native-inputs
+     (list autoconf
+           automake
+           guile-documenta
+           pkg-config
+           texinfo))
+    (inputs (list guile-3.0))
+    (synopsis "Parse command line arguments into structured objects")
+    (description "This package provides a Guile library to parse command line
+arguments into structured objects.  It allows declaring arguments through a
+small @acronym{DSL, Domain Specific Language}, then call a procedure to parse the
+command line into a structured object.")
+    (home-page "https://codeberg.org/fishinthecalculator/arguments")
+    (license license:gpl3+)))
+
 (define-public guile-oauth
   (package
     (name "guile-oauth")
@@ -7764,8 +7807,8 @@ is an attempt to combine both into something useful.")
       (license license:asl2.0))))
 
 (define-public guile-knots
-  (let ((commit "f767eca066495e6582e89ba1b91907c0c5657878")
+  (let ((commit "49996c432a4616e03ecaf01cb42afc5fd78eafd5")
-        (revision "34"))
+        (revision "35"))
     (package
     (name "guile-knots")
     (version (git-version "0.1" revision commit))
@@ -7776,7 +7819,7 @@ is an attempt to combine both into something useful.")
                     (commit commit)))
               (sha256
                (base32
-                "18fqmpyrrxy8phxxm5b7d1qhhvc3rsrs243xiinkj2hn2ca1cqi8"))
+                "0i6vk432shy7qmsq1hli71a9kmgf8yy9hx3bck0r9qzsldv1m3m9"))
               (file-name (git-file-name name version))))
     (build-system gnu-build-system)
     (arguments

gnu/packages/guile.scm

@@ -467,15 +467,15 @@ without requiring the source code to be rewritten.")
 
     (native-search-paths
      (list (search-path-specification
-            (variable "GUILE_LOAD_PATH")
+             (variable "GUILE_LOAD_PATH")
-            (files '("share/guile/site/3.0")))
+             (files '("share/guile/site/3.0")))
            (search-path-specification
-            (variable "GUILE_LOAD_COMPILED_PATH")
+             (variable "GUILE_LOAD_COMPILED_PATH")
-            (files '("lib/guile/3.0/site-ccache"
+             (files '("lib/guile/3.0/site-ccache"
-                     "share/guile/site/3.0")))
+                      "share/guile/site/3.0")))
            (search-path-specification
-            (variable "GUILE_EXTENSIONS_PATH")
+             (variable "GUILE_EXTENSIONS_PATH")
-            (files '("lib/guile/3.0/extensions")))))))
+             (files '("lib/guile/3.0/extensions")))))))
 
 (define-public guile-3.0.11
   (package

gnu/packages/hardware.scm

@@ -23,6 +23,7 @@
 ;;; Copyright © 2025 Eric Bavier <bavier@posteo.net>
 ;;; Copyright © 2025 Arun Isaac <arunisaac@systemreboot.net>
 ;;; Copyright © 2025 James Smith <jsubuntuxp@disroot.org>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -1000,22 +1001,21 @@ information can be viewed in real time and/or logged to a file.")
     (source
      (origin
        (method git-fetch)
-       (uri
+       (uri (git-reference
-        (git-reference
+              (url "https://github.com/dell/libsmbios")
-         (url (string-append "https://github.com/dell/" name))
+              (commit (string-append "v" version))))
-         (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
         (base32 "0krwwydyvb9224r884y1mlmzyxhlfrcqw73vi1j8787rl0gl5a2i"))))
     (build-system gnu-build-system)
     (native-inputs
-     `(("autoconf" ,autoconf)
+     (list autoconf
-       ("automake" ,automake)
+           automake
-       ("gettext" ,gettext-minimal)
+           gettext-minimal
-       ("libtool" ,libtool)
+           libtool
-       ("pkg-config" ,pkg-config)
+           pkg-config
-       ("perl" ,perl)
+           perl
-       ("python" ,python)))
+           python))
     (inputs
      (list libxml2))
     (arguments

gnu/packages/hexedit.scm

@@ -414,7 +414,7 @@ much more.")
 (define-public bvi
   (package
     (name "bvi")
-    (version "1.4.2")
+    (version "1.5.0")
     (source (origin
               (method url-fetch)
               (uri (string-append
@@ -422,7 +422,7 @@ much more.")
                     "/bvi-" version ".src.tar.gz"))
               (sha256
                (base32
-                "1wllrvs8r8bdm11sx01095j8cj4drjmw0dlkjfdkm5lnnk11dfjb"))))
+                "1jvldfxdpgf044hnhjhxi24a9bkbn8adl22icc8rfarv39m72h35"))))
     (build-system gnu-build-system)
     (arguments '(#:tests? #f))          ; no check target
     (inputs

gnu/packages/hurd.scm

@@ -334,6 +334,61 @@ Hurd-minimal package which are needed for both glibc and GCC.")
 (define %add-to-hurd-subdirs
   (list "libmachdevdde" "libddekit"))
 
+(define-public libacpica
+  (let ((commit "0c3593e27947ef0734a070143caadaed28438354")
+        (revision "0"))
+    (package
+      (name "libacpica")
+      (home-page "https://salsa.debian.org/hurd-team/libacpica")
+      (version (git-version "20220331" revision commit))
+      (source (origin
+                (method git-fetch)
+                (uri (git-reference
+                      (url home-page)
+                      (commit commit)))
+                (sha256
+                 (base32
+                  "0hyfg4w2ch6a833kkxjcsddqq2712gqlbvrl6zv5yzvallpfzh7d"))
+                (file-name (git-file-name name version))))
+      (arguments
+       (list
+        #:tests? #f ;no tests
+        #:modules '((srfi srfi-26)
+                    (ice-9 rdelim)
+                    (guix build utils)
+                    (guix build gnu-build-system))
+        #:make-flags #~`(,(string-append "CC=" #$(cc-for-target))
+                         ,(string-append "PREFIX=" #$output))
+        ;; As we are using the Debian package as upstream, we follow their
+        ;; build:
+        ;;   * apply patches in debian/patches taken from the
+        ;;     debian/patches/series file
+        #:phases
+        #~(modify-phases %standard-phases
+            (delete 'configure)
+            (add-after 'unpack 'apply-patches
+              (lambda* (#:key target #:allow-other-keys)
+                (let* ((patch-directory "debian/patches/")
+                       (series (string-append patch-directory "series"))
+                       (text (with-input-from-file series read-string))
+                       (lines (string-split (string-trim-right text) #\newline))
+                       (patches (filter (negate (cute string-prefix? "#" <>))
+                                        lines))
+                       (patch-files (map
+                                     (cute string-append patch-directory <>)
+                                     patches)))
+                  (for-each
+                   (cute invoke "patch" "--force" "-p1" "-i" <>)
+                   patch-files)))))))
+      (inputs (list libirqhelp
+                    libpciaccess))
+      (build-system gnu-build-system)
+      (supported-systems %hurd-systems)
+      (synopsis "ACPICA as a library")
+      (description "libacpica provides ACPICA as a library.")
+      (license (list bsd-3
+                     gpl2)))))
+
 (define-public hurd
   (package
     (name "hurd")
@@ -588,7 +643,8 @@ exec ${system}/rc \"$@\"
                 "CFLAGS=-fcommon")))
     (build-system gnu-build-system)
     (inputs
-     `(("libgcrypt" ,libgcrypt)                  ;for /hurd/random
+     `(("libacpica" ,libacpica)                  ;for hurd/acpi.static
+       ("libgcrypt" ,libgcrypt)                  ;for /hurd/random
        ("libdaemon" ,libdaemon)                  ;for /bin/console --daemonize
        ("libxcrypt" ,libxcrypt)                  ;for password hashing
        ("unifont" ,unifont)
@@ -739,11 +795,11 @@ in userland processes thanks to the DDE layer.")
       (license gpl2))))
 
 (define-public rumpkernel
-  (let ((commit "2aad456903b2dc2232fa18c7f286cea6d77b570f")
+  (let ((commit "debian/0_20250111-6")
-        (revision "0"))
+        (revision "1"))
     (package
       (name "rumpkernel")
-      (version (git-version "0-20250111" revision commit))
+      (version (git-version "0-20250111" revision (substring commit 7)))
       ;; This uses the Debian Salsa rumpkernel package git as upstream as that
       ;; is where development happens.  Once things have stabilized, upstream
       ;; may change to the NetBSD git from where Debian takes their snapshots.
@@ -754,7 +810,7 @@ in userland processes thanks to the DDE layer.")
                       (commit commit)))
                 (sha256
                  (base32
-                  "14fiv2llvd5s1vi9gigmi1vi0b9yvg2zqyc9xg67ffxl1phv7p8j"))
+                  "1pvd54k06rlgvppfbzl1d0qqcjc0kshamw1iw40s3apabh87pw1i"))
                 (file-name (git-file-name name version))))
       (build-system gnu-build-system)
       (arguments

gnu/packages/image-viewers.scm

@@ -38,6 +38,7 @@
 ;;; Copyright © 2025 Zhu Zihao <all_but_last@163.com>
 ;;; Copyright © 2025 Vinicius Monego <monego@posteo.net>
 ;;; Copyright © 2025 Igorj Gorjaĉev <igor@goryachev.org>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -305,7 +306,7 @@ actions.")
 (define-public geeqie
   (package
     (name "geeqie")
-    (version "2.6.1")
+    (version "2.7")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -313,11 +314,12 @@ actions.")
                     (commit (string-append "v" version))))
               (sha256
                (base32
-                "08yr8jqli33rn1zvj9mjvinyzjp2myakxgf8wqqq8yidmm0vvn1p"))
+                "139ffzqqq79d3k5q99r8i1jr9v9vfwv89dkh6vvw1mdnv6b3s9n8"))
               (file-name (git-file-name name version))))
     (build-system meson-build-system)
     (arguments
      (list
+      #:glib-or-gtk? #t
       #:phases
       #~(modify-phases %standard-phases
           ;; Disable test which requires binaries not present
@@ -346,6 +348,7 @@ actions.")
            libwebp))
     (native-inputs
      (list `(,glib "bin") ; glib-gettextize
+           gsettings-desktop-schemas
            intltool
            pkg-config
            python         ; for tests
@@ -924,15 +927,15 @@ with tiling window managers.  Features include:
            ;; That is required for testing.
            xorg-server-for-tests))
     (inputs
-     `(("imlib2" ,imlib2)
+     (list imlib2
-       ("glib" ,glib)
+           glib
-       ("gtk+" ,gtk+-2)
+           gtk+-2
-       ("lcms" ,lcms)
+           lcms
-       ("libjpeg" ,libjpeg-turbo)
+           libjpeg-turbo
-       ("libtiff" ,libtiff)
+           libtiff
-       ("libexif" ,libexif)
+           libexif
-       ("libx11" ,libx11)
+           libx11
-       ("libxext" ,libxext)))
+           libxext))
     (arguments
      `(#:phases
        (modify-phases %standard-phases

gnu/packages/image.scm

@@ -71,11 +71,12 @@
   #:use-module (gnu packages build-tools)
   #:use-module (gnu packages check)
   #:use-module (gnu packages cmake)
+  #:use-module (gnu packages compression)
   #:use-module (gnu packages cpp)
   #:use-module (gnu packages curl)
-  #:use-module (gnu packages compression)
   #:use-module (gnu packages datastructures)
   #:use-module (gnu packages documentation)
+  #:use-module (gnu packages fonts)
   #:use-module (gnu packages fontutils)
   #:use-module (gnu packages freedesktop)
   #:use-module (gnu packages gcc)
@@ -96,10 +97,11 @@
   #:use-module (gnu packages mcrypt)
   #:use-module (gnu packages mp3)
   #:use-module (gnu packages ncurses)
+  #:use-module (gnu packages ocr)
   #:use-module (gnu packages perl)
   #:use-module (gnu packages photo)
-  #:use-module (gnu packages popt)
   #:use-module (gnu packages pkg-config)
+  #:use-module (gnu packages popt)
   #:use-module (gnu packages python)
   #:use-module (gnu packages python-build)
   #:use-module (gnu packages python-check)
@@ -115,7 +117,6 @@
   #:use-module (gnu packages xdisorg)
   #:use-module (gnu packages xml)
   #:use-module (gnu packages xorg)
-  #:use-module (gnu packages fonts)
   #:use-module ((guix licenses) #:prefix license:)
   #:use-module (guix packages)
   #:use-module (guix gexp)
@@ -183,36 +184,81 @@ convert images in more than 100 different formats.")
 (define-public gradia
   (package
     (name "gradia")
-    (version "1.2.1")
+    (version "1.13.0")
-    (source (origin
+    (source
-              (method git-fetch)
+     (origin
-              (uri (git-reference
+       (method git-fetch)
-                     (url "https://github.com/AlexanderVanhee/Gradia")
+       (uri (git-reference
-                     (commit (string-append "v" version))))
+             (url "https://github.com/AlexanderVanhee/Gradia")
-              (file-name (git-file-name name version))
+             (commit (string-append "v" version))))
-              (sha256
+       (file-name (git-file-name name version))
-               (base32 "07hal4h3kkjf7la02nqmqgw19sa6hkd130bkfmgwjimkv9zi8z2i"))))
+       (sha256
+        (base32 "00s6xj9crj5gkh233q98fmq67f41y877xgrn49cycwb3kybp237n"))))
     (build-system meson-build-system)
     (arguments
-     (list #:glib-or-gtk? #t
+     (list
-           #:phases
+      #:imported-modules (append %meson-build-system-modules
-           #~(modify-phases %standard-phases
+                                 %pyproject-build-system-modules)
-               (add-after 'unpack 'skip-gtk-update-icon-cache
+      #:modules '((guix build meson-build-system)
-                 (lambda _
+                  ((guix build pyproject-build-system)
-                   (substitute* "meson.build"
+                   #:prefix py:)
-                     (("gtk_update_icon_cache: true")
+                  (guix build utils))
-                      "gtk_update_icon_cache: false")
+      #:glib-or-gtk? #t
-                     (("update_desktop_database: true")
+      #:phases
-                      "update_desktop_database: false")))))))
+      #~(modify-phases %standard-phases
-    (inputs (list gtk libadwaita python python-pygobject))
+          (add-after 'unpack 'skip-gtk-update-icon-cache
-    (native-inputs
+            (lambda _
-     (list blueprint-compiler gettext-minimal `(,glib "bin") pkg-config))
+              (substitute* "meson.build"
+                (("gtk_update_icon_cache: true")
+                 "gtk_update_icon_cache: false")
+                (("update_desktop_database: true")
+                 "update_desktop_database: false"))))
+          (add-after 'unpack 'set-tesseract-and-tessdata-path
+            (lambda _
+              (let* ((tesseract #$(this-package-input "tesseract-ocr"))
+                     (tesseract-bin (string-append tesseract "/bin/tesseract"))
+                     (tessdata (string-append tesseract "/share/tessdata")))
+                (substitute* "meson.build"
+                  (("OCR_TESSERACT_CMD = '/app/bin/tesseract'")
+                   (format #f "OCR_TESSERACT_CMD = '~a'" tesseract-bin))
+                  (("OCR_ORIGINAL_TESSDATA_DIR = '/app/share/tessdata'")
+                   (format #f "OCR_ORIGINAL_TESSDATA_DIR = '~a'" tessdata))))))
+          (add-after 'glib-or-gtk-wrap 'python-and-gi-wrap
+            (lambda* (#:key inputs outputs #:allow-other-keys)
+              (wrap-program (string-append #$output "/bin/gradia")
+                `("GUIX_PYTHONPATH" =
+                  (,(getenv "GUIX_PYTHONPATH") ,(py:site-packages inputs
+                                                                  outputs)))
+                `("GI_TYPELIB_PATH" =
+                  (,(getenv "GI_TYPELIB_PATH")))
+                `("GDK_PIXBUF_MODULE_FILE" =
+                  (,(getenv "GDK_PIXBUF_MODULE_FILE")))))))))
+    (inputs (list bash-minimal
+                  gtk
+                  gtksourceview
+                  libadwaita
+                  libportal
+                  libsoup
+                  python
+                  python-pillow
+                  python-pycairo
+                  python-pygobject
+                  python-pytesseract
+                  tesseract-ocr
+                  webp-pixbuf-loader))
+    (native-inputs (list blueprint-compiler
+                         desktop-file-utils
+                         gettext-minimal
+                         `(,glib "bin")
+                         gobject-introspection
+                         pkg-config))
     (home-page "https://github.com/AlexanderVanhee/Gradia")
     (synopsis "Edit screenshots")
-    (description "Gradia is a GTK 4 application for enhancing and preparing
+    (description
+     "Gradia is a GTK 4 application for enhancing and preparing
 screenshots for blogs, social media, and documentation.  It supports background
 customization, annotation tools (pen, arrow, text, highlight, stamp), padding,
-cropping, and various export formats.")
+cropping, @acronym{OCR, optical character recognition} and various export formats.")
     (license license:gpl3+)))
 
 (define-public iqa

gnu/packages/irc.scm

@@ -18,6 +18,7 @@
 ;;; Copyright © 2024 Christian Miller <christian.miller@dadoes.de>
 ;;; Copyright © 2024 Ricardo Wurmus <rekado@elephly.net>
 ;;; Copyright © 2025 Zheng Junjie <z572@z572.online>
+;;; Copyright © 2026 Daniel Littlewood <dan@danielittlewood.xyz>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -421,8 +422,8 @@ using a mouse.  It is customizable and extensible with plugins and scripts.")
      (origin
        (method git-fetch)
        (uri (git-reference
-             (url "https://github.com/SrainApp/srain")
+              (url "https://github.com/SrainApp/srain")
-             (commit version)))
+              (commit version)))
        (file-name (git-file-name name version))
        (sha256
         (base32 "105z2kbj9ar6zk6i1qrbysrp9vbz692kbl2dwdxcwly0yh4cbd0p"))))
@@ -433,11 +434,11 @@ using a mouse.  It is customizable and extensible with plugins and scripts.")
       #:tests? #f ;there are no tests
       #:glib-or-gtk? #t))
     (native-inputs
-     `(("gettext" ,gettext-minimal)
+     (list gettext-minimal
-       ("glib:bin" ,glib "bin")
+           `(,glib "bin")
-       ("pkg-config" ,pkg-config)
+           pkg-config
-       ("python" ,python-wrapper)
+           python-wrapper
-       ("python-sphinx" ,python-sphinx)))
+           python-sphinx))
     (inputs
      (list glib-networking
            gsettings-desktop-schemas

gnu/packages/java-bootstrap.scm

@@ -1,5 +1,5 @@
 ;;; GNU Guix --- Functional package management for GNU
-;;; Copyright © 2014, 2015, 2016, 2017, 2018, 2019, 2021 Ricardo Wurmus <rekado@elephly.net>
+;;; Copyright © 2014-2019, 2021, 2026 Ricardo Wurmus <rekado@elephly.net>
 ;;; Copyright © 2021, 2026 Ludovic Courtès <ludo@gnu.org>
 ;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
 ;;; Copyright © 2017, 2022 Marius Bakke <marius@gnu.org>
@@ -226,6 +226,18 @@ JNI.")
              (setenv "JAVACMD" (search-input-file inputs "/bin/jamvm"))
              (setenv "JAVAC" (search-input-file inputs "/bin/jikes"))
              (setenv "CLASSPATH" (search-input-file inputs "/lib/rt.jar"))))
+         ,@(if (target-x86-32?)
+               ;; XXX: On i686 isFile() always seems to return true.  Patching
+               ;; this here is very ugly, but the effects are limited.  None
+               ;; of these changes remain by the time we've built Icedtea and
+               ;; the other JDKs.
+               '((add-after 'unpack 'disable-isFile-checks
+                   (lambda _
+                     (substitute* "src/main/org/apache/tools/ant/util/ResourceUtils.java"
+                       (("destFile = \\(\\(FileProvider\\).*") ""))
+                     (substitute* "src/main/org/apache/tools/ant/taskdefs/Mkdir.java"
+                       (("dir.isFile\\(\\)") "false")))))
+               '())
          (replace 'build
            (lambda* (#:key inputs outputs #:allow-other-keys)
              ;; Ant complains if this file doesn't exist.

gnu/packages/java-graphics.scm

@@ -165,17 +165,18 @@ ascii art drawings that contain characters that resemble lines like @samp{|}
                 "017n1w6hds4wrz597jk7v8r6pz0kz5j9xwd240nq7s8hc58d4c2q"))
               (modules '((guix build utils)))
               (snippet
-               '(for-each
+               ;; Remove pre-built native libraries.
-                 delete-file
+               '(for-each delete-file
-                 (find-files "flatlaf-core/src/main/resources/com/formdev/flatlaf/natives/"
+                          (find-files "." "\\.(dll|dylib|so)$")))))
-                             ".*")))))
     (build-system ant-build-system)
     (arguments
      (list
+      #:jdk openjdk17
       #:tests? #false                   ;XXX requires junit5
-      #:jar-name "flatlaf.jar"
+      #:modules '((guix build ant-build-system)
-      #:source-dir '(list "flatlaf-core/src/main/java")
+                  (guix build java-utils)
-      #:test-dir '(list "flatlaf-core/src/test")
+                  (guix build utils)
+                  (sxml simple))
       #:phases
       #~(modify-phases %standard-phases
           (add-before 'configure 'build-native-code
@@ -224,8 +225,58 @@ ascii art drawings that contain characters that resemble lines like @samp{|}
           (add-before 'build 'copy-resources
             (lambda _
               (copy-recursively "flatlaf-core/src/main/resources"
-                                "build/classes"))))))
+                                "build/classes")))
-    (inputs (list libx11 libxt))
+          (add-before 'build 'generate-pom
+            (lambda _
+              (call-with-output-file "pom.xml"
+                (lambda (port)
+                  (sxml->xml
+                   `(*TOP*
+                     (*PI* xml "version=\"1.0\" encoding=\"UTF-8\"")
+                     (project
+                      (modelVersion "4.0.0")
+                      (groupId "com.formdev")
+                      (artifactId "flatlaf")
+                      (version ,#$version)))
+                   port)))))
+          (replace 'build
+            (lambda* (#:key inputs #:allow-other-keys)
+              (let* ((jdk (assoc-ref inputs "jdk"))
+                     (src-dir "flatlaf-core/src/main/java")
+                     (java9-dir "flatlaf-core/src/main/java9")
+                     (classes-dir "build/classes")
+                     (classes9-dir "build/classes9")
+                     (jar-file
+                      (string-append "build/flatlaf-" #$version ".jar")))
+                ;; Compile main sources (Java 8 target).
+                (apply invoke "javac"
+                       "--release" "8"
+                       "-d" classes-dir
+                       (find-files src-dir "\\.java$"))
+                ;; Compile Java 9 multi-release sources.
+                (mkdir-p classes9-dir)
+                (apply invoke "javac"
+                       "--release" "9"
+                       "-cp" classes-dir
+                       "-d" classes9-dir
+                       (find-files java9-dir "\\.java$"))
+                ;; Create multi-release JAR.
+                (let ((meta-versions
+                       (string-append classes-dir
+                                      "/META-INF/versions/9")))
+                  (mkdir-p meta-versions)
+                  (copy-recursively classes9-dir meta-versions))
+                (call-with-output-file "build/manifest.mf"
+                  (lambda (port)
+                    (display "Multi-Release: true\n" port)))
+                (invoke "jar" "--create"
+                        "--file" jar-file
+                        "--manifest" "build/manifest.mf"
+                        "-C" classes-dir "."))))
+          (replace 'install
+            (install-from-pom "pom.xml")))))
+    (inputs
+     (list libx11 libxt))
     (home-page "https://www.formdev.com/flatlaf/")
     (synopsis "Flat Look and Feel for Java Swing applications")
     (description "FlatLaf is a cross-platform Look and Feel for Java Swing

gnu/packages/javascript.scm

@@ -1088,9 +1088,9 @@ wrappers.")
   (origin
     (method git-fetch)
     (uri (git-reference (url "https://github.com/tc39/test262")
-                        (commit "a5e69a1534de88d1eb29b76657d84c8541b72df7")))
+                        (commit "a6f387de323eb9ae56448bdb71c5d315df631ce4")))
     (file-name "test262")
-    (sha256 (base32 "078a7nim0n9x36q7q8yvjwhk4ig29p25b03rr4l7g2b545cky66l"))
+    (sha256 (base32 "09avg4f75rzbmh3hcybdvjij7hbl2m79x6xp1hgl6h8ihfbn33l0"))
     (modules '((guix build utils)))
     (snippet #~(begin
                  (for-each delete-file
@@ -1100,7 +1100,7 @@ wrappers.")
 (define-public quickjs-ng
   (package
     (name "quickjs-ng")
-    (version "0.11.0")
+    (version "0.14.0")
     (source
      (origin
        (method git-fetch)
@@ -1109,11 +1109,7 @@ wrappers.")
              (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "0mfk32zvvh6c9a9plp6ad07888g795lhdmal3jyaclyn2k5iig9i"))
+        (base32 "05k8niswh0ly5sx0129jdhiinqs84s86b7sv29ff68v3546dl04i"))))
-       ;; Remove these patches on next release as they will be included.
-       (patches (search-patches
-                 "quickjs-ng-64-bits-precision-on-i686.patch"
-                 "quickjs-ng-fix-atomics.pause-on-32-bit.patch"))))
     (arguments
      (list
       #:configure-flags
@@ -1146,6 +1142,23 @@ wrappers.")
                  "")
                 (("BUILD_DIR=build")
                  "BUILD_DIR=../build"))))
+          ;; XXX: Unknown test failures in quickjs-ng 1.4.0.
+          ;; Remove for future versions.
+          (add-before 'configure 'skip-failing-tests
+            (lambda* (#:key inputs #:allow-other-keys)
+              (let* ((test262 (assoc-ref inputs "test262"))
+                     (lang-path (in-vicinity test262 "test/language")))
+                (substitute* "test262.conf"
+                  (("# list excluded tests and directories here" all)
+                   (string-join
+                    (cons* all
+                           (map (lambda (f)
+                                  (in-vicinity lang-path f))
+                                '(;; export 'foo' in module /gnu/store is ambiguous
+                                  "module-code/ambiguous-export-bindings/"
+                                  ;; Could not find export 'default'
+                                  "import/import-attributes/text-self.js")))
+                    "\n"))))))
           (replace 'check
             (lambda* (#:key tests? #:allow-other-keys)
               (when tests?

gnu/packages/kde-multimedia.scm

@@ -233,7 +233,12 @@ This package is part of the KDE multimedia module.")
                  (lambda* (#:key tests? #:allow-other-keys)
                    (when tests?
                      ;; testsqlscanmanager fails, even when run manually.
-                     (invoke "ctest" "-E" "testsqlscanmanager")))))))
+                     (invoke "ctest" "-E" "testsqlscanmanager"))))
+               (add-after 'install 'wrap-program
+                 (lambda _
+                   (wrap-program (string-append #$output "/bin/amarok")
+                     `("GST_PLUGIN_SYSTEM_PATH" ":" suffix
+                       (,(getenv "GST_PLUGIN_SYSTEM_PATH")))))))))
     (native-inputs
      (list extra-cmake-modules
            googletest
@@ -898,8 +903,16 @@ autoloading of subtitle files for use while playing video.")
            qtdeclarative
            qtwayland))
     (arguments
-     (list #:qtbase qtbase
+     (list
-           #:tests? #f))
+      #:qtbase qtbase
+      #:tests? #f
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-after 'install 'wrap-program
+            (lambda _
+              (wrap-program (string-append #$output "/bin/kamoso")
+                `("GST_PLUGIN_SYSTEM_PATH" ":" suffix
+                  (,(getenv "GST_PLUGIN_SYSTEM_PATH")))))))))
     (home-page "https://apps.kde.org/kamoso/")
     (synopsis "Take pictures and videos out of your webcam")
     (description "Kamoso is a simple and friendly program to use your
@@ -1246,14 +1259,27 @@ APIs.  It can also play videos from PeerTube sources.")
                   "0iaandlbv2v4a6wsdxk19ynj77axd3kc72nw28bvbsfb0kqc0mai"))))
       (build-system qt-build-system)
       (arguments
-       (list #:qtbase qtbase
+       (list
-             #:tests? #f)) ;no tests
+        #:qtbase qtbase
+        #:tests? #f ;no tests
+        #:phases
+        #~(modify-phases %standard-phases
+            (add-after 'install 'wrap-program
+              (lambda _
+                (wrap-program (string-append #$output "/bin/rattlesnake")
+                  `("GST_PLUGIN_SYSTEM_PATH" ":" suffix
+                    (,(getenv "GST_PLUGIN_SYSTEM_PATH")))))))))
       (native-inputs
        (list extra-cmake-modules))
       (inputs
-       (list kirigami qtdeclarative qtmultimedia qtwayland))
+       (list gst-plugins-base
-      (propagated-inputs
+             gst-plugins-good
-       (list gstreamer gst-plugins-base gst-plugins-good))
+             gstreamer
+             kirigami
+             kirigami-addons
+             qtdeclarative
+             qtmultimedia
+             qtwayland))
       (home-page "https://invent.kde.org/multimedia/rattlesnake")
       (synopsis "Metronome")
       (description "Rattlesnake is a metronome app.")

gnu/packages/kde-utils.scm

@@ -485,11 +485,23 @@ to camera devices supported by @code{libgphoto2} using
        (uri (string-append "mirror://kde/stable/release-service/" version
                            "/src/kate-" version ".tar.xz"))
        (sha256
-        (base32 "0ah6cy92yir68z25460ccl48i5nrfqswpzil9a7l69h3qxspsk88"))))
+        (base32 "0ah6cy92yir68z25460ccl48i5nrfqswpzil9a7l69h3qxspsk88"))
+       (modules '((guix build utils)))
+       ;; Unbundle SingleApplication.
+       (snippet
+        '(begin
+           (delete-file-recursively "3rdparty/SingleApplication")
+           (with-directory-excursion "apps/kate"
+             (substitute* "CMakeLists.txt"
+               ((".*3rdparty.*") "")
+               ((" -DQAPPLICATION_CLASS=FreeStandingSingleApplication") ""))
+             (substitute* "main.cpp"
+               (("(#include )\"SingleApplication\\/SingleApplication\"" _ keep)
+                (string-append keep "<SingleApplication>"))))))))
     (build-system qt-build-system)
     (native-inputs
      (list extra-cmake-modules kdoctools xorg-server-for-tests))
-    ;; TODO: Unbundle rapidjson and SingleApplication.
+    ;; TODO: Unbundle rapidjson.
     (inputs
      (list breeze-icons ;; default icon set
            karchive
@@ -515,11 +527,20 @@ to camera devices supported by @code{libgphoto2} using
            libxkbcommon
            plasma-activities
            qtsvg
-           qtwayland))
+           qtwayland
+           single-application))
     (arguments
      (list #:qtbase qtbase
            #:phases
            #~(modify-phases %standard-phases
+               (add-after 'unpack 'link-single-application
+                 (lambda _
+                   (substitute* "apps/kate/CMakeLists.txt"
+                     (("target_link_libraries\\(kate-bin PRIVATE kateprivate"
+                       all)
+                      (string-append all " "
+                                     #$(this-package-input "single-application")
+                                     "/lib/libSingleApplication.a")))))
                (add-after 'unpack 'patch-tests
                  (lambda* (#:key inputs #:allow-other-keys)
                    ;; This test requires a 'bin' diretory under '/usr'.

gnu/packages/kubernetes.scm

@@ -24,6 +24,7 @@
   #:use-module (guix packages)
   #:use-module (gnu packages golang-build)
   #:use-module (gnu packages golang-check)
+  #:use-module (gnu packages golang-crypto)
   #:use-module (gnu packages golang-web)
   #:use-module (gnu packages golang-xyz)
   #:use-module (gnu packages prometheus))
@@ -33,6 +34,313 @@
 ;;; Libraries:
 ;;;
 
+(define-public go-go-etcd-io-etcd-client-v3
+  (package
+    (name "go-go-etcd-io-etcd-client-v3")
+    (version "3.6.7")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/etcd-io/etcd")
+             (commit (go-version->git-ref version #:subdir "client"))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0d9rjyl5h0xm9isgr8b2fz8528wk3pds71rjl8g08fgsmsa5kicb"))
+       (modules '((guix build utils)
+                  (ice-9 ftw)
+                  (srfi srfi-26)))
+       (snippet #~(begin
+                    (define (delete-all-but directory . preserve)
+                      (with-directory-excursion directory
+                        (let* ((pred (negate (cut member <>
+                                                  (cons* "." ".." preserve))))
+                               (items (scandir "." pred)))
+                          (for-each (cut delete-file-recursively <>) items))))
+                    ;; Replace symlinks to tests with file contents
+                    (for-each
+                     (lambda (f)
+                       (delete-file (string-append "client/v3/" f))
+                       (copy-file (string-append
+                                   "tests/integration/clientv3/examples/" f)
+                                  (string-append "client/v3/" f)))
+                     (list "example_auth_test.go"
+                           "example_cluster_test.go"
+                           "example_kv_test.go"
+                           "example_lease_test.go"
+                           "example_maintenance_test.go"
+                           "example_metrics_test.go"
+                           "example_test.go"
+                           "example_watch_test.go"))
+                    (for-each
+                     (lambda (f)
+                       (delete-file
+                        (string-append "client/v3/concurrency/" f))
+                       (copy-file
+                        (string-append "tests/integration/clientv3/concurrency/" f)
+                        (string-append "client/v3/concurrency/" f)))
+                     (list "example_election_test.go"
+                           "example_mutex_test.go"
+                           "example_stm_test.go"))
+                    ;; Copy sertificates for tests.
+                    (mkdir-p "client/v3/tests/fixtures")
+                    (substitute* "client/v3/yaml/config_test.go"
+                      (("\\.\\./\\.\\./\\.\\./") "../"))
+                    (for-each
+                     (lambda (f)
+                       (copy-file
+                        (string-append "tests/fixtures/" f)
+                        (string-append "client/v3/tests/fixtures/" f)))
+                     (list "server.crt"
+                           "server.key.insecure"
+                           "ca.crt"))
+                    ;; Keep source related to expected import-path.
+                    (delete-all-but "." "client")
+                    (delete-file-recursively "client/pkg")))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      ;; TODO: Tests a shaky and fail a lot, check how run unittests.
+      #:tests? #f 
+      #:import-path "go.etcd.io/etcd/client/v3"
+      #:unpack-path "go.etcd.io/etcd"))
+    (native-inputs
+     (list go-github-com-grpc-ecosystem-go-grpc-middleware-providers-prometheus
+           go-github-com-prometheus-client-golang
+           go-github-com-stretchr-testify
+           go-go-etcd-io-etcd-client-pkg-v3
+           go-go-uber-org-zap
+           go-google-golang-org-grpc))
+    (propagated-inputs
+     (list go-github-com-coreos-go-semver
+           go-github-com-dustin-go-humanize
+           go-github-com-grpc-ecosystem-go-grpc-middleware-v2
+           go-go-etcd-io-etcd-api-v3
+           go-sigs-k8s-io-yaml))
+    (home-page "https://github.com/etcd-io/etcd")
+    (synopsis "Golang client for ETCD")
+    (description
+     "This package implements the official Go client for etcd.")
+    (license license:asl2.0)))
+
+(define-public go-go-etcd-io-etcd-server-v3
+  (package
+    (name "go-go-etcd-io-etcd-server-v3")
+    (version "3.6.7")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/etcd-io/etcd")
+             (commit (go-version->git-ref version
+                                          #:subdir "server"))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0d9rjyl5h0xm9isgr8b2fz8528wk3pds71rjl8g08fgsmsa5kicb"))
+       (modules '((guix build utils)
+                  (ice-9 ftw)
+                  (srfi srfi-26)))
+       (snippet #~(begin
+                    (define (delete-all-but directory . preserve)
+                      (with-directory-excursion directory
+                        (let* ((pred (negate (cut member <>
+                                                  (cons* "." ".." preserve))))
+                               (items (scandir "." pred)))
+                          (for-each (cut delete-file-recursively <>) items))))
+                    (delete-all-but "." "server")
+                    (rename-file "server" "server.tmp")
+                    (mkdir-p "server/v3")
+                    (rename-file "server.tmp" "server/v3")))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:tests? #f ;Setup fails
+      #:import-path "go.etcd.io/etcd/server/v3"
+      #:unpack-path "go.etcd.io/etcd"))
+    (propagated-inputs
+     (list go-github-com-coreos-go-semver
+           go-github-com-coreos-go-systemd-v22
+           go-github-com-dustin-go-humanize
+           go-github-com-gogo-protobuf
+           go-github-com-golang-groupcache
+           go-github-com-golang-jwt-jwt-v5
+           go-github-com-golang-protobuf
+           go-github-com-google-btree
+           go-github-com-google-go-cmp
+           go-github-com-grpc-ecosystem-go-grpc-middleware
+           go-github-com-grpc-ecosystem-go-grpc-middleware-providers-prometheus
+           go-github-com-grpc-ecosystem-grpc-gateway-v2
+           go-github-com-jonboulle-clockwork
+           go-github-com-prometheus-client-golang
+           go-github-com-prometheus-client-model
+           go-github-com-soheilhy-cmux
+           go-github-com-spf13-cobra
+           go-github-com-stretchr-testify
+           go-github-com-tmc-grpc-websocket-proxy
+           go-github-com-xiang90-probing
+           go-go-etcd-io-bbolt
+           go-go-etcd-io-etcd-client-v3
+           go-go-etcd-io-etcd-pkg-v3
+           go-go-etcd-io-raft-v3
+           go-go-opentelemetry-io-contrib-instrumentation-google-golang-org-grpc-otelgrpc
+           go-go-opentelemetry-io-otel
+           go-go-opentelemetry-io-otel-exporters-otlp-otlptrace
+           go-go-opentelemetry-io-otel-exporters-otlp-otlptrace-otlptracegrpc
+           go-go-opentelemetry-io-otel-sdk
+           go-go-uber-org-zap
+           go-golang-org-x-crypto
+           go-golang-org-x-net
+           go-golang-org-x-time
+           go-google-golang-org-genproto-googleapis-api
+           go-google-golang-org-grpc
+           go-google-golang-org-protobuf
+           go-gopkg-in-natefinch-lumberjack-v2
+           go-sigs-k8s-io-json
+           go-sigs-k8s-io-yaml))
+    (home-page "https://go.etcd.io/etcd")
+    (synopsis "Server package for ETCD")
+    (description
+     "This package provides a server for the ETCD distributed key-value storage
+system.")
+    (license license:asl2.0)))
+
+
+(define-public go-go-etcd-io-etcd-pkg-v3
+  (package
+    (name "go-go-etcd-io-etcd-pkg-v3")
+    (version "3.6.7")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/etcd-io/etcd")
+              (commit (go-version->git-ref version
+                                           #:subdir "pkg"))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0d9rjyl5h0xm9isgr8b2fz8528wk3pds71rjl8g08fgsmsa5kicb"))
+       (modules '((guix build utils)
+                  (ice-9 ftw)
+                  (srfi srfi-26)))
+       (snippet #~(begin
+                    (define (delete-all-but directory . preserve)
+                      (with-directory-excursion directory
+                        (let* ((pred (negate (cut member <>
+                                                  (cons* "." ".." preserve))))
+                               (items (scandir "." pred)))
+                          (for-each (cut delete-file-recursively <>) items))))
+                    (delete-all-but "." "pkg")
+                    (rename-file "pkg" "pkg.tmp")
+                    (mkdir-p "pkg/v3")
+                    (rename-file "pkg.tmp" "pkg/v3")))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:tests? #f       ;TODO: Tests hang, select some subset
+      #:import-path "go.etcd.io/etcd/pkg/v3"
+      #:unpack-path "go.etcd.io/etcd"))
+    (native-inputs
+     (list go-github-com-spf13-cobra
+           go-github-com-spf13-pflag
+           go-github-com-stretchr-testify))
+    (propagated-inputs
+     (list go-github-com-creack-pty
+           go-github-com-dustin-go-humanize
+           go-go-etcd-io-etcd-client-pkg-v3
+           go-go-uber-org-zap
+           go-google-golang-org-grpc))
+    (home-page "https://github.com/etcd-io/etcd")
+    (synopsis "Utility packages for etcd")
+    (description
+     "This package is a collection of utility packages used by etcd without
+being specific to etcd itself.")
+    (license license:asl2.0)))
+
+(define-public go-k8s-io-apiserver
+  (package
+    (name "go-k8s-io-apiserver")
+    (version "0.34.2")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/kubernetes/apiserver")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "06bcbdnlhg1mwky6i1519n1nhlh8rxc9qv7jwqjhc03m2ql3bb8q"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:tests? #f ;TODO: Tests require unpackaged dependencies
+      #:embed-files
+      #~(list "authoring\\.tmpl" "api__v1_openapi\\.json")
+      #:import-path "k8s.io/apiserver"))
+    (native-inputs
+     (list go-github-com-stretchr-testify))
+    (propagated-inputs
+     (list go-github-com-blang-semver-v4
+           go-github-com-coreos-go-oidc
+           go-github-com-coreos-go-systemd-v22
+           go-github-com-emicklei-go-restful-v3
+           go-github-com-fsnotify-fsnotify
+           go-github-com-go-logr-logr
+           go-github-com-gogo-protobuf
+           go-github-com-google-btree
+           go-github-com-google-cel-go
+           go-github-com-google-gnostic-models
+           go-github-com-google-go-cmp
+           go-github-com-google-uuid
+           go-github-com-gorilla-websocket
+           go-github-com-grpc-ecosystem-go-grpc-prometheus
+           go-github-com-munnerz-goautoneg
+           go-github-com-mxk-go-flowrate
+           go-github-com-spf13-pflag
+           go-go-etcd-io-etcd-api-v3
+           go-go-etcd-io-etcd-client-pkg-v3
+           go-go-etcd-io-etcd-client-v3
+           go-go-etcd-io-etcd-server-v3
+           go-go-opentelemetry-io-contrib-instrumentation-google-golang-org-grpc-otelgrpc
+           go-go-opentelemetry-io-contrib-instrumentation-net-http-otelhttp
+           go-go-opentelemetry-io-otel
+           go-go-opentelemetry-io-otel-exporters-otlp-otlptrace-otlptracegrpc
+           go-go-opentelemetry-io-otel-metric
+           go-go-opentelemetry-io-otel-sdk
+           go-go-opentelemetry-io-otel-trace
+           go-go-uber-org-zap
+           go-golang-org-x-crypto
+           go-golang-org-x-net
+           go-golang-org-x-sync
+           go-golang-org-x-sys
+           go-golang-org-x-time
+           go-google-golang-org-genproto-googleapis-api
+           go-google-golang-org-grpc
+           go-google-golang-org-protobuf
+           go-gopkg-in-evanphx-json-patch-v4
+           go-gopkg-in-go-jose-go-jose-v2
+           go-gopkg-in-natefinch-lumberjack-v2
+           go-k8s-io-api
+           go-k8s-io-apimachinery
+           go-k8s-io-client-go
+           go-k8s-io-component-base
+           go-k8s-io-klog-v2
+           go-k8s-io-kms
+           go-k8s-io-kube-openapi
+           go-k8s-io-utils
+           go-sigs-k8s-io-apiserver-network-proxy-konnectivity-client
+           go-sigs-k8s-io-json
+           go-sigs-k8s-io-randfill
+           go-sigs-k8s-io-structured-merge-diff-v6
+           go-sigs-k8s-io-yaml))
+    (home-page "https://github.com/kubernetes/apiserver")
+    (synopsis "Library for building a Kubernetes aggregated API server")
+    (description
+     "This package provides a generic library for building a Kubernetes
+aggregated API server.")
+    (license license:asl2.0)))
+
 (define-public go-k8s-io-component-base
   (package
     (name "go-k8s-io-component-base")
@@ -87,6 +395,39 @@
      "This package contains shared code for Kubernetes core components.")
     (license license:asl2.0)))
 
+(define-public go-sigs-k8s-io-apiserver-network-proxy-konnectivity-client
+  (package
+    (name "go-sigs-k8s-io-apiserver-network-proxy-konnectivity-client")
+    (version "0.34.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/kubernetes-sigs/apiserver-network-proxy")
+              (commit (go-version->git-ref version
+                                           #:subdir "konnectivity-client"))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1kh92blfpmrmklxqg5j0p07yz534gjzhm44xj8bh5pad3y5zw5m0"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:import-path "sigs.k8s.io/apiserver-network-proxy/konnectivity-client"
+      #:unpack-path "sigs.k8s.io/apiserver-network-proxy"))
+    (native-inputs
+     (list go-go-uber-org-goleak))
+    (propagated-inputs
+     (list go-github-com-prometheus-client-golang
+           go-google-golang-org-grpc
+           go-google-golang-org-protobuf
+           go-k8s-io-klog-v2))
+    (home-page "https://sigs.k8s.io/apiserver-network-proxy")
+    (synopsis "Network proxy for Kubernetes API server")
+    (description
+     "This package provides a network proxy for the Kubernetes API server.")
+    (license license:asl2.0)))
+
 
 ;;;
 ;;; Executables:

gnu/packages/libevent.scm

@@ -219,14 +219,14 @@ resolution, asynchronous file system operations, and threading primitives.")
   (package
     (inherit libuv)
     (name "libuv")
-    (version "1.43.0")
+    (version "1.44.2")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://dist.libuv.org/dist/v" version
                                   "/libuv-v" version ".tar.gz"))
               (sha256
                (base32
-                "194kwq3jfj9s628kzkchdca534rikjw0xiyas0cjbphqmsvjpmwh"))))
+                "1d1wy1061cf2mfygr2j6jbm0da2mhsf0l9yq4rjkqrsmijbdrz6c"))))
     (properties '((hidden? . #t)))))
 
 (define-public perl-anyevent

gnu/packages/librewolf.scm

@@ -205,8 +205,7 @@
        (search-patches
         "librewolf-compare-paths.patch"
         "librewolf-use-system-wide-dir.patch"
-        "librewolf-add-store-to-rdd-allowlist.patch"
+        "librewolf-add-store-to-rdd-allowlist.patch"))
-        "librewolf-150.0-encoding_rs-rust-fix.patch"))
       ;; Slim down the tarball by removing unbundled libraries and 75 Mo (800+
       ;; Mo uncompressed) of unused tests.
       ;; TODO: Unbundle security/nss and media/libpng.
@@ -239,23 +238,23 @@
 ;;; but since in Guix only the latest packaged Rust is officially supported,
 ;;; it is a tradeoff worth making.
 ;;; 0: https://firefox-source-docs.mozilla.org/writing-rust-code/update-policy.html
-(define rust-librewolf rust-1.93)
+(define rust-librewolf rust-1.94)
 
 ;; Update this id with every update to its release date.
 ;; It's used for cache validation and therefore can lead to strange bugs.
 ;; ex: date '+%Y%m%d%H%M%S'
 ;; or: (format-time-string "%Y%m%d%H%M%S")
-(define %librewolf-build-id "20260421153818")
+(define %librewolf-build-id "20260428201413")
 
 (define-public librewolf
   (package
     (name "librewolf")
-    (version "150.0-1")
+    (version "150.0.1-1")
     (source
      (make-librewolf-source
       #:version version
-      #:firefox-hash "151rxzl80dm8jsxl6fwzgbirwq4zpms5adwwnbjcwdd1r3s3vr7v"
+      #:firefox-hash "1v3fbwvd0khm3xwsgwcp6wpwmkz0v6fyk37hxj0mqkwjimqgmkra"
-      #:librewolf-hash "0iw9v3zc1fxc93yyhldqarxaypgmbndh2ylsy330kcbpb6p1gnmr"
+      #:librewolf-hash "0294lsiyvfh93id04xki4bhs8d84vmysqviivxiif0xfzqv65qzp"
       #:l10n firefox-l10n))
     (build-system gnu-build-system)
     (arguments

gnu/packages/lisp-xyz.scm

@@ -12982,8 +12982,8 @@ score.  When evaluated, the musical score is rendered to an image.")
   (sbcl-package->ecl-package sbcl-cmn))
 
 (define-public sbcl-coalton
-  (let ((commit "bf475c8c53e02a2e0cb29deab4d101d25743bfca")
+  (let ((commit "14ed6dc733f8c23c1a345ceb11d3f75ee47f7525")
-        (revision "5"))
+        (revision "6"))
     (package
       (name "sbcl-coalton")
       (version (git-version "0.0.1" revision commit))
@@ -12995,12 +12995,16 @@ score.  When evaluated, the musical score is rendered to an image.")
                (commit commit)))
          (file-name (git-file-name "cl-coalton" version))
          (sha256
-          (base32 "0zrp2s82n2mxx7knbnbsdj64zar21nnnf8iwzrqzs4g3v6xpyz9z"))))
+          (base32 "024n72lxi8nycy012lqy6zx19lv7jh2ngs1mf559rw8kgwh3k54c"))))
       (build-system asdf-build-system/sbcl)
       (native-inputs
-       (list sbcl-fiasco))
+       (list sbcl-fiasco
+             sbcl-html-entities
+             sbcl-spinneret
+             sbcl-yason))
       (inputs
        (list sbcl-alexandria
+             sbcl-computable-reals
              sbcl-concrete-syntax-tree
              sbcl-eclector
              sbcl-float-features
@@ -13556,10 +13560,10 @@ place outside with-notes.
   (sbcl-package->ecl-package sbcl-compiler-macro-notes))
 
 (define-public sbcl-computable-reals
-  (let ((commit "fdc73d75e79d0a4ce6d01c822c950ae2eb137d39"))
+  (let ((commit "607a5d5b95387c06f92a661aa5562a7be0f5cad8"))
     (package
       (name "sbcl-computable-reals")
-      (version (git-version "1.1.0" "1" commit))
+      (version (git-version "1.1.0" "2" commit))
       (source
        (origin
          (method git-fetch)
@@ -13568,7 +13572,7 @@ place outside with-notes.
                (commit commit)))
          (file-name (git-file-name name version))
          (sha256
-          (base32 "0f12axi53x14l12dgf4a1lfq3p1fx7fh7sjfc0db3lk88ph9qfwl"))))
+          (base32 "1x8kkdyjil0zzg8fq9b76z12kmfrqwhsxnr6qqnlrg0c8c5bzz9c"))))
       (build-system asdf-build-system/sbcl)
       (home-page "https://github.com/stylewarning/computable-reals")
       (synopsis "Arbitrary-precision, re-computing real-numbers in Common Lisp")
@@ -22847,16 +22851,6 @@ specification}, a toolkit for writing GUIs in Common Lisp.")
 (define-public cl-mcclim
   (sbcl-package->cl-source-package sbcl-mcclim))
 
-(define-public ecl-mcclim
-  (let ((pkg (sbcl-package->ecl-package sbcl-mcclim)))
-    (package
-      (inherit pkg)
-      (arguments
-       (substitute-keyword-arguments arguments
-         ;; Tests fail with "FUNCTION: Not a valid argument (R1
-         ;; (GENERATE-REGION))."  on ECL.
-         ((#:tests? _ #f) #f))))))
-
 (define-public sbcl-md5
   (package
     (name "sbcl-md5")
@@ -29430,7 +29424,7 @@ running into parallelism problems when having to change directory.")
 (define-public sbcl-simple-matrix
   (package
     (name "sbcl-simple-matrix")
-    (version "3.15")
+    (version "3.16")
     (source
      (origin
        (method git-fetch)
@@ -29439,7 +29433,7 @@ running into parallelism problems when having to change directory.")
              (commit (string-append "v" version))))
        (file-name (git-file-name "cl-simple-matrix" version))
        (sha256
-        (base32 "1lpmqp1mcnzkpxi0zfsd4n85c6gr6d01hlf8yka8068kyypbhkvg"))))
+        (base32 "1yfh40kvpgjaq0vlm5lqnfpll9swl7gzcxnd0qlk6hshhqyc373q"))))
     (build-system asdf-build-system/sbcl)
     (native-inputs (list sbcl-fiveam))
     (synopsis "Matrix library for Common Lisp")
@@ -29767,7 +29761,7 @@ the Processing language and shares some of the API.")
   ;; Update together with emacs-slime.
   (package
     (name "sbcl-slime-swank")
-    (version "2.31")
+    (version "2.32")
     (source
      (origin
        (file-name (git-file-name "cl-slime-swank" version))
@@ -29776,7 +29770,7 @@ the Processing language and shares some of the API.")
              (url "https://github.com/slime/slime/")
              (commit (string-append "v" version))))
        (sha256
-        (base32 "0nv99wq2vz053p0rn9953rhmyz4g40zdl01mz7z9xbklxzbsx6x7"))
+        (base32 "0s7m7j7y1p8fb6ncpxcxdrrrxp5aw67xl7wrqy8zjjvwzljbs548"))
        (modules '((guix build utils)))
        (snippet
         ;; The doc folder drags `gawk' into the closure.  Doc is already
@@ -32067,6 +32061,14 @@ a simple-array ensuring that the resulting array is still a simple-array.")
      (arguments
       `(#:phases
         (modify-phases %standard-phases
+          ;; sbcl 2.6.4 is too smart, and figures out the test will trigger a
+          ;; division by zero at compile time and refuse to compile the file. It
+          ;; looks like the test already tries to avoid compile time checks, so
+          ;; we go a step further and EVAL parts of the expression.
+          (add-after 'unpack 'circumvent-compile-time-check
+             (lambda _
+               (substitute* "test/tests.lisp"
+                 (("\\(expt 1024 0\\)") "(eval '(expt 1024 0))"))))
           (add-after 'check 'delete-test-results
             (lambda* (#:key outputs #:allow-other-keys)
               (let ((test-results (string-append (assoc-ref outputs "out")

gnu/packages/lisp.scm

@@ -109,6 +109,7 @@
   #:use-module (gnu packages pretty-print)
   #:use-module (gnu packages readline)
   #:use-module (gnu packages sdl)
+  #:use-module (gnu packages stb)
   #:use-module (gnu packages tcl)
   #:use-module (gnu packages tex)
   #:use-module (gnu packages texinfo)
@@ -892,13 +893,16 @@ interface to the Tk widget system.")
     (arguments
      (list #:make-flags
            #~(list
-              (string-append "DESTDIR=" #$output)
+              (string-append "PREFIX=" #$output)
-              (string-append "PREFIX=")
               (string-append "CC=" #$(cc-for-target)))
            #:test-target "test"
            #:phases
            #~(modify-phases %standard-phases
                (delete 'configure))))
+    (native-search-paths
+     (list (search-path-specification
+             (variable "JANET_PATH")
+             (files (list "lib/janet")))))
     (home-page "https://janet-lang.org/")
     (synopsis "Functional, imperative and embeddable programming language")
     (description
@@ -999,6 +1003,78 @@ tool and its main uses are installing dependencies, compiling C/C++ to native
 libraries, and other management tasks for Janet projects.")
     (license license:expat)))
 
+(define-public janet-spork
+  (package
+    (name "janet-spork")
+    (version "1.2.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/janet-lang/spork")
+              (commit (string-append "v" version))))
+       (modules '((guix build utils)))
+       (snippet #~(for-each
+                   delete-file-recursively
+                   '("deps/miniz" "deps/stb")))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0c9f54wl8g7zazrqk5f6nhp9lp38pymkxmcipagrip915i8ks0v8"))))
+    (build-system gnu-build-system)
+    (arguments
+     (list
+      #:phases
+      #~(modify-phases %standard-phases
+          (delete 'configure)
+          (delete 'check)
+          (add-after 'unpack 'fixes
+            (lambda* (#:key inputs #:allow-other-keys)
+              (substitute* '("test/suite-cjanet.janet")
+                (("\\(end-jit\\)" all)
+                 (simple-format #f "(setdyn :cc ~s)\n~a"
+                   #$(cc-for-target) all)))
+              (substitute* '("src/zip.c")
+                (("\"\\.\\./deps/miniz/miniz\\.h\"") "<miniz/miniz.h>"))
+              (let ((stb (dirname (search-input-file inputs "stb_image.h"))))
+                (substitute* '("project.janet")
+                  (("\"deps/miniz/miniz\\.c\"") "")
+                  ((":headers @\\[\"deps/miniz/miniz\\.h\"\\]")
+                   ":ldflags @[\"-lminiz\"]")
+                  (("\"-Ideps/stb\"") (string-append "\"-I" stb "\""))))))
+          (replace 'build
+            (lambda _
+              (invoke "janet" "-l" "./bundle" "-e" "(build)")))
+          (replace 'install
+            (lambda _
+              (let* ((janet-path (string-append #$output "/lib/janet")))
+                (mkdir-p janet-path)
+                (setenv "JANET_PATH" janet-path))
+              (invoke "janet" "--install" ".")))
+          (add-after 'install 'fix-output
+            (lambda _
+              (let* ((inc (string-append #$output "/include/janet/spork"))
+                     (bin (string-append #$output "/lib/janet/bin"))
+                     (man (string-append #$output "/lib/janet/man")))
+                (mkdir-p inc)
+                (rename-file
+                 (string-append #$output "/lib/janet/tarray.h")
+                 (string-append inc "/tarray.h"))
+                (rename-file bin (string-append #$output "/bin"))
+                (mkdir-p (string-append #$output "/share"))
+                (rename-file man (string-append #$output "/share/man")))))
+          (add-after 'fix-output 'check
+            (lambda* (#:key tests? #:allow-other-keys)
+              (when tests?
+                (invoke "janet" "-l" "./bundle" "-e" "(check)")))))))
+    (inputs (list janet miniz stb))
+    (home-page "https://github.com/janet-lang/spork")
+    (synopsis "Extended standard library for Janet")
+    (description
+     "Spork is a utility library for Janet.  It contains small modules
+that should be useful for general programming in Janet but are not included
+in the standard library.")
+    (license license:expat)))
+
 (define-public lisp-repl-core-dumper
   (package
     (name "lisp-repl-core-dumper")

gnu/packages/logging.scm

@@ -229,42 +229,25 @@ provides some unique features such as CSV log format and wide string support.")
 (define-public multitail
   (package
     (name "multitail")
-    (version "6.5.2")
+    (version "7.1.5")
     (source
      (origin
-      (method git-fetch)
+       (method git-fetch)
-      (uri (git-reference
+       (uri (git-reference
-            (url "https://github.com/halturin/multitail")
+             (url "https://github.com/folkertvanheusden/multitail")
-            (commit (string-append "v" version))))
+             (commit version)))
-      (file-name (git-file-name name version))
+       (file-name (git-file-name name version))
-      (sha256
+       (sha256
-       (base32 "17hg5qpangyx4m7hp2x4h56mp6w3wsaslg1il39qcpwsffh1rihc"))))
+        (base32 "11kkd2rg3qc7ck5iyha0f8l5lqc1bvwypn80di0h77h7p106blvk"))))
-    (build-system gnu-build-system)
+    (build-system cmake-build-system)
     (arguments
-     `(#:make-flags
+     (list
-       (list (string-append "CC=" ,(cc-for-target))
+      #:tests? #f                       ;no test suite
-             (string-append "PREFIX=" (assoc-ref %outputs "out"))
+      #:phases #~(modify-phases %standard-phases
-             "SYSCONFDIR=$(PREFIX)/etc")
+                   (add-after 'unpack 'patch-curses-headers
-       #:phases
+                     (lambda _
-       (modify-phases %standard-phases
+                       (substitute* "mt.h"
-         (add-after 'unpack 'fix-broken-build
+                         (("ncursesw/") "")))))))
-           ;; With some luck, you might be able to remove this when updating…
-           (lambda _
-             (substitute* "Makefile"
-               ((" \\*\\.txt") "")
-               ((".*CONFIG_DIR.*") "")
-               (("^install: .*" match)
-                (string-append match
-                               "\t$(INSTALL_DIR) $(DESTDIR)$(SYSCONFDIR)\n")))
-             (substitute* "version"
-               (("(VERSION=).*" _ assign)
-                (string-append assign ,version)))))
-         (add-after 'unpack 'patch-curses-headers
-           (lambda _
-             (substitute* "mt.h"
-               (("ncursesw/") ""))))
-         (delete 'configure))           ; no configure script
-       #:tests? #f)) ; no test suite (make check just runs cppcheck)
     (inputs (list ncurses))
     (home-page "https://vanheusden.com/multitail/")
     (synopsis "Monitor multiple log files")

gnu/packages/lua.scm

@@ -1129,7 +1129,7 @@ Grammars (PEGs).")
 (define (make-lua-luv name lua)
   (package
     (name name)
-    (version "1.43.0-0")
+    (version "1.44.2-0")
     (source (origin
               ;; The release tarball includes the sources of libuv but does
               ;; not include the pkg-config files.
@@ -1140,7 +1140,7 @@ Grammars (PEGs).")
               (file-name (git-file-name name version))
               (sha256
                (base32
-                "1yzi4bm845vl84wyv2qw4z1n1v285lgwm681swmp84brfy2s7czp"))))
+                "0jdvsznzha290gnzd66vscsdacd5dapq0scwy4zj64d9wnsv39p7"))))
     (build-system cmake-build-system)
     (arguments
      (list #:tests? #f                      ; there are none
@@ -1821,7 +1821,7 @@ multiple local rocks trees.")
 (define-public fennel
   (package
     (name "fennel")
-    (version "1.6.0")
+    (version "1.6.1")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -1830,11 +1830,10 @@ multiple local rocks trees.")
               (file-name (git-file-name name version))
               (sha256
                (base32
-                "09gky2w8z83qqv0n9vx8jqsfldni14kjr6l7y5k44lq5i30i0fsv"))))
+                "0n58410gmxfnmgggdw6ap12fa68z5s7f83487b2apim52a8wpd9h"))))
     (build-system gnu-build-system)
     (arguments
-     (list #:make-flags #~(list (string-append "PREFIX="
+     (list #:make-flags #~(list (string-append "PREFIX=" #$output))
-                                               (assoc-ref %outputs "out")))
            #:test-target "test"
            #:phases #~(modify-phases %standard-phases
                         (delete 'configure)

gnu/packages/mail.scm

@@ -57,7 +57,7 @@
 ;;; Copyright © 2023 Wilko Meyer <w@wmeyer.eu>
 ;;; Copyright © 2024 Benjamin Slade <slade@lambda-y.net>
 ;;; Copyright © 2024 Jean Simard <woshilapin@tuziwo.info>
-;;; Copyright © 2024, 2025 Zheng Junjie <873216071@qq.com>
+;;; Copyright © 2024-2026 Zheng Junjie <z572@z572.online>
 ;;; Copyright © 2024, 2025 Ashish SHUKLA <ashish.is@lostca.se>
 ;;; Copyright © 2025 Tanguy Le Carrour <tanguy@bioneland.org>
 ;;; Copyright © 2025-2026 Sharlatan Hellseher <sharlatanus@gmail.com>
@@ -138,6 +138,7 @@
   #:use-module (gnu packages guile-xyz)
   #:use-module (gnu packages haskell-xyz)
   #:use-module (gnu packages icu4c)
+  #:use-module (gnu packages jemalloc)
   #:use-module (gnu packages kerberos)
   #:use-module (gnu packages language)
   #:use-module (gnu packages libbsd)
@@ -148,6 +149,7 @@
   #:use-module (gnu packages libunistring)
   #:use-module (gnu packages libunwind)
   #:use-module (gnu packages linux)
+  #:use-module (gnu packages llvm)
   #:use-module (gnu packages lsof)
   #:use-module (gnu packages lua)
   #:use-module (gnu packages m4)
@@ -158,6 +160,7 @@
   #:use-module (gnu packages networking)
   #:use-module (gnu packages onc-rpc)
   #:use-module (gnu packages openldap)
+  #:use-module (gnu packages nss)
   #:use-module (gnu packages pcre)
   #:use-module (gnu packages pdf)
   #:use-module (gnu packages perl)
@@ -198,6 +201,7 @@
   #:use-module (gnu packages xml)
   #:use-module (gnu packages xorg)
   #:use-module (gnu packages)
+  #:use-module (guix build-system cargo)
   #:use-module (guix build-system cmake)
   #:use-module (guix build-system emacs)
   #:use-module (guix build-system glib-or-gtk)
@@ -1355,7 +1359,7 @@ security functionality including PGP, S/MIME, SSH, and SSL.")
 (define-public mu
   (package
     (name "mu")
-    (version "1.14.0")
+    (version "1.14.1")
     (source
      (origin
        (method git-fetch)
@@ -1364,7 +1368,7 @@ security functionality including PGP, S/MIME, SSH, and SSL.")
               (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "1fhnnm58ndfd6hzdagrsgcdcm2qlcjlda13vyx5d9lclhxgdn0vf"))))
+        (base32 "0dv27pq2jmgqlzsy2gcmh7vddiwiwd55j299blb9k8g0xhkg8riz"))))
     (build-system meson-build-system)
     (native-inputs
      (list pkg-config
@@ -3910,6 +3914,112 @@ are supported).  @code{bit} is a CGI/SSI program that generates web pages
 on the fly.  Both programs are written in C and are very fast.")
     (license license:expat)))
 
+(define computed-origin-method (@@ (guix packages) computed-origin-method))
+
+(define-public stalwart
+  (package
+    (name "stalwart")
+    (version "0.16.3")
+    (source
+     (let ((upstream-source
+             (origin
+               (method git-fetch)
+               (uri (git-reference
+                      (url "https://github.com/stalwartlabs/stalwart")
+                      (commit (string-append "v" version))))
+               (file-name (git-file-name name version))
+               (sha256
+                (base32
+                 "1wcs9inwv8iv4qrayp9730wzmmpp4bna6jnpdz29ygb5c0lf2b29")))))
+       (origin
+         (method computed-origin-method)
+         (file-name (git-file-name name version))
+         (sha256 #f)
+         (uri
+          (delay
+            (with-imported-modules '((guix build utils))
+              #~(begin
+                  (use-modules (guix build utils))
+                  (set-path-environment-variable
+                   "PATH" '("bin")
+                   (list #+python-minimal))
+                  (copy-recursively #+upstream-source "upstream-source")
+                  (with-directory-excursion "upstream-source"
+                    (for-each make-file-writable (find-files "crates" "\\.rs"))
+                    (invoke "python3" "resources/scripts/ossify.py" "crates")
+                    (substitute* "crates/main/Cargo.toml"
+                      ((", \"enterprise\"")
+                       ""))
+                    (substitute* "crates/common/Cargo.toml"
+                      (("git =.*/opentelemetry-rust\"")
+                       "version = \"0.31.0\"")))
+                  (copy-recursively "upstream-source" #$output))))))))
+    (build-system cargo-build-system)
+    (arguments
+     (list
+      #:install-source? #f
+      ;; TODO: Currently, if the test is enabled, it will attempt to link
+      ;; the foundationdb library. However, we haven't packaged it yet,
+      ;; so for now, skip tests.
+      #:tests? #f
+      #:features ''("s3" "postgres" "rocks" "sqlite")
+      #:cargo-install-paths ''("crates/main")
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-before 'build 'setenv
+            (lambda* (#:key inputs #:allow-other-keys)
+              (setenv "LIBZ_SYS_STATIC" "0")
+              ;; jemalloc needs unbundling for tikv-jemallocator-sys
+              ;; This flag is needed when not using the bundled jemalloc.
+              ;; https://github.com/tikv/jemallocator/issues/19
+              (setenv
+               "CARGO_FEATURE_UNPREFIXED_MALLOC_ON_SUPPORTED_PLATFORMS" "1")
+              (setenv "JEMALLOC_OVERRIDE"
+                      (search-input-file inputs "/lib/libjemalloc.so")))))))
+    (native-inputs (list clang pkg-config))
+    (inputs (cons* bzip2
+                   jemalloc
+                   librdkafka
+                   lz4
+                   rocksdb
+                   snappy
+                   sqlite
+                   zlib
+                   openssl
+                   `(,zstd "lib")
+                   (cargo-inputs 'stalwart)))
+    (home-page "https://stalw.art")
+    (synopsis "All in one Mail and Collaboration server")
+    (description
+     "Stalwart is an mail and collaboration server with JMAP, IMAP4, POP3, SMTP,
+CalDAV, CardDAV and WebDAV support and a wide range of modern features.")
+    (license license:agpl3)))
+
+(define-public stalwart-cli
+  (package
+    (name "stalwart-cli")
+    (version "1.0.4")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/stalwartlabs/cli")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0rbhzd8m48fm5q8vlzkla5zxrypkbvsi8i1bplkm1ndp0bwiqdvz"))))
+    (build-system cargo-build-system)
+    (arguments
+     (list #:install-source? #f))
+    (native-inputs (list nss-certs-for-test))
+    (inputs (cargo-inputs 'stalwart-cli))
+    (home-page "https://stalw.art")
+    (synopsis "Stalwart Command Line Interface")
+    (description
+     "A schema-driven command line tool for administering Stalwart Mail and
+Collaboration Server over its JMAP API.")
+    (license license:agpl3)))
+
 (define-public swaks
   (package
     (name "swaks")

gnu/packages/maths.scm

@@ -22,7 +22,7 @@
 ;;; Copyright © 2017, 2019, 2022 Arun Isaac <arunisaac@systemreboot.net>
 ;;; Copyright © 2017–2021 Tobias Geerinckx-Rice <me@tobias.gr>
 ;;; Copyright © 2017 Dave Love <me@fx@gnu.org>
-;;; Copyright © 2018, 2019, 2020, 2021, 2022, 2024, 2025 Janneke Nieuwenhuizen <janneke@gnu.org>
+;;; Copyright © 2018-2022, 2024-2026 Janneke Nieuwenhuizen <janneke@gnu.org>
 ;;; Copyright © 2018 Joshua Sierles, Nextjournal <joshua@nextjournal.com>
 ;;; Copyright © 2018 Nadya Voronova <voronovank@gmail.com>
 ;;; Copyright © 2018 Adam Massmann <massmannak@gmail.com>
@@ -450,7 +450,7 @@ programming languages.")
 (define-public cvc5
   (package
     (name "cvc5")
-    (version "1.3.3")
+    (version "1.3.4")
     (source
      (origin
        (method git-fetch)
@@ -458,9 +458,8 @@ programming languages.")
              (url "https://github.com/cvc5/cvc5/")
              (commit (string-append "cvc5-" version))))
        (file-name (git-file-name name version))
-       (patches (search-patches "cvc5-reproducible-build.patch"))
        (sha256
-        (base32 "0ynz7di4dyyiiydgmf0z9dc2jl7nm44xi0amch29rcgznwr4wy5m"))))
+        (base32 "1xix197pyd45jakk10apam3bhl38nk14zjk0fzr9rj4knh10x5rx"))))
     (build-system cmake-build-system)
     (arguments
      (list
@@ -745,6 +744,54 @@ complete with events and to-dos.")
       (home-page "https://codeberg.org/dgoodmaniii/dozenal")
       (license license:gpl3+))))
 
+(define-public drat-trim
+  (package
+    (name "drat-trim")
+    (version "05.22.2023")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/marijnheule/drat-trim")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "084miqj57xr7c74y649acm5xjkddpjn4ybfh469jcbakzp8w0pdi"))))
+    (build-system gnu-build-system)
+    (arguments
+     (list
+      #:tests? #f ;no tests
+      #:make-flags
+      #~(list (string-join
+                (list "FLAGS=-DLONGTYPE"
+                      ;; _POSIX_C_SOURCE required for getc_unlocked(3).
+                      "-D_POSIX_C_SOURCE=200809")
+                " "))
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-after 'unpack 'always-pass-flags
+            (lambda _
+              (substitute* "Makefile"
+                ;; Ensure that drat-trim and gapless target also respect FLAGS.
+                (("-std=c99 -O2")
+                 "-std=c99 $(FLAGS) -O2"))))
+          (delete 'configure) ;no configure script
+          (replace 'install
+            (lambda* (#:key outputs #:allow-other-keys)
+              (let* ((bin (string-append #$output "/bin")))
+                (for-each (lambda (exec)
+                            (install-file exec bin))
+                          '("drat-trim"
+                            "lrat-check"))))))))
+    (synopsis "Proof checker for unsatisfiability of propositional formulas")
+    (description
+     "The proof checker DRAT-trim can be used to check whether a propositional
+formula in the DIMACS format is unsatisfiable.  Given a propositional formula and
+a clausal proof, DRAT-trim validates that the proof is a certificate of
+unsatisfiability of the formula.")
+    (home-page "https://www.cs.utexas.edu/~marijn/drat-trim/")
+    (license license:expat)))
+
 (define-public dsfmt
   (package
     (name "dsfmt")
@@ -2475,6 +2522,9 @@ similar to MATLAB, GNU Octave or SciPy.")
                    ;; "--enable-doxygen"
                    "--enable-dot"
                    "--enable-netcdf-4"
+                   #$@(if (or (target-x86-32?) (target-arm32?))
+                          '("CFLAGS=-Wno-error=incompatible-pointer-types")
+                          '())
                    (string-append "--with-plugin-dir=" #$output "/lib/hdf5-plugins"))
            #:phases
            #~(modify-phases %standard-phases
@@ -2486,7 +2536,15 @@ similar to MATLAB, GNU Octave or SciPy.")
                      (("testurl.sh") ""))
                    (substitute* "nczarr_test/Makefile.in"
                      (("/bin/bash")
-                      (search-input-file inputs "bin/bash")))))
+                      (search-input-file inputs "bin/bash")))
+                   ;; This test fails on 32 bit platforms.
+                   #$@(if (or (target-x86-32?) (target-arm32?))
+                          '((substitute* '("ncdump/tst_netcdf4_4.sh"
+                                           "ncdump/tst_nccopy4.sh")
+                              (("#!/bin/sh" m) (string-append m "\nexit 0\n")))
+                            (substitute* "ncdump/Makefile.in"
+                              (("tst_netcdf4_4.log") "")))
+                          '())))
                (add-before 'configure 'fix-source-date
                  (lambda _
                    ;; As we ${SOURCE_DATE_EPOCH} evaluates to "1" in the build
@@ -3631,7 +3689,7 @@ script files.")
       ;; 'Automated Testing System', which may be accessed after
       ;; installation via the draw.sh script.  draw.sh is located in
       ;; the bin directory. For details see:
-      ;; https://www.opencascade.com/doc/occt-7.3.0/overview/html/\
+      ;; https://dev.opencascade.org/doc/occt-7.3.0/overview/html/\
       ;; occt_dev_guides__tests.html
       #:tests? #f
       #:configure-flags
@@ -3640,7 +3698,7 @@ script files.")
               "-DUSE_FREEIMAGE:BOOL=ON"
               "-DUSE_RAPIDJSON:BOOL=ON"
               "-DUSE_TBB:BOOL=ON"
-              "-DUSE_VTK:BOOL=OFF"
+              "-DUSE_VTK:BOOL=ON"
               "-DBUILD_DOC_Overview:BOOL=OFF"
               "-DCMAKE_EXPORT_NO_PACKAGE_REGISTRY=ON"
               "-DCMAKE_FIND_PACKAGE_NO_PACKAGE_REGISTRY=ON"
@@ -3658,9 +3716,10 @@ script files.")
            onetbb
            rapidjson
            tcl
-           tk))
+           tk
+           vtk))
     ;; TODO: build Overview documentation and add 'doc' output.
-    (home-page "https://www.opencascade.com")
+    (home-page "https://dev.opencascade.org")
     (synopsis "Libraries for 3D modeling and numerical simulation")
     (description
      "Open CASCADE is a set of libraries for the development of applications
@@ -3730,7 +3789,7 @@ This is the certified version of the Open Cascade Technology (OCCT) library.")
         ;; 'Automated Testing System', which may be accessed after
         ;; installation via the draw.sh script.  draw.sh is located in
         ;; the bin directory. For details see:
-        ;; https://www.opencascade.com/doc/occt-7.3.0/overview/html/\
+        ;; https://dev.opencascade.org/doc/occt-7.3.0/overview/html/\
         ;; occt_dev_guides__tests.html
         #:tests? #f
                  ;; Configure without freeimage: attempting to link against the
@@ -3740,7 +3799,7 @@ This is the certified version of the Open Cascade Technology (OCCT) library.")
                  (list "-DCMAKE_CXX_FLAGS=-fpermissive" ;from unsigned char* to char*
                        "-DUSE_FREEIMAGE:BOOL=OFF"
                        "-DUSE_TBB:BOOL=ON"
-                       "-DUSE_VTK:BOOL=OFF"
+                       "-DUSE_VTK:BOOL=ON"
                        "-DBUILD_DOC_Overview:BOOL=OFF"
                        "-DCMAKE_EXPORT_NO_PACKAGE_REGISTRY=ON"
                        "-DCMAKE_FIND_PACKAGE_NO_PACKAGE_REGISTRY=ON"
@@ -3756,9 +3815,10 @@ This is the certified version of the Open Cascade Technology (OCCT) library.")
             mesa
             tbb-2020
             tcl
-            tk))
+            tk
+            vtk))
      ;; TODO: build Overview documentation and add 'doc' output.
-     (home-page "https://www.opencascade.com")
+     (home-page "https://dev.opencascade.org")
      (synopsis "Libraries for 3D modeling and numerical simulation")
      (description
       "Open CASCADE is a set of libraries for the development of applications
@@ -3995,6 +4055,64 @@ addition it can be used as a module in Python for plotting.  It supports
 vector and bitmap output, including PDF, Postscript, SVG and EMF.")
     (license license:gpl2+)))
 
+(define-public voro++
+  (package
+    (name "voro++")
+    (version "0.4.6")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/chr1shr/voro")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0rxyb662w9y3xadyxz2x7gvc7mafbhl13szdc55fsk5sygpdlkv5"))))
+    (build-system gnu-build-system)
+    (arguments
+     (list
+      #:make-flags #~(list (string-append "PREFIX=" #$output))
+      #:phases
+      #~(modify-phases %standard-phases
+          (delete 'configure)        ;no configure
+          (replace 'check
+            ;; There is no test suite but the project provides a verity of
+            ;; examples to check performance, target "all" build each example
+            ;; (basic, walls, custom, extra, degenerate, and interface), see
+            ;; detailed description in "examples/README".
+            ;;
+            ;; Running timing example only:
+            ;; These codes and scripts can be used to test the code's
+            ;; performance. The program timing_test.cc creates a container
+            ;; with 100000 particles, and then times the computation of all
+            ;; the cells in the container, using the dummy function
+            ;; compute_all_cells().
+            (lambda* (#:key tests? #:allow-other-keys)
+              (when tests?
+                (with-directory-excursion "examples/timing"
+                  (invoke "perl" "timing_test.pl"))))))))
+    (native-inputs
+     (list perl))
+    (home-page "https://math.lbl.gov/voro++/")
+    (synopsis "C++ library for the computation of the Voronoi diagram")
+    (description
+     "Voro++ is a software library for carrying out three-dimensional
+computations of the Voronoi tessellation.  A distinguishing feature of the
+Voro++ library is that it carries out cell-based calculations, computing the
+Voronoi cell for each particle individually.  It is particularly well-suited
+for applications that rely on cell-based statistics, where features of Voronoi
+cells (eg. volume, centroid, number of faces) can be used to analyze a system
+of particles.
+
+Voro++ comprises of several C++ classes that can be built as a static library.
+A command-line utility is also provided that can use most features of the
+code.  The direct cell-by-cell construction makes the library particularly
+well-suited to handling special boundary conditions and walls.  It employs
+algorithms that are tolerant for numerical precision errors, it exhibits high
+performance, and it has been successfully employed on very large particle
+systems.")
+    (license license:bsd-3)))
+
 (define-public maxflow
   (package
     (name "maxflow")
@@ -7823,7 +7941,7 @@ set.")
                "doc"))                  ;12 MiB of documentation
     (native-inputs
      (list doc++
-           doxygen
+           doxygen-1.16
            ghostscript
            python
            python-breathe
@@ -7849,13 +7967,16 @@ set.")
                   texlive-jknapltx
                   texlive-latexmk
                   texlive-listofitems
+                  texlive-ltablex
                   texlive-multirow
                   texlive-natbib
                   texlive-needspace
                   texlive-newunicodechar
+                  texlive-ninecolors
                   texlive-parskip
                   texlive-sectsty
                   texlive-stackengine
+                  texlive-tabularray
                   texlive-tabulary
                   texlive-tex-gyre
                   texlive-titlesec
@@ -7867,6 +7988,7 @@ set.")
                   texlive-wasysym
                   texlive-wrapfig
                   texlive-xcolor
+                  texlive-xltabular
                   texlive-xypic))))
     (inputs
      (list openblas))
@@ -7949,7 +8071,8 @@ problems.")
     (arguments
      (substitute-keyword-arguments arguments
        ((#:configure-flags flags)
-        #~`("--with-MPI" ,@(delete "--without-MPI" #$flags)))
+        #~`("--with-MPI" ,@(delete "--without-MPI"
+                                   #$flags)))
        ((#:phases phases)
         #~(modify-phases #$phases
             (add-before 'check 'mpi-setup
@@ -8314,8 +8437,11 @@ s-expression-based format.")
    (license license:gpl3+)))
 
 (define-public symfpu
-  (let ((commit "22d993d880f66b2e470c3928e0e61bdf61419702")
+  ;; Currently, we use the "experimental" branch of the symfpu repository.  The
-        (revision "0"))
+  ;; default "master" branch hasn't been updated in ~7 years and both bitwuzla
+  ;; and cvc5 require fixes from the "experimental" branch.
+  (let ((commit "aeaa3fa62730148c855f5a9e0a9b7040d48e0b7e")
+        (revision "1"))
     (package
       (name "symfpu")
       (version (git-version "0" revision commit))
@@ -8327,7 +8453,7 @@ s-expression-based format.")
                (commit commit)))
          (file-name (git-file-name name version))
          (sha256
-          (base32 "1h20zzkyi225290kc6mzg8i4dwkj0p1vlwfgc9ycs61snlyd8gr8"))))
+          (base32 "0wj9pwr2jiliy4rw4nvy51427dwhwj86azi14qc5vzsdb44c6fdx"))))
       (build-system copy-build-system)
       (arguments
        (list
@@ -8369,7 +8495,7 @@ operations.")
 (define-public bitwuzla
   (package
     (name "bitwuzla")
-    (version "0.8.2")
+    (version "0.9.0")
     (source
      (origin
        (method git-fetch)
@@ -8378,21 +8504,16 @@ operations.")
              (commit version)))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "0nakqz29cfkn91yvx1xzsk50rlqbiihslflbjanv4lflcl2zx6mz"))))
+        (base32 "012h3fj25f5zk9qy353vqn5jpp26db45xjbxi7ns02pkhlm46f6x"))))
     (build-system meson-build-system)
     (arguments
      `(#:configure-flags '("-Dtesting=enabled" "-Ddefault_library=shared"
-                           "-Dkissat=true")
+                           "-Dkissat=true")))
-       #:phases (modify-phases %standard-phases
-                  (add-after 'unpack 'make-git-optional
-                    (lambda _
-                      (substitute* "src/meson.build"
-                        (("run_command\\('git',")
-                         "run_command('sh', '-c', 'git',")))))))
     (native-inputs (list googletest pkg-config))
-    (inputs (list cadical
+    (inputs (list cadical-2.1
                   gmp
                   kissat
+                  mpfr
                   symfpu))
     (synopsis "SMT solver optimized for the theory of bit-vectors")
     (description
@@ -8679,7 +8800,7 @@ reduction.")
 (define-public mcrl2
   (package
     (name "mcrl2")
-    (version "202307.1")
+    (version "202507.0")
     (source (origin
               (method url-fetch)
               (uri (string-append
@@ -8687,9 +8808,9 @@ reduction.")
                     version ".tar.gz"))
               (sha256
                (base32
-                "147002dl3gq2jsk5gcmvw7hj3mfxrpgxwcfda5mfrj26rcxw48fc"))))
+                "08w7v2dx1s164q3vc5lzf864nlxrf8s0kgsa26mmkgfqfqcwdgjj"))))
     (inputs
-     (list boost glu mesa qtbase-5))
+     (list boost glu mesa qtbase))
     (build-system cmake-build-system)
     (arguments (list #:tests? #f))
     (synopsis "Toolset for the mCRL2 formal specification language")
@@ -9660,6 +9781,7 @@ researchers and developers alike to get started on SAT.")
          "1snimig4cp97p570nin2i38my72zvwypldyhr125i1z6cd9pa046"))))
     (build-system gnu-build-system)
     (inputs (list xz gzip lzip bzip2 p7zip))
+    (native-inputs (list drat-trim))
     (arguments
      (list
       #:test-target "test"

gnu/packages/maven-parent-pom.scm

@@ -686,6 +686,35 @@ components.")
                (base32
                 "0cqa072fz55j5xyvixqv8vbd7jsbhb1cd14bzjvm0hbv2wpd9npf"))))))
 
+(define-public java-jvnet-parent-pom-1
+  (hidden-package
+    (package
+      (name "java-jvnet-parent-pom-1")
+      (version "1")
+      (source (origin
+                (method url-fetch)
+                (uri (string-append "https://repo1.maven.org/maven2/net/java/"
+                                    "jvnet-parent/" version "/jvnet-parent-"
+                                    version ".pom"))
+                (sha256
+                 (base32
+                  "1gv37n9aid7fdhwd0h4py024w8by56cchg3b4sg5vrk82a0l0518"))))
+      (build-system ant-build-system)
+      (arguments
+       (list
+         #:tests? #f
+         #:phases
+         #~(modify-phases %standard-phases
+             (delete 'unpack)
+             (delete 'configure)
+             (delete 'build)
+             (replace 'install
+               (install-pom-file #$(package-source this-package))))))
+      (home-page "https://mvnrepository.com/artifact/net.java/jvnet-parent")
+      (synopsis "java.net parent pom")
+      (description "This package contains the java.net parent pom file.")
+      (license license:asl2.0))))
+
 (define-public java-jvnet-parent-pom-3
   (hidden-package
     (package

gnu/packages/messaging.scm

@@ -2839,7 +2839,7 @@ implementation of an MQTT version client class.")
 (define-public psi-plus
   (package
     (name "psi-plus")
-    (version "1.5.1484")
+    (version "1.5.2115")
     (source
      (origin
        (method git-fetch)
@@ -2853,7 +2853,7 @@ implementation of an MQTT version client class.")
         `(begin
            (delete-file-recursively "3rdparty")))
        (sha256
-        (base32 "1jsm39nzzbqkp3zc0xqx7jid6p4q1ra28xad38wjr2l1jb8qjn24"))))
+        (base32 "14za9rh7nszv5px5a2w43ysi9977zws8a5mxsh7wc8ksr693faz2"))))
     (build-system qt-build-system)
     (arguments
      `(#:tests? #f                      ; No target
@@ -2910,19 +2910,13 @@ implementation of an MQTT version client class.")
                 "qite/qiteaudio.h")
                (("qiteaudiorecorder.h")
                 "qite/qiteaudiorecorder.h"))))
-         (add-after 'install 'wrap-env
+         (add-after 'install 'wrap-executable
            (lambda* (#:key outputs #:allow-other-keys)
              (let ((out (assoc-ref outputs "out")))
-               (for-each
+               (wrap-program (string-append out "/bin/psi-plus")
-                (lambda (name)
+                 `("GST_PLUGIN_SYSTEM_PATH" ":" prefix (,(getenv "GST_PLUGIN_SYSTEM_PATH")))
-                  (let ((file (string-append out "/bin/" name))
+                 `("GI_TYPELIB_PATH" ":" prefix (,(getenv "GI_TYPELIB_PATH")))))))
-                        (gst-plugin-path (getenv "GST_PLUGIN_SYSTEM_PATH"))
+         (add-after 'wrap-executable 'glib-or-gtk-compile-schemas
-                        (gi-typelib-path (getenv "GI_TYPELIB_PATH")))
-                    (wrap-program file
-                      `("GST_PLUGIN_SYSTEM_PATH" ":" prefix (,gst-plugin-path))
-                      `("GI_TYPELIB_PATH" ":" prefix (,gi-typelib-path)))))
-                '("psi-plus")))))
-         (add-after 'wrap-env 'glib-or-gtk-compile-schemas
            (assoc-ref glib-or-gtk:%standard-phases 'glib-or-gtk-compile-schemas))
          (add-after 'glib-or-gtk-compile-schemas 'glib-or-gtk-wrap
            (assoc-ref glib-or-gtk:%standard-phases 'glib-or-gtk-wrap)))))
@@ -2945,6 +2939,7 @@ implementation of an MQTT version client class.")
            libgcrypt
            libgpg-error
            libidn
+           libomemo-c
            libotr
            libsignal-protocol-c
            tidy-html
@@ -2964,11 +2959,11 @@ implementation of an MQTT version client class.")
            libxcb
            libxscrnsaver
            zlib))
-    (home-page "https://psi-plus.com/")
+    (home-page "https://psi-im.com/")
     (synopsis "Qt-based XMPP Client")
     (description
-     "Psi+ is a spin-off of Psi XMPP client.  It is a powerful XMPP client
+     "Psi+ is a powerful XMPP client designed for experienced users.
-designed for experienced users.")
+It's a spin-off of the Psi XMPP client.")
     (license license:gpl2+)))
 
 (define-deprecated-package psi

gnu/packages/mold.scm

@@ -1,7 +1,7 @@
 ;;; GNU Guix --- Functional package management for GNU
 ;;; Copyright © 2023 Zhu Zihao <all_but_last@163.com>
 ;;; Copyright © 2023, 2024 Efraim Flashner <efraim@flashner.co.il>
-;;; Copyright © 2024, 2025 Ashish SHUKLA <ashish.is@lostca.se>
+;;; Copyright © 2024-2026 Ashish SHUKLA <ashish.is@lostca.se>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -27,6 +27,7 @@
   #:use-module (guix build-system trivial)
   #:use-module (gnu packages base)
   #:use-module (gnu packages c)
+  #:use-module (gnu packages crypto)
   #:use-module (gnu packages digest)
   #:use-module (gnu packages oneapi)
   #:use-module (gnu packages tls)
@@ -36,7 +37,7 @@
 (define-public mold
   (package
     (name "mold")
-    (version "2.40.4")
+    (version "2.41.0")
     (source
      (origin
        (method git-fetch)
@@ -45,14 +46,14 @@
              (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "05prkdr3v8wb8l99qrri9r27yar5yl8aiv1ns41b556ckdjdw8q6"))
+        (base32 "1r4mvgwh652klhns1q45qy5axi54jx904ss0s428y98a9qk4brrp"))
        (modules '((guix build utils)))
        (snippet
         #~(begin
             (for-each
              (lambda (x)
                (delete-file-recursively (string-append "third-party/" x)))
-             '("mimalloc" "tbb" "xxhash" "zlib" "zstd"))))))
+             '("blake3" "mimalloc" "tbb" "xxhash" "zlib" "zstd"))))))
     (build-system cmake-build-system)
     (arguments
      (list
@@ -86,7 +87,7 @@
        (if (target-64bit?)
            (list mimalloc)
            '())
-       (list onetbb xxhash zlib `(,zstd "lib"))))
+       (list libblake3 onetbb xxhash zlib `(,zstd "lib"))))
     (home-page "https://github.com/rui314/mold")
     (synopsis "Fast linker")
     (description

gnu/packages/mpi.scm

@@ -1,6 +1,6 @@
 ;;; GNU Guix --- Functional package management for GNU
 ;;; Copyright © 2014, 2015, 2018, 2019 Eric Bavier <bavier@member.fsf.org>
-;;; Copyright © 2014-2025 Ludovic Courtès <ludo@gnu.org>
+;;; Copyright © 2014-2026 Ludovic Courtès <ludo@gnu.org>
 ;;; Copyright © 2014 Ian Denhardt <ian@zenhack.net>
 ;;; Copyright © 2016 Andreas Enge <andreas@enge.fr>
 ;;; Copyright © 2017 Dave Love <fx@gnu.org>
@@ -432,7 +432,7 @@ software vendors, application developers and computer science researchers.")
   (package/inherit openmpi-5
     (name "openmpi-rocm")
     (arguments
-     (substitute-keyword-arguments (package-arguments openmpi-5)
+     (substitute-keyword-arguments arguments
        ((#:configure-flags flags '())
         #~(cons* (string-append "--with-rocm="
                                 #$(this-package-input "rocm-hip-runtime"))
@@ -440,7 +440,9 @@ software vendors, application developers and computer science researchers.")
     (inputs (modify-inputs (package-inputs openmpi-5)
               ;; XXX: This might break openmpi-5 for architectures where ROCm
               ;; is not supported.
-              (append rocm-hip-runtime)))
+              (append rocm-hip-runtime)
+              (replace "ucx" ucx-rocm)
+              (replace "libfabric" libfabric-rocm)))
     (synopsis "MPI-3 implementation (with ROCm support)")))
 
 (define-public openmpi-c++

gnu/packages/music.scm

@@ -45,7 +45,7 @@
 ;;; Copyright © 2021 Xinglu Chen <public@yoctocell.xyz>
 ;;; Copyright © 2021 Thomas Albers Raviola <thomas@thomaslabs.org>
 ;;; Copyright © 2021 Maxime Devos <maximedevos@telenet.be>
-;;; Copyright © 2022, 2023, 2024 Sughosha <sughosha@disroot.org>
+;;; Copyright © 2022, 2023, 2024, 2026 Sughosha <sughosha@disroot.org>
 ;;; Copyright © 2022, 2025, 2026 Remco van 't Veer <remco@remworks.net>
 ;;; Copyright © 2022, 2023, 2025 Maxim Cournoyer <maxim@guixotic.coop>
 ;;; Copyright © 2022 Wamm K. D. <jaft.r@outlook.com>
@@ -171,6 +171,7 @@
   #:use-module (gnu packages lua)
   #:use-module (gnu packages machine-learning)
   #:use-module (gnu packages man)
+  #:use-module (gnu packages maths)
   #:use-module (gnu packages messaging)
   #:use-module (gnu packages mp3)
   #:use-module (gnu packages mpd)
@@ -224,6 +225,7 @@
   #:use-module (gnu packages xiph)
   #:use-module (gnu packages xml)
   #:use-module (gnu packages xorg)
+  #:use-module (gnu packages wine)
   #:use-module ((srfi srfi-1) #:select (last)))
 
 (define-public alsa-scarlett-gui
@@ -816,7 +818,7 @@ Winamp/XMMS skins.")
 (define-public strawberry
   (package
     (name "strawberry")
-    (version "1.2.14")
+    (version "1.2.19")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -825,17 +827,7 @@ Winamp/XMMS skins.")
               (file-name (git-file-name name version))
               (sha256
                (base32
-                "0sli0wm1l34ca8y6m3rfa604v1bbzbaiala13kzndcqqwnrsh66f"))
+                "1bxrqqi2xi057v9qaz73dl44jyyhpqvi51pjs6pzprfiqgy1gi11"))))
-              (modules '((guix build utils)))
-              ;; Unbundle and disable discord-rpc.
-              (snippet
-               '(begin
-                  (delete-file-recursively "3rdparty")
-                  (substitute* "CMakeLists.txt"
-                    ((".*3rdparty\\/discord-rpc.*") "")
-                    ((".*src/discord.*") "")
-                    ((".*:discord-rpc.*") "")
-                    (("DISCORD_RPC ON") "DISCORD_RPC OFF"))))))
     (build-system qt-build-system)
     (arguments
      (list
@@ -966,7 +958,7 @@ many input formats and provides a customisable Vi-style user interface.")
 (define-public ctune
   (package
     (name "ctune")
-    (version "1.3.4")
+    (version "1.3.10")
     (source
      (origin
        (method git-fetch)
@@ -974,11 +966,15 @@ many input formats and provides a customisable Vi-style user interface.")
               (url "https://github.com/An7ar35/ctune")
               (commit (string-append "v" version))))
        (file-name (git-file-name name version))
-       (patches (search-patches "ctune-cmake-disable-git-clone.patch"))
        (sha256
-        (base32 "05gs1a1pc303qrnd1bz0z0wkzxkpm310hqznnq6zz7nl4vs3b9nz"))))
+        (base32 "0g7a2yz5nnhd4dln07hiax5701hc4b7sn97c36jgvm8pq6ap2bd4"))))
     (build-system cmake-build-system)
-    (arguments '(#:tests? #f)) ;no check target
+    (arguments
+     (list
+      #:tests? #f ;no check target
+      ;; We do not have the headers of ncurses inside 'ncursesw' subdirectory.
+      #:configure-flags
+      #~(list "-DNO_NCURSESW=ON")))
     (native-inputs (list pkg-config
                          json-c
                          ffmpeg-6
@@ -5355,6 +5351,132 @@ includes instruments based on audio samples and various soft sythesizers.  It
 can receive input from a MIDI keyboard.")
     (license license:gpl2+)))
 
+;; This version tracks the latest commit from master branch.
+(define-public lmms-next
+  (let ((commit "83313e737d3137f7939f3daa9063a94a1ac01f7c")
+        (revision "0"))
+    (package/inherit lmms
+      (name "lmms-next")
+      (version (git-version "1.3.0-alpha.1" revision commit))
+      (source
+       (origin
+         (inherit (package-source lmms))
+         (uri (git-reference
+                (url "https://github.com/LMMS/lmms")
+                (commit commit)
+                ;; Clone recursively only for the optional plugins.  The 3rd
+                ;; party libraries will be deleted by the snippet.
+                (recursive? #t)))
+         (file-name (git-file-name name version))
+         (sha256
+          (base32 "1mpp449rvn9f10bcxhpmxfinvj3jdv4s6qjhlp0sj9l783pv3h69"))
+         (modules '((guix build utils)))
+         (snippet
+          '(begin
+             ;; Delete the bundled 3rd party libraries.
+             (for-each delete-file-recursively
+               (list "plugins/CarlaBase/carla"
+                     "plugins/OpulenZ/adplug"
+                     "plugins/Xpressive/exprtk"
+                     "src/3rdparty"))
+             ;; Do not check submodules.
+             (substitute* "CMakeLists.txt"
+               ((".*CheckSubmodules.*") "")
+               ;; Do not use the bundled weakjack.
+               (("JACK libraries\" ON") "JACK libraries\" OFF"))
+             (substitute* "src/CMakeLists.txt"
+               ;; Do not add 3rd party libraries.
+               ((".*3rdparty.*") "")
+               ;; Use adplug and ringbuffer from the system.
+               (("\\$\\{EXTRA_LIBRARIES\\}" all)
+                (string-append all
+                               "\n\tadplug"
+                               "\n\tringbuffer")))
+             (with-directory-excursion "plugins"
+               ;; Use carla from the system.
+               (substitute* "CarlaBase/Carla.h"
+                 (("#include <CarlaDefines")
+                  "#include <carla/includes/CarlaDefines")
+                 (("#include <CarlaNative")
+                  "#include <carla/includes/CarlaNative")
+                 (("#include <CarlaBackend") "#include <carla/CarlaBackend")
+                 (("#include <CarlaUtils") "#include <carla/CarlaUtils"))
+               (with-directory-excursion "OpulenZ"
+                 ;; Do not use the bundled adplug.
+                 (substitute* "CMakeLists.txt"
+                   ((".*adplug .*") "")
+                   ((".*adplug/.*") "")
+                   (("^\\)") "")
+                   (("\\.png\"") ".png\"\n)"))
+                 ;; Use adplug from the system.
+                 (substitute* "OpulenZ.cpp"
+                   (("<opl\\.h>") "<adplug/opl.h>")
+                   (("<temuopl\\.h>") "<adplug/temuopl.h>")
+                   (("<mididata\\.h>") "<adplug/mididata.h>")))
+               ;; Do not use the bundled hiir.
+               (substitute* "SlewDistortion/CMakeLists.txt"
+                 (("TARGET_LINK_LIBRARIES\\(slewdistortion hiir\\)") ""))
+               ;; Do not use the bundled exprtk.
+               (substitute* "Xpressive/CMakeLists.txt"
+                 ((".*\\(exprtk .*") "")
+                 ((".*xpressive exprtk.*") "")))
+             ;; Avoid "invalid conversion from 'const unsigned char*' to
+             ;; 'unsigned char*'" error.
+             (substitute* "plugins/OpulenZ/OpulenZ.cpp"
+               (("unsigned char \\*inst") "const unsigned char *inst"))))))
+      (arguments
+       (substitute-keyword-arguments arguments
+         ((#:qtbase _ #f) qtbase)
+         ((#:configure-flags flags)
+          #~(cons* "-DWANT_QT6=ON" (delete "-DWANT_QT5=ON" #$flags)))
+         ((#:phases phases)
+          #~(modify-phases #$phases
+              (delete 'unpack-rpmalloc)
+              (replace 'fix-carla-export
+                ;; Taken from NixOS package definition.
+                (lambda _
+                  (substitute* "plugins/CarlaBase/Carla.h"
+                    (("CARLA_EXPORT")
+                     "CARLA_API_EXPORT"))))))))
+      (native-inputs
+       (modify-inputs native-inputs
+         (delete "rpmalloc")
+         (replace "qttools" qttools)))
+      (inputs
+       (modify-inputs inputs
+         (delete "qtx11extras")
+         (replace "carla" carla-2.6)
+         (replace "qtwayland" qtwayland)
+         (replace "sdl12-compat" sdl2)
+         (append adplug
+                 exprtk
+                 hiir
+                 libxml2
+                 lilv
+                 lv2
+                 perl
+                 perl-list-moreutils
+                 perl-xml-parser
+                 qtsvg
+                 ringbuffer
+                 suil)))
+      (native-search-paths
+       (list (search-path-specification
+              (variable "LV2_PATH")
+              (files '("lib/lv2"))))))))
+
+(define-public lmms-next-with-vst
+  (package/inherit lmms-next
+    (name "lmms-next-with-vst")
+    (arguments
+     (substitute-keyword-arguments arguments
+       ((#:configure-flags flags)
+        #~(cons* (string-append "-DWINE_LOCATIONS=" #$(wine-for-system))
+                 (delete "-DWANT_VST=OFF" #$flags)))))
+    (inputs
+     (modify-inputs inputs
+       (append (wine-for-system))))))
+
 (define-public stargate
   (package
     (name "stargate")
@@ -7465,31 +7587,6 @@ standalone JACK application.")
     ;; Expat or CC0
     (license (list license:expat license:cc0))))
 
-(define-public regrader
-  (package
-    (inherit vl1-emulator)
-    (name "regrader")
-    (version "1.0.0")
-    (source
-     (origin
-       (method git-fetch)
-       (uri (git-reference
-             (url "https://github.com/linuxmao-org/regrader")
-             (commit (string-append "v" version))
-             ;; bundles a specific commit of the DISTRHO plugin framework
-             (recursive? #t)))
-       (file-name (git-file-name name version))
-       (sha256
-        (base32
-         "0gl4d5lf2afqknz22jz7hh7029sc9v1xrz6nbz9dlv42bwc0cvl0"))))
-    (home-page "https://github.com/linuxmao-org/regrader")
-    (synopsis "Delay effect plugin")
-    (description
-     "Regrader is a delay effect where the repeats degrade in resolution.
-This is an unofficial port of the Regrader plugin created by Igorski.  It
-is available as an LV2 plugin and a standalone JACK application.")
-    (license license:expat)))
-
 (define-public fogpad
   (package
     (inherit vl1-emulator)

gnu/packages/networking.scm

@@ -1994,7 +1994,7 @@ and up to 1 Mbit/s downstream.")
 (define-public whois
   (package
     (name "whois")
-    (version "5.6.5")
+    (version "5.6.6")
     (source
      (origin
        (method git-fetch)
@@ -2003,7 +2003,7 @@ and up to 1 Mbit/s downstream.")
               (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "145lp72347vmr1ipai8rz10bqi6lkjx104g3rq2dmdi2ygfqq9nc"))))
+        (base32 "05549a8r7qr6rv26i7kwg4h6ciwa4cc8dsd5zhfprjrjk909ga24"))))
     (build-system gnu-build-system)
     (arguments
      (list
@@ -2041,7 +2041,7 @@ of the same name.")
 (define-public wireshark
   (package
     (name "wireshark")
-    (version "4.6.4")
+    (version "4.6.5")
     (source
      (origin
        (method git-fetch)
@@ -2050,7 +2050,7 @@ of the same name.")
              (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "05jivnnlmbbhc6b3r7zdahiw22fvb9r6pg4pc83ascnja49xlyq6"))))
+        (base32 "0cws5gaxkbdwqjawkwfr3iz39vdd0m0m0q7h2z4fzdv6lrp8ys31"))))
     (build-system qt-build-system)
     (arguments
      (list
@@ -2139,62 +2139,6 @@ replies, fping will send out a ping packet and move on to the next target in a
 round-robin fashion.")
     (license license:expat)))
 
-(define-public gandi-cli
-  (package
-    (name "gandi-cli")
-    (version "1.6")
-    (source
-     (origin
-       (method url-fetch)
-       (uri (pypi-uri name version))
-       (sha256
-        (base32 "1h36jahbp7273wn3yd747kbiwjc0bm3sja67bcxdsd54ln0vyndg"))))
-    (build-system pyproject-build-system)
-    (arguments
-     (list
-      #:test-flags
-      #~(list "--pyargs" "gandi.cli")
-      #:phases
-      #~(modify-phases %standard-phases
-          (add-after 'unpack 'embed-store-file-names
-            (lambda _
-              (substitute* (list "gandi/cli/modules/cert.py"
-                                 "gandi/cli/tests/commands/test_certificate.py")
-                (("openssl") (which "openssl")))))
-          (add-after 'install 'install-documentation
-            ;; The included man page may be outdated but we install it anyway,
-            ;; since it's mentioned in 'gandi --help' and better than nothing.
-            (lambda _
-              (let* ((man1 (string-append #$output "/share/man/man1")))
-                (mkdir-p man1)
-                (with-output-to-file (string-append man1 "/gandi.1")
-                  (lambda _
-                    (invoke "rst2man.py" "gandicli.man.rst")))))))))
-    (native-inputs
-     (list python-docutils-0.19
-           python-pytest
-           python-pytest-cov
-           python-setuptools
-           python-wheel))
-    (inputs
-     (list openssl
-           python-click-7
-           python-ipy
-           python-pyyaml
-           python-requests))
-    (propagated-inputs
-     (list openssh))
-    (home-page "https://cli.gandi.net")
-    (synopsis "Command-line interface to the Gandi.net Web API")
-    (description
-     "This package provides a command-line client (@command{gandi}) to buy,
-manage, and delete Internet resources from Gandi.net such as domain names,
-virtual machines, and certificates.")
-    (license license:gpl3+)))
-
-(define-deprecated-package gandi.cli
-  gandi-cli)
-
 (define-public go-sctp
   ;; docker-libnetwork-cmd-proxy requires this exact commit.
   ;; This commit is mentioned in docker-libnetwork-cmd-proxy's vendor.conf.
@@ -3004,7 +2948,7 @@ that block port 22.")
 (define-public iperf
   (package
     (name "iperf")
-    (version "3.19.1")
+    (version "3.21")
     (source
      (origin
        (method git-fetch)
@@ -3013,7 +2957,7 @@ that block port 22.")
              (commit version)))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "1kj2p3dprxv1r77whd5g1wak2k71c7khhrkkx60lcnkf70qy5q67"))))
+        (base32 "1r4873czw1hyq2g0z1dfxpbsdxcf6i2iizyvqaz24z8dshr2kdmi"))))
     (build-system gnu-build-system)
     (arguments
      `(#:configure-flags
@@ -3404,7 +3348,7 @@ speedtest.net.")
 (define-public librespeed-cli
   (package
     (name "librespeed-cli")
-    (version "1.0.12")
+    (version "1.0.13")
     (source
      (origin
        (method git-fetch)
@@ -3413,7 +3357,7 @@ speedtest.net.")
               (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "08x09b3j2qvhnwy8lrbfxqh1lbs64wyqlr4jj6m31b5r2zy90dly"))))
+        (base32 "0zgwdz955vlyy1yricgcbdlbxxh1z08xpbhxa8zs64bsg68mv8j3"))))
     (build-system go-build-system)
     (arguments
      (list
@@ -3437,6 +3381,7 @@ speedtest.net.")
      (list go-github-com-briandowns-spinner
            go-github-com-go-ping-ping
            go-github-com-gocarina-gocsv
+           go-github-com-prometheus-community-pro-bing
            go-github-com-sirupsen-logrus
            go-github-com-urfave-cli-v2
            go-golang-org-x-sys))
@@ -3452,7 +3397,7 @@ to test using multiple servers in a single run.")
 (define-public atftp
   (package
     (name "atftp")
-    (version "0.8.0")
+    (version "0.8.1")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -3460,7 +3405,7 @@ to test using multiple servers in a single run.")
                     (commit (string-append "v" version))))
               (sha256
                (base32
-                "019qrh2wpvr577ksvs3s82q6kiqm5i6869aj7qba326b59lhkxrc"))
+                "1pj0270r87iv84vrlrrbp66vkzdmaa4ramhx34b151hclkiv3c8j"))
               (file-name (git-file-name name version))))
     (build-system gnu-build-system)
     (arguments
@@ -4210,7 +4155,7 @@ never see any machines other than the one Dante is running on.")
         (base32 "15j09x36i6zj6innl0w1mfzlc56qmjwrs82my8dsagqa2ikd08ya"))))
     (build-system cmake-build-system)
     (inputs
-     (list asio catch-framework openssl))
+     (list asio-1.28 catch-framework openssl))
     (arguments
      `(;; Running parallel tests results in "bind: Address already in use" error
        ;; in test service_status_feature_test_suite.
@@ -5544,22 +5489,22 @@ and IP address registration information in JSON format over HTTP.")
 (define-public wireproxy
   (package
     (name "wireproxy")
-    (version "1.0.10")
+    (version "1.1.2")
     (source
      (origin
        (method git-fetch)
        (uri (git-reference
-              (url "https://github.com/whyvl/wireproxy")
+              (url "https://github.com/windtf/wireproxy")
               (commit (string-append "v" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "0ypk9migx1l7xwcxr542pcdy8q2bm33wp03bqzgav0hp1fsrmi8p"))))
+        (base32 "0nzs3xzvq3rhqg808qgazymmwdx9p3nw669wl3r5xclhvibbyla7"))))
     (build-system go-build-system)
     (arguments
      (list
       #:install-source? #f
-      #:import-path "github.com/pufferffish/wireproxy/cmd/wireproxy"
+      #:import-path "github.com/windtf/wireproxy/cmd/wireproxy"
-      #:unpack-path "github.com/pufferffish/wireproxy"
+      #:unpack-path "github.com/windtf/wireproxy"
       #:test-subdirs #~(list "../../..."))) ;to test the whole module
     (native-inputs
      (list go-github-com-akamensky-argparse
@@ -5570,7 +5515,7 @@ and IP address registration information in JSON format over HTTP.")
            go-golang-org-x-net
            go-golang-zx2c4-com-wireguard
            go-suah-dev-protect))
-    (home-page "https://github.com/whyvl/wireproxy")
+    (home-page "https://github.com/windtf/wireproxy")
     (synopsis "Wireguard client that exposes itself as a socks5 proxy")
     (description
      "wireproxy is a completely userspace application that connects to a

gnu/packages/node-xyz.scm

@@ -276,24 +276,28 @@ HTTP.Agent instances from a function.")
   (package
     (name "node-balanced-match")
     (version "1.0.2")
-    (source (origin
+    (source
-      (method git-fetch)
+     (origin
-      (uri (git-reference
+       (method git-fetch)
-        (url "https://github.com/juliangruber/balanced-match")
+       (uri (git-reference
-        (commit (string-append "v" version))))
+             (url "https://github.com/juliangruber/balanced-match")
-      (file-name (git-file-name name version))
+             (commit (string-append "v" version))))
-      (sha256 (base32 "0977r6hv9fyv6f8wvn31vcncxwhffnn05y0h4hmpkg8p2vs9ip0b"))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0977r6hv9fyv6f8wvn31vcncxwhffnn05y0h4hmpkg8p2vs9ip0b"))))
     (build-system node-build-system)
-    (arguments (list
+    (arguments
-      #:tests? #f ; FIXME Tests require 'tape'.
+     (list
-      #:phases #~(modify-phases %standard-phases
+      #:tests? #f ;FIXME Tests require 'tape'.
-        (add-before 'patch-dependencies 'modify-package
+      #:phases
-          (lambda _
+      #~(modify-phases %standard-phases
-            (modify-json
+          (add-before 'patch-dependencies 'modify-package
-              (delete-dev-dependencies)))))))
+            (lambda _
+              (modify-json (delete-dev-dependencies)))))))
     (synopsis "Match balanced character pairs, like { and }")
-    (description "Match balanced string pairs, like { and } or <b> and </b>. Supports\
+    (description
- regular expressions as well!")
+     "Match balanced string pairs, like { and } or <b> and </b>.  Supports
+regular expressions as well!")
     (home-page (git-reference-url (origin-uri source)))
     (license license:expat)))
 
@@ -344,7 +348,7 @@ addons in a wide array of potential locations.")
            (lambda _
              (modify-json (delete-dev-dependencies)))))))
     (inputs
-     (list node-balanced-match-1 node-concat-map))
+     (list node-balanced-match node-concat-map))
     (home-page "https://github.com/juliangruber/brace-expansion")
     (synopsis "Brace expansion for JavaScript")
     (description "This package provides brace expansion as known from
@@ -376,32 +380,6 @@ sh/bash, for JavaScript.")
     (home-page (git-reference-url (origin-uri source)))
     (license license:expat)))
 
-(define-public node-balanced-match-1
-  (package
-    (name "node-balanced-match")
-    (version "1.0.2")
-    (source
-     (origin
-       (method git-fetch)
-       (uri (git-reference
-             (url "https://github.com/juliangruber/balanced-match")
-             (commit (string-append "v" version))))
-       (file-name (git-file-name name version))
-       (sha256
-        (base32 "0977r6hv9fyv6f8wvn31vcncxwhffnn05y0h4hmpkg8p2vs9ip0b"))))
-    (build-system node-build-system)
-    (arguments
-     '(#:tests? #f
-       #:phases
-       (modify-phases %standard-phases
-         (add-after 'patch-dependencies 'delete-dev-dependencies
-           (lambda _
-             (modify-json (delete-dev-dependencies)))))))
-    (home-page "https://github.com/juliangruber/balanced-match")
-    (synopsis "Match balanced string pairs in JavaScript")
-    (description "This package provides a way to match balanced string pairs.")
-    (license license:expat)))
-
 (define-public node-buffer-crc32
   (package
     (name "node-buffer-crc32")

gnu/packages/ocaml.scm

@@ -313,7 +313,7 @@ functional, imperative and object-oriented styles of programming.")
     (source (origin
               (method url-fetch)
               (uri (string-append
-                    "http://caml.inria.fr/pub/distrib/ocaml-"
+                    "https://caml.inria.fr/pub/distrib/ocaml-"
                     (version-major+minor version)
                     "/ocaml-" version ".tar.xz"))
               (sha256
@@ -373,7 +373,7 @@ functional, imperative and object-oriented styles of programming.")
     (source (origin
               (method url-fetch)
               (uri (string-append
-                    "http://caml.inria.fr/pub/distrib/ocaml-"
+                    "https://caml.inria.fr/pub/distrib/ocaml-"
                     (version-major+minor version)
                     "/ocaml-" version ".tar.xz"))
               (patches (search-patches
@@ -421,7 +421,7 @@ patch-/bin/sh-references: ~a: changing `\"/bin/sh\"' to `~a'~%"
     (source (origin
               (method url-fetch)
               (uri (string-append
-                    "http://caml.inria.fr/pub/distrib/ocaml-"
+                    "https://caml.inria.fr/pub/distrib/ocaml-"
                     (version-major+minor version)
                     "/ocaml-" version ".tar.xz"))
               (sha256