Merge staging-next into staging

Author: nixpkgs-ci[bot]

nixos/tests/systemd-coredump.nix

@@ -37,10 +37,10 @@ in
       machine1.wait_for_unit("systemd-coredump.socket")
       machine1.systemctl("start crasher");
       machine1.wait_until_succeeds("coredumpctl list | grep crasher", timeout=10)
-      machine1.fail("stat /var/lib/crasher/core")
+      machine1.fail("stat /var/lib/crasher/core*")
 
     with subtest("systemd-coredump disabled"):
       machine2.systemctl("start crasher");
-      machine2.wait_until_succeeds("stat /var/lib/crasher/core", timeout=10)
+      machine2.wait_until_succeeds("stat /var/lib/crasher/core*", timeout=10)
   '';
 }

pkgs/applications/editors/vim/plugins/non-generated/fff-nvim/default.nix

@@ -5,40 +5,49 @@
   nix-update-script,
   openssl,
   perl,
+  zig,
   pkg-config,
   stdenv,
   vimUtils,
 }:
 let
-  version = "896355b-unstable-2026-02-07";
+  version = "1001eb8-unstable-2026-03-13";
   src = fetchFromGitHub {
     owner = "dmtrKovalenko";
     repo = "fff.nvim";
-    rev = "d7bc72786d4362ca70aa05d397f8d08bbaf39604";
-    hash = "sha256-CqX2QoDO7InjXYMzvljufA0QYhvFbsht2auE0+nVktw=";
+    rev = "fcdf4a9172fba824ca6834731b93b74eba51d1c3";
+    hash = "sha256-AYxWrqru0/HCrfTXRqTExiOT6mNzNMk+pT6APRs0BUM=";
   };
   fff-nvim-lib = rustPlatform.buildRustPackage {
     pname = "fff-nvim-lib";
     inherit version src;
 
-    cargoHash = "sha256-jch2snZVoDqPkbeuF++yc/3ikoWal29bTKZjkyDgVjU=";
+    cargoHash = "sha256-nXtJPE6HNZx5Ra4CwYi/f4EWww//1XwsiwtRG77RPJk=";
 
     nativeBuildInputs = [
       pkg-config
       perl
+      rustPlatform.bindgenHook
     ];
 
     buildInputs = [
       openssl
     ];
 
+    # This test requires curl and GitHub access
+    checkFlags = [
+      "--skip=update_check::tests::test_update_check_end_to_end"
+    ];
+
     env = {
       RUSTC_BOOTSTRAP = 1; # We need rust unstable features
 
       OPENSSL_NO_VENDOR = true;
 
       # Allow undefined symbols on Darwin - they will be provided by Neovim's LuaJIT runtime
       RUSTFLAGS = lib.optionalString stdenv.hostPlatform.isDarwin "-C link-arg=-undefined -C link-arg=dynamic_lookup";
+
+      ZIG = lib.getExe zig; # zlob requires zig
     };
   };
 in

pkgs/applications/networking/cluster/terraform-providers/providers.json

@@ -1310,11 +1310,11 @@
     "vendorHash": "sha256-omxEb+ntQuHDfS2Rmt0rj0BF0Q2T8DLhobLua2uU/0o="
   },
   "tencentcloudstack_tencentcloud": {
-    "hash": "sha256-kEdt8shf0bLyPzz6Lysj0yyx6leLHl4g9BjuXRdWPVo=",
+    "hash": "sha256-TXyc0I+IKjatZyH3oKHDXD8ml8/IyaIMQfAKpbkUl8g=",
     "homepage": "https://registry.terraform.io/providers/tencentcloudstack/tencentcloud",
     "owner": "tencentcloudstack",
     "repo": "terraform-provider-tencentcloud",
-    "rev": "v1.82.73",
+    "rev": "v1.82.74",
     "spdx": "MPL-2.0",
     "vendorHash": null
   },

pkgs/applications/networking/mailreaders/thunderbird-bin/release_esr_sources.nix

@@ -7,6 +7,7 @@
   cacert,
   makeSetupHook,
   pnpm,
+  writableTmpDirAsHomeHook,
   yq,
   zstd,
 }:
@@ -198,6 +199,7 @@ in
   pnpmConfigHook = makeSetupHook {
     name = "pnpm-config-hook";
     propagatedBuildInputs = [
+      writableTmpDirAsHomeHook
       zstd
     ];
     substitutions = {

pkgs/build-support/node/fetch-pnpm-deps/default.nix

@@ -25,7 +25,6 @@ pnpmConfigHook() {
 
     echo "Configuring pnpm store"
 
-    export HOME=$(mktemp -d)
     export STORE_PATH=$(mktemp -d)
     export npm_config_arch="@npmArch@"
     export npm_config_platform="@npmPlatform@"
@@ -41,7 +40,7 @@ pnpmConfigHook() {
 
     # If the packageManager field in package.json is set to a different pnpm version than what is in nixpkgs,
     # any pnpm command would fail in that directory, the following disables this
-    pushd ..
+    pushd $HOME
     pnpm config set manage-package-manager-versions false
     popd
 

pkgs/build-support/node/fetch-pnpm-deps/pnpm-config-hook.sh

@@ -66,7 +66,7 @@ stdenv.mkDerivation (finalAttrs: {
   cmakeFlags = [
     (lib.cmakeFeature "CMAKE_BUILD_TYPE" "Release")
     (lib.cmakeBool "BUILD_JAVA" false)
-    (lib.cmakeBool "STOP_BUILD_ON_WARNING" true)
+    (lib.cmakeBool "STOP_BUILD_ON_WARNING" stdenv.isLinux)
     (lib.cmakeBool "INSTALL_VENDORED_LIBS" false)
   ]
   ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) [

pkgs/by-name/ap/apache-orc/package.nix

@@ -0,0 +1,62 @@
+{
+  lib,
+  cargo,
+  desktop-file-utils,
+  fetchFromGitHub,
+  glib,
+  gtk4,
+  libadwaita,
+  meson,
+  ninja,
+  pipewire,
+  pkg-config,
+  rustPlatform,
+  rustc,
+  stdenv,
+  wrapGAppsHook4,
+}:
+
+stdenv.mkDerivation rec {
+  pname = "audio-mirroring";
+  version = "0.1.1";
+
+  src = fetchFromGitHub {
+    owner = "mkg20001";
+    repo = "audio-mirroring";
+    tag = "v${version}";
+    hash = "sha256-f4V5ZJvXhdwqS4kx99Lr2Eb8r08PRd3T4mbRoAyyIqE=";
+  };
+
+  cargoDeps = rustPlatform.fetchCargoVendor {
+    inherit pname version src;
+    hash = "sha256-+mAdxaaQOO7AIn/o/J13FbHIvtepk8/okGxO6p6aGzI=";
+  };
+
+  nativeBuildInputs = [
+    meson
+    ninja
+    pkg-config
+    rustPlatform.cargoSetupHook
+    cargo
+    rustc
+    rustPlatform.bindgenHook
+    wrapGAppsHook4
+  ];
+
+  buildInputs = [
+    desktop-file-utils
+    glib
+    gtk4
+    libadwaita
+    pipewire
+  ];
+
+  meta = with lib; {
+    description = "Audio Mirroring for Linux";
+    homepage = "https://github.com/mkg20001/audio-mirroring";
+    license = licenses.gpl3Only;
+    maintainers = with maintainers; [ mkg20001 ];
+    platforms = platforms.linux;
+    mainProgram = "audio-mirroring";
+  };
+}

pkgs/by-name/au/audio-mirroring/package.nix

@@ -8,16 +8,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "cfspeedtest";
-  version = "2.2.0";
+  version = "2.2.1";
 
   src = fetchFromGitHub {
     owner = "code-inflation";
     repo = "cfspeedtest";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-EVZFmTjv2j7kax4MC5HTkVa7/IiDNZcIOgsntSGfzG4=";
+    hash = "sha256-6ZlcZZSC5WPrlskxWnLheMt5sJlHI7K4UPAPsvr8zSc=";
   };
 
-  cargoHash = "sha256-cA+eRVZiZL+bbPc+Vr7nkwMLbQBKOO3uU0XzrxVajqg=";
+  cargoHash = "sha256-h9X/WKKiXri4I2DBulkNnpiTaYAL9oXAx0BiTBKaEtE=";
 
   nativeBuildInputs = [ installShellFiles ];
 

pkgs/by-name/cf/cfspeedtest/package.nix

@@ -15,6 +15,7 @@
   nix-update-script,
   nixosTests,
   orca,
+  fetchpatch2,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -29,7 +30,16 @@ rustPlatform.buildRustPackage (finalAttrs: {
     hash = "sha256-U0JrxvMWzISSA0tP8moasN7iN7TfZreEwbvWZGHRn8E=";
   };
 
-  cargoHash = "sha256-sNJTXBInr/h8w5dhOOP9ceBYWBcJW3qGjDuaG6UTV90=";
+  cargoHash = "sha256-J5ycaeKZsEBPcI9JH8bHsOAcXXwcx/D21GlVhJZbGwM=";
+
+  cargoPatches = [
+    (fetchpatch2 {
+      # https://github.com/pop-os/cosmic-greeter/pull/426
+      name = "security-hardening.patch";
+      url = "https://github.com/pop-os/cosmic-greeter/commit/6049b50f8984f98c2c61117d86b9f6f9befc9300.patch?full_index=1";
+      hash = "sha256-T9tc4Krmp5jieKhbaTgI1CByWqSWy97HWcKMIXzr7MU=";
+    })
+  ];
 
   env.VERGEN_GIT_SHA = finalAttrs.src.tag;