From 59299bc98be701bb3ea18b8e7df46e6db822e981 Mon Sep 17 00:00:00 2001
From: matt1432 <matt@nelim.org>
Date: Sun, 19 Jan 2025 00:45:29 -0500
Subject: [PATCH] chore: update sources
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Flake Inputs:
    • Updated input 'ags':
        'github:Aylur/ags' (2025-01-12) rev: 90db9b9fecc0f4228440d83107c6c745a35e7d77
      → 'github:Aylur/ags' (2025-01-18) rev: 92bdcb227dc390e2edb122b5bb182b38456b6a5e

    • Updated input 'astal':
        'github:Aylur/astal' (2025-01-16) rev: bc796ac226800c43e724e27f53f410c157acaffe
      → 'github:Aylur/astal' (2025-01-18) rev: 8b8416101246b4cce569f4326f828e26f15f6616

    • Updated input 'custom-sidebar-src':
        'github:elchininet/custom-sidebar' (2025-01-14) rev: 2861df235213e2cdbabddd41ecdf41b57ab5f33c
      → 'github:elchininet/custom-sidebar' (2025-01-18) rev: f658990328f47530097ab0242a5575cbba92b9ea

    • Updated input 'gpu-screen-recorder-src':
        'git+https://repo.dec05eba.com/gpu-screen-recorder' (2025-01-13) rev: 4211dfa2f8649d724f4d08f382dba7ffc7af59f9
      → 'git+https://repo.dec05eba.com/gpu-screen-recorder' (2025-01-18) rev: bae0fdd9498c844f27d1aac6a072360f785c8e14

    • Updated input 'home-manager':
        'github:nix-community/home-manager' (2025-01-14) rev: 0dfec9deb275854a56c97c356c40ef72e3a2e632
      → 'github:nix-community/home-manager' (2025-01-18) rev: 97d7946b5e107dd03cc82f21165251d4e0159655

    • Updated input 'hyprgrass':
        'github:horriblename/hyprgrass' (2025-01-13) rev: d324904d70e8c9710bcf772227f364262baf3820
      → 'github:horriblename/hyprgrass' (2025-01-18) rev: ea3a6079a7e34235ee3df4b600ee11e48b0e7f4d

    • Updated input 'hyprland':
        'github:hyprwm/Hyprland' (2025-01-16) rev: 0dc7367a7006cc3cc877d52bf34c4998144bff84
      → 'github:hyprwm/Hyprland' (2025-01-18) rev: f56153a9c1b0a00fac0932a95e0cfa5a4f6c681f

    • Updated input 'hyprland-plugins':
        'github:hyprwm/hyprland-plugins' (2025-01-08) rev: b4c0fa3ebc6ccd1589dcd17904652223088efede
      → 'github:hyprwm/hyprland-plugins' (2025-01-17) rev: d2dad5b434b338d18458bafa506f2993c13f24fc

    • Updated input 'jovian':
        'github:Jovian-Experiments/Jovian-NixOS' (2025-01-16) rev: 6bbb19666e753c18ef8af35f590cbc3ba42dd0ca
      → 'github:Jovian-Experiments/Jovian-NixOS' (2025-01-17) rev: 27a0ddac1a14e10ba98530f59db728951495f2ce

    • Updated input 'material-rounded-theme-src':
        'github:Nerwyn/material-rounded-theme' (2025-01-11) rev: 6d3b79a79b72f70c4a015dd7dbbf1c41a2b33a35
      → 'github:Nerwyn/material-rounded-theme' (2025-01-17) rev: 7c69a1f03e424ab2485345e5f38ffc5264ead375

    • Updated input 'nix-gaming':
        'github:fufexan/nix-gaming' (2025-01-14) rev: 1a9c52cd7517137c9cc74d4b73dfd63678e17c5f
      → 'github:fufexan/nix-gaming' (2025-01-19) rev: bcc7d7ccdc82e63ab261ddea67e1db1d6091c35a

    • Updated input 'nix-index-db':
        'github:Mic92/nix-index-database' (2025-01-12) rev: 271e5bd7c57e1f001693799518b10a02d1123b12
      → 'github:Mic92/nix-index-database' (2025-01-19) rev: 744d330659e207a1883d2da0141d35e520eb87bd

    • Updated input 'nixcord':
        'github:kaylorben/nixcord' (2025-01-16) rev: 02247bedd6988a1169c4499406970b92bfd8aa02
      → 'github:kaylorben/nixcord' (2025-01-17) rev: 4e76614d89940ef47fe099a0bec2c479dbf0bd34

    • Updated input 'nixpkgs':
        'github:NixOS/nixpkgs' (2025-01-14) rev: eb62e6aa39ea67e0b8018ba8ea077efe65807dc8
      → 'github:NixOS/nixpkgs' (2025-01-18) rev: b681ff2c9c9163f24ca705d948bb0cee1b3e09f9

    • Updated input 'sops-nix':
        'github:Mic92/sops-nix' (2025-01-13) rev: 553c7cb22fed19fd60eb310423fdc93045c51ba8
      → 'github:Mic92/sops-nix' (2025-01-17) rev: 4c4fb93f18b9072c6fa1986221f9a3d7bf1fe4b6

    • Updated input 'tuya-local-src':
        'github:make-all/tuya-local' (2025-01-16) rev: cd29ab1b42337a123f4398666e800912637e0c5e
      → 'github:make-all/tuya-local' (2025-01-19) rev: 15ac106e35d075deb7688b9687d637db9fcb1203

Docker Images:
    • nextcloud fpm:
       sha256:4f6026de2b9cf007bcd01298a86cae2fd5837cbef9d8aa3224454ff80ecac577
     → sha256:4c898a6e3a17fcd3bcbe9d2450079a95581cfb9f0dbfca246c39bd60c77d123b

Firefox Addons:
    ublock-origin: 1.61.2 -> 1.62.0

Node modules:
    eslint-plugin-jsdoc: 50.6.1 -> 50.6.2
---
 _outputs.nix                                  |   3 +-
 apps/config/package.json                      |   2 +-
 apps/extract-subs/default.nix                 |   2 +-
 apps/extract-subs/package-lock.json           | Bin 65225 -> 65225 bytes
 apps/update-sources/default.nix               |   2 +-
 apps/update-sources/package-lock.json         | Bin 65505 -> 65505 bytes
 .../docker/nextcloud/images/nextcloud.nix     |   4 +-
 flake.lock                                    | Bin 55607 -> 55613 bytes
 flake.nix                                     | Bin 13000 -> 13006 bytes
 inputs/default.nix                            |   6 +--
 modules/ags/config/default.nix                |   2 +-
 modules/ags/config/package-lock.json          | Bin 73246 -> 73246 bytes
 modules/ags/config/package.json               |   2 +-
 modules/wyoming-plus/default.nix              |  45 +++++++++++++++---
 overlays/build-failures/default.nix           |   4 ++
 .../generated-firefox-addons.nix              |   6 +--
 .../custom-sidebar/default.nix                |   2 +-
 .../material-rounded-theme/default.nix        |   2 +-
 18 files changed, 60 insertions(+), 22 deletions(-)

diff --git a/_outputs.nix b/_outputs.nix
index 448c04f6..677c98bf 100644
--- a/_outputs.nix
+++ b/_outputs.nix
@@ -11,7 +11,8 @@
       nixpkgs = mkInput {
         owner = "NixOS";
         repo = "nixpkgs";
-        ref = "nixos-unstable";
+        # FIXME: https://pr-tracker.nelim.org/?pr=374780
+        ref = "nixos-unstable-small";
       };
 
       home-manager = mkDep {
diff --git a/apps/config/package.json b/apps/config/package.json
index 6f9dada6..a263e8c7 100644
--- a/apps/config/package.json
+++ b/apps/config/package.json
@@ -7,7 +7,7 @@
         "@eslint/js": "9.18.0",
         "@stylistic/eslint-plugin": "2.13.0",
         "eslint": "9.18.0",
-        "eslint-plugin-jsdoc": "50.6.1",
+        "eslint-plugin-jsdoc": "50.6.2",
         "jiti": "2.4.2",
         "pkg-types": "1.3.1",
         "typescript": "5.7.3",
diff --git a/apps/extract-subs/default.nix b/apps/extract-subs/default.nix
index acf9f693..95e8b147 100644
--- a/apps/extract-subs/default.nix
+++ b/apps/extract-subs/default.nix
@@ -5,7 +5,7 @@
 }:
 buildApp {
   src = ./.;
-  npmDepsHash = "sha256-7UhA8oj+AES+YUrbNJZHQ5SdkzSpcjh7YP8f2WiA3qc=";
+  npmDepsHash = "sha256-vShyulD7uKHE4Oxz8Xy8HdGJpMbF5kQYlHZlQtIcKIA=";
 
   runtimeInputs = [
     ffmpeg-full
diff --git a/apps/extract-subs/package-lock.json b/apps/extract-subs/package-lock.json
index f2e7f38791b8e0f2e4f04995310f89ff7259fd2b..82c17ab55b7a6712866a855b0f4de90c1135642b 100644
GIT binary patch
delta 22
ecmX^4m-*yh<_!WYlZ#qJC)Y74Zgyj7{sjPcNC~3=

delta 22
ecmX^4m-*yh<_!WYlY_EEC)Y74Zgyj7{sjPZstIWT

diff --git a/apps/update-sources/default.nix b/apps/update-sources/default.nix
index 4bc553cb..c179d3c0 100644
--- a/apps/update-sources/default.nix
+++ b/apps/update-sources/default.nix
@@ -9,7 +9,7 @@
 }:
 buildApp {
   src = ./.;
-  npmDepsHash = "sha256-G2NxC//C8254ZBNep/WWfFUXmFCWR0x8pLeqiUY1ddY=";
+  npmDepsHash = "sha256-k4m8fSF0zOznebbH87p8IPP2SzRR9siVFYBU5Cfs2T0=";
 
   runtimeInputs = [
     go
diff --git a/apps/update-sources/package-lock.json b/apps/update-sources/package-lock.json
index 50502f80aaaf6da492eb6467543348c59c444226..34f5d7c7d1c6daf7113853ac5e9e917a35b324ab 100644
GIT binary patch
delta 136
zcmV;30C)f4{{!Lw1F*CMlac`yll%c&vm^w%-IL_5IFlCQ5|hFpDOE8wT6A!0D{gOg
zI7Cu4GBi>&LPj@rMRj^bQ)hZrML||HL1;HaRZUJuSY$;tMND;ectvb@M_6uTLTocK
qc1=@rS79+~a8712GFmG|ax-&FcX2C|p}segW(1S4qaw2d<K7%;%rpuB

delta 136
zcmV;30C)f4{{!Lw1F*CMlR``ull=i&vm^w%-ILjCIFlCQ5|e{kDOEOVaB59(PjqNC
zQ#nagR&_OFY+5%?PiII@b9Oa$Qc+}RWlTAGbZ|0uT5U}>W>R8Ic6oJSF?4A{NlY|s
qYdBLuWivridSzHeY<V_wX;?#QL`X!Fp}segW(1S4qaw2d<K7&;*EMYb

diff --git a/configurations/nos/modules/docker/nextcloud/images/nextcloud.nix b/configurations/nos/modules/docker/nextcloud/images/nextcloud.nix
index c3b0e346..68d470d9 100644
--- a/configurations/nos/modules/docker/nextcloud/images/nextcloud.nix
+++ b/configurations/nos/modules/docker/nextcloud/images/nextcloud.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "nextcloud";
-  imageDigest = "sha256:4f6026de2b9cf007bcd01298a86cae2fd5837cbef9d8aa3224454ff80ecac577";
-  hash = "sha256-Urcuc1xkwDeJo9BjRT9vz3wMr/v/Lfn7o11HALowuKU=";
+  imageDigest = "sha256:4c898a6e3a17fcd3bcbe9d2450079a95581cfb9f0dbfca246c39bd60c77d123b";
+  hash = "sha256-kK4F6UQVJm+r98/FH5uMG7VyVm5zzzmA7smc3IoDpFI=";
   finalImageName = imageName;
   finalImageTag = "fpm";
 }
diff --git a/flake.lock b/flake.lock
index bc2fa8bc82c352bef3361a9a9c7e91b6cb78907d..3dbf03b7a4b4e74918b8ba90230dc29c2ae6d1d0 100644
GIT binary patch
delta 2351
zcmbuBOKhB16~~pA9TlZXX^5MoaUP0d%R}n>{_aJEVmsp*&&wX$GvgU44d1=ry&iv_
z8GGIjmCzt)7f5NMTPk%?2_&ShLPG`#wGpBPDNqR&%7RtJvfHK`7D!0knN;jpF`HSP
zIcNUo|Nou)n+Jz}`{2->KTdiG5r#c`_w>2B<%NDr%jNmXYK2EPY6kE4E79epR2M`@
zJ2$`CDoel@Aroa=|MQgn<iM=G`Ec@zKr&DgAumu^0F87YAwrT$2|1FO6Urp>t^X)J
z{N%u24jn-VP+}L}nvV3A_mVZNYRly)HS-CoV6+bk8m(6wwNm1m8I)lflsf%XncI)v
zJmor`vA>%*VbfP9XSw7AG6<lXUlOG>Wx^1QnBj<P_XVk83^M!Wx#XyD=n9WccnD+6
z?VZ!pbGdA;-Y9REVN)%2Qy>E}>8#jZYMN|4v%c9Y=5y8J;x(Gz-LW6OIb}aT&h71E
zle30VE(E}c8{$z6fbe_?5J5hr9#vBMP7k5|QQzU`$A59kNsO^zVkB{7u-?jcLguvz
ziUhRXFVBaaFiy8?s#aBzT6VLxw;JRJ`DU?cpZ?QD`>!igi_+J?1c4xeD^7@ULPOtI
z%m?n5889BFifc$Nee<acUwtk$bZ2R=U29$X)&)VB&0aWVKbu*xb4SnHd%vC@elhdL
z(b4LmN1n{Jvt6kaKtC4AN!{v{Hz5pbEwR48zY*UmZm0XZ#d0a3>n7d=<4vsn<f2`B
zc-TIKC!H!suXusy`berF@PYtfr8qJOLPimV0nq?b!Kgj(cFKNLI(!KKePlEPh76DG
zmu=<u7fQa4cD6FL-a<c}85F#5ev9NX{bV85jPrJ-T!@4{Y8SpXWov)EU_V?qY#;My
zMmC($KK2>#gzsrg5T;t=z!1p*&>BKbxCGiW#9n+h^?%e}ws&6o#_+0WA3O|&hwZKW
z`A9H`d25?(wAooKH}bMa_u9)bRmm=Hn?`C+?xf=|Rfr`w)*~xp@opr}*b6V7oi&s}
zihZG=1U>-9S3qFo3#x%KKJ|%Vig9S{&;PDn!AZMz`|^Wtzi?o}gO~$oKT^|ki>jSz
z!Q>JuG<!jAn<T5WQ%hx(Y71yudS|uUNk-$#34h++-JP;G64Umrcb^*z7NEcns3e$3
zmx%znpmOQE#()_l1Xd6mM2yXzN&UC(9}8FQXX2^h{g?7zpMZ!l@dO>auviXPGrK#<
z#rQymnLa5s!+vwoS2UN{*sCn%>q2cNQ#v``UAP{dL7oqSz*o?R#M#E>hPyZ!Dgx;t
zE+`~|8l>#wb156He`ol;jZa;Ep$okj=Qm$n<qOGvSn(*^3s=_rYg-vzXMIpjHN`3l
zQ~Mn0kT$wS`%Grarmnv@;>L`pnDC(iSQA8iiHPe;sHO&UV-!V<Xg_d3bXFavuHQTD
zEJ}e#_&C0Ssg`=NYPH)huH~~!nH8|Iy1GNxz4mfyAqjMRKTMWewbqu3jyL^sm(NP2
zTso8rTqHEZt|fy(pnc|P=tvnbAfUo@3=I2n7uxh-*8a10+zuba@80o-k9)@sI&M)9
zgE2HK(b)F>0@;oEMtLl<P^}Fjj$)~K)y-|7eZ96^F$fi+{V_DB?Awj!EqLY3lRr;L
zfH7cHXaqbTa*jtX08Z7wC59rPCHLewBd@-H+CJVtJOr=YID7<BC)B9@T((vWW3)F&
zvurZ2cN?w6s$A-!wQi(?!VbL_sl?NbvSGVhV{E>2%bOwEb0j8#<0b*xVbf?Jgb$=v
zND<F1+yEJ1`|00O_MKb6zVPgny-+_fod4m&gHC<|0YhU##L}cxt2En*Lbw}gN!{Gf
z&0i~In<bP7ZLqX~<MnNjh^1Rk2(kKOJS#^5ayAl5IL<gfE8hdu!IVo0lp}-0ZWtr%
zf$J%I|Me+*?6s#St~RTFrD8AMK5M^toeyiT-9yfKV;8v0MPggIsE90Y_x4IT-U0h;
zr?QyfnYg#hYsqRU+@JS?YPzx1!F$dHqYXS~zx%;S``*tcXNe+43Tz;k!tq-%<3quj
zL$MJ)4m@d~(T-Z<v-RrxSMB$YULN*7cyDsj4S<O==9fR3o?FWlR8f|T$b>~4Up4DX
z>ojbdK`_wOvgxHZdfjlVxK+=nu?=sYKWpFp{q$@Ab%5PPriMcdG!}?^4mHk%()h-3
z-`NwoE!kh)OxYitKjVs~#sl2`!-<0vh!SU<aSjlR*JS8-JA=*TVsWpJ;ydL;q8iO7
zO@2S$h1F8Dv9XC4OXVjy_~j!sKH8AFyaT2&4S+`jEj`Aa5R7|)dxQj180Fp$0NZE$
z^zi<p<0I5D$nn_t9R%v&n%=JT8_kskS?|_YH+sRKL=xp_p_LQWc44iuHo(ie>ux7o
v#Ks*S<6b13AWyllkkJi=?oSXOaW3HKrGk|CUw6|HcJ<?*4$pr4{E7bn%gy*0

delta 2294
zcmb7GON?7r8CH^JW|}BUN=m1hC{IS2X<X{_en6ROJf4Zi<L7uhexOLb=bU@(nX$+3
zvB$JkgJ>f}iyEB;MXE#*3sx0sy+F{k2t{g(kXj)m)>*-V1%yo{#DZfdU9!Ln-;IBN
z|Ns5p_x<;y503r%gJW-fI>i|0NZ4B|7em{-xR6d9vIZ*$glzUJ(oeKfo7qflyAf??
zh3t0x0N1dTz}|WLDf{`6MZ1)kUX;Knsbt`54FZCYAOskJA>f*6PN;{e&kg7H!G(>{
z=SRLcHU+Tcg4;XiE`(Y-rMfsj41%Jc+3s|ALe2D6aWhmWQAT^BTco97uGousy7UNi
z&i-!dj7@%XdO>L}nWqtA0su|0&k^wv4=4@@1R7HAX)g%u6S;(Ic5dYAW{xuf9W;FW
zQpnG#t=;urtkvI3N8k>{_2r(Ahb3ALx;zx@>ZAb0o=0(|F@gT;X<>hSYI*?)22Fr4
zMG*T)8|5iu41vBj4p%u;MFWg&b}l*k+v#6CH9c+*GBlp|Iu#wc2Dd^yd|2Izx7Q9f
zwt{GZhll>^kZq@;YEaotm~3iz!`>ZTwg0|08zBffJP!qe5oz3v0Wm-XSRe<@gFtgH
zpfZqGpFMH;(dTO0KUit>_PbZVby*T<TYrG|%Z2Cc^_ffd@0U*6k3Ty<`f}m+jB8C`
zO58qOYo?N^G&1>IMd%yL$(E{SH~0E|#%QP9tqhxm;-IiwJ8V@Cq<!n{S^Lk@75l=U
zkK4QO?3k8oz&Hg+<156epv0q0ORlkd5a0(K`Pf4~v+sYH{Hk<x7yjq?loKF?Y@$H1
z<?ZydjrKnEyQM+Cdzdd};*q^VZx}T4iCC_GBf1)dbh=t4_R3#o?M3nJ1%nZhfEW&Z
z;Q%2}I&hLkP6wC~#E|mFRM|iMaNeFF&$t?5U!IvCy(nKkdK_RusfC9ZLp$wON(?vp
z%`8Z*4OS1f!~N{0X*5@A{k_9-aV6VW<Mm20obPlTG_c=&{`>+knq$U24gk{{Yb`i8
z6sZ6cO{5f%5ETT@TsC3vugtlcC+#c0pSLf{8T-aBPmWUGIe%oDVUB=&D2`BX;72yM
z+R<_+#$w&=ZY|l1ClZ->ANM+$<_#2X*24)5G`0`Qv+h5?VIM5bEhyrQ=V4ztzi9)h
zkj6c@V}(&i1O`I*fo~>0a5bZ!zwqwYrU2m1g%c0<;ykej>WxBfUu?BOb}z5eD}_y7
zXjgX<e$^wZ0JQa9wI<dlM!1<<n)r_?rJ!Vt`J7@69f)vTQzu5CmBz{=$QYpQ6F+&{
z-oHXdH*=>SpJoh6_6RtXPLs^mVM!kDtRyIjHuKGBY7d4({ausUS=U9c&ihr81^ML(
z@a>z=kAWAN!HP?dOT|&Zo%KBcsWIFr6+lg(hZM#xb|#5)`{sM+9vi#fzI*)g^|oK_
zEw9IiyIC4Oh<I&2ILHiR!&ZBsW3gx?)@oHd(Q>TkWU+j5*8a3F7NI9Kbw1}5a)`N>
z+NGKyienQP<^&*o$TbbdXs!U-H-E4&dS~#?Q8z0^ZVMB4iC&`?TaHxPjbdxq0XS=V
zwOCWcq)+z>+4BB=RT~c`H&kQ-{A%Zd-Fs<n!ZYH~r^+}C?!#c5B@%NfDHI9<4<G{}
z!V20ee@u?jFMaQ^Dd6Id!O3njUC66?5Y9#u>!jN1qk|G@gx4DV25%R(L#(pBCk~UV
zsr}x=e0}Z~UjPUZu6$#d6vA`nl$tm_6X5m+lym|&!t;Q`OW6PK_w)8LKQ(&x`yU^j
z8Yd426WjN)p;Q)x2c<kn!Ik}D$3w$PwUYAEnL(kMj2CnHcw81Z90!#<Jn7f)qOX`s
z6VJoa_Zatq62Q^n3Eu;pJGC<^05@7pmXdz$tetuNto_%WuiJmzUK({@e-DjQSrGg%
z`ueqs3Bvna#gmCh)o*p-Zavc&#Mj#S3|osFZe-Vry`(H1tlQ;hX6>t;bM|MyIloAq
z?73D5Id?(n!~lHd?jAunFj`_jsHV_0HEH5u(UZ1$Z+`U3Z+|sC%^)SnQ7}G(P1F{H
zYPO8GO6#i|k;cwywN~3GWLt$)Jk{8e2aIgjE2JgL{Rst2_s~Qd5Nio>Kwa!&k7^*4
z641r18E1fStr24+a}o5Td3*oV;%Mn!aMYb&`qlY0x%x`3GYAfQ%e1y4^U0m{JaJ#X
zOgAz~lB}(lj417fw`*hTKW$HZ!mnwAq^F>AV`A<(=>-H!F^&Ou=Ojcf(R}CnTSt<1
z<`ZPUn3}gIKK*c-QA~&n;_<j%EIQcUSSB|rjp}-4C7LhFVRDV+_Y>Joo@dcrSx?ui
z<x;Mp?MEXP@ugNS;u!%D8{!7TPV<bpq@e;DPXv^C*u8W7j}s^)8@=(_`)B?OhN<0>

diff --git a/flake.nix b/flake.nix
index 657625e145f6db67c1fb10c08b568bc7f03ad131..79d5e92250ca7078e55e5058da58eb71ed4581a3 100644
GIT binary patch
delta 94
zcmV-k0HOcLWzJ=gDX}WI3@>tJb|5_<B4uGSVKy)~Ibk<tGc+<YHDzTpWM(vCHZU+{
zWic^jG&o`~WjAItWRvj&CA0ku@e`Ap8XvPoAu|C6Epu&QY;2R^B^0xaB0LZQ3fyWQ
A?EnA(

delta 81
zcmX??dLng#=0=SjJd>^1WHy`deiYU(N-a~cRZuc8GBPnwN=->Iv$U{CG&D4`Og1sG
lv@|g=votqIvNTFcOR-2yG%%VhD66sAMbVgXbFET<001o97z+RZ

diff --git a/inputs/default.nix b/inputs/default.nix
index c4b918e5..74dfc3d0 100644
--- a/inputs/default.nix
+++ b/inputs/default.nix
@@ -139,6 +139,9 @@ let
       hyprgrass = mkHyprDep {
         owner = "horriblename";
         repo = "hyprgrass";
+
+        # FIXME: https://github.com/horriblename/hyprgrass/pull/203
+        rev = "ea3a6079a7e34235ee3df4b600ee11e48b0e7f4d";
       };
 
       hyprpaper = mkDep {
@@ -161,9 +164,6 @@ let
       nixcord = mkDep {
         owner = "kaylorben";
         repo = "nixcord";
-
-        # FIXME: https://github.com/KaylorBen/nixcord/pull/69
-        rev = "02247bedd6988a1169c4499406970b92bfd8aa02";
       };
     };
 
diff --git a/modules/ags/config/default.nix b/modules/ags/config/default.nix
index b533ead3..37dfa33c 100644
--- a/modules/ags/config/default.nix
+++ b/modules/ags/config/default.nix
@@ -1,3 +1,3 @@
 {
-  npmDepsHash = "sha256-ahAL1uY79aq39acXSr0eSYcDQH7z3eqBtzWq+6lc+MI=";
+  npmDepsHash = "sha256-mt2SERYy7u7EicYbROfSccb9krE8wtQ/fPioQOI4wYk=";
 }
diff --git a/modules/ags/config/package-lock.json b/modules/ags/config/package-lock.json
index b54a543fca8e5269894109974e07f8b0b5000430..c10bda1853e177f9dddea81e05907e464e4fd3fa 100644
GIT binary patch
delta 220
zcmbQYhh^R#mJK%<Cr_Lty7?XBr-aY~$E*@<bK^i?L!Zp#;G_a?_oRqi7vD5@SLf8w
zl8^xR>>SUssGw9gmy8NOM`L3P=iD^MGRJbCVB;{Ova}#iPcOH8KYt@fvm8T@Vs|5R
zp9rJU$$^4$n}d_R6elmbU@`e>i~i)GwVI)M=I(w`CdpO4j*dw#>E<rQE{^5_Wghv4
zo&lbr<&F`NxfLN5W?A|fAvqCAC8l8p6{dyy+3wkyUgpIn<&KuY1y1^viJ9IOS#IXe
T{zk^;IsQJWV5=6i*3AF_IpR%O

delta 225
zcmV<703QFIyab-S1hClwld^#ov+e=%U{z>vF=J6OPB}+RQBp}cZ8TMLWMVOMaX3#z
zaWGLgOLZ$nYe#Q5HEcvtZBH~)Ls3L=GH_BuQEN9iZgWCNX)<qVV^Tq6cUMVSVsLbH
zXE|$HL`yM~;W!?%Q)5aYlY%EWlhuSTld^0nR#jJdVOeQ5X;o5WQ)XmVR&jP_PjfPM
zWJ6YZFiJEqPcM2eNK|unGIK_1WNK|>Y*k4wacoOWPgHGpVo*^sbU|iOZbdalId*Y)
bD?%%9Z$>vUL_$%M0h%F`&y+f|-i1JzOS)0b

diff --git a/modules/ags/config/package.json b/modules/ags/config/package.json
index 5000e3e5..f0dad63d 100644
--- a/modules/ags/config/package.json
+++ b/modules/ags/config/package.json
@@ -7,7 +7,7 @@
         "@eslint/js": "9.18.0",
         "@stylistic/eslint-plugin": "2.13.0",
         "eslint": "9.18.0",
-        "eslint-plugin-jsdoc": "50.6.1",
+        "eslint-plugin-jsdoc": "50.6.2",
         "fzf": "0.5.2",
         "jiti": "2.4.2",
         "typescript-eslint": "8.20.0"
diff --git a/modules/wyoming-plus/default.nix b/modules/wyoming-plus/default.nix
index 5f62dc01..6d47b806 100644
--- a/modules/wyoming-plus/default.nix
+++ b/modules/wyoming-plus/default.nix
@@ -6,7 +6,7 @@
 }: let
   inherit (lib) getExe mkOption types;
   inherit (lib.modules) mkForce mkIf mkOverride;
-  inherit (lib.strings) concatMapStringsSep concatStringsSep;
+  inherit (lib.strings) concatMapStringsSep concatStringsSep escapeShellArgs;
 
   cfg = config.services.wyoming;
 
@@ -20,11 +20,15 @@ in {
 
   config = {
     systemd.services = mkIf (cfg.openwakeword.enable) {
-      wyoming-openwakeword.serviceConfig = {
-        MemoryDenyWriteExecute = mkForce (cfg.openwakeword.package != forkedPkg);
+      # For some reason I can't just override `ExecStart` anymore.
+      wyoming-openwakeword.serviceConfig = mkForce {
+        DynamicUser = true;
+        User = "wyoming-openwakeword";
+
+        MemoryDenyWriteExecute = cfg.openwakeword.package != forkedPkg;
 
         # changes according to https://github.com/rhasspy/wyoming-openwakeword/pull/27
-        ExecStart = mkForce (concatStringsSep " " [
+        ExecStart = concatStringsSep " " [
           (getExe cfg.openwakeword.package)
 
           "--uri ${cfg.openwakeword.uri}"
@@ -40,8 +44,37 @@ in {
             (model: "--preload-model ${model}")
             cfg.openwakeword.preloadModels)
 
-          cfg.openwakeword.extraArgs
-        ]);
+          (escapeShellArgs cfg.openwakeword.extraArgs)
+        ];
+
+        CapabilityBoundingSet = "";
+        DeviceAllow = "";
+        DevicePolicy = "closed";
+        LockPersonality = true;
+        PrivateDevices = true;
+        PrivateUsers = true;
+        ProtectHome = true;
+        ProtectHostname = true;
+        ProtectKernelLogs = true;
+        ProtectKernelModules = true;
+        ProtectKernelTunables = true;
+        ProtectControlGroups = true;
+        ProtectProc = "invisible";
+        ProcSubset = "all"; # reads /proc/cpuinfo
+        RestrictAddressFamilies = [
+          "AF_INET"
+          "AF_INET6"
+          "AF_UNIX"
+        ];
+        RestrictNamespaces = true;
+        RestrictRealtime = true;
+        RuntimeDirectory = "wyoming-openwakeword";
+        SystemCallArchitectures = "native";
+        SystemCallFilter = [
+          "@system-service"
+          "~@privileged"
+        ];
+        UMask = "0077";
       };
     };
 
diff --git a/overlays/build-failures/default.nix b/overlays/build-failures/default.nix
index 732eb07d..b70fd710 100644
--- a/overlays/build-failures/default.nix
+++ b/overlays/build-failures/default.nix
@@ -1,4 +1,8 @@
 final: prev: {
   # FIXME: https://pr-tracker.nelim.org/?pr=357699
   nodejs_latest = prev.nodejs_22;
+
+  wyoming-faster-whisper = prev.wyoming-faster-whisper.overridePythonAttrs (o: {
+    meta = {mainProgram = o.pname;} // o.meta;
+  });
 }
diff --git a/scopedPackages/firefox-addons/generated-firefox-addons.nix b/scopedPackages/firefox-addons/generated-firefox-addons.nix
index 7c6d8cde..726e2ba4 100644
--- a/scopedPackages/firefox-addons/generated-firefox-addons.nix
+++ b/scopedPackages/firefox-addons/generated-firefox-addons.nix
@@ -326,10 +326,10 @@
   };
   "ublock-origin" = buildFirefoxXpiAddon {
     pname = "ublock-origin";
-    version = "1.61.2";
+    version = "1.62.0";
     addonId = "uBlock0@raymondhill.net";
-    url = "https://addons.mozilla.org/firefox/downloads/file/4391011/ublock_origin-1.61.2.xpi";
-    sha256 = "ee3a724a46ff32c17d1723077fecc6ede7fdab742154020b51fb6253ddcbba14";
+    url = "https://addons.mozilla.org/firefox/downloads/file/4412673/ublock_origin-1.62.0.xpi";
+    sha256 = "8a9e02aa838c302fb14e2b5bc88a6036d36358aadd6f95168a145af2018ef1a3";
     meta = with lib; {
       homepage = "https://github.com/gorhill/uBlock#ublock-origin";
       description = "Finally, an efficient wide-spectrum content blocker. Easy on CPU and memory.";
diff --git a/scopedPackages/lovelace-components/custom-sidebar/default.nix b/scopedPackages/lovelace-components/custom-sidebar/default.nix
index 829daca2..8f2b4710 100644
--- a/scopedPackages/lovelace-components/custom-sidebar/default.nix
+++ b/scopedPackages/lovelace-components/custom-sidebar/default.nix
@@ -30,7 +30,7 @@ in
 
     pnpmDeps = pnpm.fetchDeps {
       inherit (finalAttrs) pname version src;
-      hash = "sha256-7cVWjyRZXd7xUZsgRNRYPfAap3LGH5VbLzvi2ocbkwc=";
+      hash = "sha256-NOqEnqdJ/FrgyFNdU5hG/Im8HMltWxv6DrabxAsHl6I=";
     };
 
     passthru.update = concatTextFile {
diff --git a/scopedPackages/lovelace-components/material-rounded-theme/default.nix b/scopedPackages/lovelace-components/material-rounded-theme/default.nix
index bad683e8..3dc922ac 100644
--- a/scopedPackages/lovelace-components/material-rounded-theme/default.nix
+++ b/scopedPackages/lovelace-components/material-rounded-theme/default.nix
@@ -15,7 +15,7 @@ in
       substituteInPlace ./webpack.config.js --replace-fail "git branch --show-current" "echo main"
     '';
 
-    npmDepsHash = "sha256-BlG/IuyJpigw6twUoaxJ5a970JfwBb75FuwgtH4xrCw=";
+    npmDepsHash = "sha256-Vn4OBTM9MoS0LuU4nDYebncvD6wKmfcLP3gHh0CyfaM=";
 
     installPhase = ''
       mkdir $out