gominimal · twitchyliquid64 · Aug 5, 2026 · Aug 5, 2026 · Aug 5, 2026 · Aug 5, 2026
diff --git a/packages/dua/build.ncl b/packages/dua/build.ncl
@@ -7,14 +7,14 @@ let toolchain = import "../toolchain/build.ncl" in
 let make = import "../make/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
 let gcc = import "../gcc/build.ncl" in
-let version = "2.38.1" in
+let version = "2.41.1" in
 {
   name = "dua",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/Byron/dua-cli/v%{version}.tar.gz",
-      sha256 = "b30d76e60be8f4928c3b7d5c3cd2d9034d60ad09c7e044bf2056f01e8596f46e",
+      sha256 = "68a37e947aa19d2aeed3f24180e6c52017a7c185677456acabcde38ce10cbb9e",
       extract = true,
       strip_prefix = "dua-cli-%{version}",
     } | Source,

diff --git a/packages/graphviz/build.ncl b/packages/graphviz/build.ncl
@@ -21,7 +21,7 @@ let libwebp = import "../libwebp/build.ncl" in
 let pango = import "../pango/build.ncl" in
 let zlib = import "../zlib/build.ncl" in
 
-let version = "15.1.0" in
+let version = "15.1.1" in
 {
   name = "graphviz",
   build_deps = [
@@ -30,7 +30,7 @@ let version = "15.1.0" in
       # The GitLab REPO archive, not the release-registry tarball.
       #
       # graphviz 15.x stopped shipping CMake build files in its release
-      # tarball: `graphviz-15.1.0.tar.xz` is an autotools `make dist` output
+      # tarball: `graphviz-15.1.1.tar.xz` is an autotools `make dist` output
       # with ZERO CMakeLists.txt in it, while this recipe is CMake-based
       # (`sed -i lib/CMakeLists.txt`, `cmake ...`). 14.1.1's tarball DID
       # include them, so this is an upstream packaging change.
@@ -39,7 +39,7 @@ let version = "15.1.0" in
       # none of the hardlink the dist tarball added, which the prefix-strip
       # extraction path can't place. One artifact fixes both.
       url = "https://gitlab.com/graphviz/graphviz/-/archive/%{version}/graphviz-%{version}.tar.gz",
-      sha256 = "cc673e3eb9013f40761590b2b071c0fb89ad5c5d694e25d4e1238c74df86c697",
+      sha256 = "7c78c26f366158ccacb625238d4a0939e49d2e9607332f171d0f62050eed73f8",
       extract = true,
       strip_prefix = "graphviz-%{version}",
     } | Source,

diff --git a/packages/jaq/build.ncl b/packages/jaq/build.ncl
@@ -6,14 +6,14 @@ let toolchain = import "../toolchain/build.ncl" in
 let gcc = import "../gcc/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
 
-let version = "3.1.0" in
+let version = "3.1.1" in
 {
   name = "jaq",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/01mf02/jaq/v%{version}.tar.gz",
-      sha256 = "8ad074d7e90e07ad7e77048dcf0d0e7ad434b8e3e38044260b9457d4551e644d",
+      sha256 = "9b8587436be48b5791c8276573321a3d4f404e0dc77ea6503d05725a55edd266",
       extract = true,
       strip_prefix = "jaq-%{version}",
     } | Source,

diff --git a/packages/nats-server/build.ncl b/packages/nats-server/build.ncl
@@ -2,14 +2,14 @@ let { Attrs, BuildSpec, Local, OutputBin, Source, .. } = import "minimal.ncl" in
 let base = import "../base/build.ncl" in
 let go = import "../go/build.ncl" in
 
-let version = "2.14.3" in
+let version = "2.14.4" in
 {
   name = "nats-server",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "https://github.com/nats-io/nats-server/archive/refs/tags/v%{version}.tar.gz",
-      sha256 = "dba5286035ce9017b897ea24a783551dc28b07ad50c78da5471ead2bcfab3e86",
+      sha256 = "fb873897f826686dc4407112613e80c61fba10a1b381375458784995cd9f295d",
       extract = true,
       strip_prefix = "nats-server-%{version}",
     } | Source,

diff --git a/packages/otel-collector/build.ncl b/packages/otel-collector/build.ncl
@@ -4,7 +4,7 @@ let go = import "../go/build.ncl" in
 let toolchain = import "../toolchain/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
 
-let version = "0.157.0" in
+let version = "0.158.0" in
 # OBI (OpenTelemetry eBPF Instrumentation) is compiled into otelcol-contrib as
 # of 0.157.0 — the contrib manifest declares it as a component and replaces it
 # with a vendored source tree at `internal/obi-src`. Upstream fetches that at
@@ -20,7 +20,7 @@ let obi_version = "v0.10.0" in
     { file = "build.sh" } | Local,
     {
       url = "https://github.com/open-telemetry/opentelemetry-collector-releases/archive/refs/tags/v%{version}.tar.gz",
-      sha256 = "b8058145292617c87b5acf7c316a801790a58899dfb88114ea71395795706c09",
+      sha256 = "5fa5c0ff17eaa4910960781347db0ccbd4878fbaae6984b5c87fcb930bc0b0f5",
       extract = true,
       strip_prefix = "opentelemetry-collector-releases-%{version}",
     } | Source,

diff --git a/packages/otel-collector/build.sh b/packages/otel-collector/build.sh
@@ -25,7 +25,7 @@ tar -xof obi-*-source-generated.tar.gz -C internal/obi-src --strip-components=1
 # build.sh version rewrite carry it forward on the next bump (the old
 # `v0.150.0` pin never matched the `0.150.1` package version, so it silently
 # stayed behind).
-go install -trimpath go.opentelemetry.io/collector/cmd/builder@v0.157.0
+go install -trimpath go.opentelemetry.io/collector/cmd/builder@v0.158.0
 OCB=$(go env GOPATH)/bin/builder
 
 # Run ocb FROM the distribution directory. The manifest's `output_path: ./_build`

diff --git a/packages/railway/build.ncl b/packages/railway/build.ncl
@@ -6,14 +6,14 @@ let toolchain = import "../toolchain/build.ncl" in
 let gcc = import "../gcc/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
 
-let version = "5.27.2" in
+let version = "5.31.0" in
 {
   name = "railway",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/railwayapp/cli/v%{version}.tar.gz",
-      sha256 = "4ea8241d9e9724656c606bfb5aa2cab6092908a5b64026b526eac54a7a4af6f3",
+      sha256 = "5d2ddab41da248f73517867bc4a89334bb4dd2cef2b7459783cd2610e54fdf98",
       extract = true,
       strip_prefix = "cli-%{version}",
     } | Source,

diff --git a/packages/tailscale/build.ncl b/packages/tailscale/build.ncl
@@ -5,14 +5,14 @@ let toolchain = import "../toolchain/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
 let iproute2 = import "../iproute2/build.ncl" in
 
-let version = "1.102.1" in
+let version = "1.102.2" in
 {
   name = "tailscale",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "https://github.com/tailscale/tailscale/archive/refs/tags/v%{version}.tar.gz",
-      sha256 = "ececb81b4608c40b823ef2a8a1f083eebbb44f8ded8c74f51f03d07462668e7c",
+      sha256 = "66c447b5555aa89e0690dc21e0ec59421302ceaa982f3ccc0df686b16f5d5505",
       extract = true,
       strip_prefix = "tailscale-%{version}",
     } | Source,

diff --git a/packages/wrangler/build.ncl b/packages/wrangler/build.ncl
@@ -3,7 +3,7 @@ let base = import "../base/build.ncl" in
 let coreutils = import "../coreutils/build.ncl" in
 let node = import "../node/build.ncl" in
 
-let version = "4.108.0" in
+let version = "4.119.0" in
 {
   name = "wrangler",
   build_deps = [