internal/rosa: update packagesstaging

Kernel compilation is no longer failing on the amd dc dml frame size
warning, and the corresponding patch has been removed. Kernel headers
have been bumped due to amdgpu, landlock and intel avs changes.

Glslang had its stack size increased to 1 MiB to avoid crashing against
latest spirv-tools. Muon has been updated to 0.7.0, however the newly
added clang-cl support has been completely removed due to it insisting
on using clang-cl for everything. It is also now patched to respect
CLICOLOR_FORCE. The util-linux package has been updated, and the
backport patch has been removed.

The long-awaited openssl 4 update, blocked by python for months, is
finally added. Python 3.15 broke the test suite of package python-wheel,
it has been patched to forcefully disable output colours.

LLVM has been updated. A newly-broken test is disabled.

Signed-off-by: Ophestra <cat@gensokyo.uk>

44 files changed, 219 insertions, 155 deletions

diff --git a/internal/rosa/llvm.go b/internal/rosa/llvm.go
index 6d1dcf0b..08625fcf 100644
--- a/internal/rosa/llvm.go
+++ b/internal/rosa/llvm.go
@@ -145,6 +145,8 @@ func init() {
 				"global-value-regex",
 				"global-hex-value-regex",
 				"check-globals",
+				// clang: expected string not found in input
+				"Interpreter/failed-input-keeps-redecls.cpp",
 				// cxx: fails on musl
 				"close.dont-get-rid-of-buffer",
 				"re/re.traits",
diff --git a/internal/rosa/package/cairo.az b/internal/rosa/package/cairo.az
index 7ffbb304..abe0122c 100644
--- a/internal/rosa/package/cairo.az
+++ b/internal/rosa/package/cairo.az
@@ -3,12 +3,12 @@ package cairo {
 	website = "https://www.cairographics.org";
 	anitya = 247;
 
-	version# = "1.18.4";
+	version# = "1.18.6";
 	source = remoteGitLab {
 		domain = "gitlab.freedesktop.org";
 		suffix = "cairo/cairo";
 		ref = version;
-		checksum = "_Ztw0ttmYLIiElqS27x2Iu4EneXOMNHp2or6bJA6suLeF3NRvORzUMPPQy9Wr5gT";
+		checksum = "xkXsQ_D8ZH5YF6tldJLRazKjP04xXu3RgDiTEbCwKP6s5ot_5VDfljj2gwnFOoc6";
 	};
 
 	exec = meson {
diff --git a/internal/rosa/package/cmake/package.az b/internal/rosa/package/cmake/package.az
index 1e6ea8b3..bd67abb8 100644
--- a/internal/rosa/package/cmake/package.az
+++ b/internal/rosa/package/cmake/package.az
@@ -3,12 +3,12 @@ package cmake {
 	website = "https://cmake.org";
 	anitya = 306;
 
-	version# = "4.4.3";
+	version# = "4.4.4";
 	source = remoteGitHubRelease {
 		suffix = "Kitware/CMake";
 		tag = "v"+version;
 		name = "cmake-"+version+".tar.gz";
-		checksum = "69yrNbgUPZXY0phavZEMPRgBu_6858LHzLoyHk1aeTuXf8RW5Ec37lr2OBaGZ5PY";
+		checksum = "I7vJROVzty0xtoWvDQzR5JpnEl-gO-1kXd-qIO2lWgj65Hgyd4kA08mM1wk5l8z3";
 		compress = gzip;
 	};
 	patches = [ "disable-broken-tests-musl.patch" ];
diff --git a/internal/rosa/package/git.az b/internal/rosa/package/git.az
index 7ebb8113..2d8b47a1 100644
--- a/internal/rosa/package/git.az
+++ b/internal/rosa/package/git.az
@@ -3,11 +3,11 @@ package git {
 	website = "https://www.git-scm.com";
 	anitya = 5350;
 
-	version# = "2.55.0";
+	version# = "2.56.0";
 	source = remoteTar {
 		url = "https://www.kernel.org/pub/software/scm/git/"+
 			"git-"+version+".tar.gz";
-		checksum = "lOer6jb8vZQk6Nd1rLZIgsYys8whLvjJq8XbmCdTATcPFAYuQcK1Rgj1Jj6a00W8";
+		checksum = "9HMTVgQnHmUH9v8ot_DXl5mI8tGMcbilKLUzgFXg1k8Z5YbzxkF6b-ngTL4ZgeYN";
 		compress = gzip;
 	};
 
diff --git a/internal/rosa/package/glib/package.az b/internal/rosa/package/glib/package.az
index 5c82be35..0fea441c 100644
--- a/internal/rosa/package/glib/package.az
+++ b/internal/rosa/package/glib/package.az
@@ -3,11 +3,11 @@ package glib {
 	website = "https://developer.gnome.org/glib";
 	anitya = 10024;
 
-	version# = "2.90.0";
+	version# = "2.90.1";
 	source = remoteGit {
 		url = "https://gitlab.gnome.org/GNOME/glib.git";
 		tag = version;
-		checksum = "7TWtYVOWNTkqg1SLAtNyhkUnvXB9jshJHCModCZl9JAzogKKoBebfMDmq2edOpXm";
+		checksum = "h3Chw60ZesAtUzKQfHKsMvsfkEAK0HaTSV8ZANJK7vkTtb9f7D1P763_vROClV3Z";
 	};
 
 	files = {
diff --git a/internal/rosa/package/glslang.az b/internal/rosa/package/glslang.az
index 3cbd4fa0..1aca89c6 100644
--- a/internal/rosa/package/glslang.az
+++ b/internal/rosa/package/glslang.az
@@ -3,11 +3,11 @@ package glslang {
 	website = "https://github.com/KhronosGroup/glslang";
 	anitya = 334917;
 
-	version# = "1.4.357.0";
+	version# = "1.4.363.0";
 	source = remoteGitHub {
 		suffix = "KhronosGroup/glslang";
 		tag = "vulkan-sdk-"+version;
-		checksum = "7Zq12xtSd5z_aEEeYCnsWR5WvcEGVlTsRaV6MqkmY1a3iNIrRbX_rrg-taI3wMe6";
+		checksum = "ATWNapAERPA42c5EKZNnYj37M54wkaOCx5L-QWlZe9EfKVomP-s4FHieiJYg4FQI";
 	};
 
 	// test suite writes to source
@@ -18,6 +18,8 @@ package glslang {
 		cache = {
 			"BUILD_SHARED_LIBS": "ON";
 			"ALLOW_EXTERNAL_SPIRV_TOOLS": "ON";
+
+			"CMAKE_EXE_LINKER_FLAGS": "-Wl,-z,stack-size=1048576";
 		};
 	};
 
diff --git a/internal/rosa/package/gnu.az b/internal/rosa/package/gnu.az
index 2c408206..9b22b42f 100644
--- a/internal/rosa/package/gnu.az
+++ b/internal/rosa/package/gnu.az
@@ -479,10 +479,10 @@ package parallel {
 	website = "https://www.gnu.org/software/parallel";
 	anitya = 5448;
 
-	version# = "20260822";
+	version# = "20260922";
 	source = remoteTar {
 		url = "https://mirrors.kernel.org/gnu/parallel/parallel-"+version+".tar.bz2";
-		checksum = "zf-5ZEpAZ073coMSyOY7NRmXwCRPWvpjbjOMOvirU9fHlU0WWovwss-bAMrh0q_G";
+		checksum = "4M2gBy-esCSvR9ub6SUnoVHz7p3ZDhdeJXm7yv2C4iJQdXyVNkYqgusPFsvH8MCp";
 		compress = bzip2;
 	};
 
diff --git a/internal/rosa/package/go.az b/internal/rosa/package/go.az
index 89d3732d..08ad847e 100644
--- a/internal/rosa/package/go.az
+++ b/internal/rosa/package/go.az
@@ -3,10 +3,10 @@ package go {
 	website = "https://go.dev";
 	anitya = 1227;
 
-	version# = "1.27.1";
+	version# = "1.27.2";
 	source = remoteTar {
 		url = "https://go.dev/dl/go"+version+".src.tar.gz";
-		checksum = "Jw7OCTZbixLPF0E2WafFBh6DnxbsElvEg_RsMGkrzAmi0pyJTI3eQqLJsvXlVtbK";
+		checksum = "Vxj6mhsDZEPq3AX21AA20zWMaVPX3Ezhdbkm1SK8O__BH8jczdeeLFMasQ-PUIww";
 		compress = gzip;
 	};
 
diff --git a/internal/rosa/package/harfbuzz.az b/internal/rosa/package/harfbuzz.az
index 89de6df7..2d62d023 100644
--- a/internal/rosa/package/harfbuzz.az
+++ b/internal/rosa/package/harfbuzz.az
@@ -3,11 +3,11 @@ package harfbuzz {
 	website = "https://harfbuzz.github.io";
 	anitya = 1299;
 
-	version# = "14.5.0";
+	version# = "14.6.0";
 	source = remoteGitHub {
 		suffix = "harfbuzz/harfbuzz";
 		tag = version;
-		checksum = "d5NdKP_w04g9mMLc8bW7s7DqC9uKz3vi5TczEHasJ2Wmm6vV9dvj0thuebR-7vz7";
+		checksum = "raMMlGfzwy1bEIIO8a93-eEj50ksDDWDdLyeQlO8IM04_woqkIPhJ90QvU3lZJ2L";
 	};
 
 	exec = meson {
diff --git a/internal/rosa/package/hwdata.az b/internal/rosa/package/hwdata.az
index 57bde7e8..5f853a0a 100644
--- a/internal/rosa/package/hwdata.az
+++ b/internal/rosa/package/hwdata.az
@@ -3,11 +3,11 @@ package hwdata {
 	website = "https://github.com/vcrhonek/hwdata";
 	anitya = 5387;
 
-	version# = "0.411";
+	version# = "0.412";
 	source = remoteGitHub {
 		suffix = "vcrhonek/hwdata";
 		tag = "v"+version;
-		checksum = "5YWsZC8NgZShWWHmC66xqEkTJLAUYJoDt8kmstJyLWfsNqAWAhJZGkVUfgqbTv-6";
+		checksum = "_HkJ6nni1s_D_CEPUM905AaQkE8v-CorQOv9sB8x0EafeTeOV86b8l-SqL6i7DJL";
 	};
 
 	writable = true;
diff --git a/internal/rosa/package/kernel/amd64.config b/internal/rosa/package/kernel/amd64.config
index 81601250..19c27d56 100644
--- a/internal/rosa/package/kernel/amd64.config
+++ b/internal/rosa/package/kernel/amd64.config
@@ -1,16 +1,16 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 6.18.52 Kernel Configuration
+# Linux/x86 6.18.55 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="clang version 23.1.1"
+CONFIG_CC_VERSION_TEXT="clang version 23.1.3"
 CONFIG_GCC_VERSION=0
 CONFIG_CC_IS_CLANG=y
-CONFIG_CLANG_VERSION=230101
+CONFIG_CLANG_VERSION=230103
 CONFIG_AS_IS_LLVM=y
-CONFIG_AS_VERSION=230101
+CONFIG_AS_VERSION=230103
 CONFIG_LD_VERSION=0
 CONFIG_LD_IS_LLD=y
-CONFIG_LLD_VERSION=230101
+CONFIG_LLD_VERSION=230103
 CONFIG_RUSTC_VERSION=0
 CONFIG_RUSTC_LLVM_VERSION=0
 CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
diff --git a/internal/rosa/package/kernel/arm64.config b/internal/rosa/package/kernel/arm64.config
index 78fc713b..df710520 100644
--- a/internal/rosa/package/kernel/arm64.config
+++ b/internal/rosa/package/kernel/arm64.config
@@ -1,16 +1,16 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 6.18.52 Kernel Configuration
+# Linux/arm64 6.18.55 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="clang version 23.1.1"
+CONFIG_CC_VERSION_TEXT="clang version 23.1.3"
 CONFIG_GCC_VERSION=0
 CONFIG_CC_IS_CLANG=y
-CONFIG_CLANG_VERSION=230101
+CONFIG_CLANG_VERSION=230103
 CONFIG_AS_IS_LLVM=y
-CONFIG_AS_VERSION=230101
+CONFIG_AS_VERSION=230103
 CONFIG_LD_VERSION=0
 CONFIG_LD_IS_LLD=y
-CONFIG_LLD_VERSION=230101
+CONFIG_LLD_VERSION=230103
 CONFIG_RUSTC_VERSION=0
 CONFIG_RUSTC_LLVM_VERSION=0
 CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
diff --git a/internal/rosa/package/kernel/dml-frame_warn_limit.patch b/internal/rosa/package/kernel/dml-frame_warn_limit.patch
deleted file mode 100644
index d3947011..00000000
--- a/internal/rosa/package/kernel/dml-frame_warn_limit.patch
+++ /dev/null
@@ -1,13 +0,0 @@
-diff --git a/drivers/gpu/drm/amd/display/dc/dml/Makefile b/drivers/gpu/drm/amd/display/dc/dml/Makefile
-index 268b5fbdb48b..9f1ef07fdfe5 100644
---- a/drivers/gpu/drm/amd/display/dc/dml/Makefile
-+++ b/drivers/gpu/drm/amd/display/dc/dml/Makefile
-@@ -36,7 +36,7 @@ ifneq ($(CONFIG_FRAME_WARN),0)
-             frame_warn_limit := 3072
-         endif
-     else
--        frame_warn_limit := 2048
-+        frame_warn_limit := 3072
-     endif
- 
-     ifeq ($(call test-lt, $(CONFIG_FRAME_WARN), $(frame_warn_limit)),y)
diff --git a/internal/rosa/package/kernel/package.az b/internal/rosa/package/kernel/package.az
index 5a0ffae6..88e8c45e 100644
--- a/internal/rosa/package/kernel/package.az
+++ b/internal/rosa/package/kernel/package.az
@@ -3,11 +3,11 @@ package kernel-source {
 	website = "https://kernel.org";
 	exclude = true;
 
-	version# = "6.18.52";
+	version# = "6.18.55";
 	output = remoteTar {
 		url = "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/"+
 			"snapshot/linux-"+version+".tar.gz";
-		checksum = "3OysuyxqFKX0FvKqkwH-Y9t0gB0PpE-ErMb2lITWAJtN0OSDqlHTbeifhgn6VgkV";
+		checksum = "EbHX5LD8jjnJLt2sda3auNFTtrudtrnSQvdWbiQ39j4V0wNSBNJoxsekTyL1cik9";
 		compress = gzip;
 	};
 }
@@ -46,8 +46,8 @@ cat \
 	checksum = arch {
 		default = "";
 
-		amd64 = "yLzBQuYIpzbjEglADpiAjDsI5OhsOZejLUG-3w1DlVfmU4LaH44W5KercoxrEuGQ";
-		arm64 = "aah3h8pHdYNrevRBBIkt8DFi6wzRWZe9uxWcrTwEf1l3X-UWxRfnGxCwJdn0VySM";
+		amd64 = "FLFu-sp5bM5XhVVGNSFasmB8ZBKMwbY2E_R4IY3jjb5QIFJEawGrC8SN9Esfh4d3";
+		arm64 = "pwNRcbNPvG9tHFBay3QD6iw3qUvIoAx0uacsjpezgCzdHEmWGjEV6DSK6-UfJnb7";
 		riscv64 = "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA";
 	};
 
@@ -61,7 +61,6 @@ package kernel {
 	anitya = 389470;
 
 	source = kernel-source;
-	patches = [ "dml-frame_warn_limit.patch" ];
 	files = {
 		".config": arch {
 			amd64 = "amd64.config";
diff --git a/internal/rosa/package/kernel/version.h b/internal/rosa/package/kernel/version.h
index e8d4316f..99d5998a 100644
--- a/internal/rosa/package/kernel/version.h
+++ b/internal/rosa/package/kernel/version.h
@@ -1,5 +1,5 @@
-#define LINUX_VERSION_CODE 397876
+#define LINUX_VERSION_CODE 397879
 #define KERNEL_VERSION(a,b,c) (((a) << 16) + ((b) << 8) + ((c) > 255 ? 255 : (c)))
 #define LINUX_VERSION_MAJOR 6
 #define LINUX_VERSION_PATCHLEVEL 18
-#define LINUX_VERSION_SUBLEVEL 52
+#define LINUX_VERSION_SUBLEVEL 55
diff --git a/internal/rosa/package/libbpf.az b/internal/rosa/package/libbpf.az
index 33df95e4..8c21b7e9 100644
--- a/internal/rosa/package/libbpf.az
+++ b/internal/rosa/package/libbpf.az
@@ -3,11 +3,11 @@ package libbpf {
 	website = "https://github.com/libbpf/libbpf";
 	anitya = 141355;
 
-	version# = "1.7.0";
+	version# = "1.8.0";
 	source = remoteGitHub {
 		suffix = "libbpf/libbpf";
 		tag = "v"+version;
-		checksum = "Gsk3TYDTne6behhdiyRB0Y5GTGECRh2265VY7IQ_VB62vIm7U9oqzEW-Va5Tvi_w";
+		checksum = "vpacRQrLgXtttQw0fwv3fcJ-FRHbly38CcLPJyXd2MsKr8gsfp1K6bBVelxZZj52";
 	};
 
 	env = [ "PREFIX=/system" ];
diff --git a/internal/rosa/package/libevdev.az b/internal/rosa/package/libevdev.az
index 85c9b674..cd4cd671 100644
--- a/internal/rosa/package/libevdev.az
+++ b/internal/rosa/package/libevdev.az
@@ -3,12 +3,12 @@ package libevdev {
 	website = "https://www.freedesktop.org/software/libevdev";
 	anitya = 20540;
 
-	version# = "1.13.7";
+	version# = "1.14.0";
 	source = remoteGitLab {
 		domain = "gitlab.freedesktop.org";
 		suffix = "libevdev/libevdev";
 		ref = "libevdev-"+version;
-		checksum = "zmN9kkbYkrwr1YdzeMxlZIuiMkRQ9-mZ9DTcBufMckYWUq2IutSt9ZtRE4Agl75D";
+		checksum = "_ybQw43ruWkQQr1uiIfhOKY5HKBKknipWef7EJUhPnTelwkxurGKN2fvEX7Z8EWy";
 	};
 
 	exec = meson {
diff --git a/internal/rosa/package/libexpat.az b/internal/rosa/package/libexpat.az
index acb8445b..2f6386f5 100644
--- a/internal/rosa/package/libexpat.az
+++ b/internal/rosa/package/libexpat.az
@@ -3,7 +3,7 @@ package libexpat {
 	website = "https://libexpat.github.io";
 	anitya = 770;
 
-	version# = "2.8.4";
+	version# = "2.9.0";
 	source = remoteGitHubRelease {
 		suffix = "libexpat/libexpat";
 		tag = "R_"+replace {
@@ -12,7 +12,7 @@ package libexpat {
 			new = "_";
 		};
 		name = "expat-"+version+".tar.bz2";
-		checksum = "Nbi2wl8U9KHf3LVLczfAb5Kqr7HFv_myReVjxKXUkfhToWfL-pP2o44fDpWHJ4ig";
+		checksum = "dMHFWTPDk1trundt3hRvg6lKbTTcxN-MCRGph2_rfWNA_HYOURLNmlYm9i25c6zZ";
 		compress = bzip2;
 	};
 
diff --git a/internal/rosa/package/libmd.az b/internal/rosa/package/libmd.az
index e618d11e..f8fafd80 100644
--- a/internal/rosa/package/libmd.az
+++ b/internal/rosa/package/libmd.az
@@ -3,11 +3,11 @@ package libmd {
 	website = "https://www.hadrons.org/software/libmd";
 	anitya = 15525;
 
-	version# = "1.2.0";
+	version# = "1.3.0";
 	source = remoteGit {
 		url = "https://git.hadrons.org/git/libmd.git";
 		tag = version;
-		checksum = "1rJ6joAO0wwMZvSfnRNkc1MOhywyAq7SM8VmF92NvDtv7Qdl1LRbjm5fg_DFFtGj";
+		checksum = "CuzJwaavZusUsVcQEAJDsQ2mf9C9BjFhYLemSt0y6K_Gkx0niacVjqV7QpjFjhta";
 	};
 
 	exec = make {
diff --git a/internal/rosa/package/libpng.az b/internal/rosa/package/libpng.az
index 4711cbce..431c38a4 100644
--- a/internal/rosa/package/libpng.az
+++ b/internal/rosa/package/libpng.az
@@ -3,7 +3,7 @@ package libpng {
 	website = "https://www.libpng.org/pub/png/libpng.html";
 	anitya = 1705;
 
-	version# = "1.6.58";
+	version# = "1.6.59";
 	source = remoteTar {
 		url = "https://downloads.sourceforge.net/project/libpng/libpng"+
 			join {
@@ -16,7 +16,7 @@ package libpng {
 					end = 2;
 				};
 			}+"/"+version+"/libpng-"+version+".tar.gz";
-		checksum = "m_a5lROJH7vmF3cMjqwTUqURuQLhV1JQx2ySPzcN3VPdgDB9pG3UINsIx_mtkr-t";
+		checksum = "W-glb0kwxxmfjQepn0bFejBtMZXCiRM0OQ_I-TvyigQr_EmMBEI44WBG-3uCWbIK";
 		compress = gzip;
 	};
 
diff --git a/internal/rosa/package/llvm/package.az b/internal/rosa/package/llvm/package.az
index 73b0ed8e..05a9d937 100644
--- a/internal/rosa/package/llvm/package.az
+++ b/internal/rosa/package/llvm/package.az
@@ -2,11 +2,11 @@ package llvm-project {
 	description = "LLVM monorepo with Rosa OS patches";
 	anitya = 1830;
 
-	version# = "23.1.1";
+	version# = "23.1.3";
 	output = remoteGitHub {
 		suffix = "llvm/llvm-project";
 		tag = "llvmorg-"+version;
-		checksum = "3PRmlMQcmYffm_uj3DxEeDaukPHBS5fpCsWYLHX-9HZXwlgZQG43li2lJLJ33_SN";
+		checksum = "bEWWfej4llsLsQ_wKIv57zcfNNgQD1yihufRDeSDYDlTzyrMTUS8J-ve6Bk2kPrJ";
 	};
 	patches = [
 		"increase-stack-size-unconditional.patch",
diff --git a/internal/rosa/package/lvm2/package.az b/internal/rosa/package/lvm2/package.az
index 3a363b54..cc0ccef3 100644
--- a/internal/rosa/package/lvm2/package.az
+++ b/internal/rosa/package/lvm2/package.az
@@ -3,11 +3,11 @@ package lvm2 {
 	website = "https://sourceware.org/lvm2";
 	anitya = 5354;
 
-	version# = "2.03.42";
+	version# = "2.03.43";
 	source = remoteTar {
 		url = "https://mirrors.kernel.org/sourceware/lvm2/releases/LVM2."+version+".tgz";
 		compress = gzip;
-		checksum = "qzqVAeW9ttt_H5W0Wfg8twvZjFZH7x_RIzSjqYSooMsRpiXQ7yNdOL1MXY5Zntvi";
+		checksum = "W98OpJpTiLc-wO7CHh08UQ8nc-gNEj3kr84IzOv2QDoYfnonVVj-Lt_NZLJi_vi5";
 	};
 	patches = [
 		"fix-stdio-usage.patch",
diff --git a/internal/rosa/package/mesa/package.az b/internal/rosa/package/mesa/package.az
index ec7956fb..725ff230 100644
--- a/internal/rosa/package/mesa/package.az
+++ b/internal/rosa/package/mesa/package.az
@@ -4,12 +4,12 @@ package mesa {
 	anitya = 1970;
 	latest = anityaFallback;
 
-	version# = "26.2.3";
+	version# = "26.2.4";
 	source = remoteGitLab {
 		domain = "gitlab.freedesktop.org";
 		suffix = "mesa/mesa";
 		ref = "mesa-"+version;
-		checksum = "VAGZWGIjAnBqWi7N_Tye3ihtoc66Gu8AlKGtpmQOfwcwQqhZ6Sxk2Y_IH49jWOrJ";
+		checksum = "UFXqHZSkMw_u0hfSRniumlHV6mWUkv3BH2LaybliOvP4UDCgbgPdpq-fe_W3karW";
 	};
 	patches = [ "include.patch" ];
 
diff --git a/internal/rosa/package/meson/package.az b/internal/rosa/package/meson/package.az
index 78fa2035..9b266654 100644
--- a/internal/rosa/package/meson/package.az
+++ b/internal/rosa/package/meson/package.az
@@ -3,11 +3,11 @@ package meson {
 	website = "https://mesonbuild.com";
 	anitya = 6472;
 
-	version# = "1.12.0";
+	version# = "1.12.1";
 	source = remoteGitHub {
 		suffix = "mesonbuild/meson";
 		tag = version;
-		checksum = "K0hm0h26_6e3-1poYZKwj18IB6bdAtYE-whpROtTCSpVN5GllwSwbXC2xPYcSFAJ";
+		checksum = "P7lvRR-dRtSmNF4CZtVWd6uwGPzjkE76MvJL0s3DDw-CFparOmUK1DNEkCt-cuEF";
 	};
 	patches = [
 		"respect-colour.patch",
diff --git a/internal/rosa/package/muon.az b/internal/rosa/package/muon/package.az
index dc183591..3a5be8bd 100644
--- a/internal/rosa/package/muon.az
+++ b/internal/rosa/package/muon/package.az
@@ -3,13 +3,14 @@ package meson-tests {
 	website = "https://github.com/muon-build/meson-tests";
 	exclude = true;
 
-	version# = "0bbaa42e7ba553356fbec038e8b40cf89f90da82";
+	version# = "38483b8cf5eb4f6e9df7a78d786ec111e0d6eb5d";
 	output = remoteTar {
 		url = "https://github.com/muon-build/meson-tests/archive/"+
 			version+".tar.gz";
-		checksum = "W_yNC2Id1aGBXLmBhrQ53UARVBl-nZ2bDZJcmZDaE4GyoZyj6tSURojuTyWgG1U8";
+		checksum = "ikrJiczlObaLUMHRbzzWmGgAyZMymxxC3D9VFozD0sV3e5ckiHXk8qk0Zr8bBWvO";
 		compress = gzip;
 	};
+	patches = [ "remove-broken-tests.patch" ];
 }
 
 package muon {
@@ -17,12 +18,19 @@ package muon {
 	website = "https://muon.build";
 	anitya = 391173;
 
-	version# = "0.6.0";
+	version# = "0.7.0";
 	source = remoteTar {
 		url = "https://git.sr.ht/~lattis/muon/archive/"+version+".tar.gz";
-		checksum = "DiRw1dTaHlL5d3TNK8gykFHI_BAWK7ERooSmVC-kltUkjOubWkN9b-DG21a1ETCe";
+		checksum = "ackLkMhxutd7xvLAVU25qkM5CAztLaYf1dAC2vIvlRIZ8o6LjaNpH-3OyP1xGQTO";
 		compress = gzip;
 	};
+	patches = [
+		// for some reason, muon decides to use clang-cl on Rosa OS
+		"remove-cl.patch",
+
+		// equivalent to the meson patches
+		"respect-colour.patch",
+	];
 	extra = [ meson-tests ];
 
 	writable = true;
@@ -30,7 +38,6 @@ package muon {
 chmod +w subprojects
 cp -r ../extra/meson-tests subprojects
 chmod -R +w subprojects/meson-tests
-sed -i '/common.220 fs module/d' subprojects/meson-tests/meson.build
 `;
 
 	exec = generic {
diff --git a/internal/rosa/package/muon/remove-broken-tests.patch b/internal/rosa/package/muon/remove-broken-tests.patch
new file mode 100644
index 00000000..d4f868be
--- /dev/null
+++ b/internal/rosa/package/muon/remove-broken-tests.patch
@@ -0,0 +1,30 @@
+diff --git a/meson.build b/meson.build
+index ebcd241..30b4c57 100644
+--- a/meson.build
++++ b/meson.build
+@@ -213,7 +213,6 @@ foreach t : [
+     ['common/202 custom target build by default', {'python': true}],
+     ['common/203 find_library and headers'],
+     ['common/204 line continuation'],
+-    ['common/205 native file path override', {'cpp': true}],
+     ['common/206 tap tests'],
+     ['common/207 warning level 0', {'cpp': true}],
+     ['common/208 link custom', {'python': true}],
+@@ -228,9 +227,7 @@ foreach t : [
+     ['common/217 test priorities', {'python': true}],
+     ['common/218 include_dir dot'],
+     ['common/219 include_type dependency', {'cpp': true}],
+-    ['common/220 fs module'],
+     ['common/221 zlib'],
+-    ['common/222 native prop'],
+     ['common/223 persubproject options', {'cpp': true}],
+     ['common/224 arithmetic operators'],
+     ['common/225 link language', {'cpp': true}],
+@@ -336,7 +333,6 @@ foreach t : [
+     ['common/280 pkgconfig override', {'python': true}],
+     ['common/281 pkgconfig-gen'],
+     ['common/282 -D_FORTIFY_SOURCE=2 and -O0'],
+-    ['common/283 subproj options', {'options': {'b_lto': 'true'}}],
+     ['common/284 test args and depends in path'],
+     ['common/285 wrap override'],
+     ['common/286 pkgconfig subproject'],
diff --git a/internal/rosa/package/muon/remove-cl.patch b/internal/rosa/package/muon/remove-cl.patch
new file mode 100644
index 00000000..e421c25d
--- /dev/null
+++ b/internal/rosa/package/muon/remove-cl.patch
@@ -0,0 +1,39 @@
+diff --git a/src/script/runtime/toolchains.meson b/src/script/runtime/toolchains.meson
+index 97682251..bb49b041 100644
+--- a/src/script/runtime/toolchains.meson
++++ b/src/script/runtime/toolchains.meson
+@@ -1059,22 +1059,6 @@ toolchain.register_compiler(
+     },
+ )
+ 
+-toolchain.register_compiler(
+-    'clang-cl',
+-    exe: {'c': 'clang-cl', 'cpp': 'clang-cl'},
+-    inherit: 'msvc',
+-    linker: 'lld-link',
+-    archiver: 'llvm-lib',
+-    detect: func(out str) -> int
+-        return 'CL.EXE COMPATIBILITY' in out ? 100 : 0
+-    endfunc,
+-    handlers: {
+-        'force_language': func(_c compiler, s str) -> list[str]
+-            return ['-x', s]
+-        endfunc,
+-    },
+-)
+-
+ toolchain.register_compiler(
+     'nasm',
+     exe: {'nasm': 'nasm'},
+diff --git a/src/vsenv.c b/src/vsenv.c
+index f55541ec..c92e665a 100644
+--- a/src/vsenv.c
++++ b/src/vsenv.c
+@@ -73,7 +73,6 @@ vsenv_setup(struct workspace *wk, const char *cache_path, enum setup_platform_en
+ 			"cc",
+ 			"gcc",
+ 			"clang",
+-			"clang-cl",
+ 		};
+ 		uint32_t i;
+ 		for (i = 0; i < ARRAY_LEN(comps); ++i) {
diff --git a/internal/rosa/package/muon/respect-colour.patch b/internal/rosa/package/muon/respect-colour.patch
new file mode 100644
index 00000000..a4da13d5
--- /dev/null
+++ b/internal/rosa/package/muon/respect-colour.patch
@@ -0,0 +1,14 @@
+diff --git a/src/log.c b/src/log.c
+index 34f11f19..22fe8f7d 100644
+--- a/src/log.c
++++ b/src/log.c
+@@ -506,6 +506,9 @@ log_set_file(struct workspace *wk, FILE *log_file)
+ 	log_cfg.tstr = 0;
+ 	log_cfg.tstr_wk = 0;
+ 	log_cfg.file_is_a_tty = log_file && fs_is_a_tty(wk, log_file);
++	if (getenv("CLICOLOR_FORCE") != NULL) {
++		log_cfg.file_is_a_tty = true;
++	}
+ }
+ 
+ void
diff --git a/internal/rosa/package/noto.az b/internal/rosa/package/noto.az
index 7481b5e7..6fc8e125 100644
--- a/internal/rosa/package/noto.az
+++ b/internal/rosa/package/noto.az
@@ -3,11 +3,11 @@ package noto {
 	website = "https://fonts.google.com/noto";
 	anitya = 10671;
 
-	version# = "2026.09.01";
+	version# = "2026.10.01";
 	source = remoteGitHub {
 		suffix = "notofonts/notofonts.github.io";
 		tag = "noto-monthly-release-"+version;
-		checksum = "ZITq5IyZNZovca3t7snPndDgjdzbCeBIoGYpY7bbnR-w9oAiz1vkN9zwRWz5JJw5";
+		checksum = "lEKVFkRavG8j1wNdrVFK6s1k8Tlp3ICN30cIX_tuTv5w6uAnAMDIWSoviJ4oiwu8";
 	};
 
 	enterSource = true;
diff --git a/internal/rosa/package/nss.az b/internal/rosa/package/nss.az
index e76be8f2..115e5667 100644
--- a/internal/rosa/package/nss.az
+++ b/internal/rosa/package/nss.az
@@ -3,7 +3,7 @@ package nss-cacert {
 	website = "https://firefox-source-docs.mozilla.org/security/nss/index.html";
 	anitya = 2503;
 
-	version# = "3.129";
+	version# = "3.131";
 	source = remoteGitHub {
 		suffix = "nss-dev/nss";
 		tag = "NSS_"+join {
@@ -14,7 +14,7 @@ package nss-cacert {
 			};
 			sep = "_";
 		}+"_RTM";
-		checksum = "nrmKcrMZ_Bq5FiWBmJWOPrJvP0IB9jfj4zEm1gzufN4hiuHFlNFjJExBpQVk_l8i";
+		checksum = "fQZ1hbSQyeqc2uK1bx4CeYPb3nb1t4M40D3_JXOJ0WO6a0QvMtddn2jQjKmnmCKD";
 	};
 
 	enterSource = true;
diff --git a/internal/rosa/package/openssl.az b/internal/rosa/package/openssl.az
index cb76d0fa..eb2f28fa 100644
--- a/internal/rosa/package/openssl.az
+++ b/internal/rosa/package/openssl.az
@@ -5,14 +5,12 @@ package openssl {
 	// strange malformed tags treated as pre-releases in Anitya
 	latest = anityaFallback;
 
-	block = "python";
-
-	version# = "3.6.2";
+	version# = "4.0.3";
 	source = remoteGitHubRelease {
 		suffix = "openssl/openssl";
 		tag = "openssl-"+version;
 		name = "openssl-"+version+".tar.gz";
-		checksum = "jH004dXTiE01Hp0kyShkWXwrSHEksZi4i_3v47D9H9Uz9LQ1aMwF7mrl2Tb4t_XA";
+		checksum = "qRm2EpUnLqKBgUFimF2uqjHZJaUgK-AWTuX9DVHhnowvCdm09p0wIn3mPRjXjGxj";
 		compress = gzip;
 	};
 
diff --git a/internal/rosa/package/pcre2.az b/internal/rosa/package/pcre2.az
index 85f603a9..1df3fdad 100644
--- a/internal/rosa/package/pcre2.az
+++ b/internal/rosa/package/pcre2.az
@@ -3,12 +3,12 @@ package pcre2 {
 	website = "https://pcre2project.github.io/pcre2";
 	anitya = 5832;
 
-	version# = "10.48";
+	version# = "10.49";
 	source = remoteGitHubRelease {
 		suffix = "PCRE2Project/pcre2";
 		tag = "pcre2-"+version;
 		name = "pcre2-"+version+".tar.bz2";
-		checksum = "3HorftFDryXBh8JLSbEVWpU3OtSF_wUhtNZNCRvCDiGlBsMU150CxrDFKE8lVo6x";
+		checksum = "3vFs-Cz17RWuneRKbt76ZTGgyqxMWDm9gXV9P7eIh4IaTYgyi2XTvdU3dAeJrB7T";
 		compress = bzip2;
 	};
 
diff --git a/internal/rosa/package/pipewire.az b/internal/rosa/package/pipewire.az
index 30d95de2..230755fd 100644
--- a/internal/rosa/package/pipewire.az
+++ b/internal/rosa/package/pipewire.az
@@ -3,12 +3,12 @@ package wireplumber {
 	website = "https://gitlab.freedesktop.org/pipewire/wireplumber";
 	anitya = 235056;
 
-	version# = "0.5.17";
+	version# = "0.5.18";
 	source = remoteGitLab {
 		domain = "gitlab.freedesktop.org";
 		suffix = "pipewire/wireplumber";
 		ref = version;
-		checksum = "2vWxpOqnQmOlgMlNLYMu9ebPbF2y3W_eqDFM_bwAtCwnHhYE0S4kM8MkpFuXyVlu";
+		checksum = "YsKFuMxDJQtwnR0N7h7KA7fNR866k7XhCiSdn3L30Wn1kU7mTV66V8eHHL9dZ5sZ";
 	};
 
 	// OSError: [Errno 30] Read-only file system: '../../usr/src/wireplumber/po/conf.pot'
diff --git a/internal/rosa/package/pkgconf.az b/internal/rosa/package/pkgconf.az
index 1ff20388..d67bb24c 100644
--- a/internal/rosa/package/pkgconf.az
+++ b/internal/rosa/package/pkgconf.az
@@ -3,11 +3,11 @@ package pkgconf {
 	website = "https://github.com/pkgconf/pkgconf";
 	anitya = 12753;
 
-	version# = "3.0.7";
+	version# = "3.0.8";
 	source = remoteGitHub {
 		suffix = "pkgconf/pkgconf";
 		tag = "pkgconf-"+version;
-		checksum = "_IpcXySlbiPfFIS95oAg9C65_wV3BAoLD_QVP2OHx4MNTgdndsgT_WjtJkCbhlEd";
+		checksum = "SLAJ4RNkvGTpVzlt8KZNaESsFMrZLYqWfkROmIYdrz4XgPC4ZJSYwtzEDKIT5tGm";
 	};
 
 	exec = meson {
diff --git a/internal/rosa/package/python/package.az b/internal/rosa/package/python/package.az
index dfcb6940..35b36e5e 100644
--- a/internal/rosa/package/python/package.az
+++ b/internal/rosa/package/python/package.az
@@ -6,11 +6,11 @@ package python {
 	// too many inputs; early variant available
 	bootstrap = false;
 
-	version# = "3.14.7";
+	version# = "3.15.0";
 	source = remoteTar {
 		url = "https://www.python.org/ftp/python/"+version+
 			"/Python-"+version+".tgz";
-		checksum = "hXLV7_BGEFZvQ04DNIlk5IdoRZd9DkQt4abKhc8rWsLXHTeSboAWTewJ6l0-LxVz";
+		checksum = "SHy8bsXI1zLONLJHIK6gEJUiPjdUcRLzI9PjQnUfXOdL6Jcy0RQFEOyhMkp9vonP";
 		compress = gzip;
 	};
 	patches = [ "zipfile-no-default-strict_timestamps.patch" ];
@@ -167,6 +167,7 @@ package python-wheel {
 		tag = version;
 		checksum = "h-UZQHS-NwB3b9YxYpJePR5cbDGZaKxz4bdhYjilWdQXAE46SV7A1CwZKzZcuZFh";
 	};
+	patches = [ "wheel-test-colour.patch" ];
 
 	exec = pip {
 		install = true;
@@ -312,11 +313,11 @@ package python-trove-classifiers {
 	website = "https://pypi.org/p/trove-classifiers";
 	anitya = 88298;
 
-	version# = "2026.6.1.19";
+	version# = "2026.9.21.13";
 	source = remoteGitHub {
 		suffix = "pypa/trove-classifiers";
 		tag = version;
-		checksum = "zdDI6XTfzuFnlhdhilnhplItbLhZ9f2_vSHZP8u5Zvhu5_rhTB73SFEzxT5gb1bO";
+		checksum = "SUj49aPO71eUQFxBE-G_BuJezwEUfeYCv9RbWFFsyTGmfbLGsZelEvqXGHErX-sZ";
 	};
 
 	exec = pip {
@@ -446,11 +447,11 @@ package python-iniconfig {
 	website = "https://github.com/pytest-dev/iniconfig";
 	anitya = 114778;
 
-	version# = "2.3.0";
+	version# = "2.3.1";
 	source = remoteGitHub {
 		suffix = "pytest-dev/iniconfig";
 		tag = "v"+version;
-		checksum = "mH7VBZaXcYatBPE3RQQZvSzz_Ay8IPPek60NpPHZulPq4ReAFUUsA4EPWfiyMknZ";
+		checksum = "_kAzeTxeje5L7WYtFwMGOx-Qv2pfErrBvoajcz1JovWaeIQ72w94yD5oidld2OxN";
 	};
 
 	env = [
@@ -501,11 +502,11 @@ package python-markupsafe {
 	website = "https://markupsafe.palletsprojects.com";
 	anitya = 3918;
 
-	version# = "3.0.3";
+	version# = "3.0.4";
 	source = remoteGitHub {
 		suffix = "pallets/markupsafe";
 		tag = version;
-		checksum = "txRGYdWE3his1lHHRI-lZADw0-ILvUg2l5OGdFHtFXIb_QowGxwdxHCUSJIgmjQs";
+		checksum = "V0lPnpENthlPMRq08uHN03BAeqHeZfi_tKgn9oUGGKrz9yMfcgeoUmhP3JT1uhlB";
 	};
 
 	exec = pip {
@@ -521,7 +522,7 @@ package python-mako {
 	website = "https://www.makotemplates.org";
 	anitya = 3915;
 
-	version# = "1.4.1";
+	version# = "1.4.3";
 	source = remoteGitHub {
 		suffix = "sqlalchemy/mako";
 		tag = "rel_"+join {
@@ -532,7 +533,7 @@ package python-mako {
 			};
 			sep = "_";
 		};
-		checksum = "OYVVx9PxvZLSvA1C-lX-xElq5TvThYRElzDDKUHYU1tZMM7XlCtHSMGmdgqlbYxd";
+		checksum = "-7wYBvuaMaRtWEPlPbIyfrrVSJWsuNnVr1rCwaXnwNNvyap3R9kL282cLYidO_LX";
 	};
 
 	early = "rm test/test_exceptions.py";
@@ -570,11 +571,11 @@ package python-pycparser {
 	website = "https://github.com/eliben/pycparser";
 	anitya = 8175;
 
-	version# = "3.00";
+	version# = "3.11";
 	source = remoteGitHub {
 		suffix = "eliben/pycparser";
 		tag = "release_v"+version;
-		checksum = "4qfCMFKp0fLsRsloOAF780tXX_Ce_68RwinCmjNGObAX32WpF_iBafIKW1S1bYlA";
+		checksum = "MjkTN3iAR3UglDqTHUjGozSowe7i0QJWBmaRYygYCH1TYlfFYyCaLx1LKG-Zf5_l";
 	};
 
 	// test case hard codes gcc
diff --git a/internal/rosa/package/python/wheel-test-colour.patch b/internal/rosa/package/python/wheel-test-colour.patch
new file mode 100644
index 00000000..db399fdc
--- /dev/null
+++ b/internal/rosa/package/python/wheel-test-colour.patch
@@ -0,0 +1,21 @@
+diff --git a/tests/commands/util.py b/tests/commands/util.py
+index 5d139d9..d18d103 100644
+--- a/tests/commands/util.py
++++ b/tests/commands/util.py
+@@ -2,7 +2,7 @@ from __future__ import annotations
+ 
+ import sys
+ from io import StringIO
+-from os import PathLike
++from os import PathLike, environ
+ from subprocess import CalledProcessError
+ from unittest.mock import patch
+ 
+@@ -10,6 +10,7 @@ import pytest
+ 
+ from wheel._commands import main
+ 
++environ["NO_COLOR"] = "1"
+ 
+ def run_command(
+     command: str, *args: str | PathLike, catch_systemexit: bool = True
diff --git a/internal/rosa/package/qemu/package.az b/internal/rosa/package/qemu/package.az
index 3e7b8fcf..7252c4d8 100644
--- a/internal/rosa/package/qemu/package.az
+++ b/internal/rosa/package/qemu/package.az
@@ -3,10 +3,10 @@ package qemu {
 	website = "https://www.qemu.org";
 	anitya = 13607;
 
-	version# = "11.1.1";
+	version# = "11.1.2";
 	source = remoteTar {
 		url = "https://download.qemu.org/qemu-"+version+".tar.bz2";
-		checksum = "zvoYXpZGfnaD1bo2fD44_GfViIVCCH1iSH0xjy9VAB7Ta1X5AzBtnMnbalc_WEmm";
+		checksum = "PA9KeH0ifsIUJDTEq0_zLiysF9nlQXUTQsEx7cRzJiC1P4-u-AKCD-uanbyVASMJ";
 		compress = bzip2;
 	};
 	patches = [
diff --git a/internal/rosa/package/spirv.az b/internal/rosa/package/spirv.az
index 79ac5a8d..8cfb33f7 100644
--- a/internal/rosa/package/spirv.az
+++ b/internal/rosa/package/spirv.az
@@ -5,11 +5,11 @@ package spirv-headers {
 	// upstream changed version scheme, anitya incapable of filtering them
 	latest = anityaFilterSPIRV;
 
-	version# = "1.4.357.0";
+	version# = "1.4.363.0";
 	source = remoteGitHub {
 		suffix = "KhronosGroup/SPIRV-Headers";
 		tag = "vulkan-sdk-"+version;
-		checksum = "KKhVra3IQ4DcciWO7J7Vphhyw-Lb9lD1ZCjcg1AIIwsY04j1DeSIrXiVfCF67juc";
+		checksum = "cngyFYwADy0Hbe96bJTunvGJh3Xj_Oa3dEfUkKpVxrBLBnpNQY_umcGMbUccP7MC";
 	};
 
 	exec = cmake {
@@ -23,11 +23,11 @@ package spirv-tools {
 	website = "https://github.com/KhronosGroup/SPIRV-Tools";
 	anitya = 334920;
 
-	version# = "1.4.357.0";
+	version# = "1.4.363.0";
 	source = remoteGitHub {
 		suffix = "KhronosGroup/SPIRV-Tools";
 		tag = "vulkan-sdk-"+version;
-		checksum = "yCZ92UX21pRFjVoySWiKAUermsE3A69dkeqf_8OPVn_1MxbaP5EAcKnHf27W8eYG";
+		checksum = "YxfqYZtOIGgy_SuO6xadbGIUomunSxSVkShFx3qYj-_A4sGyfmbtFtqt6qYVYDeL";
 	};
 
 	exec = cmake {
@@ -45,11 +45,11 @@ package spirv-llvm-translator {
 	website = "https://github.com/KhronosGroup/SPIRV-LLVM-Translator";
 	anitya = 227273;
 
-	version# = "23.1.1";
+	version# = "23.1.2";
 	source = remoteGitHub {
 		suffix = "KhronosGroup/SPIRV-LLVM-Translator";
 		tag = "v"+version;
-		checksum = "8Sr087sQcaGw1yOodbRQAOv5bBj_QpxbOWGN75xxKqhRcuAUvdPZ9a009nlXZRwK";
+		checksum = "6t7WCbw6xTVHF70ktDFCttrN9IO0UD4SdBiDQHtQShU7-laowtiRmXhVtRaQIhdC";
 	};
 
 	// litArgs emits shell syntax
diff --git a/internal/rosa/package/tamago.az b/internal/rosa/package/tamago.az
index d784c85a..c4393b13 100644
--- a/internal/rosa/package/tamago.az
+++ b/internal/rosa/package/tamago.az
@@ -3,11 +3,11 @@ package tamago {
 	website = "https://github.com/usbarmory/tamago-go";
 	anitya = 388872;
 
-	version# = "1.27.1";
+	version# = "1.27.2";
 	source = remoteGitHub {
 		suffix = "usbarmory/tamago-go";
 		tag = "tamago-go"+version;
-		checksum = "TaWPzqqBMuhGslUm9CQvShJRjfONbFEr51mcM5zFlopYhYA6Tb58g8wRPc5a5lQ0";
+		checksum = "z-4tuciBpbu4cR4hwkRemUcxWUgfLpfc8shIFDjUAdthxWMv9FYkwCfTta0Ho_4-";
 	};
 
 	env = [
diff --git a/internal/rosa/package/toybox.az b/internal/rosa/package/toybox.az
index bd3dc966..b90e08d2 100644
--- a/internal/rosa/package/toybox.az
+++ b/internal/rosa/package/toybox.az
@@ -2,10 +2,10 @@ package toybox-source {
 	description = "toybox source tree";
 	exclude = true;
 
-	version# = "0.8.14";
+	version# = "0.8.15";
 	output = remoteTar {
 		url = "https://landley.net/toybox/downloads/toybox-"+version+".tar.gz";
-		checksum = "RZQp2CTsLt_y15vsZxwqUb2O1XfK7uvwn-2sTd38O4HAsFKPQpS1UP0brYJ3dRA-";
+		checksum = "-0KgQ7Ogk5Nt6LLTn08b_xPFZXi4aqoBzw7XPnUwP3r2AZcfPOV10rMB0qAEzXcI";
 		compress = gzip;
 	};
 }
diff --git a/internal/rosa/package/utf8proc.az b/internal/rosa/package/utf8proc.az
index 68e904ec..a881c493 100644
--- a/internal/rosa/package/utf8proc.az
+++ b/internal/rosa/package/utf8proc.az
@@ -3,11 +3,11 @@ package utf8proc {
 	website = "https://juliastrings.github.io/utf8proc";
 	anitya = 7455;
 
-	version# = "2.11.3";
+	version# = "2.12.0";
 	source = remoteGitHub {
 		suffix = "JuliaStrings/utf8proc";
 		tag = "v"+version;
-		checksum = "LlmejkymQEhaMciSE17JSl3pAYdf6DdXNr0ucwclClsMCeq7l1dcgIJl1JmNTQVq";
+		checksum = "kfzU-vVmmCzyYO9CO-PGiX5Oq63f6o_Zv0G3jO4gxoyCP2qZap20Hh7qAUDMeTKo";
 	};
 
 	exec = cmake {
diff --git a/internal/rosa/package/util-linux/package.az b/internal/rosa/package/util-linux.az
index 1317e50f..8beff173 100644
--- a/internal/rosa/package/util-linux/package.az
+++ b/internal/rosa/package/util-linux.az
@@ -5,7 +5,7 @@ package util-linux {
 	// release candidates confuse Anitya
 	latest = anityaFallback;
 
-	version# = "2.42.3";
+	version# = "2.42.4";
 	source = remoteTar {
 		url = "https://www.kernel.org/pub/linux/utils/util-linux/"+
 			"v"+join {
@@ -19,10 +19,9 @@ package util-linux {
 				};
 				sep = ".";
 			}+"/util-linux-"+version+".tar.gz";
-		checksum = "VQ3NCM4kt0-TTrdJElBfckXNCGBv6UfXGTRm1poQ0XP0WBND4eG-O7n5Ly_a-Iw_";
+		checksum = "tDzZiC8DCtH3f-QA9uI2EUKMQ4m5nPZfxVMuOsPBB2dHQS9gJ2HqVTJzRbq7p7VC";
 		compress = gzip;
 	};
-	patches = [ "a323dddbcd1ed05a10e7e870b3e1a48b4ed44a43.patch" ];
 
 	bin = [ "bash" ];
 	exec = make {
diff --git a/internal/rosa/package/util-linux/a323dddbcd1ed05a10e7e870b3e1a48b4ed44a43.patch b/internal/rosa/package/util-linux/a323dddbcd1ed05a10e7e870b3e1a48b4ed44a43.patch
deleted file mode 100644
index 36d6f968..00000000
--- a/internal/rosa/package/util-linux/a323dddbcd1ed05a10e7e870b3e1a48b4ed44a43.patch
+++ /dev/null
@@ -1,35 +0,0 @@
-From a323dddbcd1ed05a10e7e870b3e1a48b4ed44a43 Mon Sep 17 00:00:00 2001
-From: Karel Zak <kzak@redhat.com>
-Date: Wed, 2 Sep 2026 13:32:27 +0200
-Subject: [PATCH] libmount: add missing fileutils.h include to hook_idmap.c
-
-The hook_idmap.c uses RESOLVE_NO_SYMLINKS (added by commit fb8e26535)
-but does not include fileutils.h, which provides the fallback #define
-for this constant.
-
-On Fedora (glibc 2.40+), this is masked because glibc's
-<bits/fcntl-linux.h> transitively includes <linux/openat2.h>, which
-defines RESOLVE_NO_SYMLINKS. On Ubuntu (and other distros with older
-glibc), <fcntl.h> does not pull in openat2.h, so the build fails:
-
-  hook_idmap.c:335:33: error: 'RESOLVE_NO_SYMLINKS' undeclared
-
-Fixes: fb8e26535 ("libmount: pin source path with openat2() for restricted users")
-Signed-off-by: Karel Zak <kzak@redhat.com>
-(cherry picked from commit 7e2e010874b10b3aabdc3c4c844c9ffc46a4a374)
----
- libmount/src/hook_idmap.c | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/libmount/src/hook_idmap.c b/libmount/src/hook_idmap.c
-index 77494e29810..2c697b17154 100644
---- a/libmount/src/hook_idmap.c
-+++ b/libmount/src/hook_idmap.c
-@@ -23,6 +23,7 @@
- 
- #include "strutils.h"
- #include "all-io.h"
-+#include "fileutils.h"
- #include "namespace.h"
- 
- #include "mountP.h"
diff --git a/internal/rosa/package/x.az b/internal/rosa/package/x.az
index 94c48ac8..68cbe0e4 100644
--- a/internal/rosa/package/x.az
+++ b/internal/rosa/package/x.az
@@ -48,12 +48,12 @@ package xorgproto {
 	website = "https://gitlab.freedesktop.org/xorg/proto/xorgproto";
 	anitya = 17190;
 
-	version# = "2025.1";
+	version# = "2026.1";
 	source = remoteGitLab {
 		domain = "gitlab.freedesktop.org";
 		suffix = "xorg/proto/xorgproto";
 		ref = "xorgproto-"+version;
-		checksum = "pTwJiBJHKA6Rgm3cVDXy1lyvXNIUzTRaukvvYdk1xWoJ_1G-Dfjm9MyewuyIjoHz";
+		checksum = "-inAZyzcTjFH1wfc2Zw_mdfx9K1YG0ieQ8kF5u3ZS1QykAavZ0T238EjljRzEYZ-";
 	};
 
 	exec = make {
@@ -676,12 +676,12 @@ package xserver {
 	website = "https://gitlab.freedesktop.org/xorg/xserver";
 	anitya = 5250;
 
-	version# = "26.0.99.902";
+	version# = "26.0.99.903";
 	source = remoteGitLab {
 		domain = "gitlab.freedesktop.org";
 		suffix = "xorg/xserver";
 		ref = "xorg-server-"+version;
-		checksum = "lg1TlhQHnQowDeYzJQVoMHZsUSfTLbZVGwMi8afUHCVlVTbCuRRXLtQWoZjkt4QT";
+		checksum = "YVT4TT4pI-N8cEPLty3MuJsy6w7K-EqrIJ9jp8c6AzV4PjN8ZYr6HdeHO5MnTsjF";
 	};
 
 	exec = meson {
@@ -753,12 +753,12 @@ package xwayland {
 	website = "https://gitlab.freedesktop.org/xorg/xserver";
 	anitya = 180949;
 
-	version# = "26.0.99.902";
+	version# = "26.0.99.903";
 	source = remoteGitLab {
 		domain = "gitlab.freedesktop.org";
 		suffix = "xorg/xserver";
 		ref = "xwayland-"+version;
-		checksum = "D60hCizAFqVKBH49_FbHRigeEgzoOUXRgvEncuE6kzdoIUr5iC8RIBncVuTFgY0D";
+		checksum = "TGto_v7iLObFrQ6tsS9OHR2sJlpeYp1akqiwVnn51dZ73kF_sbWZ8Zm0HiGwIfPV";
 	};
 
 	bin = [ "bash" ];