From 5532c725103067bb2a5592f386a2e14a95d1f39d Mon Sep 17 00:00:00 2001
From: "gominimal-pkgmgr-mgr[bot]"
 <285843623+gominimal-pkgmgr-mgr[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 21:14:02 +0000
Subject: [PATCH 1/9] Update pnpm to 11.18.0

---
 packages/pnpm/build.ncl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/pnpm/build.ncl b/packages/pnpm/build.ncl
index ae691611..e39e460f 100644
--- a/packages/pnpm/build.ncl
+++ b/packages/pnpm/build.ncl
@@ -5,14 +5,14 @@ let tar = import "../tar/build.ncl" in
 
 let node-lts = import "../node-lts/build.ncl" in
 
-let version = "11.17.0" in
+let version = "11.18.0" in
 {
   name = "pnpm",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "https://registry.npmjs.org/pnpm/-/pnpm-%{version}.tgz",
-      sha256 = "644eb5079654e87dae59a07e62d7f098162b9ce58f06077328b5ddefca1c8541"
+      sha256 = "29c35ca8d2a287988fdee3e0f36e07d9b93783f567b579b7fd5b798a4563dd81"
     } | Source,
     base,
     tar,

From 4261365fcbe6a19d088dc70ead403b8e656b06b4 Mon Sep 17 00:00:00 2001
From: "gominimal-pkgmgr-mgr[bot]"
 <285843623+gominimal-pkgmgr-mgr[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 21:14:02 +0000
Subject: [PATCH 2/9] Update uv to 0.12.0

---
 packages/uv/build.ncl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/uv/build.ncl b/packages/uv/build.ncl
index 62889e9e..e71671bd 100644
--- a/packages/uv/build.ncl
+++ b/packages/uv/build.ncl
@@ -6,14 +6,14 @@ let make = import "../make/build.ncl" in
 let rust = import "../rust/build.ncl" in
 let toolchain = import "../toolchain/build.ncl" in
 
-let version = "0.11.32" in
+let version = "0.12.0" in
 {
   name = "uv",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/uv-%{version}.tar.gz",
-      sha256 = "62799114a5914728b0de55e65ae856e599fe3103eef9997b479cfc7acdd6ae67"
+      sha256 = "17c768f651d4e09e83a25b781a74924694838f222a1f3676c4450073161c859a"
     } | Source,
     base,
     make,

From 21028ad115683ab3e763a4af2051dd63d5c16bd3 Mon Sep 17 00:00:00 2001
From: "gominimal-pkgmgr-mgr[bot]"
 <285843623+gominimal-pkgmgr-mgr[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 21:14:02 +0000
Subject: [PATCH 3/9] Update lean to 4.32.2

---
 packages/lean/build.ncl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/lean/build.ncl b/packages/lean/build.ncl
index c17d8b29..2958c13c 100644
--- a/packages/lean/build.ncl
+++ b/packages/lean/build.ncl
@@ -10,14 +10,14 @@ let git = import "../git/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
 let gcc = import "../gcc/build.ncl" in
 
-let version = "4.32.0" in
+let version = "4.32.2" in
 {
   name = "lean",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "https://github.com/leanprover/lean4/archive/refs/tags/v%{version}.tar.gz",
-      sha256 = "f39c6d87a9b4e9253bef15ffae460d2652b668e619688e4c01e59bbd2cd3b002",
+      sha256 = "289d38b3055d42b243e9f57a1b6abafaf020c168cff3bb59fd8901dbdcc90c32",
     } | Source,
     base,
     toolchain,

From 52349a4807672ff61f33973d52fc7a23cdfb88ff Mon Sep 17 00:00:00 2001
From: "gominimal-pkgmgr-mgr[bot]"
 <285843623+gominimal-pkgmgr-mgr[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 21:14:02 +0000
Subject: [PATCH 4/9] Update pasta to 2026_07_28.f8df3f1

---
 packages/pasta/build.ncl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/pasta/build.ncl b/packages/pasta/build.ncl
index 78171520..74b9b1dd 100644
--- a/packages/pasta/build.ncl
+++ b/packages/pasta/build.ncl
@@ -4,14 +4,14 @@ let make = import "../make/build.ncl" in
 let toolchain = import "../toolchain/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
 
-let version = "2026_07_16.090d739" in
+let version = "2026_07_28.f8df3f1" in
 {
   name = "pasta",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "https://passt.top/passt/snapshot/passt-%{version}.tar.gz",
-      sha256 = "503e1f91cb52a8c0d04e6671a66063475b8a2d5d0b7fd428aad48ad6ef0443ee",
+      sha256 = "2b3effb3dcd1f6b1b46da3a2419c037508d24bc39f90513bbbb660e8eb6520e5",
       extract = true,
       strip_prefix = "passt-%{version}",
     } | Source,

From c124405f50b24704ccc59402d61450a6d7521bb3 Mon Sep 17 00:00:00 2001
From: "gominimal-pkgmgr-mgr[bot]"
 <285843623+gominimal-pkgmgr-mgr[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 21:14:02 +0000
Subject: [PATCH 5/9] Update pulumi to 3.255.0

---
 packages/pulumi/build.ncl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/pulumi/build.ncl b/packages/pulumi/build.ncl
index eef272b0..98a6d800 100644
--- a/packages/pulumi/build.ncl
+++ b/packages/pulumi/build.ncl
@@ -4,14 +4,14 @@ let go = import "../go/build.ncl" in
 let toolchain = import "../toolchain/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
 
-let version = "3.254.0" in
+let version = "3.255.0" in
 {
   name = "pulumi",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/pulumi/pulumi/v%{version}.tar.gz",
-      sha256 = "dfec607f9030b48a405ba847820a786ebbef615526ca646e27d44b33be2757df",
+      sha256 = "c0ed8c10910d73d484547ab5146b12de3f607d84b63414f7d51bed1017497a8b",
       extract = true,
       strip_prefix = "pulumi-%{version}",
     } | Source,

From 12840f59743635827721de65d77a7b6daee754c5 Mon Sep 17 00:00:00 2001
From: "gominimal-pkgmgr-mgr[bot]"
 <285843623+gominimal-pkgmgr-mgr[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 21:14:02 +0000
Subject: [PATCH 6/9] Update redis to 8.10.0

---
 packages/redis/build.ncl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/redis/build.ncl b/packages/redis/build.ncl
index a67343bd..5063c931 100644
--- a/packages/redis/build.ncl
+++ b/packages/redis/build.ncl
@@ -10,14 +10,14 @@ let linux_headers = import "../linux_headers/build.ncl" in
 
 let glibc = import "../glibc/build.ncl" in
 
-let version = "8.8.1" in
+let version = "8.10.0" in
 {
   name = "redis",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/redis/redis/%{version}.tar.gz",
-      sha256 = "56008a7e9c87ed4ec5ce13032ff8a685ffff944276c2a993024ce805df8338e2",
+      sha256 = "b928cf47427b94bb0c6866c32df834bc8e5efc815b9ad2e2d24bf33f2c533e2a",
       extract = true,
       strip_prefix = "redis-%{version}",
     } | Source,

From a71a08f2ece7dc766767b7848059e786265d31c3 Mon Sep 17 00:00:00 2001
From: "gominimal-pkgmgr-mgr[bot]"
 <285843623+gominimal-pkgmgr-mgr[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 21:14:02 +0000
Subject: [PATCH 7/9] Update shadow to 4.20.0

---
 packages/shadow/build.ncl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/shadow/build.ncl b/packages/shadow/build.ncl
index 59cdc665..ab4449bd 100644
--- a/packages/shadow/build.ncl
+++ b/packages/shadow/build.ncl
@@ -7,14 +7,14 @@ let libxcrypt = import "../libxcrypt/build.ncl" in
 let pkgconf = import "../pkgconf/build.ncl" in
 let toolchain = import "../toolchain/build.ncl" in
 
-let version = "4.19.4" in
+let version = "4.20.0" in
 {
   name = "shadow",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/shadow-%{version}.tar.xz",
-      sha256 = "ce57a313e315a0a7cb04a8f50cc20753e994e487bbe9b78a2a824ca75cb486c0",
+      sha256 = "239781632846db3b01901028147fb4b57e6f2d5330ca63ce104b21d9b3e6031f",
     } | Source,
     base,
     make,

From 5e40d4d1722aa66df30acb2e390b5f8229fd708e Mon Sep 17 00:00:00 2001
From: "gominimal-pkgmgr-mgr[bot]"
 <285843623+gominimal-pkgmgr-mgr[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 21:14:02 +0000
Subject: [PATCH 8/9] Update syft to 1.50.0

---
 packages/syft/build.ncl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/syft/build.ncl b/packages/syft/build.ncl
index b75b6bbd..4eafab1d 100644
--- a/packages/syft/build.ncl
+++ b/packages/syft/build.ncl
@@ -4,14 +4,14 @@ let go = import "../go/build.ncl" in
 let toolchain = import "../toolchain/build.ncl" in
 let glibc = import "../glibc/build.ncl" in
 
-let version = "1.49.0" in
+let version = "1.50.0" in
 {
   name = "syft",
   build_deps = [
     { file = "build.sh" } | Local,
     {
       url = "gs://minimal-staging-archives/anchore/syft/v%{version}.tar.gz",
-      sha256 = "7fa1d225a50be61a17c86a0d523412d60b3d8678a1864839217769d3472a8700",
+      sha256 = "83a6c11669094a6514a620976f22d0a4006509b4e2925f53e43e7bf506f0a3ac",
       extract = true,
       strip_prefix = "syft-%{version}",
     } | Source,

From 618a9f39bac309de333cb447f6474e7a5c17385f Mon Sep 17 00:00:00 2001
From: bryan <bryan@minimal.dev>
Date: Thu, 30 Jul 2026 14:50:05 -0700
Subject: [PATCH 9/9] shadow: fix 4.20.0 build under gcc 15 (-include stdint.h
 -D_GNU_SOURCE)

shadow 4.20.0's new code trips gcc 15's stricter defaults (implicit
declarations are hard errors): find_new_sub_{uid,gid}s.c use uintmax_t
without <stdint.h>, and chkname.c uses strdupa without _GNU_SOURCE.
Fixed via CFLAGS rather than per-file patches. Verified with a cold
local build of shadow 4.20.0.

Co-Authored-By: Claude Opus <noreply@anthropic.com>
---
 packages/shadow/build.sh | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/packages/shadow/build.sh b/packages/shadow/build.sh
index 0866230d..edd8f73a 100755
--- a/packages/shadow/build.sh
+++ b/packages/shadow/build.sh
@@ -22,7 +22,15 @@ case $(uname -m) in
   aarch64) MARCH="-march=armv8-a" ;;
   *)       MARCH="" ;;
 esac
-export CFLAGS="$MARCH -O2 -pipe -gno-record-gcc-switches -ffile-prefix-map=$(pwd)=/builddir"
+# shadow 4.20.0 doesn't build clean under gcc 15's stricter defaults (implicit
+# declarations are now hard errors):
+#   - find_new_sub_{uid,gid}s.c use uintmax_t without <stdint.h> -> force-include it.
+#   - chkname.c uses the GNU extension strdupa without _GNU_SOURCE in effect
+#     -> define it globally so string.h declares it (a missing declaration would
+#     otherwise be silently miscompiled as int-returning).
+# Applied via flags rather than per-file patches: version-agnostic and covers
+# any sibling TUs with the same latent omissions.
+export CFLAGS="$MARCH -O2 -pipe -gno-record-gcc-switches -ffile-prefix-map=$(pwd)=/builddir -include stdint.h -D_GNU_SOURCE"
 export LDFLAGS="-Wl,--build-id=none"
 export CXXFLAGS="${CFLAGS}"