diff --git a/gnu/packages/bioinformatics.scm b/gnu/packages/bioinformatics.scm
index 6ef2baee798..16f6941946d 100644
--- a/gnu/packages/bioinformatics.scm
+++ b/gnu/packages/bioinformatics.scm
@@ -7310,7 +7310,9 @@ trees (phylogenies) and characters.")
         (base32
          "0w1p4l1jwg9kkifm0jsg33a212ps0jn61islmnng2afp77y5nkr6"))))
     (build-system pyproject-build-system)
-    (native-inputs (list python-setuptools python-setuptools-scm python-wheel))
+    (arguments
+     (list #:test-flags #~(list "py2bitTest/test.py")))
+    (native-inputs (list python-pytest python-setuptools python-setuptools-scm))
     (home-page "https://github.com/dpryan79/py2bit")
     (synopsis "Access 2bit files using lib2bit")
     (description
@@ -20729,7 +20731,7 @@ efficiently.")
 (define-public python-hic2cool
   (package
     (name "python-hic2cool")
-    (version "0.8.3")
+    (version "1.0.1")
     ;; pypi sources do not contain the test_data directory and no test can be
     ;; run
     (source
@@ -20741,32 +20743,15 @@ efficiently.")
        (file-name (git-file-name name version))
        (sha256
         (base32
-         "0dlnf0qfcp4jrc1nyya32a035c13xicyq16bwfnwhbb9s47mz7gl"))))
-    (build-system python-build-system)
-    (arguments
-     `(#:phases
-       (modify-phases %standard-phases
-         ;; Two of the test-data files need to be writable.
-         (add-after 'unpack 'make-test-data-writable
-           (lambda _
-             (for-each make-file-writable
-                       (list "test_data/hic2cool_0.4.2_single_res.cool"
-                             "test_data/hic2cool_0.7.0_multi_res.mcool"))))
-         ;; See https://github.com/4dn-dcic/hic2cool/issues/58
-         (add-after 'unpack 'fix-incompatibility-with-h5py-3
-           (lambda _
-             (substitute* "test.py"
-               (("h5py.File\\(fname\\)") "h5py.File(fname, 'r')"))
-             (substitute* "hic2cool/hic2cool_updates.py"
-               (("h5py.File\\(writefile\\)")
-                "h5py.File(writefile, 'a')"))))
-         ;; These two tests fail for unknown reasons.
-         (add-after 'unpack 'disable-broken-tests
-           (lambda _
-             (substitute* "test.py"
-               (("def test_convert") "def _test_convert")))))))
+         "0k0i43z43rxbpna4hfci406ma906w893frfj3cha1n8drvhdql6c"))))
+    (build-system pyproject-build-system)
+    (native-inputs
+     (list python-poetry-core))
     (propagated-inputs
-     (list python-cooler python-h5py python-numpy python-pandas
+     (list python-cooler
+           python-h5py
+           python-numpy
+           python-pandas
            python-scipy))
     (home-page "https://github.com/4dn-dcic/hic2cool")
     (synopsis "Converter for .hic and .cool files")
diff --git a/gnu/packages/golang-build.scm b/gnu/packages/golang-build.scm
index cc12a5dbd7a..445059447d8 100644
--- a/gnu/packages/golang-build.scm
+++ b/gnu/packages/golang-build.scm
@@ -60,6 +60,75 @@
 ;;;
 ;;; Code:
 
+(define-public go-cel-dev-expr
+  (package
+    (name "go-cel-dev-expr")
+    (version "0.24.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/google/cel-spec")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0fzy5njwzg48h1mqbfhczyq6hxmbq3yzdivkjh1x8ipj19v4hvfl"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "cel.dev/expr"))
+    (propagated-inputs
+     (list go-google-golang-org-genproto-googleapis-rpc
+           go-google-golang-org-protobuf))
+    (home-page "https://cel.dev/")
+    (synopsis "Common Expression Language")
+    (description
+     "The Common Expression Language (CEL) implements common semantics for
+expression evaluation, enabling different applications to more easily
+interoperate.")
+    (license license:asl2.0)))
+
+(define-public go-github-com-ebitengine-purego
+  (package
+    (name "go-github-com-ebitengine-purego")
+    (version "0.8.4")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/ebitengine/purego")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0sy5cn56wxwv1qpl6vg5160hlk004m5wdlf18rfnj63573f5kivh"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/ebitengine/purego"
+      ;; TODO: This failed test should be proper checked.
+      ;; ld:
+      ;; /tmp/guix-build-go-github-com-ebitengine-purego-0.8.4.drv-0/ccguQKNs.o:
+      ;; relocation R_X86_64_32 against `.bss' can not be used when making a
+      ;; shared object; recompile with -fPIC ld: failed to set dynamic section
+      ;; sizes: bad value collect2: error: ld returned 1 exit status
+      #:test-flags #~(list "-skip" "TestNestedDlopenCall")))
+    (home-page "https://github.com/ebitengine/purego")
+    (synopsis "Library for calling C functions from Go without Cgo")
+    (description
+     "This package provides a library for calling C functions from Go without
+Cgo.
+
+Featues:
+@itemize
+@item build for other platforms easily without a C compiler
+@item efficiently cache entirely Go builds
+@item using Cgo generates a C wrapper function for each C function called
+@item load symbols at runtime and use it as a plugin system
+@item call into other languages that are compiled into shared objects
+@item works even with @code{CGO_ENABLED=1} so incremental porting is possible
+@end itemize")
+    (license license:asl2.0)))
+
 (define-public go-github-com-goccmack-gocc
   (package
     (name "go-github-com-goccmack-gocc")
diff --git a/gnu/packages/golang-check.scm b/gnu/packages/golang-check.scm
index 963bc942a9e..62f716d732b 100644
--- a/gnu/packages/golang-check.scm
+++ b/gnu/packages/golang-check.scm
@@ -289,6 +289,57 @@ for Golang projects via modular Makefiles and GitHub Actions.")
 in Golang.")
     (license license:expat)))
 
+(define-public go-github-com-bsm-ginkgo-v2
+  (package
+    (name "go-github-com-bsm-ginkgo-v2")
+    (version "2.12.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/bsm/ginkgo")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "01k1j1bwdq23hs9zzbz9kdljvr6hzym53mqxh2gy0bz4lggcd6qs"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/bsm/ginkgo/v2"
+      #:test-flags #~(list "-vet=off")))
+    (home-page "https://github.com/bsm/ginkgo")
+    (synopsis "Straight copy of Ginkgo library")
+    (description
+     "This package is a straight copy of the excellent
+@url{http://onsi.github.io/ginkgo/, Ginkgo} library, stripped to the bare core
+to be free of third-party dependencies.")
+    (license license:expat)))
+
+(define-public go-github-com-bsm-gomega
+  (package
+    (name "go-github-com-bsm-gomega")
+    (version "1.27.10")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/bsm/gomega")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0i7p85wsqv1j9aq052vdw006xq42n1rdgnk1lr6f5wnapwab2shz"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/bsm/gomega"))
+    (home-page "https://github.com/bsm/gomega")
+    (synopsis "Straight copy of Gomega library")
+    (description
+     "This is a straight copy of the excellent
+@url{http://onsi.github.io/gomega/, Gomega} library, stripped to the bare core
+to be free of third-party dependencies.")
+    (license license:expat)))
+
 (define-public go-github-com-caarlos0-testfs
   (package
     (name "go-github-com-caarlos0-testfs")
diff --git a/gnu/packages/golang-web.scm b/gnu/packages/golang-web.scm
index 602d8262d86..feef60477a7 100644
--- a/gnu/packages/golang-web.scm
+++ b/gnu/packages/golang-web.scm
@@ -438,6 +438,73 @@ Signature headers are to be set (but not both).
 It's an alternative fork of @url{https://github.com/go-fed/httpsig}.")
     (license license:bsd-3)))
 
+(define-public go-github-com-a-h-templ
+  (package
+    (name "go-github-com-a-h-templ")
+    (version "0.3.943")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/a-h/templ")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0dqcdva7z53lhfv6ldjixwp4a363sr2cv5qm8rz2w7n8ba60m37f"))
+       (modules '((guix build utils)))
+       (snippet
+        #~(begin
+            ;; Submodules with their own go.mod files and packaged separately:
+            ;;
+            ;; - github.com/a-h/templ/docs
+            ;; - github.com/a-h/templ/runtime/fuzzing
+            (delete-file-recursively "docs")
+            (delete-file-recursively "runtime/fuzzing")))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/a-h/templ"
+      #:unpack-path "github.com/a-h/templ"
+      ;; TODO: Find out how to enable complete test suit, which might need
+      ;; gopls and other extra commands available in the PATH.
+      #:test-flags
+      #~(list "-skip" (string-join
+                       (list "Test/css-1.css"
+                             "Test/js-1.js"
+                             "TestFormatting"
+                             "TestIsAvailable/existing_commands_return_true")
+                       "|"))
+      #:test-subdirs #~(list "internal/...")
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-after 'unpack 'remove-examples
+            (lambda* (#:key unpack-path #:allow-other-keys)
+              (with-directory-excursion (string-append "src/" unpack-path)
+                (delete-file-recursively "examples")))))))
+    (native-inputs
+     (list go-github-com-stretchr-testify))
+    (propagated-inputs
+     (list go-github-com-a-h-parse
+           go-github-com-andybalholm-brotli
+           go-github-com-cenkalti-backoff-v4
+           go-github-com-cli-browser
+           go-github-com-fatih-color
+           go-github-com-fsnotify-fsnotify
+           go-github-com-google-go-cmp
+           go-github-com-natefinch-atomic
+           go-github-com-rs-cors
+           go-golang-org-x-mod
+           go-golang-org-x-net
+           go-golang-org-x-sync
+           go-golang-org-x-tools))
+    (home-page "https://templ.guide/")
+    (synopsis "Language for writing HTML user interfaces in Golang")
+    (description
+     "This package implements a functionality to create components that render
+fragments of HTML and compose them to create screens, pages, documents, or
+apps.")
+    (license license:expat)))
+
 (define-public go-github-com-aki237-nscjar
   (package
     (name "go-github-com-aki237-nscjar")
@@ -6556,6 +6623,30 @@ intends to be compatible with Avahi.")
 Block Storage for container, cloud and virtualisation.")
     (license license:asl2.0)))
 
+(define-public go-github-com-lum8rjack-go-ja4h
+  (package
+    (name "go-github-com-lum8rjack-go-ja4h")
+    (version "0.0.0-20250828030157-fa5266d50650")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/lum8rjack/go-ja4h")
+             (commit (go-version->git-ref version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "079qh3lj6a8jr90g170lc36b878hqfyi94azqs8fl0wnj2fzzcs3"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/lum8rjack/go-ja4h"))
+    (home-page "https://github.com/lum8rjack/go-ja4h")
+    (synopsis "JA4H Fingerprint in Golang")
+    (description
+     "This Package provides an implementation of the
+@url{https://github.com/FoxIO-LLC/ja4, JA4HTTP (JA4H) hashing algorithm}.")
+    (license license:expat)))
+
 (define-public go-github-com-macronut-go-tproxy
   (package
     (name "go-github-com-macronut-go-tproxy")
@@ -9879,6 +9970,39 @@ information or even the peer of a VETH interface.")
      "Package jsonschema provides json-schema compilation and validation.")
     (license license:asl2.0)))
 
+(define-public go-github-com-sebest-xff
+  (package
+    (name "go-github-com-sebest-xff")
+    (version "0.0.0-20210106013422-671bd2870b3a")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/sebest/xff")
+             (commit (go-version->git-ref version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "06is8vvgxsis4sdr1d1n7p5g16x3rrw86qwkiwgamm5vnjkrvcdp"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/sebest/xff"
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-after 'unpack 'remove-examples
+            (lambda* (#:key tests? import-path #:allow-other-keys)
+              (with-directory-excursion (string-append "src/" import-path)
+                (delete-file-recursively "examples")))))))
+    (native-inputs
+     (list go-github-com-stretchr-testify))
+    (home-page "https://github.com/sebest/xff")
+    (synopsis "X-Forwarded-For middleware fo Golang")
+    (description
+     "Package @@code{xff} is a @code{net/http} middleware/handler to parse
+@url{http://tools.ietf.org/html/rfc7239, Forwarded HTTP Extension} in
+Golang.")
+    (license license:expat)))
+
 (define-public go-github-com-sherclockholmes-webpush-go
   (package
     (name "go-github-com-sherclockholmes-webpush-go")
@@ -13580,6 +13704,22 @@ carries no encryption keys and cannot decode the traffic that it proxies.")))
     (propagated-inputs '())
     (inputs '())))
 
+(define-public templ
+  (package/inherit go-github-com-a-h-templ
+    (name "templ")
+    (arguments
+     (substitute-keyword-arguments
+         (package-arguments go-github-com-a-h-templ)
+       ((#:tests? _ #t) #f)
+       ((#:install-source? _ #t) #f)
+       ((#:import-path _ "github.com/a-h/templ")
+        "github.com/a-h/templ/cmd/templ")))
+    (native-inputs
+     (append (package-native-inputs go-github-com-a-h-templ)
+             (package-propagated-inputs go-github-com-a-h-templ)))
+    (propagated-inputs '())
+    (inputs '())))
+
 (define-public xurls
   (package/inherit go-mvdan-cc-xurls-v2
     (name "xurls")
diff --git a/gnu/packages/golang-xyz.scm b/gnu/packages/golang-xyz.scm
index d64d5ff08b3..b81e611e3cc 100644
--- a/gnu/packages/golang-xyz.scm
+++ b/gnu/packages/golang-xyz.scm
@@ -751,6 +751,32 @@ Application Record Encoding} https://baremessages.org/ message format for
 Golang.")
     (license license:asl2.0)))
 
+(define-public go-github-com-a-h-parse
+  (package
+    (name "go-github-com-a-h-parse")
+    (version "0.0.0-20250122154542-74294addb73e")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/a-h/parse")
+             (commit (go-version->git-ref version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1warii2f9mrp5m2da9pn4chzd4y3fjlc3547va8xljfh09bvray4"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/a-h/parse"))
+    (native-inputs
+     (list go-github-com-google-go-cmp))
+    (home-page "https://github.com/a-h/parse")
+    (synopsis "Parsing tools for Golang")
+    (description
+     "This package provides a set of parsing tools for Go inspired by
+@url{https://github.com/sprache/Sprache/, Sprache}.")
+    (license license:expat)))
+
 (define-public go-github-com-a8m-envsubst
   (package
     (name "go-github-com-a8m-envsubst")
@@ -1609,6 +1635,34 @@ commands.")
      "This package implements optimal parameters for data-types.")
     (license license:expat)))
 
+(define-public go-github-com-antlr4-go-antlr-v4
+  (package
+    (name "go-github-com-antlr4-go-antlr-v4")
+    (version "4.13.1")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/antlr4-go/antlr")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "1m5q00fvz28dgvv3ws924p6gamxm6gzqfm12f5ryhljifg22xq3d"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/antlr4-go/antlr/v4"))
+    (propagated-inputs
+     (list go-golang-org-x-exp))
+    (home-page "https://github.com/antlr4-go/antlr")
+    (synopsis "ANTLR4 Go Runtime Module")
+    (description
+     "This package implements the Go version of the
+@url{https://github.com/antlr/antlr4, ANTLR 4} runtime - ANother Tool for
+Language Recognition, a parser generator that uses a LL algorithm for
+parsing.")
+    (license license:bsd-3)))
+
 (define-public go-github-com-apex-logs
   (package
     (name "go-github-com-apex-logs")
@@ -4570,6 +4624,92 @@ dependencies and a simple API.")
      "This package provides a transport-agnostic, filesystem metadata manifest system.")
     (license license:asl2.0)))
 
+(define-public go-github-com-containerd-errdefs
+  (package
+    (name "go-github-com-containerd-errdefs")
+    (version "1.0.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/containerd/errdefs")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0afaljkkd388f6igr3f2vjnd14yr8h20fcfzglw8j5q1q7a1cvik"))
+       (modules '((guix build utils)))
+       (snippet
+        #~(begin
+            ;; Submodules with their own go.mod files and packaged separately:
+            ;;
+            ;; - github.com/containerd/errdefs/pkg
+            (delete-file-recursively "pkg")))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/containerd/errdefs"))
+    (home-page "https://github.com/containerd/errdefs")
+    (synopsis "Common definition and library of errors used by containerd")
+    (description
+     "Package errdefs defines the common errors used throughout containerd
+packages.")
+    (license license:asl2.0)))
+
+(define-public go-github-com-containerd-errdefs-pkg
+  (package
+    (name "go-github-com-containerd-errdefs-pkg")
+    (version "0.3.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/containerd/errdefs")
+              (commit (go-version->git-ref version
+                                           #:subdir "pkg"))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0afaljkkd388f6igr3f2vjnd14yr8h20fcfzglw8j5q1q7a1cvik"))
+       (modules '((guix build utils)
+                  (ice-9 ftw)
+                  (srfi srfi-26)))
+       (snippet
+        #~(begin
+            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
+            ;; Consider to implement it as re-usable procedure in
+            ;; guix/build/utils or guix/build-system/go.
+            (define (delete-all-but directory . preserve)
+              (with-directory-excursion directory
+                (let* ((pred (negate (cut member <>
+                                          (cons* "." ".." preserve))))
+                       (items (scandir "." pred)))
+                  (for-each (cut delete-file-recursively <>) items))))
+            (delete-all-but "." "pkg")))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:import-path "github.com/containerd/errdefs/pkg"
+      #:unpack-path "github.com/containerd/errdefs"))
+    (propagated-inputs
+     (list go-github-com-containerd-errdefs
+           go-github-com-containerd-typeurl-v2
+           go-google-golang-org-genproto-googleapis-rpc
+           go-google-golang-org-grpc
+           go-google-golang-org-protobuf))
+    (home-page "https://github.com/containerd/errdefs")
+    (synopsis "Addintional error handling modules for containerd")
+    (description
+     "This package provides an additinal Golang modules for error handling in
+containerd projects.
+
+@itemize
+@item errgrpc - provides utility functions for translating errors to and from
+a gRPC context
+@item errhttp - provides utility functions for translating errors to and from
+a HTTP context
+@end itemize")
+    (license license:asl2.0)))
+
 (define-public go-github-com-containerd-fifo
   (package
     (name "go-github-com-containerd-fifo")
@@ -7016,6 +7156,31 @@ in a consistent state and never represent an in-progress write.")
     ;; <...>
     (license license:bsd-3)))
 
+(define-public go-github-com-facebookgo-flagenv
+  (package
+    (name "go-github-com-facebookgo-flagenv")
+    (version "0.0.0-20160425205200-fcd59fca7456")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/facebookarchive/flagenv")
+             (commit (go-version->git-ref version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0c7fw4y4gmdrn66dx7la637lx0hvs1w27x9j12wdx037n51r078g"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:tests? #f   ;Tests require dated code <github.com/facebookgo/ensure>
+      #:import-path "github.com/facebookgo/flagenv"))
+    (home-page "https://github.com/facebookgo/flagenv")
+    (synopsis "Populate flags from environment variables")
+    (description
+     "Package flagenv provides the ability to populate flags from environment
+variables.")
+    (license license:bsd-3)))
+
 (define-public go-github-com-facette-natsort
   (package
     (name "go-github-com-facette-natsort")
@@ -8836,6 +9001,67 @@ This package contains a series of small enhancements and additions.")
 the resource usage and performance characteristics of running containers.")
       (license license:asl2.0))))
 
+(define-public go-github-com-google-cel-go
+  (package
+    (name "go-github-com-google-cel-go")
+    (version "0.26.1")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/google/cel-go")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0hrdr9fzac0p7jrlbchz2qvdikr1szq5rg4sdsld7n849mmz8ypf"))
+       (modules '((guix build utils)))
+       (snippet
+        #~(begin
+            ;; Submodules with their own go.mod files and packaged separately:
+            ;;
+            ;; - github.com/google/cel-go/codelab
+            ;; - github.com/google/cel-go/conformance
+            ;; - github.com/google/cel-go/policy
+            ;; - github.com/google/cel-go/repl/appengine
+            ;; - github.com/google/cel-go/repl
+            ;; - github.com/google/cel-go/tools
+            (for-each delete-file-recursively
+                      (list "codelab"
+                            "conformance"
+                            "policy"
+                            "repl/appengine"
+                            "repl"
+                            "tools"
+                            "vendor"))))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:import-path "github.com/google/cel-go"
+      #:test-flags #~(list "-skip" "TestStringFormat")
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-after 'unpack 'remove-examples
+            (lambda* (#:key tests? import-path #:allow-other-keys)
+              (with-directory-excursion (string-append "src/" import-path)
+                (delete-file-recursively "examples")))))))
+    (propagated-inputs
+     (list go-cel-dev-expr
+           go-github-com-antlr4-go-antlr-v4
+           go-github-com-stoewer-go-strcase
+           go-golang-org-x-text
+           go-google-golang-org-genproto-googleapis-api
+           go-google-golang-org-protobuf
+           go-gopkg-in-yaml-v3))
+    (home-page "https://github.com/google/cel-go")
+    (synopsis "Common Expression Language")
+    (description
+     "The Common Expression Language (CEL) is a non-Turing complete language
+designed for simplicity, speed, safety, and portability.  CEL's C-like
+@url{https://github.com/google/cel-spec, syntax} looks nearly identical to
+equivalent expressions in C++, Go, Java, and TypeScript.")
+    (license license:asl2.0)))
+
 (define-public go-github-com-google-gnostic-models
   (package
     (name "go-github-com-google-gnostic-models")
@@ -9221,6 +9447,31 @@ according @@url{https://rfc-editor.org/rfc/rfc8785.html, RFC 8785}.")
      "This package can generate ASCII line graphs in Golang.")
     (license license:bsd-3)))
 
+(define-public go-github-com-h2non-filetype
+  (package
+    (name "go-github-com-h2non-filetype")
+    (version "1.1.3")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/h2non/filetype")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "05xad4dfimlccg3hy0fpcns4fl7yj17dbpdf6ijwbp6k4ryzy9cm"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/h2non/filetype"))
+    (home-page "https://github.com/h2non/filetype")
+    (synopsis "Infer binary file types based on the magic numbers header signature")
+    (description
+     "This package implements a functionality to infer file and MIME type
+checking the @url{https://en.wikipedia.org/wiki/Magic_number_(programming)
+,magic numbers} signature.")
+    (license license:expat)))
+
 (define-public go-github-com-h2non-parth
   (package
     (name "go-github-com-h2non-parth")
@@ -14146,6 +14397,30 @@ the current user without cgo.  This library does that, enabling
 cross-compilation.")
     (license license:expat)))
 
+(define-public go-github-com-mitchellh-go-ps
+  (package
+    (name "go-github-com-mitchellh-go-ps")
+    (version "1.0.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/mitchellh/go-ps")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0ipcbz66x7q8xczi7cyfq06y7n7v0syvkp730vn9jrn7s8f5ag0z"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/mitchellh/go-ps"))
+    (home-page "https://github.com/mitchellh/go-ps")
+    (synopsis "Process List Library for Golang")
+    (description
+     "This package provides an API for finding and listing processes in a
+platform-agnostic way.")
+    (license license:expat)))
+
 (define-public go-github-com-mitchellh-go-wordwrap
   (package
     (name "go-github-com-mitchellh-go-wordwrap")
@@ -14299,6 +14574,29 @@ parsing.")
      "This directory contains documents about Docker Image Specification v1.X.")
     (license license:asl2.0)))
 
+(define-public go-github-com-moby-spdystream
+  (package
+    (name "go-github-com-moby-spdystream")
+    (version "0.5.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/moby/spdystream")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0p5pwwspmp24ff900656fyvrgdz8xxl6y0dk9fqgcaaaylmw0v9g"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/moby/spdystream"))
+    (home-page "https://github.com/moby/spdystream")
+    (synopsis "Multiplexed streams for Golang")
+    (description
+     "This package provides a multiplexed stream library using spdy.")
+    (license license:asl2.0)))
+
 (define-public go-github-com-moby-sys-capability
   (package
     (name "go-github-com-moby-sys-capability")
@@ -15145,6 +15443,31 @@ multibase} (self identifying base encodings) in Go.")
 varints.")
     (license license:expat)))
 
+(define-public go-github-com-mxk-go-flowrate
+  (package
+    (name "go-github-com-mxk-go-flowrate")
+    (version "0.0.0-20140419014527-cca7078d478f")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/mxk/go-flowrate")
+              (commit (go-version->git-ref version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0zqs39923ja0yypdmiqk6x8pgmfs3ms5x5sl1dqv9z6zyx2xy541"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:import-path "github.com/mxk/go-flowrate"))
+    (home-page "https://github.com/mxk/go-flowrate")
+    (synopsis "Limiting and monitoring data flow rate in Golang")
+    (description
+     "This package provides the tools for monitoring and limiting the flow
+rate of an arbitrary data stream.")
+    (license license:bsd-3)))
+
 (define-public go-github-com-nakagami-firebirdsql
   (package
     (name "go-github-com-nakagami-firebirdsql")
@@ -15179,6 +15502,30 @@ varints.")
 @url{https://firebirdsql.org/, Firebird} RDBMS.")
     (license license:expat)))
 
+(define-public go-github-com-natefinch-atomic
+  (package
+    (name "go-github-com-natefinch-atomic")
+    (version "1.0.1")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/natefinch/atomic")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0y1hr9smjfwp3zgn8s9njp84x9m42x3a7f1h2q7qyd0i5hf9bcvx"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/natefinch/atomic"))
+    (home-page "https://github.com/natefinch/atomic")
+    (synopsis "Atomic file writing in Golang")
+    (description
+     "This package provides functions to atomically change files, by writing
+first to a temp file, and then overwriting the target file in an atomic way.")
+    (license license:expat)))
+
 (define-public go-github-com-nathan-osman-go-sunrise
   (package
     (name "go-github-com-nathan-osman-go-sunrise")
@@ -15336,6 +15683,38 @@ through it's psuedoterminal.")
 list of sentences.")
     (license license:expat)))
 
+(define-public go-github-com-nicksnyder-go-i18n-v2
+  (package
+    (name "go-github-com-nicksnyder-go-i18n-v2")
+    (version "2.6.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/nicksnyder/go-i18n")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "14v4v06j30rsn2y8lss7j5qyfbr7wir7yzpjd8wqh279aq489d2j"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:import-path "github.com/nicksnyder/go-i18n/v2"
+      ;; One test fails with error: open active.en.toml: permission denied.
+      #:test-flags #~(list "-skip" "TestMain/extract")))
+    (propagated-inputs
+     (list go-github-com-burntsushi-toml
+           go-golang-org-x-text
+           go-gopkg-in-yaml-v3))
+    (home-page "https://github.com/nicksnyder/go-i18n")
+    (synopsis "Internationalization and localization for Golang")
+    (description
+     "This package provides support for implementing internationalization and
+localization of Go code, covering pluralized strings for all 200+ languages in
+@acronym{CLDR, Unicode Common Locale Data Repository}.")
+    (license license:expat)))
+
 (define-public go-github-com-nightlyone-lockfile
   (package
     (name "go-github-com-nightlyone-lockfile")
@@ -17206,6 +17585,58 @@ watches memory utilization and forces Go GC in accordance with a user-defined
 policy.")
     (license (list license:asl2.0 license:expat))))
 
+(define-public go-github-com-redis-go-redis-v9
+  (package
+    (name "go-github-com-redis-go-redis-v9")
+    (version "9.13.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/redis/go-redis")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "19scv5fbwacrbpv329w2a48z1w5wmxi7ax93bp1p398k4yqx6izf"))
+       (modules '((guix build utils)))
+       (snippet
+        #~(begin
+            ;; Submodules with their own go.mod files and packaged separately:
+            ;;
+            ;; - github.com/redis/go-redis/extra/rediscensus/v9
+            ;; - github.com/redis/go-redis/extra/rediscmd/v9
+            ;; - github.com/redis/go-redis/extra/redisotel/v9
+            ;; - github.com/redis/go-redis/extra/redisprometheus/v9
+            ;; - github.com/redis/go-redis/internal/customvet
+            (delete-file-recursively "extra")
+            (delete-file-recursively "internal/customvet")))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "github.com/redis/go-redis/v9"
+      #:test-flags
+      ;; Tests requir running Redis server.
+      #~(list "-skip" "Example|TestGinkgoSuite")
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-after 'unpack 'remove-examples
+            (lambda* (#:key import-path #:allow-other-keys)
+              (delete-file-recursively
+               (string-append "src/" import-path "/example")))))))
+    (native-inputs
+     (list go-github-com-bsm-ginkgo-v2
+           go-github-com-bsm-gomega))
+    (propagated-inputs
+     (list go-github-com-cespare-xxhash-v2
+           go-github-com-dgryski-go-rendezvous))
+    (home-page "https://github.com/redis/go-redis")
+    (synopsis "Redis client for Golang")
+    (description
+     "go-redis is the official Redis client library for the Go programming
+language.  It offers a straightforward interface for interacting with Redis
+servers.")
+    (license license:bsd-2)))
+
 (define-public go-github-com-reiver-go-porterstemmer
   ;; The latest commit contain test fixtures.
   (let ((commit "ab0f922907ea0321367a5776bd7a6c35d505d53b")
@@ -22665,6 +23096,32 @@ machine readable.  It is modeled after the Go standard library's @code{io} and
            go-github-com-mattn-go-colorable
            go-golang-org-x-term))))
 
+(define-public go-gopkg-in-inf-v0
+  (package
+    (name "go-gopkg-in-inf-v0")
+    (version "0.9.1")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+             (url "https://github.com/go-inf/inf")
+             (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "00k5iqjcp371fllqxncv7jkf80hn1zww92zm78cclbcn4ybigkng"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "gopkg.in/inf.v0"
+      ;; Tests are not copatiblw with Go 1.24+.
+      #:test-flags #~(list "-vet=off")))
+    (home-page "https://github.com/go-inf/inf")
+    (synopsis "Infinite precision decimal arithmetic in Golang")
+    (description
+     "This package (type @code{inf.Dec}) implements a \"infinite-precision\"
+decimal arithmetic.")
+    (license license:expat)))
+
 (define-public go-gopkg-in-ini-v1
   (package
     (name "go-gopkg-in-ini-v1")
@@ -22977,6 +23434,61 @@ dependencies.")
 XML, Apple Binary, OpenStep, and GNUStep) from/to arbitrary Go types.")
     (license license:giftware)))
 
+(define-public go-k8s-io-apimachinery
+  (package
+    (name "go-k8s-io-apimachinery")
+    (version "0.34.0")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/kubernetes/apimachinery")
+              (commit (string-append "v" version))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "0mdmw951k9a2v817c0xxlazvz2500lw80mh53xjwspss0yx9b8fb"))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:import-path "k8s.io/apimachinery"
+      ;; TODO: Check why some tests fails in other subdirectories.
+      #:test-subdirs #~(list "pkg/test/...")))
+    (native-inputs
+     (list go-github-com-armon-go-socks5
+           go-github-com-stretchr-testify
+           go-golang-org-x-time))
+    (propagated-inputs
+     (list go-github-com-davecgh-go-spew
+           go-github-com-fxamacker-cbor-v2
+           go-github-com-gogo-protobuf
+           go-github-com-google-gnostic-models
+           go-github-com-google-go-cmp
+           go-github-com-google-uuid
+           go-github-com-moby-spdystream
+           go-github-com-mxk-go-flowrate
+           go-github-com-pmezard-go-difflib
+           go-github-com-spf13-pflag
+           go-golang-org-x-net
+           go-gopkg-in-evanphx-json-patch-v4
+           go-gopkg-in-inf-v0
+           go-k8s-io-klog-v2
+           go-k8s-io-kube-openapi
+           go-k8s-io-utils
+           go-sigs-k8s-io-json
+           go-sigs-k8s-io-randfill
+           go-sigs-k8s-io-structured-merge-diff-v6
+           go-sigs-k8s-io-yaml))
+    (home-page "https://k8s.io/apimachinery")
+    (synopsis "Kubernetes and Kubernetes-like API utilities")
+    (description
+     "This package provides scheme, typing, encoding, decoding, and conversion
+functions for Kubernetes and Kubernetes-like API objects.  It is a shared
+dependency for servers and clients to work with Kubernetes API infrastructure
+without direct type dependencies. Its first consumers are
+@code{k8s.io/kubernetes}, @code{k8s.io/client-go}, and
+@code{k8s.io/apiserver}.")
+    (license license:asl2.0)))
+
 (define-public go-k8s-io-gengo-v2
   (package
     (name "go-k8s-io-gengo-v2")
@@ -23549,6 +24061,61 @@ prints the Go version used to build that executable.")
 unmarshaling functions based on @code{encoding/json} @code{Unmarshal()}.")
     (license license:asl2.0)))
 
+(define-public go-sigs-k8s-io-kustomize-cmd-config
+  (package
+    (name "go-sigs-k8s-io-kustomize-cmd-config")
+    (version "0.20.1")
+    (source
+     (origin
+       (method git-fetch)
+       (uri (git-reference
+              (url "https://github.com/kubernetes-sigs/kustomize")
+              (commit (go-version->git-ref version
+                                           #:subdir "cmd/config"))))
+       (file-name (git-file-name name version))
+       (sha256
+        (base32 "12n8ij4gisah5mvxcgq263iic61gjpxdj3ml03826zckzn7wlv46"))
+       (modules '((guix build utils)
+                  (ice-9 ftw)
+                  (srfi srfi-26)))
+       (snippet
+        #~(begin
+            ;; XXX: 'delete-all-but' is copied from the turbovnc package.
+            ;; Consider to implement it as re-usable procedure in
+            ;; guix/build/utils or guix/build-system/go.
+            (define (delete-all-but directory . preserve)
+              (with-directory-excursion directory
+                (let* ((pred (negate (cut member <>
+                                          (cons* "." ".." preserve))))
+                       (items (scandir "." pred)))
+                  (for-each (cut delete-file-recursively <>) items))))
+            (delete-all-but "." "cmd")
+            (delete-all-but "cmd" "config")))))
+    (build-system go-build-system)
+    (arguments
+     (list
+      #:skip-build? #t
+      #:import-path "sigs.k8s.io/kustomize/cmd/config"
+      #:unpack-path "sigs.k8s.io/kustomize"
+      ;; Full test suite requires Docker in the PATH.
+      #:test-subdirs #~(list "internal/commands"
+                             "runner/...")))
+    (native-inputs
+     (list go-github-com-stretchr-testify))
+    (propagated-inputs
+     (list go-github-com-go-errors-errors
+           go-github-com-spf13-cobra
+           go-gopkg-in-inf-v0
+           go-sigs-k8s-io-kustomize-kyaml))
+    (home-page "https://sigs.k8s.io/kustomize")
+    (synopsis "Kubernetes config filters")
+    (description
+     "This package implements a functionality to expose Kubernetes config
+filters directly as CLI commands for the purposes of development of the
+@code{kyaml} package and as a reference implementation for using the
+libraries.")
+    (license license:asl2.0)))
+
 (define-public go-sigs-k8s-io-kustomize-kyaml
   (package
     (name "go-sigs-k8s-io-kustomize-kyaml")
diff --git a/gnu/packages/librewolf.scm b/gnu/packages/librewolf.scm
index f4711abbce3..ff34cff736c 100644
--- a/gnu/packages/librewolf.scm
+++ b/gnu/packages/librewolf.scm
@@ -116,14 +116,14 @@
 (define computed-origin-method (@@ (guix packages) computed-origin-method))
 
 (define firefox-l10n
-  (let ((commit "2962877b9abd5bfa1e24e5bbc1e16e47e12d6760"))
+  (let ((commit "0349e18db25a701938d83c61fa90f6074ae9df01"))
     (origin
       (method git-fetch)
       (uri (git-reference
             (url "https://github.com/mozilla-l10n/firefox-l10n.git")
             (commit commit)))
       (file-name (git-file-name "firefox-l10n" commit))
-      (sha256 (base32 "1gaxbjjm0d4k4wgl64mwcxy2hx1vdq1dbmvjacg2fqxpnb62481x")))))
+      (sha256 (base32 "0lqpmfgkfwjz5n45qifc0v1cxk5qw8ldyi6423m591l7z4n4rjdg")))))
 
 (define* (make-librewolf-source #:key version firefox-hash librewolf-hash l10n)
   (let* ((ff-src (firefox-source-origin
@@ -220,17 +220,17 @@
 ;; It's used for cache validation and therefore can lead to strange bugs.
 ;; ex: date '+%Y%m%d%H%M%S'
 ;; or: (format-time-string "%Y%m%d%H%M%S")
-(define %librewolf-build-id "20250829153926")
+(define %librewolf-build-id "20250919153758")
 
 (define-public librewolf
   (package
     (name "librewolf")
-    (version "142.0.1-1")
+    (version "143.0-1")
     (source
      (make-librewolf-source
       #:version version
-      #:firefox-hash "1h0hx0jxwy4rshdq6s5l5hbj8gyhn2zssisr59skwf63si7b9bdh"
-      #:librewolf-hash "1myzm6jblnrw1vdf5xlynbfr6a9swwcaws689az7xgq6s6n0rc3y"
+      #:firefox-hash "10yz3rz2akf3b19hd2c5v77f038j0h6ci1asjb4w480q14wclibc"
+      #:librewolf-hash "1jq52g5v38f0dmpyhpr9x9mjsbnn7afq2cr113wmqpdz6ynl07kr"
       #:l10n firefox-l10n))
     (build-system gnu-build-system)
     (arguments
diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 0bb18b2ad5b..36ba51affe6 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -286,7 +286,7 @@ This package tracks the Extended Support Release (ESR) channel.")
   (package
    (inherit nss)
    (name "nss-rapid")
-   (version "3.115")
+   (version "3.116")
    (source
     (origin
       (inherit (package-source nss))
@@ -297,7 +297,7 @@ This package tracks the Extended Support Release (ESR) channel.")
               "releases/NSS_" version-with-underscores "_RTM/src/"
               "nss-" version ".tar.gz")))
       (sha256
-       (base32 "1av1g18dkx86zxvpr34j5mx976mgsk002khlb40k4ydx6gxlfamc"))
+       (base32 "0wxvy9kxqafrwqkx977wpy1mynvsf7mdag3zy9qkn7mdwhfn2f1r"))
       (patches
        (search-patches "nss-3.56-pkgconfig.patch"
                        "nss-getcwd-nonnull.patch"