## Summary

Fix for #2601

## How was it tested?

1. created empty /nix folder
2. devbox succeeds now installing nix

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary

Adds error return to `IsDirEmpty` and unit tests

## How was it tested?

CICD

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary
After running `devbox services attach` all other `devbox services ...`
commands hang until the attached UI is exited. This is because there's a
lock put on the global process-compose file while it's being read and
it's not released until the program exits.

You can see in `devbox services up` the lockfile is released, looks like
it was just missed in attach.


https://github.com/jetify-com/devbox/blob/dd069a42b8cae746d93e2cd7ad5665b722a1973f/internal/services/manager.go#L188-L189



## How was it tested? (repro steps, hangs without this PR, works as
expected with it)

In one terminal, in a devbox repo with process(es)
```sh
devbox services up -b
devbox services attach
```
In another terminal, in the same dir or any other devbox repo>
```sh
devbox services ls # or any services ... sub command
# will hang until <ctrl-c> in above terminal
```

## Other note

The `lock()` function has a timeout and error handling, why doesn't it
work?


https://github.com/jetify-com/devbox/blob/dd069a42b8cae746d93e2cd7ad5665b722a1973f/internal/services/manager.go#L374-L394

The line that hangs is 391, when we're trying to close the file after
the timeout, the file can't be closed because another process has it
open and/or locked. I did investigate adding a timeout `file.Close()`
but could not get it to work reliably for myself.

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary
Update packages in devbox repo to address any vulnerabilities:
- Updated drupal and other devbox examples
- Update to typeid/v2
- Update to latest dependencies on opensource/pkg (and by extension
update the transitive extract/v3 dependency to extract/v4)

## How was it tested?
Ran all tests but ... tests do seem to be hanging and timing out. Hoping
someone has run into this issue to help debug and make sure the tests do
pass.

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary
- Updates `form-data` dependency from `^4.0.0` to `^4.0.4` in the VS
Code extension
- Updates `packageManager` from `pnpm@9.12.1` to `pnpm@10.13.1` in the
documentation app

## How was it tested?
N/A didn't change any core devbox functionality

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

…missing `seccomp BPF program` in arm64 linux (#2665)

## Summary

The docker-image is failing to build in GHA:

https://github.com/jetify-com/devbox/actions/runs/16204700194/job/47358742840

The error indicates that the seccomp (secure computing mode) BPF
(Berkeley Packet Filter) program that Nix tries to load is incompatible
with the Docker container environment on ARM64.

When filter-syscalls = true (the default), Nix uses seccomp BPF to
filter system calls for security sandboxing. Setting filter-syscalls =
false disables Nix's syscall filtering, which bypasses the seccomp BPF
program entirely and prevents the error.

This PR uses the approach from #1811 to fix this for arm64 platforms.


## How was it tested?

`docker build --platform linux/arm64 -t devbox-image-arm64 -f
/Users/savil/code/jetpack/devbox/internal/devbox/generate/tmpl/DevboxImageDockerfile
.`
`docker build --platform linux/arm64 -t devbox-image-arm64 -f
/Users/savil/code/jetpack/devbox/internal/devbox/generate/tmpl/DevboxImageDockerfileRootUser
.`

BEFORE: these failed with the error seen in the GHA above
AFTER: build successfully

Also confirmed that --platform linux/amd64 would build successfully

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary

Fixes
https://github.com/jetify-com/devbox/actions/runs/16847493651/job/47729104601

This is a very specific fix to this job. I think a better solution is to
pass `--extra-access-tokens` flag into nix commands that may interact
with github.

## How was it tested?

Not sure how to test.

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary

Fixes #2668

## How was it tested?

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary

## How was it tested?

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary
TSIA

## How was it tested?

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary

Fix some socket paths and settings that were causing issues
Use the MariaDB binaries to avoid a deprecation warning
Tested and added support for MySQL84

## How was it tested?

Localhost

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary

Fixes #2658 (i.e. errors such as the below):

_warning: VIRTUAL_ENV=src/uvtest/.venv does not match the project
environment path .venv and will be ignored; use --active to target the
active environment instead_

I have also updated the outdated docs which still contained the old
default virtual environment path of `.devbox/virtenv/python`.

## How was it tested?

Using the steps from #2658:

```
devbox create uvtest --template python-pip
cd uvtest
devbox add uv@latest
mkdir -p src/uvtest
echo -e "[project]\nname = \"uvtest\"\nversion = \"1.0.0\"\nrequires-python = \">=3.12\"" > pyproject.toml
devbox shell --env VENV_DIR="./src/uvtest/.venv"
uv run main.py
```

With this fix, the last command now runs successfully.

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary

Bump devbox version for release 

## How was it tested?

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).

## Summary
- Update dependencies in devbox examples
- Update dependencies in our go code
- Update tools referenced by go.mod
- Run `devbox update` to update the nix dependencies

## How was it tested?
Ran all tests

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).