diff --git a/apps/config/package.json b/apps/config/package.json
index 408dfabc..3ea9a82a 100644
--- a/apps/config/package.json
+++ b/apps/config/package.json
@@ -11,6 +11,6 @@
         "jiti": "2.4.2",
         "pkg-types": "1.3.1",
         "typescript": "5.7.3",
-        "typescript-eslint": "8.21.0"
+        "typescript-eslint": "8.22.0"
     }
 }
diff --git a/apps/pin-inputs/default.nix b/apps/pin-inputs/default.nix
index 1d6b1c75..095ca88d 100644
--- a/apps/pin-inputs/default.nix
+++ b/apps/pin-inputs/default.nix
@@ -1,7 +1,7 @@
 {buildApp, ...}:
 buildApp {
   src = ./.;
-  npmDepsHash = "sha256-s4eh0nL52/bS/yIo2BQgdTN6l3SiD2NTY2KntxjpIl4=";
+  npmDepsHash = "sha256-rhUlFjE4W3GXZ4zmMk4dmkZpauBwXZI8W8iu2F6NmUM=";
 
   runtimeInputs = [];
 
diff --git a/apps/pin-inputs/package-lock.json b/apps/pin-inputs/package-lock.json
index 9019d71a..852d6438 100644
Binary files a/apps/pin-inputs/package-lock.json and b/apps/pin-inputs/package-lock.json differ
diff --git a/configurations/nos/modules/docker/freshrss/images/rss-bridge.nix b/configurations/nos/modules/docker/freshrss/images/rss-bridge.nix
index 1d873317..2746b4bc 100644
--- a/configurations/nos/modules/docker/freshrss/images/rss-bridge.nix
+++ b/configurations/nos/modules/docker/freshrss/images/rss-bridge.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "rssbridge/rss-bridge";
-  imageDigest = "sha256:a536d4d24f7325204652be2a37fb5b25532c618817657d7e31dfc0c1dc7f8d94";
-  hash = "sha256-xo0Oi9WAHA1AU+EuM0Ou5wc/+NEK8c8qxZLCpK3DZNU=";
+  imageDigest = "sha256:ee6fef3aa2d8699a4379acbaf01da5efeac1a8581a2d02de9b78786b680be8ba";
+  hash = "sha256-YuRqOey6yjr2W+klTIDuQ1BrdbwnXiCrusqzC31aTuE=";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/configurations/nos/modules/docker/immich/images/machine-learning.nix b/configurations/nos/modules/docker/immich/images/machine-learning.nix
index 05dff290..799dbd87 100644
--- a/configurations/nos/modules/docker/immich/images/machine-learning.nix
+++ b/configurations/nos/modules/docker/immich/images/machine-learning.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/immich-app/immich-machine-learning";
-  imageDigest = "sha256:3049673142acc7d655127c3751dafaf2e6a4c37d74ed3fdfb45d01fe0140f617";
-  hash = "sha256-Rihm4Y8zwx7inhLjJjQxxyCgPIOaS8iA0l8k51fqIHA=";
+  imageDigest = "sha256:698b9b2d61eee42578cf268dc1490a136554fb186a448b51430f069431d5e754";
+  hash = "sha256-Tc85XpaK3LnyGue8YjzNZzStRUtjF7bU06mkPCPA5pk=";
   finalImageName = imageName;
   finalImageTag = "release";
 }
diff --git a/configurations/nos/modules/docker/immich/images/server.nix b/configurations/nos/modules/docker/immich/images/server.nix
index 0893918a..096f972b 100644
--- a/configurations/nos/modules/docker/immich/images/server.nix
+++ b/configurations/nos/modules/docker/immich/images/server.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/immich-app/immich-server";
-  imageDigest = "sha256:b7464b8799ab31c192d9b51a59d73426fc2deb39db6166a2f5073ae304c1131d";
-  hash = "sha256-wERH5f1s2OROZ5opZwt7aO48Ku4rZPzNkajhInO9RkU=";
+  imageDigest = "sha256:9be304ef1c5cb1b7c69ad8db62a9bde41480ac9bb5084bd6263c75dd5792503f";
+  hash = "sha256-b4MtUsDevGVIBKCTnEsyY30Ts+ULDqaQsPnEuDz9hRs=";
   finalImageName = imageName;
   finalImageTag = "release";
 }
diff --git a/flake.lock b/flake.lock
index 49af42cf..ae0a7aa9 100644
Binary files a/flake.lock and b/flake.lock differ
diff --git a/flake.nix b/flake.nix
index c104b96c..bd063241 100644
Binary files a/flake.nix and b/flake.nix differ
diff --git a/inputs/default.nix b/inputs/default.nix
index dc927af0..dc57d049 100644
--- a/inputs/default.nix
+++ b/inputs/default.nix
@@ -13,7 +13,7 @@ let
     nixpkgs = mkInput {
       owner = "NixOS";
       repo = "nixpkgs";
-      ref = "nixos-unstable-small";
+      ref = "nixos-unstable";
     };
 
     home-manager = mkInput {
@@ -160,11 +160,17 @@ let
       hyprland = mkInput {
         owner = "hyprwm";
         repo = "Hyprland";
+
+        # FIXME: wait for https://github.com/horriblename/hyprgrass/pull/207
+        rev = "445acec2a29adbb30196d8b92f86270a038b7ee5";
       };
 
       hyprland-plugins = mkHyprDep {
         owner = "hyprwm";
         repo = "hyprland-plugins";
+
+        # FIXME: wait for https://github.com/horriblename/hyprgrass/pull/207
+        rev = "7634792d199d32ed9396d5864e6431cde1cca6bd";
       };
 
       hyprgrass = mkHyprDep {
diff --git a/modules/ags/config/default.nix b/modules/ags/config/default.nix
index 448827be..da955774 100644
--- a/modules/ags/config/default.nix
+++ b/modules/ags/config/default.nix
@@ -1,3 +1,3 @@
 {
-  npmDepsHash = "sha256-8+GtIBgcz0aRT36Fdv0D0xytHcV7lDw6SevC/qb/T3w=";
+  npmDepsHash = "sha256-b3zWxaYnv0jFMKk5/Rw7UqL1I+jpw60mYJa4SbhKTPk=";
 }
diff --git a/modules/ags/config/package-lock.json b/modules/ags/config/package-lock.json
index 04e7bcf1..f2b326cf 100644
Binary files a/modules/ags/config/package-lock.json and b/modules/ags/config/package-lock.json differ
diff --git a/modules/ags/config/package.json b/modules/ags/config/package.json
index 47b5e0d0..570deb08 100644
--- a/modules/ags/config/package.json
+++ b/modules/ags/config/package.json
@@ -10,6 +10,6 @@
         "eslint-plugin-jsdoc": "50.6.3",
         "fzf": "0.5.2",
         "jiti": "2.4.2",
-        "typescript-eslint": "8.21.0"
+        "typescript-eslint": "8.22.0"
     }
 }
diff --git a/modules/base/locate/default.nix b/modules/base/locate/default.nix
index f8b1211e..436e2004 100644
--- a/modules/base/locate/default.nix
+++ b/modules/base/locate/default.nix
@@ -52,7 +52,6 @@ in {
     services.locate = {
       enable = true;
       package = pkgs.mlocate;
-      localuser = null;
       interval = "never";
 
       prunePaths = [
diff --git a/scopedPackages/lovelace-components/custom-sidebar/default.nix b/scopedPackages/lovelace-components/custom-sidebar/default.nix
index 48f8e506..7a5a4e5f 100644
--- a/scopedPackages/lovelace-components/custom-sidebar/default.nix
+++ b/scopedPackages/lovelace-components/custom-sidebar/default.nix
@@ -30,7 +30,7 @@ in
 
     pnpmDeps = pnpm.fetchDeps {
       inherit (finalAttrs) pname version src;
-      hash = "sha256-dRj7OxvYNRrqMUx5VXN7sgYcxGLTJr5dMeeZbeCm1do=";
+      hash = "sha256-kuuiG/hfWvq0kTOjU4MFAyPuL5osBE85LVyx/YHFEIw=";
     };
 
     passthru.update = concatTextFile {