diff --git a/apps/update-sources/default.nix b/apps/update-sources/default.nix
index e7b43f8c..f77a8072 100644
--- a/apps/update-sources/default.nix
+++ b/apps/update-sources/default.nix
@@ -7,7 +7,7 @@
 }:
 buildApp {
   src = ./.;
-  npmDepsHash = "sha256-eZTHpejE/OjmQSXJie8u+AZWRw+LoEhLj8Ppsl7YZJU=";
+  npmDepsHash = "sha256-wnhPCujOtksqvwsAFwka7/VdH+RgMXheL7W9uhO8zGk=";
 
   runtimeInputs = [
     nodejs_latest
diff --git a/apps/update-sources/package-lock.json b/apps/update-sources/package-lock.json
index 0421565a..bc947856 100644
Binary files a/apps/update-sources/package-lock.json and b/apps/update-sources/package-lock.json differ
diff --git a/apps/update-sources/package.json b/apps/update-sources/package.json
index 0fe89cb4..801e2159 100644
--- a/apps/update-sources/package.json
+++ b/apps/update-sources/package.json
@@ -8,14 +8,14 @@
     },
     "devDependencies": {
         "@eslint/js": "9.16.0",
-        "@stylistic/eslint-plugin": "2.11.0",
-        "@types/node": "22.10.1",
+        "@stylistic/eslint-plugin": "2.12.1",
+        "@types/node": "22.10.2",
         "esbuild": "0.24.0",
         "eslint": "9.16.0",
-        "eslint-plugin-jsdoc": "50.6.0",
+        "eslint-plugin-jsdoc": "50.6.1",
         "jiti": "2.4.1",
         "pkg-types": "1.2.1",
         "typescript": "5.7.2",
-        "typescript-eslint": "8.17.0"
+        "typescript-eslint": "8.18.0"
     }
 }
diff --git a/apps/update-sources/src/node-modules.ts b/apps/update-sources/src/node-modules.ts
index 04aeb161..3228b4f7 100644
--- a/apps/update-sources/src/node-modules.ts
+++ b/apps/update-sources/src/node-modules.ts
@@ -18,13 +18,14 @@ const updatePackageJson = async(workspaceDir: string, updates: object) => {
     const updateDeps = (deps: string) => {
         Object.keys(currentPackageJson[deps]).forEach((dep) => {
             const versions = outdated[dep];
+            const current = versions?.wanted || versions?.current;
 
-            if (!versions?.current) {
+            if (!current) {
                 return;
             }
 
-            if (!updates[dep]) {
-                updates[dep] = `${versions.current} -> ${versions.latest}`;
+            if (current !== versions.latest) {
+                updates[dep] = `${current} -> ${versions.latest}`;
             }
 
             currentPackageJson[deps][dep] = versions.latest;
@@ -59,7 +60,11 @@ export default async() => {
     const packages = readdirSync(FLAKE, { withFileTypes: true, recursive: true });
 
     for (const path of packages) {
-        if (path.name === 'package.json' && !path.parentPath.includes('node_modules')) {
+        if (
+            path.name === 'package.json' &&
+            !path.parentPath.includes('node_modules') &&
+            !path.parentPath.includes('mk-types') // FIXME: latest breaks
+        ) {
             await updatePackageJson(path.parentPath, updates);
 
             const hash = prefetchNpmDeps(path.parentPath);
diff --git a/devices/nos/modules/docker/forgejo/images/act_runner.nix b/devices/nos/modules/docker/forgejo/images/act_runner.nix
index 96640704..e07fb1b1 100644
--- a/devices/nos/modules/docker/forgejo/images/act_runner.nix
+++ b/devices/nos/modules/docker/forgejo/images/act_runner.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "vegardit/gitea-act-runner";
-  imageDigest = "sha256:2b5770e40542c158aabba3a1f600d11fd5a0ffe3ff592fcfcf91be617e7c00f8";
-  sha256 = "1wjchhrxnh5q9mpvdkjzm3ngrdq93634xvg1jm1rzsi5vycpbzgj";
+  imageDigest = "sha256:59ddfdc7e592b72665f86d3c4d7d83ff07a5ddfd711e627a1a8eaca0bd76be23";
+  sha256 = "052a9hqzq8xv2lzwy7il182pb9f854kq6z2pagpf09mgqx4b2bdb";
   finalImageName = imageName;
   finalImageTag = "dind-latest";
 }
diff --git a/devices/nos/modules/docker/freshrss/images/rss-bridge.nix b/devices/nos/modules/docker/freshrss/images/rss-bridge.nix
index 5f854766..f0458270 100644
--- a/devices/nos/modules/docker/freshrss/images/rss-bridge.nix
+++ b/devices/nos/modules/docker/freshrss/images/rss-bridge.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "rssbridge/rss-bridge";
-  imageDigest = "sha256:9de8e139d3583793a9b707c90efca9a1a66298ffe202b73903ad218e412ddef9";
-  sha256 = "0jp68bm96sfniih6r7mj17z3ds70zqg8i4wxh0f6mh8snp6cwwz4";
+  imageDigest = "sha256:02ee316a6cd158706cd15480f44bc4db39ac0f5ab52b76d596083583e7416f7f";
+  sha256 = "0r0qriz01dhd4w56dixlnn71qmcx88r9xk90zp1fpwa5qm9464by";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/devices/nos/modules/docker/media/bazarr/images/bazarr.nix b/devices/nos/modules/docker/media/bazarr/images/bazarr.nix
index 01eda987..7b932a3a 100644
--- a/devices/nos/modules/docker/media/bazarr/images/bazarr.nix
+++ b/devices/nos/modules/docker/media/bazarr/images/bazarr.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/linuxserver/bazarr";
-  imageDigest = "sha256:be98501c48d98eec67a3269cacf884eb122b884d0775cdb8ee9a03947ef2b493";
-  sha256 = "1k49h4wglg3ikmnqywpjfznvbj0j31h58y88i485wpgrvrqv64mh";
+  imageDigest = "sha256:954b303893a33b84075857534ad863dc349b8a9e7e838f134e037558ea84823f";
+  sha256 = "000iizm8ccyr00mzd1w1ld27b1b9ajxlzajd28k3c6lbjc94ni24";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/devices/nos/modules/docker/media/radarr/images/radarr.nix b/devices/nos/modules/docker/media/radarr/images/radarr.nix
index 59796e1b..0c705afe 100644
--- a/devices/nos/modules/docker/media/radarr/images/radarr.nix
+++ b/devices/nos/modules/docker/media/radarr/images/radarr.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/linuxserver/radarr";
-  imageDigest = "sha256:2e37ae0af799e01f413a97ee82c7e581a5b635816df0380889bc65d554dbeb17";
-  sha256 = "1mf15859pz3jdkczhh7phi80d7acajlx3855krigjspb5r8jmsm2";
+  imageDigest = "sha256:18d7873c8b773c10944c475fe96ca8ae79186512d3c6f403bcbd4409c9c4acfc";
+  sha256 = "07i9hx8vi8mki7p7gz3mszk4y4skvgakydip0428pwgsy42w54zk";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/devices/nos/modules/docker/media/sabnzbd/images/sabnzbd.nix b/devices/nos/modules/docker/media/sabnzbd/images/sabnzbd.nix
index fc49c9bc..e4bf7fa6 100644
--- a/devices/nos/modules/docker/media/sabnzbd/images/sabnzbd.nix
+++ b/devices/nos/modules/docker/media/sabnzbd/images/sabnzbd.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/linuxserver/sabnzbd";
-  imageDigest = "sha256:ff682bedd109c45dbad25ab8edcc4f3b837b9ac48c39751fbbb33a858eab97d0";
-  sha256 = "01a2k5jv0vi82fg1vfm5x2rplx34sxgswvpglba5v45b8yis4rgf";
+  imageDigest = "sha256:d0e307ed7ddbda9c93872f02fed402d538aab52b2605e71a2f80c26f5ba8d3c7";
+  sha256 = "0v28vvlzr4acjbfpwh3vqm08lhk8k4v6qyxjbac2wsczkcvpqwck";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/devices/nos/modules/docker/resume/images/postgres.nix b/devices/nos/modules/docker/resume/images/postgres.nix
index a8ccbbac..20ed27a6 100644
--- a/devices/nos/modules/docker/resume/images/postgres.nix
+++ b/devices/nos/modules/docker/resume/images/postgres.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "postgres";
-  imageDigest = "sha256:5d4b2f57adc7739452b0be6cee25f263bfc64b609446bcdd8170354cf8ba8e80";
-  sha256 = "0r6yhvby56mqxak91kcp82qix7vagpr5panrzfvn1z6qcb1fcshm";
+  imageDigest = "sha256:fd3abc9557df27613bd5c5e6608fc62fb04dc90c8e79c3322348d600e4b75478";
+  sha256 = "1y5y3bvswpbacqmcrilw8c51ksw4vl5q2ldb05yx8947p7sgd238";
   finalImageName = imageName;
   finalImageTag = "15-alpine";
 }
diff --git a/devices/nos/modules/docker/vaultwarden/images/vaultwarden.nix b/devices/nos/modules/docker/vaultwarden/images/vaultwarden.nix
index 7709be93..849a7e2f 100644
--- a/devices/nos/modules/docker/vaultwarden/images/vaultwarden.nix
+++ b/devices/nos/modules/docker/vaultwarden/images/vaultwarden.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "quay.io/vaultwarden/server";
-  imageDigest = "sha256:84015c9306cc58f4be8b09c1adc62cfc3b2648b1430e9c15901482f3d870bd14";
-  sha256 = "1r6g9xz272iki08rnbl6ax2f4xw2rgm9xpswwgsk3qxqp23ci5qd";
+  imageDigest = "sha256:0498b67709f769fee36b1acf02f69e8d9981b051aa5b8200878d938bd537d39d";
+  sha256 = "155bsh7v64xp0miaw173yhhandvgdy1qk34n7k3msp9x1ng13in3";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/devices/nos/modules/qbittorrent/vuetorrent.nix b/devices/nos/modules/qbittorrent/vuetorrent.nix
index b686348e..3b6f8b3b 100644
--- a/devices/nos/modules/qbittorrent/vuetorrent.nix
+++ b/devices/nos/modules/qbittorrent/vuetorrent.nix
@@ -1,6 +1,6 @@
 # This file was autogenerated. DO NOT EDIT!
 {
-  version = "2.18.0";
-  url = "https://github.com/VueTorrent/VueTorrent/releases/download/v2.18.0/vuetorrent.zip";
-  hash = "sha256-EagZkbzVNd+kREqq9L4xYMrSaZJYFWZIDCP0Aib+JMo=";
+  version = "2.19.0";
+  url = "https://github.com/VueTorrent/VueTorrent/releases/download/v2.19.0/vuetorrent.zip";
+  hash = "sha256-ZSLXSnYxp7Sr7dZZcIBSZv8hs5VatuxWdv0DsYiOrjE=";
 }
diff --git a/flake.lock b/flake.lock
index d458a9d9..1ca29083 100644
Binary files a/flake.lock and b/flake.lock differ
diff --git a/nixosModules/ags/config/default.nix b/nixosModules/ags/config/default.nix
index 01540814..f4caedfd 100644
--- a/nixosModules/ags/config/default.nix
+++ b/nixosModules/ags/config/default.nix
@@ -1,3 +1,3 @@
 {
-  npmDepsHash = "sha256-74ttfT8C1JBREq9AxLaKVRzu5SMzMi98G8Ss4OAmR4Y=";
+  npmDepsHash = "sha256-MgG4EZOX21uRC6HJuMzagmlmDdtkvtYwt5Es4EdIu7s=";
 }
diff --git a/nixosModules/ags/config/package-lock.json b/nixosModules/ags/config/package-lock.json
index 5ebfda45..97cf09f4 100644
Binary files a/nixosModules/ags/config/package-lock.json and b/nixosModules/ags/config/package-lock.json differ
diff --git a/nixosModules/ags/config/package.json b/nixosModules/ags/config/package.json
index abdd9b29..2368b097 100644
--- a/nixosModules/ags/config/package.json
+++ b/nixosModules/ags/config/package.json
@@ -4,12 +4,12 @@
     "main": "app.ts",
     "dependencies": {
         "@eslint/js": "9.16.0",
-        "@stylistic/eslint-plugin": "2.11.0",
-        "@types/node": "22.10.1",
+        "@stylistic/eslint-plugin": "2.12.1",
+        "@types/node": "22.10.2",
         "eslint": "9.16.0",
-        "eslint-plugin-jsdoc": "50.6.0",
+        "eslint-plugin-jsdoc": "50.6.1",
         "fzf": "0.5.2",
         "jiti": "2.4.1",
-        "typescript-eslint": "8.17.0"
+        "typescript-eslint": "8.18.0"
     }
 }
diff --git a/packages/some-sass-language-server/default.nix b/packages/some-sass-language-server/default.nix
index bbec8f31..93c0e424 100644
--- a/packages/some-sass-language-server/default.nix
+++ b/packages/some-sass-language-server/default.nix
@@ -24,7 +24,7 @@ in
       makeWrapper $out/node_modules/.bin/some-sass-language-server $out/bin/some-sass-language-server
     '';
 
-    npmDepsHash = "sha256-qu3oxvROX466DCJNN/RPnkgEfYqtyAVKgzWx8QI1jAI=";
+    npmDepsHash = "sha256-BRo71A07BhrioiBFisCR01OrVFTIagVTIClZ2Tpjidk=";
 
     passthru.update = writeShellApplication {
       name = "update";
diff --git a/packages/some-sass-language-server/package-lock.json b/packages/some-sass-language-server/package-lock.json
index d17a3512..dbe3006e 100644
Binary files a/packages/some-sass-language-server/package-lock.json and b/packages/some-sass-language-server/package-lock.json differ
diff --git a/packages/some-sass-language-server/package.json b/packages/some-sass-language-server/package.json
index b4551d7e..92761bbc 100644
--- a/packages/some-sass-language-server/package.json
+++ b/packages/some-sass-language-server/package.json
@@ -1,5 +1,5 @@
 {
   "dependencies": {
-    "some-sass-language-server": "2.1.0"
+    "some-sass-language-server": "2.1.1"
   }
 }
diff --git a/scopedPackages/firefox-addons/generated-firefox-addons.nix b/scopedPackages/firefox-addons/generated-firefox-addons.nix
index 0c56f898..334c1c32 100644
--- a/scopedPackages/firefox-addons/generated-firefox-addons.nix
+++ b/scopedPackages/firefox-addons/generated-firefox-addons.nix
@@ -235,10 +235,10 @@
   };
   "sound-volume" = buildFirefoxXpiAddon {
     pname = "sound-volume";
-    version = "1.5.5";
+    version = "1.5.6";
     addonId = "{c4b582ec-4343-438c-bda2-2f691c16c262}";
-    url = "https://addons.mozilla.org/firefox/downloads/file/4219765/600_sound_volume-1.5.5.xpi";
-    sha256 = "efc686d54727f29b5c796f4037f19a5d5f31f77354c9c5f8f47d8768ba24fe98";
+    url = "https://addons.mozilla.org/firefox/downloads/file/4396669/600_sound_volume-1.5.6.xpi";
+    sha256 = "6327d5f27460406f8a91ac7c987247ac89d71c5215483f39b9b9e2345d04ba6a";
     meta = with lib; {
       description = "Up to 600% volume boost";
       license = licenses.mpl20;
diff --git a/scopedPackages/lovelace-components/custom-sidebar/default.nix b/scopedPackages/lovelace-components/custom-sidebar/default.nix
index c2508af3..2f63c11a 100644
--- a/scopedPackages/lovelace-components/custom-sidebar/default.nix
+++ b/scopedPackages/lovelace-components/custom-sidebar/default.nix
@@ -30,7 +30,7 @@ in
 
     pnpmDeps = pnpm.fetchDeps {
       inherit (finalAttrs) pname version src;
-      hash = "sha256-UcUSZ4E7JhNXE6KPcxmbOqQ3Ph48nS25nk5qvB26alE=";
+      hash = "sha256-zZY1dqrHfOH5Aql/KGRP3xJ096y66ZGmTCJf0LRKvKA=";
     };
 
     passthru.update = concatTextFile {