diff --git a/devices/nos/modules/docker/forgejo/images/forgejo.nix b/devices/nos/modules/docker/forgejo/images/forgejo.nix
index efa47f02..c0465d85 100644
--- a/devices/nos/modules/docker/forgejo/images/forgejo.nix
+++ b/devices/nos/modules/docker/forgejo/images/forgejo.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "codeberg.org/forgejo/forgejo";
-  imageDigest = "sha256:085092799d1b25370956972185145607246d692da64c18ef55c2da20eecc855d";
-  sha256 = "1qqla94dw8jr2rq85316xqs0lbihmlq75kpskdhlx6n9kh2z7x88";
+  imageDigest = "sha256:dc2267f989b8c8f5b9152b11bbd353d4f1a097619c551558b01b8638554e9f5a";
+  sha256 = "188bpkf5bq3sr9k84335z4cdr8hdcps5dvlhhm2gxqzv96wg0dwk";
   finalImageName = imageName;
   finalImageTag = "9";
 }
diff --git a/devices/nos/modules/docker/immich/images/machine-learning.nix b/devices/nos/modules/docker/immich/images/machine-learning.nix
index 9ef33e3c..cfbc8216 100644
--- a/devices/nos/modules/docker/immich/images/machine-learning.nix
+++ b/devices/nos/modules/docker/immich/images/machine-learning.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/immich-app/immich-machine-learning";
-  imageDigest = "sha256:4d89a309fd08a93649f1ae4a7572ae98f09d66b4c1dfb7916b71d31dec7eda38";
-  sha256 = "1xd94gfxvfx49gj5vq6dfjgpvk2man69kxqydadnbhck8awqx7g3";
+  imageDigest = "sha256:e8c416445db60c0ec94394c1e0e672b78409664f17de78787c62f6d13d3f6d92";
+  sha256 = "1c89p8p0nwbfnpci0yyin7kg7wr5699v27cnj574690nfw4wppnm";
   finalImageName = imageName;
   finalImageTag = "release";
 }
diff --git a/devices/nos/modules/docker/immich/images/server.nix b/devices/nos/modules/docker/immich/images/server.nix
index 27beb90f..d7da059c 100644
--- a/devices/nos/modules/docker/immich/images/server.nix
+++ b/devices/nos/modules/docker/immich/images/server.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/immich-app/immich-server";
-  imageDigest = "sha256:f158810c90f80162f9b08729bbaec963731f12662960be38ff93093b78a0bbdf";
-  sha256 = "062vlbjyn214z8knamjk399zv78cibd4bbyvmcmn08d2bk4ra5qv";
+  imageDigest = "sha256:d63feeee7a41095b3c1b18607d86a1264bcac53728a19f538a77a6e66043f492";
+  sha256 = "0xlbnwcf445i949z7ai2vw0wfac7c1iapd5fsvlzz7wm29hsv1pg";
   finalImageName = imageName;
   finalImageTag = "release";
 }
diff --git a/devices/nos/modules/docker/media/bazarr/images/bazarr.nix b/devices/nos/modules/docker/media/bazarr/images/bazarr.nix
index 202b0a8f..cf3f975f 100644
--- a/devices/nos/modules/docker/media/bazarr/images/bazarr.nix
+++ b/devices/nos/modules/docker/media/bazarr/images/bazarr.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/linuxserver/bazarr";
-  imageDigest = "sha256:5e915ab0bdf0aed036f2bce05abcfa85e4fb748df982cdbca1e600a77e02ab24";
-  sha256 = "1snyqdwyg51icbryrzbd0xaq40j4qmdzikxyw2s64lq9q5vmf6xy";
+  imageDigest = "sha256:81e922037f03d40c77220d20ed73591b0ef9995638d5c68ff2c5d82ae36eea8d";
+  sha256 = "17x0x19rfs69fzdqj90l35c0ifk81hrnql3lq73jakdmqr283hdz";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/devices/nos/modules/docker/nextcloud/images/nextcloud.nix b/devices/nos/modules/docker/nextcloud/images/nextcloud.nix
index 31d8bac7..0d12eab5 100644
--- a/devices/nos/modules/docker/nextcloud/images/nextcloud.nix
+++ b/devices/nos/modules/docker/nextcloud/images/nextcloud.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "nextcloud";
-  imageDigest = "sha256:a45c76bad7a7cdc9b6d034409f1dabc23cc6bd3e6bb3ce62866eda1f9c10d114";
-  sha256 = "0n077ihjj6zgkp7h7g1y71g0qkagykiq46hl9kwjnc6m2fgzlfmm";
+  imageDigest = "sha256:57387ca28bbbbc1fb2e7305a4750c28354f5f6ecf7201fef2af50c144f75f6f3";
+  sha256 = "01vsrmjriadpxx27hwr71z7r3cfb6l592srbi0mhsxzbjc64zmm4";
   finalImageName = imageName;
   finalImageTag = "fpm";
 }
diff --git a/flake.lock b/flake.lock
index af1f8ca4..912bf022 100644
Binary files a/flake.lock and b/flake.lock differ
diff --git a/flake.nix b/flake.nix
index fc05d5f3..045d2955 100644
Binary files a/flake.nix and b/flake.nix differ
diff --git a/inputs.nix b/inputs.nix
index 6cd36525..5b716026 100644
--- a/inputs.nix
+++ b/inputs.nix
@@ -113,9 +113,6 @@ let
       hyprland = mkDep {
         owner = "hyprwm";
         repo = "Hyprland";
-
-        # FIXME: remove this once plugins chase latest hyprland
-        rev = "b6e226c3200276978e487a68a16fd696fcb7e7c8";
       };
 
       hyprland-plugins = mkHyprDep {
diff --git a/legacyPackages/firefox-addons/generated-firefox-addons.nix b/legacyPackages/firefox-addons/generated-firefox-addons.nix
index 8ff15da6..2febb72b 100644
--- a/legacyPackages/firefox-addons/generated-firefox-addons.nix
+++ b/legacyPackages/firefox-addons/generated-firefox-addons.nix
@@ -243,10 +243,10 @@
   };
   "sponsorblock" = buildFirefoxXpiAddon {
     pname = "sponsorblock";
-    version = "5.9.4";
+    version = "5.9.5";
     addonId = "sponsorBlocker@ajay.app";
-    url = "https://addons.mozilla.org/firefox/downloads/file/4364207/sponsorblock-5.9.4.xpi";
-    sha256 = "1bff70a70685caaf444b57984a26c910a456bbbcc50d24d2d58a081ba114f7a3";
+    url = "https://addons.mozilla.org/firefox/downloads/file/4372080/sponsorblock-5.9.5.xpi";
+    sha256 = "038d23a8ad7620817f5f96d883c03771208b80500273a61e63017bbaed875741";
     meta = with lib; {
       homepage = "https://sponsor.ajay.app";
       description = "Easily skip YouTube video sponsors. When you visit a YouTube video, the extension will check the database for reported sponsors and automatically skip known sponsors. You can also report sponsors in videos. Other browsers: https://sponsor.ajay.app";