diff --git a/apps/extract-subs/default.nix b/apps/extract-subs/default.nix
index 899521d6..0e7a6b8f 100644
--- a/apps/extract-subs/default.nix
+++ b/apps/extract-subs/default.nix
@@ -5,7 +5,7 @@
 }:
 buildApp {
   src = ./.;
-  npmDepsHash = "sha256-I4ABEIGeIwSsXkpmxU47ubdbgPT1+gnZkGqCRglxr8s=";
+  npmDepsHash = "sha256-HSGFBZWGa92YwVK3MirUvZymixpo8aBk/7eVwZOJSfw=";
 
   runtimeInputs = [
     ffmpeg-full
diff --git a/apps/extract-subs/package-lock.json b/apps/extract-subs/package-lock.json
index 2f94b20d..7beffc7d 100644
Binary files a/apps/extract-subs/package-lock.json and b/apps/extract-subs/package-lock.json differ
diff --git a/apps/update-sources/default.nix b/apps/update-sources/default.nix
index ac1bfd41..ce9c81f0 100644
--- a/apps/update-sources/default.nix
+++ b/apps/update-sources/default.nix
@@ -10,7 +10,7 @@
 }:
 buildApp {
   src = ./.;
-  npmDepsHash = "sha256-lSdo0wTSgGOa2+TXmfm8mSXGwj3P0z/+UZIHiSs6gSQ=";
+  npmDepsHash = "sha256-AkOQ0gyQgRGPEtIs8eva5KRjzDTnxP7Ho/ec9N6dS9Y=";
 
   runtimeInputs = [
     findutils
diff --git a/apps/update-sources/package-lock.json b/apps/update-sources/package-lock.json
index f0348ef3..8b6e00d3 100644
Binary files a/apps/update-sources/package-lock.json and b/apps/update-sources/package-lock.json differ
diff --git a/configurations/nos/modules/docker/forgejo/images/postgres.nix b/configurations/nos/modules/docker/forgejo/images/postgres.nix
index fa8257e0..617b5725 100644
--- a/configurations/nos/modules/docker/forgejo/images/postgres.nix
+++ b/configurations/nos/modules/docker/forgejo/images/postgres.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "postgres";
-  imageDigest = "sha256:7fe0928f6de61208d6b39730456085d74578046df4c684fa198f0fb065f4381e";
-  hash = "sha256-tE1HB3dHqRzwOkvKx7ZKfmyAm9UoMrP0x+DQOIwUQBE=";
+  imageDigest = "sha256:84dee213c689b6dfcc0e2692ddd66adcd7314057175ea7aa05500c527e0f807a";
+  hash = "sha256-ZojtW6DMB0rsW1ywVdSg26S727ru2S5o/dsC50RKmOE=";
   finalImageName = imageName;
   finalImageTag = "14";
 }
diff --git a/configurations/nos/modules/docker/freshrss/images/postgres.nix b/configurations/nos/modules/docker/freshrss/images/postgres.nix
index fa8257e0..617b5725 100644
--- a/configurations/nos/modules/docker/freshrss/images/postgres.nix
+++ b/configurations/nos/modules/docker/freshrss/images/postgres.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "postgres";
-  imageDigest = "sha256:7fe0928f6de61208d6b39730456085d74578046df4c684fa198f0fb065f4381e";
-  hash = "sha256-tE1HB3dHqRzwOkvKx7ZKfmyAm9UoMrP0x+DQOIwUQBE=";
+  imageDigest = "sha256:84dee213c689b6dfcc0e2692ddd66adcd7314057175ea7aa05500c527e0f807a";
+  hash = "sha256-ZojtW6DMB0rsW1ywVdSg26S727ru2S5o/dsC50RKmOE=";
   finalImageName = imageName;
   finalImageTag = "14";
 }
diff --git a/configurations/nos/modules/docker/freshrss/images/rss-bridge.nix b/configurations/nos/modules/docker/freshrss/images/rss-bridge.nix
index a91864ed..82741e1c 100644
--- a/configurations/nos/modules/docker/freshrss/images/rss-bridge.nix
+++ b/configurations/nos/modules/docker/freshrss/images/rss-bridge.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "rssbridge/rss-bridge";
-  imageDigest = "sha256:432e82149408951fe5865d85726e034e507106208fd13ba44e9fd23facaccbcc";
-  hash = "sha256-xUAcKOHVljSPoAnm/opzkgJYdm0jLyCoVNYjNPYIZxM=";
+  imageDigest = "sha256:035d245d5f4e541451ce737d994c51d69506e50759f9e3bc6f2491668caed1f6";
+  hash = "sha256-TZXKlpjSnj1Dl8CvsS7pGW3rCrVlPqfNypor7bdSQyI=";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/configurations/nos/modules/docker/nextcloud/images/nextcloud.nix b/configurations/nos/modules/docker/nextcloud/images/nextcloud.nix
index 68d470d9..69ed82c7 100644
--- a/configurations/nos/modules/docker/nextcloud/images/nextcloud.nix
+++ b/configurations/nos/modules/docker/nextcloud/images/nextcloud.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "nextcloud";
-  imageDigest = "sha256:4c898a6e3a17fcd3bcbe9d2450079a95581cfb9f0dbfca246c39bd60c77d123b";
-  hash = "sha256-kK4F6UQVJm+r98/FH5uMG7VyVm5zzzmA7smc3IoDpFI=";
+  imageDigest = "sha256:07c4bfc1c38a3326e3ee777cbe6691de74424486bdc21ac31d291902c041296f";
+  hash = "sha256-xYqfCZAOBERPerr2Nd0c5dyh6q9UdyGGFtHwMIVVGMY=";
   finalImageName = imageName;
   finalImageTag = "fpm";
 }
diff --git a/configurations/nos/modules/docker/nextcloud/images/nginx.nix b/configurations/nos/modules/docker/nextcloud/images/nginx.nix
index e78b547f..93720d41 100644
--- a/configurations/nos/modules/docker/nextcloud/images/nginx.nix
+++ b/configurations/nos/modules/docker/nextcloud/images/nginx.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "nginx";
-  imageDigest = "sha256:0a399eb16751829e1af26fea27b20c3ec28d7ab1fb72182879dcae1cca21206a";
-  hash = "sha256-ffnlb1m2YeAr9Nj4oSYINmGTrvcazCuEMQaws6jCjpA=";
+  imageDigest = "sha256:bc2f6a7c8ddbccf55bdb19659ce3b0a92ca6559e86d42677a5a02ef6bda2fcef";
+  hash = "sha256-ph+Q+mh2IB5IRm8O1X2dxrx+Qk/LJjAGN38oa7AcXqg=";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/flake.lock b/flake.lock
index c2c7f5f6..d5c1df43 100644
Binary files a/flake.lock and b/flake.lock differ
diff --git a/flake.nix b/flake.nix
index 48661553..32abf0ad 100644
Binary files a/flake.nix and b/flake.nix differ
diff --git a/inputs/default.nix b/inputs/default.nix
index 646dae36..5fedaeec 100644
--- a/inputs/default.nix
+++ b/inputs/default.nix
@@ -229,6 +229,9 @@ let
     jovian = mkInput {
       owner = "Jovian-Experiments";
       repo = "Jovian-NixOS";
+
+      # FIXME: gamescope build failure on latest
+      rev = "77fb0818cb42ca0db98839d47bbc6a317c286282";
     };
   };
 
diff --git a/scopedPackages/firefox-addons/generated-firefox-addons.nix b/scopedPackages/firefox-addons/generated-firefox-addons.nix
index 0fff2756..f2a38ab8 100644
--- a/scopedPackages/firefox-addons/generated-firefox-addons.nix
+++ b/scopedPackages/firefox-addons/generated-firefox-addons.nix
@@ -235,10 +235,10 @@
   };
   "sound-volume" = buildFirefoxXpiAddon {
     pname = "sound-volume";
-    version = "1.5.8";
+    version = "1.5.9";
     addonId = "{c4b582ec-4343-438c-bda2-2f691c16c262}";
-    url = "https://addons.mozilla.org/firefox/downloads/file/4409489/600_sound_volume-1.5.8.xpi";
-    sha256 = "a23950c48ba15cc59906c20298194c7c762951990b545e038af8f6bfd58f8178";
+    url = "https://addons.mozilla.org/firefox/downloads/file/4425457/600_sound_volume-1.5.9.xpi";
+    sha256 = "ecbf1f8f8958e7d70fcc0bdadc07e5c92d3e7fd2e9f00f8ed29f330545a748b1";
     meta = with lib; {
       description = "Up to 600% volume boost";
       license = licenses.mpl20;