diff --git a/devices/nos/modules/docker/media/radarr/images/radarr.nix b/devices/nos/modules/docker/media/radarr/images/radarr.nix
index 68d9f650..da6295a5 100644
--- a/devices/nos/modules/docker/media/radarr/images/radarr.nix
+++ b/devices/nos/modules/docker/media/radarr/images/radarr.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/linuxserver/radarr";
-  imageDigest = "sha256:e0045d420eaf298a9449e12ed1cce654f171cc1043311f0f1cadaf2afeabe795";
-  sha256 = "10j6m5fn4r2qngkcw1zmz41lf0ipmkg5gs2mz67bx9jxx6iap27q";
+  imageDigest = "sha256:a5a1fdf02aa14abc33a507eafa125ff57cb83f251a519536bce331ce9e008ef7";
+  sha256 = "11f700m69ji47vlz3p7g1rz9mfcgcdrkpqxi124pk8r385pkgxz3";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/devices/nos/modules/docker/media/sonarr/images/sonarr.nix b/devices/nos/modules/docker/media/sonarr/images/sonarr.nix
index 5a984df8..12faec26 100644
--- a/devices/nos/modules/docker/media/sonarr/images/sonarr.nix
+++ b/devices/nos/modules/docker/media/sonarr/images/sonarr.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/linuxserver/sonarr";
-  imageDigest = "sha256:db80ed8022dd15143644752a57db0553e48e23e3da54bdb9833d28ff89206a3c";
-  sha256 = "0qbhjydya2bkv79hk358hrfp3lsnd75x2fqqkb6rx6yp0ywfn4nl";
+  imageDigest = "sha256:c0281bd62b9a75f088fa4a09e5f8776431921883766633cb5e5fbd5a74761155";
+  sha256 = "0bd1hpf4z5vhjgz5fraqav1ig1a522y93kylvin5dmw9zvzv90zy";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/devices/nos/modules/docker/nextcloud/images/nextcloud.nix b/devices/nos/modules/docker/nextcloud/images/nextcloud.nix
index cb7cfeef..31d8bac7 100644
--- a/devices/nos/modules/docker/nextcloud/images/nextcloud.nix
+++ b/devices/nos/modules/docker/nextcloud/images/nextcloud.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "nextcloud";
-  imageDigest = "sha256:29088f7a332ae59f57b0b121bd9d6c6cf0dda1c536c8b7c889f28182e1c26601";
-  sha256 = "00r8l6h2wjqygr9sarp5s6a20gvj1rw4wq7qqmdrl0sm13vzficg";
+  imageDigest = "sha256:a45c76bad7a7cdc9b6d034409f1dabc23cc6bd3e6bb3ce62866eda1f9c10d114";
+  sha256 = "0n077ihjj6zgkp7h7g1y71g0qkagykiq46hl9kwjnc6m2fgzlfmm";
   finalImageName = imageName;
   finalImageTag = "fpm";
 }
diff --git a/devices/nos/modules/docker/vaultwarden/images/vaultwarden.nix b/devices/nos/modules/docker/vaultwarden/images/vaultwarden.nix
index d331ae10..a9eab292 100644
--- a/devices/nos/modules/docker/vaultwarden/images/vaultwarden.nix
+++ b/devices/nos/modules/docker/vaultwarden/images/vaultwarden.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "quay.io/vaultwarden/server";
-  imageDigest = "sha256:c07f5319d20bdbd58a19d7d779a1e97159ce25cb95572baa947c70f58589937c";
-  sha256 = "0a3k5b0718ykakl10jjlyvg7mf72xhmy5izdgidd5sj5lbzm1af6";
+  imageDigest = "sha256:7de8fd442afc26e4932a0b2521e2eec82db9f17667eef7b46fd9c2fa2e639de2";
+  sha256 = "07scp48xbvhz1y7m6sfq2s2s9pij6kj94ngs8ypdj41kxqmnrk6s";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/flake.lock b/flake.lock
index 099d3da9..060228fc 100644
Binary files a/flake.lock and b/flake.lock differ
diff --git a/flake.nix b/flake.nix
index 045d2955..fc05d5f3 100644
Binary files a/flake.nix and b/flake.nix differ
diff --git a/inputs.nix b/inputs.nix
index 5b716026..6cd36525 100644
--- a/inputs.nix
+++ b/inputs.nix
@@ -113,6 +113,9 @@ let
       hyprland = mkDep {
         owner = "hyprwm";
         repo = "Hyprland";
+
+        # FIXME: remove this once plugins chase latest hyprland
+        rev = "b6e226c3200276978e487a68a16fd696fcb7e7c8";
       };
 
       hyprland-plugins = mkHyprDep {
diff --git a/legacyPackages/firefox-addons/generated-firefox-addons.nix b/legacyPackages/firefox-addons/generated-firefox-addons.nix
index e3774552..ab953745 100644
--- a/legacyPackages/firefox-addons/generated-firefox-addons.nix
+++ b/legacyPackages/firefox-addons/generated-firefox-addons.nix
@@ -29,10 +29,10 @@
   };
   "bitwarden" = buildFirefoxXpiAddon {
     pname = "bitwarden";
-    version = "2024.10.0";
+    version = "2024.10.1";
     addonId = "{446900e4-71c2-419f-a6a7-df9c091e268b}";
-    url = "https://addons.mozilla.org/firefox/downloads/file/4363548/bitwarden_password_manager-2024.10.0.xpi";
-    sha256 = "9ea9428444870a74ae1999d77eb12d97a45275c85e83d6afdcbc4597fa3eccfb";
+    url = "https://addons.mozilla.org/firefox/downloads/file/4371752/bitwarden_password_manager-2024.10.1.xpi";
+    sha256 = "7b7357ddce2756dc536b86b5c14139ec09731c1c114ac82807c60fba3ced12a5";
     meta = with lib; {
       homepage = "https://bitwarden.com";
       description = "At home, at work, or on the go, Bitwarden easily secures all your passwords, passkeys, and sensitive information.";
diff --git a/legacyPackages/lovelace-components/custom-sidebar/default.nix b/legacyPackages/lovelace-components/custom-sidebar/default.nix
index 510199ab..4d2a12e5 100644
--- a/legacyPackages/lovelace-components/custom-sidebar/default.nix
+++ b/legacyPackages/lovelace-components/custom-sidebar/default.nix
@@ -30,7 +30,7 @@ in
 
     pnpmDeps = pnpm.fetchDeps {
       inherit (finalAttrs) pname version src;
-      hash = "sha256-C7H8DPTAcHLE5dZr5cUdHnO2u/wkwrKi/TZi1M8SDDI=";
+      hash = "sha256-lqsxo0u52zjz00kgmJZYKjJCO+joWRFtkzjl6cuP9zM=";
     };
 
     passthru.update = concatTextFile {
diff --git a/overlays/build-failures/default.nix b/overlays/build-failures/default.nix
index 7e51b64f..f4756254 100644
--- a/overlays/build-failures/default.nix
+++ b/overlays/build-failures/default.nix
@@ -1,10 +1,11 @@
 final: prev: {
-  # FIXME: dmd doesn't build on latest nixos-unstable. make issue?
+  # FIXME: https://pr-tracker.nelim.org/?pr=351090
   dmd = prev.dmd.overrideAttrs (o: {
-    postPatch =
-      o.postPatch
-      + ''
-        rm dmd/compiler/test/fail_compilation/needspkgmod.d
-      '';
+    postPatch = ''
+      ${o.postPatch}
+
+      substituteInPlace dmd/compiler/test/fail_compilation/needspkgmod.d \
+          --replace-fail 'REQUIRED_ARGS: -Icompilable' 'REQUIRED_ARGS: -Icompilable -L--no-demangle'
+    '';
   });
 }