diff --git a/apps/update/src/misc.ts b/apps/update/src/misc.ts
index 57b34c3e..72a875a4 100644
--- a/apps/update/src/misc.ts
+++ b/apps/update/src/misc.ts
@@ -43,7 +43,7 @@ export const updateDocker = () => {
 
         const out = spawnSync('updateImages', [imagePath], { shell: true }).stdout.toString();
 
-        if (out !== '# Locked') {
+        if (!out.startsWith('# Locked')) {
             return out;
         }
     };
diff --git a/devices/nos/modules/docker/forgejo/images/act_runner.nix b/devices/nos/modules/docker/forgejo/images/act_runner.nix
index f62ac093..f32a27c6 100644
--- a/devices/nos/modules/docker/forgejo/images/act_runner.nix
+++ b/devices/nos/modules/docker/forgejo/images/act_runner.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "vegardit/gitea-act-runner";
-  imageDigest = "sha256:ea8e9a0304fba7648b62fe19c39c38dd08e8c71b8d2a0cac65f834ccf6215daf";
-  sha256 = "1x2vnnz38jivrk4wmqymxlhmaz0vasq81r6p9zlfr7pwj8hysj4m";
+  imageDigest = "sha256:61c937fd19ead374764f7a00f3e284521b5d0eea8edef6761276e3cd06bf4a9a";
+  sha256 = "032hx148m1anhzkz7sskxx44kzkmfl56y8bsbh4k378gr7h2y8ij";
   finalImageName = imageName;
   finalImageTag = "dind-latest";
 }
diff --git a/devices/nos/modules/docker/immich/images/machine-learning.nix b/devices/nos/modules/docker/immich/images/machine-learning.nix
index cfbc8216..c21638f9 100644
--- a/devices/nos/modules/docker/immich/images/machine-learning.nix
+++ b/devices/nos/modules/docker/immich/images/machine-learning.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/immich-app/immich-machine-learning";
-  imageDigest = "sha256:e8c416445db60c0ec94394c1e0e672b78409664f17de78787c62f6d13d3f6d92";
-  sha256 = "1c89p8p0nwbfnpci0yyin7kg7wr5699v27cnj574690nfw4wppnm";
+  imageDigest = "sha256:a7c897a0b011b031c5f825e1667a6de4793c15adc53300f8ba4170d12a68d913";
+  sha256 = "1di6avyffyx52wa2zdpgspvxsghqpgzsriq3x8dv2vh9rbps9h2i";
   finalImageName = imageName;
   finalImageTag = "release";
 }
diff --git a/devices/nos/modules/docker/immich/images/server.nix b/devices/nos/modules/docker/immich/images/server.nix
index d7da059c..ba4a07de 100644
--- a/devices/nos/modules/docker/immich/images/server.nix
+++ b/devices/nos/modules/docker/immich/images/server.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/immich-app/immich-server";
-  imageDigest = "sha256:d63feeee7a41095b3c1b18607d86a1264bcac53728a19f538a77a6e66043f492";
-  sha256 = "0xlbnwcf445i949z7ai2vw0wfac7c1iapd5fsvlzz7wm29hsv1pg";
+  imageDigest = "sha256:ac215f5c1a52f7b25617924db61d54bb72b534d902ccb58eb595cdba98899aa3";
+  sha256 = "11zr4wg3wn1rhi6ix2c312f7pn6d1a6ic7930pwvaq8anylpch1i";
   finalImageName = imageName;
   finalImageTag = "release";
 }
diff --git a/devices/nos/modules/docker/media/bazarr/images/bazarr.nix b/devices/nos/modules/docker/media/bazarr/images/bazarr.nix
index cf3f975f..5884803a 100644
--- a/devices/nos/modules/docker/media/bazarr/images/bazarr.nix
+++ b/devices/nos/modules/docker/media/bazarr/images/bazarr.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "ghcr.io/linuxserver/bazarr";
-  imageDigest = "sha256:81e922037f03d40c77220d20ed73591b0ef9995638d5c68ff2c5d82ae36eea8d";
-  sha256 = "17x0x19rfs69fzdqj90l35c0ifk81hrnql3lq73jakdmqr283hdz";
+  imageDigest = "sha256:88684337f4e3ea6c47623e47c5c27f798ed0d24fbca3e08c8d04be7a2b8a5668";
+  sha256 = "1r9jrbc9vqxnk6sh3k8c6k9c1c64498fk61nbvgasxhaf4l82cz1";
   finalImageName = imageName;
   finalImageTag = "latest";
 }
diff --git a/devices/nos/modules/jellyfin/images/jfa-go.nix b/devices/nos/modules/jellyfin/images/jfa-go.nix
index 7e134d66..18dab44d 100644
--- a/devices/nos/modules/jellyfin/images/jfa-go.nix
+++ b/devices/nos/modules/jellyfin/images/jfa-go.nix
@@ -1,8 +1,8 @@
 pkgs:
 pkgs.dockerTools.pullImage rec {
   imageName = "hrfee/jfa-go";
-  imageDigest = "sha256:5254d210cbd45e7423e7f2ae31e5e6dcfa232311ee79da8edd3b7982b144c598";
-  sha256 = "17nwfa9jb2adrx4krvalinsggizwwkn5aq2dmrpr204zq1rhcylb";
+  imageDigest = "sha256:739977423a29f65811d50d1bb98571db38da109e2f6f2d2dc4384092d009cacc";
+  sha256 = "07dcxwqgkk2kb2mr3pvmabbmry39sw03dqymzhs9gws489w4wzcm";
   finalImageName = imageName;
   finalImageTag = "unstable";
 }
diff --git a/flake.lock b/flake.lock
index b09be69d..3c106d47 100644
Binary files a/flake.lock and b/flake.lock differ
diff --git a/legacyPackages/firefox-addons/generated-firefox-addons.nix b/legacyPackages/firefox-addons/generated-firefox-addons.nix
index 2febb72b..579ac495 100644
--- a/legacyPackages/firefox-addons/generated-firefox-addons.nix
+++ b/legacyPackages/firefox-addons/generated-firefox-addons.nix
@@ -82,10 +82,10 @@
   };
   "darkreader" = buildFirefoxXpiAddon {
     pname = "darkreader";
-    version = "4.9.94";
+    version = "4.9.96";
     addonId = "addon@darkreader.org";
-    url = "https://addons.mozilla.org/firefox/downloads/file/4359254/darkreader-4.9.94.xpi";
-    sha256 = "251c4e7d0a30c0cab006803600e59ab92dcc0c606429740d42677846d4c9ccd6";
+    url = "https://addons.mozilla.org/firefox/downloads/file/4378073/darkreader-4.9.96.xpi";
+    sha256 = "6e2f1a36d2398195b0cd7ee0fcb198ea4db6a57a1b3bf7b2cf5f17a8768f477e";
     meta = with lib; {
       homepage = "https://darkreader.org/";
       description = "Dark mode for every website. Take care of your eyes, use dark theme for night and daily browsing.";
diff --git a/legacyPackages/lovelace-components/custom-sidebar/default.nix b/legacyPackages/lovelace-components/custom-sidebar/default.nix
index 98cfe75b..85393d01 100644
--- a/legacyPackages/lovelace-components/custom-sidebar/default.nix
+++ b/legacyPackages/lovelace-components/custom-sidebar/default.nix
@@ -30,7 +30,7 @@ in
 
     pnpmDeps = pnpm.fetchDeps {
       inherit (finalAttrs) pname version src;
-      hash = "sha256-M5PpW8bUoOPeNZefknNxcoWBYqI7AXN37fQ41rHnEa8=";
+      hash = "sha256-kjEgOaBlWtJbBOpWv2OzRqIT2TJK1sDJzpp41JQv6CU=";
     };
 
     passthru.update = concatTextFile {