diff --git a/nix/configurations/vanadium/overlay.nix b/nix/configurations/vanadium/overlay.nix
index b866a7f9..feeefa87 100644
--- a/nix/configurations/vanadium/overlay.nix
+++ b/nix/configurations/vanadium/overlay.nix
@@ -54,18 +54,4 @@ in
         ./patches/fcitx5-chinese-addons/disable-fullwidth.patch
         # Note: disabling pinyin helper breaks canjie
       ];
-
-      # TODO: remove this when upstream is updated
-      sudo.__output.patches.__append = [
-        (final.fetchpatch {
-          name = "CVE-2025-32462";
-          url = "https://github.com/sudo-project/sudo/commit/d530367828e3713d09489872743eb92d31fb11ff.patch";
-          hash = "sha256-mS8fcPV1QDv9SDuGN7dfDLtVLSBP+apotYW1UsEBPvU=";
-        })
-        (final.fetchpatch {
-          name = "CVE-2025-32463";
-          url = "https://github.com/sudo-project/sudo/commit/fdafc2ceb36382b07e604c0f39903d56bef54016.patch";
-          hash = "sha256-4FP8z5pKwcOfJxjJ9X/IbCgriKJm1H/HnswuvYjBlt8=";
-        })
-      ];
     }
diff --git a/npins/sources.json b/npins/sources.json
index 3c5cfd5d..a4509740 100644
--- a/npins/sources.json
+++ b/npins/sources.json
@@ -54,9 +54,9 @@
       },
       "branch": "release-25.05",
       "submodules": false,
-      "revision": "366f00797b1efb70f2882d3da485e3c10fd3d557",
-      "url": "https://github.com/nix-community/home-manager/archive/366f00797b1efb70f2882d3da485e3c10fd3d557.tar.gz",
-      "hash": "0kl0iw1n466h74ijc689a5l9k4wixpx29046cqzdc39wj2ids79f"
+      "revision": "501cfec8277f931a9c9af9f23d3105c537faeafe",
+      "url": "https://github.com/nix-community/home-manager/archive/501cfec8277f931a9c9af9f23d3105c537faeafe.tar.gz",
+      "hash": "0h38ii2g1i54h243jx7ghbr5asfc46ai3q53qzylsksk4v72qsmm"
     },
     "infuse": {
       "type": "GitRelease",
@@ -147,9 +147,9 @@
       },
       "branch": "master",
       "submodules": false,
-      "revision": "98236410ea0fe204d0447149537a924fb71a6d4f",
-      "url": "https://github.com/NixOS/nixos-hardware/archive/98236410ea0fe204d0447149537a924fb71a6d4f.tar.gz",
-      "hash": "005wz7dfk2mmcymqxpi00zgag21bb83bk3wx174hm6nvk1wmqvfs"
+      "revision": "497ae1357f1ac97f1aea31a4cb74ad0d534ef41f",
+      "url": "https://github.com/NixOS/nixos-hardware/archive/497ae1357f1ac97f1aea31a4cb74ad0d534ef41f.tar.gz",
+      "hash": "1p177s0hapjcy75ivjzgzm22i7vma49mjxnn6z9j34awddwqqznp"
     },
     "nixpkgs": {
       "type": "Git",
@@ -160,9 +160,9 @@
       },
       "branch": "nixos-25.05",
       "submodules": false,
-      "revision": "b43c397f6c213918d6cfe6e3550abfe79b5d1c51",
-      "url": "https://github.com/NixOS/nixpkgs/archive/b43c397f6c213918d6cfe6e3550abfe79b5d1c51.tar.gz",
-      "hash": "1dkp9sxci4b4f111x0ck493fiag68qjs5c927khzcj2a5pdbsayl"
+      "revision": "7a732ed41ca0dd64b4b71b563ab9805a80a7d693",
+      "url": "https://github.com/NixOS/nixpkgs/archive/7a732ed41ca0dd64b4b71b563ab9805a80a7d693.tar.gz",
+      "hash": "0c4zz64ddgrnhcbcivl4gflgpad0c1x01fsxlm7p2kjxvjz9pfxv"
     },
     "nur": {
       "type": "Git",
@@ -173,9 +173,9 @@
       },
       "branch": "main",
       "submodules": false,
-      "revision": "c41210bd9aea6b7cd8fea393385bef84ee1355e8",
-      "url": "https://github.com/nix-community/nur/archive/c41210bd9aea6b7cd8fea393385bef84ee1355e8.tar.gz",
-      "hash": "0lc3rzqspf9lz7fx4xb8k6690bf0hxdam51nlfckf4llx523vl9w"
+      "revision": "0706f128204a5c0a6e15bcdb408db96ef8454bca",
+      "url": "https://github.com/nix-community/nur/archive/0706f128204a5c0a6e15bcdb408db96ef8454bca.tar.gz",
+      "hash": "11nbhhz6qnl2pwg7451jkzsdx56j3kaz4s9wfv8pc2jsyaybls9l"
     },
     "pin-emacs28": {
       "type": "Git",