diff --git a/.config/flakebox/id b/.config/flakebox/id
index 0e4b990..ce66bf7 100644
--- a/.config/flakebox/id
+++ b/.config/flakebox/id
@@ -1 +1 @@
-0dfb8b970d6039bcc16e334c5909de71a6d0a075c21b1577421ca64867023d05f861d1ef225943cc6606e318baa1bd7649bf0cadc7d7e23ceef96a4d5f7de8c0
+73cf0906ef0f6cf3d29caed7d58a7f826172d3ee593ad3510289eee2937ecd4d71074d62b0c327a7e026fd61d96d09c0b43fc40d7934b2a61fc85dbee554c210
diff --git a/.github/workflows/flakebox-ci.yml b/.github/workflows/flakebox-ci.yml
index 02f6d49..48d0318 100644
--- a/.github/workflows/flakebox-ci.yml
+++ b/.github/workflows/flakebox-ci.yml
@@ -9,7 +9,7 @@ jobs:
     - name: Install Nix
       uses: DeterminateSystems/nix-installer-action@v4
     - continue-on-error: true
-      uses: cachix/cachix-action@v12
+      uses: cachix/cachix-action@v16
       with:
         authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
         name: rustshop
@@ -47,7 +47,7 @@ jobs:
     - name: Install Nix
       uses: DeterminateSystems/nix-installer-action@v4
     - continue-on-error: true
-      uses: cachix/cachix-action@v12
+      uses: cachix/cachix-action@v16
       with:
         authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
         name: rustshop
diff --git a/.github/workflows/flakebox-flakehub-publish.yml b/.github/workflows/flakebox-flakehub-publish.yml
index 5b81f6e..7152f53 100644
--- a/.github/workflows/flakebox-flakehub-publish.yml
+++ b/.github/workflows/flakebox-flakehub-publish.yml
@@ -12,7 +12,7 @@ jobs:
         ref: ${{ (inputs.tag != null) && format('refs/tags/{0}', inputs.tag) || ''
           }}
     - name: Install Nix
-      uses: DeterminateSystems/nix-installer-action@v4
+      uses: DeterminateSystems/nix-installer-action@v21
     - name: Flakehub Push
       uses: DeterminateSystems/flakehub-push@main
       with:
diff --git a/flake.lock b/flake.lock
index f2b8f87..efdc4b6 100644
--- a/flake.lock
+++ b/flake.lock
@@ -83,11 +83,11 @@
         "rust-analyzer-src": "rust-analyzer-src"
       },
       "locked": {
-        "lastModified": 1762324835,
-        "narHash": "sha256-OJdnrIFHKBy97Fn88//ag1QK6iuBVafrU3uAvccGNUo=",
+        "lastModified": 1767941162,
+        "narHash": "sha256-7qJDycrXto4xrQWHbj5BkrRWt/hcfZtjlCstEJTyfJ8=",
         "owner": "nix-community",
         "repo": "fenix",
-        "rev": "9bfa4155d454bbe19e076a23355cff95f0a407c0",
+        "rev": "80b1a19a713e2558c411f3259fecb1edd4b5b327",
         "type": "github"
       },
       "original": {
@@ -136,16 +136,16 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1762111121,
-        "narHash": "sha256-4vhDuZ7OZaZmKKrnDpxLZZpGIJvAeMtK6FKLJYUtAdw=",
+        "lastModified": 1767799921,
+        "narHash": "sha256-r4GVX+FToWVE2My8VVZH4V0pTIpnu2ZE8/Z4uxGEMBE=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "b3d51a0365f6695e7dd5cdf3e180604530ed33b4",
+        "rev": "d351d0653aeb7877273920cd3e823994e7579b0b",
         "type": "github"
       },
       "original": {
         "owner": "nixos",
-        "ref": "nixos-unstable",
+        "ref": "nixos-25.11",
         "repo": "nixpkgs",
         "type": "github"
       }
@@ -164,11 +164,11 @@
     "rust-analyzer-src": {
       "flake": false,
       "locked": {
-        "lastModified": 1762274641,
-        "narHash": "sha256-upzIY3p+q/NRziTmyQ0fUaKkUJrT81JruB0IxgzdQ7o=",
+        "lastModified": 1767905519,
+        "narHash": "sha256-mRU9VEhGQE9dnOU3pu1Rx3dZO4NpZO+cnC0rPMFcCqE=",
         "owner": "rust-lang",
         "repo": "rust-analyzer",
-        "rev": "5ffe3f45ce89355dc4289e620273ea8b53ca2078",
+        "rev": "ff9a2e88b14907562294838f83963e5966f717de",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index b439ef3..507430a 100644
--- a/flake.nix
+++ b/flake.nix
@@ -2,8 +2,7 @@
   description = "Toolkit for building Nix Flake development environments for Rust projects";
 
   inputs = {
-    # TODO: use nixos-25.11 when available
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11";
 
     systems.url = "github:nix-systems/default";
     flake-utils.url = "github:numtide/flake-utils";
diff --git a/lib/modules/github.nix b/lib/modules/github.nix
index cdc6fbd..5856c4e 100644
--- a/lib/modules/github.nix
+++ b/lib/modules/github.nix
@@ -119,7 +119,7 @@ in
       cachixCacheStep =
         { name }:
         {
-          uses = "cachix/cachix-action@v12";
+          uses = "cachix/cachix-action@v16";
           "with" = {
             inherit name;
             authToken = "\${{ secrets.CACHIX_AUTH_TOKEN }}";
@@ -271,7 +271,7 @@ in
 
               {
                 name = "Install Nix";
-                uses = "DeterminateSystems/nix-installer-action@v4";
+                uses = "DeterminateSystems/nix-installer-action@v21";
               }
 
               {