diff --git a/pkgs/openwork/default.nix b/pkgs/openwork/default.nix
index 70783ad..9eb20e5 100644
--- a/pkgs/openwork/default.nix
+++ b/pkgs/openwork/default.nix
@@ -6,7 +6,7 @@
   stdenvNoCC,
 }: let
   pname = "openwork";
-  version = "0.18.23";
+  version = "0.18.33";
 
   src = fetchurl {
     url =
@@ -16,7 +16,7 @@
     hash =
       if stdenvNoCC.hostPlatform.system == "aarch64-linux"
       then "sha256-ZSoAcOH0/gQynSCY8qCvysaNBnUl/G8Zz66a11y60Qs="
-      else "sha256-8VMWeQIbdREGH9hwLwGPz3VvBobG7J7tDC0ygL25nAY=";
+      else "sha256-ic8YRxBHIIaTrbJhlB7+tU9VNqXNwt813dSoiiohS+o=";
   };
 
   appimageContents = appimageTools.extractType2 {inherit pname version src;};
diff --git a/pkgs/vibetyper/default.nix b/pkgs/vibetyper/default.nix
index f74439b..bb598c9 100644
--- a/pkgs/vibetyper/default.nix
+++ b/pkgs/vibetyper/default.nix
@@ -6,12 +6,12 @@
   makeWrapper,
 }: let
   pname = "vibetyper";
-  version = "1.4.1";
+  version = "1.4.2";
   # Upstream publishes to an unversioned URL — ./update.sh watches Last-Modified
   # and refreshes the sha256 when the binary changes. Bump `version` manually.
   src = fetchurl {
     url = "https://cdn.vibetyper.com/releases/linux/VibeTyper.AppImage";
-    sha256 = "sha256-mhXWEKvDgzxJrqIjzUWpfPM8qwKf6YYLsbjqqjtEk5s=";
+    sha256 = "sha256-NYBsVtpzidT/kZPibbkWMWP7r3y/w+17iKTPkI6wsHY=";
   };
   appimageContents = appimageTools.extractType2 {inherit pname version src;};
 in