diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9f1b391..18f1c64 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ## [Unreleased]
 
+### Fixed
+- `openwork` 0.17.30: upstream renamed desktop/icon assets from `@openworkdesktop.{desktop,png}` to `openwork.{desktop,png}` and dropped the `Icon=`/`--no-sandbox` substitutions that are no longer needed
+
 ### Changed
 - Remove duplicate opencode-rules.nix (backward-compat alias preserved)
 - Tool-agnostic naming in coding-rules lib internals
diff --git a/overlays/mods/n8n.nix b/overlays/mods/n8n.nix
index 19ec1b9..65faca9 100644
--- a/overlays/mods/n8n.nix
+++ b/overlays/mods/n8n.nix
@@ -9,13 +9,13 @@
   '';
 in
   prev.n8n.overrideAttrs (finalAttrs: previousAttrs: {
-    version = "2.29.8";
+    version = "2.30.6";
 
     src = prev.fetchFromGitHub {
       owner = "n8n-io";
       repo = "n8n";
       tag = "n8n@${finalAttrs.version}";
-      hash = "sha256-+eiAdofrX1TRNFeD9MtTHt+XBH06c8NQHvTk6vrOU/k=";
+      hash = "sha256-sKS9uv8ftclb9iyCJpFKxCBwLJKiz3aa28Ov8eciJ68=";
     };
 
     pnpmDeps = prev.fetchPnpmDeps {
@@ -23,7 +23,7 @@ in
       pnpm = prev.pnpm_10;
       fetcherVersion = 3;
       prePnpmInstall = patchXlsxLockfile;
-      hash = "sha256-XMPvxTb7cKz3XmJFOAqN42B2VGyzyFPrF0eUU8g/KPU=";
+      hash = "sha256-kuCb9rPLSWqeP9a4aNiPEhJUvEDHIu2IuaFQjRatweA=";
     };
 
     prePnpmInstall = (previousAttrs.prePnpmInstall or "") + patchXlsxLockfile;
diff --git a/pkgs/openwork/default.nix b/pkgs/openwork/default.nix
index 67dbb38..614823c 100644
--- a/pkgs/openwork/default.nix
+++ b/pkgs/openwork/default.nix
@@ -6,7 +6,7 @@
   stdenvNoCC,
 }: let
   pname = "openwork";
-  version = "0.17.3";
+  version = "0.17.30";
 
   src = fetchurl {
     url =
@@ -16,7 +16,7 @@
     hash =
       if stdenvNoCC.hostPlatform.system == "aarch64-linux"
       then "sha256-ZSoAcOH0/gQynSCY8qCvysaNBnUl/G8Zz66a11y60Qs="
-      else "sha256-vrbakPeBY+6N12KOfjRzqTt5CsJ98G1rFH0caaI2qX8=";
+      else "sha256-JyDmPXXTx+XwjY3d41cGbLxA2+Uxj8BYPa6eUekvWgU=";
   };
 
   appimageContents = appimageTools.extractType2 {inherit pname version src;};
@@ -25,12 +25,11 @@ in
     inherit pname version src;
 
     extraInstallCommands = ''
-      install -m 444 -D ${appimageContents}/@openworkdesktop.desktop \
+      install -m 444 -D ${appimageContents}/openwork.desktop \
         $out/share/applications/openwork.desktop
       substituteInPlace $out/share/applications/openwork.desktop \
-        --replace-fail 'Exec=AppRun --no-sandbox %U' 'Exec=${pname} %U' \
-        --replace-fail 'Icon=@openworkdesktop' 'Icon=${pname}'
-      install -m 444 -D ${appimageContents}/@openworkdesktop.png \
+        --replace-fail 'Exec=AppRun %U' 'Exec=${pname} %U'
+      install -m 444 -D ${appimageContents}/openwork.png \
         $out/share/icons/hicolor/512x512/apps/${pname}.png
     '';
 
diff --git a/pkgs/vibetyper/default.nix b/pkgs/vibetyper/default.nix
index 004493e..7bcafe5 100644
--- a/pkgs/vibetyper/default.nix
+++ b/pkgs/vibetyper/default.nix
@@ -5,10 +5,10 @@
   makeWrapper,
 }: let
   pname = "vibetyper";
-  version = "1.3.6";
+  version = "1.3.8";
   src = fetchurl {
     url = "https://cdn.vibetyper.com/releases/linux/VibeTyper.AppImage";
-    sha256 = "sha256-uJ8OlV6L8omWAM14YYEBW9+bC0RqB4wqzdY8o1Ac6fI=";
+    sha256 = "sha256-RbuF34+6tCECfQs/AzUedcQQ9MS6uz6ecfosKnLVQPg=";
   };
   appimageContents = appimageTools.extractType2 {inherit pname version src;};
 in