diff --git a/flake.lock b/flake.lock
index dfdfdf98b..7794f1a5c 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,11 +2,11 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1776548001,
-        "narHash": "sha256-ZSK0NL4a1BwVbbTBoSnWgbJy9HeZFXLYQizjb2DPF24=",
+        "lastModified": 1789149629,
+        "narHash": "sha256-H6GwaZzZf+4npqv0tph94w9tZddSjFjmQrVsW0z78uk=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "b12141ef619e0a9c1c84dc8c684040326f27cdcc",
+        "rev": "eaad089433ca2bb662274377d33df3d0e51ef28b",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index d7852b581..b1d75162e 100644
--- a/flake.nix
+++ b/flake.nix
@@ -8,13 +8,13 @@
       system = "x86_64-linux";
       pkgs = nixpkgs.legacyPackages.${system};
     in {
-      packages.${system}.default = pkgs.stdenv.mkDerivation {
+      packages.${system}.default = pkgs.stdenv.mkDerivation rec {
         pname = "bestclient";
-        version = "1.5";
+        version = "2.3";
 
         src = pkgs.fetchurl {
-          url = "https://github.com/RoflikBEST/bestdownload/releases/download/v1.5/bestclient.tar.xz";
-          hash = "sha256-fDjtdj6mC76IXJLul0wfj7+7GETU/vveJ8G6S4LskLk";
+          url = "https://github.com/BestProjectTeam/BestClient/releases/download/v${version}/BestClient-linux.tar.xz";
+          hash = "sha256-ngp73/RXIY1nCky3hhrTN+gRlBJVyw9TJJAMNTjpy6o=";
         };
 
         nativeBuildInputs = [ 
@@ -33,6 +33,11 @@
 	        pkgs.libnotify
         ];
 
+        # Keep URL and sourceRoot derived from `version` so future bumps
+        # only need to touch `version` (plus the src hash, which Nix requires
+        # to be pinned and can never be derived).
+        sourceRoot = "bestclient-${version}-linux_x86_64";
+
         installPhase = ''
         mkdir -p $out/bin $out/share/applications
         cp -r . $out/