diff --git a/.github/workflows/build-devcontainers.yml b/.github/workflows/build-devcontainers.yml
index c26d42e1..d35019ef 100644
--- a/.github/workflows/build-devcontainers.yml
+++ b/.github/workflows/build-devcontainers.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@v17
+      - uses: DeterminateSystems/nix-installer-action@v19
       - name: Build
         run: |
           nix build -f ./devcontainers --print-out-paths --no-link > build_paths
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4dc89042..c13ee578 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@v17
+      - uses: DeterminateSystems/nix-installer-action@v19
       - name: Prepare push to binary cache
         uses: cachix/cachix-action@v16
         if: ${{ github.ref == 'refs/heads/master' }}
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 691ce2a1..3d268e6b 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@v17
+      - uses: DeterminateSystems/nix-installer-action@v19
       - name: Check flake lockfile
         uses: DeterminateSystems/flake-checker-action@v9
       - name: Check flake outputs
diff --git a/.github/workflows/iso.yml b/.github/workflows/iso.yml
index 85ccd2a7..28566cbb 100644
--- a/.github/workflows/iso.yml
+++ b/.github/workflows/iso.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@v17
+      - uses: DeterminateSystems/nix-installer-action@v19
       - name: Build ISO
         run: |
           nix build .#images.${{ matrix.arch }}.bootstrap-install-iso --out-link build-iso-result
diff --git a/.github/workflows/site.yml b/.github/workflows/site.yml
index b8033c6d..50f77793 100644
--- a/.github/workflows/site.yml
+++ b/.github/workflows/site.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@v17
+      - uses: DeterminateSystems/nix-installer-action@v19
       - env:
           NIXPKGS_ALLOW_UNFREE: "1"
         run: nix build .#devPackages.x86_64-linux.website
diff --git a/.github/workflows/update-firefox-addons.yml b/.github/workflows/update-firefox-addons.yml
index 9d23a1cb..d3186437 100644
--- a/.github/workflows/update-firefox-addons.yml
+++ b/.github/workflows/update-firefox-addons.yml
@@ -18,7 +18,7 @@ jobs:
         id: metadata
         run: echo "DATE=$(date +%F)" >> "$GITHUB_OUTPUT"
       - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@v17
+      - uses: DeterminateSystems/nix-installer-action@v19
       - env:
           NIXPKGS_ALLOW_UNFREE: "1"
         run: nix develop --impure -c mozilla-addons-to-nix pkgs/firefox-addons/firefox-addons.json pkgs/firefox-addons/default.nix
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index d6329b2a..3b70429a 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -14,7 +14,7 @@ jobs:
       contents: write
     steps:
       - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@v17
+      - uses: DeterminateSystems/nix-installer-action@v19
       - name: Update flake inputs
         run: |
           nix flake update --commit-lock-file --commit-lockfile-summary "flake.lock: update inputs"