diff --git a/changelog.d/20241227_033023_nixpkgs-auto-update-fc-24.05-dev.md b/changelog.d/20241227_033023_nixpkgs-auto-update-fc-24.05-dev.md
new file mode 100644
index 000000000..e895f0883
--- /dev/null
+++ b/changelog.d/20241227_033023_nixpkgs-auto-update-fc-24.05-dev.md
@@ -0,0 +1,6 @@
+
+### NixOS XX.XX platform
+
+- Update nixpkgs from ff898be476375d3673334608f5a41efd9805258a to cc1f352acc315c2b36e5056055c026bfe3dd23cb
+- matomo: continue to allow usage of matomo-4.x
+  - The version is end-of-life now and has been marked as insecure by NixOS upstream. We continue to allow its usage during the 24.05 release cycle, but nonetheless recommend you to upgrade to matomo-5.x
diff --git a/flake.lock b/flake.lock
index a7246aa0c..42294cb74 100644
--- a/flake.lock
+++ b/flake.lock
@@ -410,11 +410,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1734428327,
-        "narHash": "sha256-gKEi/inkCJcoOjt6W2lCb1sNwANe38H2sPJakIRObQg=",
+        "lastModified": 1735270197,
+        "narHash": "sha256-Yi9X6sHeeS4ZAwqvUmGE1MoUl+YiHdhVgCNkKi/9QZQ=",
         "owner": "flyingcircusio",
         "repo": "nixpkgs",
-        "rev": "ff898be476375d3673334608f5a41efd9805258a",
+        "rev": "cc1f352acc315c2b36e5056055c026bfe3dd23cb",
         "type": "github"
       },
       "original": {
diff --git a/nixpkgs-config.nix b/nixpkgs-config.nix
index 19bb58537..240b0c058 100644
--- a/nixpkgs-config.nix
+++ b/nixpkgs-config.nix
@@ -16,5 +16,6 @@
     "docker-24.0.9" # Old installs still use storage driver removed in 25.x.
     "jitsi-meet-1.0.7952" # insecure libolm but this only affects optional e2ee which we don't really support.
     "discourse-3.2.5"  # currently not regularly updated in nixpkgs as upstream keeps changing build system in minor versions
+    "matomo-4.16.1"   # EOL as of 2024-12
   ];
 }
diff --git a/release/package-versions.json b/release/package-versions.json
index 07c5dee07..9f9dc34fb 100644
--- a/release/package-versions.json
+++ b/release/package-versions.json
@@ -70,14 +70,14 @@
     "version": "18.2.4"
   },
   "chromedriver": {
-    "name": "chromedriver-unwrapped-131.0.6778.139",
+    "name": "chromedriver-unwrapped-131.0.6778.204",
     "pname": "chromedriver-unwrapped",
-    "version": "131.0.6778.139"
+    "version": "131.0.6778.204"
   },
   "chromium": {
-    "name": "chromium-131.0.6778.139",
+    "name": "chromium-131.0.6778.204",
     "pname": "chromium",
-    "version": "131.0.6778.139"
+    "version": "131.0.6778.204"
   },
   "cifs-utils": {
     "name": "cifs-utils-7.0",
@@ -220,9 +220,9 @@
     "version": "2.44.2"
   },
   "gitaly": {
-    "name": "gitaly-17.5.4",
+    "name": "gitaly-17.6.2",
     "pname": "gitaly",
-    "version": "17.5.4"
+    "version": "17.6.2"
   },
   "github-runner": {
     "name": "github-runner-2.321.0",
@@ -230,9 +230,9 @@
     "version": "2.321.0"
   },
   "gitlab": {
-    "name": "gitlab-17.5.4",
+    "name": "gitlab-17.6.2",
     "pname": "gitlab",
-    "version": "17.5.4"
+    "version": "17.6.2"
   },
   "gitlab-container-registry": {
     "name": "gitlab-container-registry-4.14.0",
@@ -240,14 +240,14 @@
     "version": "4.14.0"
   },
   "gitlab-ee": {
-    "name": "gitlab-ee-17.5.4",
+    "name": "gitlab-ee-17.6.2",
     "pname": "gitlab-ee",
-    "version": "17.5.4"
+    "version": "17.6.2"
   },
   "gitlab-pages": {
-    "name": "gitlab-pages-17.5.4",
+    "name": "gitlab-pages-17.6.2",
     "pname": "gitlab-pages",
-    "version": "17.5.4"
+    "version": "17.6.2"
   },
   "gitlab-runner": {
     "name": "gitlab-runner-17.1.0",
@@ -255,9 +255,9 @@
     "version": "17.1.0"
   },
   "gitlab-workhorse": {
-    "name": "gitlab-workhorse-17.5.4",
+    "name": "gitlab-workhorse-17.6.2",
     "pname": "gitlab-workhorse",
-    "version": "17.5.4"
+    "version": "17.6.2"
   },
   "glibc": {
     "name": "glibc-2.39-52",
@@ -460,9 +460,9 @@
     "version": "0.2.5"
   },
   "linuxKernelStable": {
-    "name": "linux-5.15.173",
+    "name": "linux-5.15.175",
     "pname": "linux",
-    "version": "5.15.173"
+    "version": "5.15.175"
   },
   "linuxKernelVerify": {
     "name": "linux-6.11",
@@ -505,9 +505,9 @@
     "version": "4.16.1"
   },
   "matomo_5": {
-    "name": "matomo_5-5.1.2",
+    "name": "matomo_5-5.2.0",
     "pname": "matomo_5",
-    "version": "5.1.2"
+    "version": "5.2.0"
   },
   "matrix-synapse": {
     "name": "matrix-synapse-wrapped-1.121.1",
@@ -685,9 +685,9 @@
     "version": "8.0.39-30"
   },
   "percona-server_innovation": {
-    "name": "percona-server-8.4.2-2",
+    "name": "percona-server-8.4.3-3",
     "pname": "percona-server",
-    "version": "8.4.2-2"
+    "version": "8.4.3-3"
   },
   "percona-server_lts": {
     "name": "percona-server-8.0.39-30",
@@ -705,9 +705,9 @@
     "version": "8.3.0-1"
   },
   "percona-xtrabackup_innovation": {
-    "name": "percona-xtrabackup-8.4.0-1",
+    "name": "percona-xtrabackup-8.4.0-2",
     "pname": "percona-xtrabackup",
-    "version": "8.4.0-1"
+    "version": "8.4.0-2"
   },
   "percona-xtrabackup_lts": {
     "name": "percona-xtrabackup-8.0.35-31",
@@ -755,14 +755,14 @@
     "version": "8.1.31"
   },
   "php82": {
-    "name": "php-with-extensions-8.2.26",
+    "name": "php-with-extensions-8.2.27",
     "pname": "php-with-extensions",
-    "version": "8.2.26"
+    "version": "8.2.27"
   },
   "php83": {
-    "name": "php-with-extensions-8.3.14",
+    "name": "php-with-extensions-8.3.15",
     "pname": "php-with-extensions",
-    "version": "8.3.14"
+    "version": "8.3.15"
   },
   "phpPackages.composer": {
     "name": "composer-2.7.7",
diff --git a/release/versions.json b/release/versions.json
index 21dee7c30..87e7dddf9 100644
--- a/release/versions.json
+++ b/release/versions.json
@@ -8,9 +8,9 @@
     "url": "https://gitlab.flyingcircus.io/flyingcircus/nixos-mailserver.git/"
   },
   "nixpkgs": {
-    "hash": "sha256-gKEi/inkCJcoOjt6W2lCb1sNwANe38H2sPJakIRObQg=",
+    "hash": "sha256-Yi9X6sHeeS4ZAwqvUmGE1MoUl+YiHdhVgCNkKi/9QZQ=",
     "owner": "flyingcircusio",
     "repo": "nixpkgs",
-    "rev": "ff898be476375d3673334608f5a41efd9805258a"
+    "rev": "cc1f352acc315c2b36e5056055c026bfe3dd23cb"
   }
 }