diff --git a/.github/workflows/update-npm-hash.yml b/.github/workflows/update-npm-hash.yml
new file mode 100644
index 0000000..9651a57
--- /dev/null
+++ b/.github/workflows/update-npm-hash.yml
@@ -0,0 +1,31 @@
+name: Update npm deps hash
+
+on:
+  push:
+    paths:
+      - "package-lock.json"
+
+jobs:
+  update-hash:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: DeterminateSystems/nix-installer-action@main
+
+      - name: Update hash
+        run: ./update-npm-hash.sh
+
+      - name: Commit changes
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add package.nix
+          if [[ $(git status -s) ]]; then
+            git commit -m "chore: update npm deps hash"
+            git push
+          else
+            echo "Hash wasn't changed"
+          fi
diff --git a/default.nix b/default.nix
index a6e2c7d..6d1e106 100644
--- a/default.nix
+++ b/default.nix
@@ -1,7 +1,4 @@
 {
-  pkgs ?
-    import
-      (fetchTarball "https://github.com/NixOS/nixpkgs/archive/c6d65881c5624c9cae5ea6cedef24699b0c0a4c0.tar.gz")
-      { },
+  pkgs ? import <nixpkgs> { },
 }:
 pkgs.callPackage ./package.nix { }