diff --git a/pkgs/development/python-modules/pykeepass/default.nix b/pkgs/development/python-modules/pykeepass/default.nix
index 8de93163936f..a8986739b374 100644
--- a/pkgs/development/python-modules/pykeepass/default.nix
+++ b/pkgs/development/python-modules/pykeepass/default.nix
@@ -5,22 +5,23 @@
   setuptools,
   argon2-cffi,
   construct,
+  importlib-metadata,
   lxml,
   pycryptodomex,
   pyotp,
   unittestCheckHook,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "pykeepass";
-  version = "4.1.1.post1";
+  version = "4.2.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "libkeepass";
     repo = "pykeepass";
-    tag = "v${version}";
-    hash = "sha256-DeEz3zrUK3cXIvMK/32Zn3FPiNsenhpAb17Zgel826s=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-MGlkpnWTBO7m3u1v8yZiKMtXnEv+rsy6+J1mJILdx0I=";
   };
 
   build-system = [ setuptools ];
@@ -28,14 +29,15 @@ buildPythonPackage rec {
   dependencies = [
     argon2-cffi
     construct
+    importlib-metadata
     lxml
     pycryptodomex
+    pyotp
   ];
 
   propagatedNativeBuildInputs = [ argon2-cffi ];
 
   nativeCheckInputs = [
-    pyotp
     unittestCheckHook
   ];
 
@@ -43,9 +45,9 @@ buildPythonPackage rec {
 
   meta = {
     homepage = "https://github.com/libkeepass/pykeepass";
-    changelog = "https://github.com/libkeepass/pykeepass/blob/${src.rev}/CHANGELOG.rst";
+    changelog = "https://github.com/libkeepass/pykeepass/blob/${finalAttrs.src.tag}/CHANGELOG.rst";
     description = "Python library to interact with keepass databases (supports KDBX3 and KDBX4)";
     license = lib.licenses.gpl3Only;
     maintainers = with lib.maintainers; [ dotlambda ];
   };
-}
+})