diff --git a/pkgs/by-name/du/duplicati/deps.json b/pkgs/by-name/du/duplicati/deps.json
index 296ba525eae7..c2993d742a19 100644
--- a/pkgs/by-name/du/duplicati/deps.json
+++ b/pkgs/by-name/du/duplicati/deps.json
@@ -179,11 +179,6 @@
     "version": "12.28.0",
     "hash": "sha256-I1LbKRdd9OLXZRP4jsp3A4WiI4ZVrEA640wqcPry81c="
   },
-  {
-    "pname": "BouncyCastle.Cryptography",
-    "version": "2.6.2",
-    "hash": "sha256-Yjk2+x/RcVeccGOQOQcRKCiYzyx1mlFnhS5auCII+Ms="
-  },
   {
     "pname": "BouncyCastle.Cryptography",
     "version": "2.7.0",
@@ -441,13 +436,13 @@
   },
   {
     "pname": "MessagePack",
-    "version": "2.5.302",
-    "hash": "sha256-Dx/ofFClAvm+7NhI4k1OjNMIYAksRJcnFtmP0wPrgZ0="
+    "version": "2.5.307",
+    "hash": "sha256-W/MlivSOR1+UDfWlP9xzXUCg5FUw/1RrGyyOoXzSCQk="
   },
   {
     "pname": "MessagePack.Annotations",
-    "version": "2.5.302",
-    "hash": "sha256-4RIgRR1NctocYHAqzVqjEG/Xw/qNev/d4erkUNQHVbI="
+    "version": "2.5.307",
+    "hash": "sha256-OVN3SBUtP/RAyzl5wNolZea6cwSRWtGnrk3KZ48xKNw="
   },
   {
     "pname": "Meziantou.Framework.Win32.CredentialManager",
@@ -849,11 +844,6 @@
     "version": "17.6.3",
     "hash": "sha256-H2Qw8x47WyFOd/VmgRmGMc+uXySgUv68UISgK8Frsjw="
   },
-  {
-    "pname": "Microsoft.NET.StringTools",
-    "version": "18.4.0",
-    "hash": "sha256-uyHzUxlqdLe1QnDp4LNeANJcrSm/9zuxQyVcjUZNyAM="
-  },
   {
     "pname": "Microsoft.NET.Test.Sdk",
     "version": "17.14.1",
@@ -916,8 +906,8 @@
   },
   {
     "pname": "Microsoft.VisualStudio.Threading.Only",
-    "version": "17.14.15",
-    "hash": "sha256-o15PJKoIqyfgP2jqybgkydc8bKVZUpCCcrPR05rO7k4="
+    "version": "18.7.23",
+    "hash": "sha256-xkDoDPbBiZQIemCJ6pYuP7tt6hpS6DujYVuxDR0TE3Y="
   },
   {
     "pname": "Microsoft.VisualStudio.Validation",
@@ -944,6 +934,11 @@
     "version": "4.17.0",
     "hash": "sha256-GpWv+8shoprshuPNB+H+C5saffiKQ6Pek3zhLUGklRo="
   },
+  {
+    "pname": "MimeKit",
+    "version": "4.18.2",
+    "hash": "sha256-AGBgvj6gFnh8UdBAA5WXJMIB9Tj6Akc0h6I9lGo5IM8="
+  },
   {
     "pname": "Minio",
     "version": "6.0.0",
@@ -956,8 +951,8 @@
   },
   {
     "pname": "Nerdbank.MessagePack",
-    "version": "1.2.4",
-    "hash": "sha256-6Cb01QAHuSTVstpcx6aVVpcJEn5kIUa3OgUZmAIh70Q="
+    "version": "1.3.88",
+    "hash": "sha256-G/13Bv0bzkkIV7XYcv5/oZFH8C8bbaB6TAR89Z+tLao="
   },
   {
     "pname": "Nerdbank.Streams",
@@ -1011,8 +1006,8 @@
   },
   {
     "pname": "PolyType",
-    "version": "1.3.1",
-    "hash": "sha256-J/7MGrY/O0MW429HtRFHPbOD21XLa0c1XSg+wJFky4w="
+    "version": "1.4.1",
+    "hash": "sha256-BmsjcBp1QeYSfj48Nz0T4FigslsHyj76SWXNgxeL9GQ="
   },
   {
     "pname": "Portable.BouncyCastle",
@@ -1071,19 +1066,29 @@
   },
   {
     "pname": "SMBLibrary",
-    "version": "1.5.4",
-    "hash": "sha256-gb/IV3ijoyLVJOwwbJdKgb7h38SknMe3bwIkkcMnXqM="
+    "version": "1.5.8",
+    "hash": "sha256-owERHsdtnR4apeujpBwTIosl3/RFPTniXK0l/Fnpgt8="
+  },
+  {
+    "pname": "SMBLibrary",
+    "version": "1.5.8.1",
+    "hash": "sha256-7/eJUVfWcsiCPTUPDXlRTtiRG95FwlNHbq1hInCV03I="
   },
   {
     "pname": "SMBLibrary.Win32",
-    "version": "1.5.4",
-    "hash": "sha256-470p+EN55r9qF01+Hhlh9Fihdn06DLaGSSY8lfbxrM0="
+    "version": "1.5.8",
+    "hash": "sha256-bVRa6Xfk2n8VVaImGKUtKvoz29dYbFjWJsl9sbAHGVw="
   },
   {
     "pname": "SQLite",
     "version": "3.53.4",
     "hash": "sha256-VkHrWOiEKf1z0J/ClL2qYQpumQmfQUHekSpeSqbXc8o="
   },
+  {
+    "pname": "SQLite",
+    "version": "3.54.0",
+    "hash": "sha256-gBdMIDIXbX9/wIhXGGgud1QkOd4b8luqs2i0XusKQRU="
+  },
   {
     "pname": "sqlite-net-pcl",
     "version": "1.7.335",
@@ -1126,13 +1131,13 @@
   },
   {
     "pname": "SQLitePCLRaw.lib.e_sqlite3",
-    "version": "2.1.2",
-    "hash": "sha256-34lJgnGvODwrjn9WTkkBIg2jzYph/ARi1QSiKedCyUo="
+    "version": "2.1.14",
+    "hash": "sha256-t+nhjfcsgS3yxHabaraF3gRH+AgPOcWiirERRdeaNvA="
   },
   {
     "pname": "SQLitePCLRaw.lib.e_sqlite3",
-    "version": "3.53.3",
-    "hash": "sha256-cstyR3khjgJIM6IeKQPHlanpDAv6AVIPJ5kMNkE/MtQ="
+    "version": "2.1.2",
+    "hash": "sha256-34lJgnGvODwrjn9WTkkBIg2jzYph/ARi1QSiKedCyUo="
   },
   {
     "pname": "SQLitePCLRaw.provider.e_sqlite3",
@@ -1171,8 +1176,8 @@
   },
   {
     "pname": "StreamJsonRpc",
-    "version": "2.25.29",
-    "hash": "sha256-0Pe+axtiPfY4o1Nx6yl6oPffGP9QVV/JRIVz56XBERs="
+    "version": "2.26.150",
+    "hash": "sha256-7bAAgUoFWpXs6Qym5WZlqmRWJhihM31vDxAutcxQWb8="
   },
   {
     "pname": "Swashbuckle.AspNetCore",
@@ -1301,8 +1306,8 @@
   },
   {
     "pname": "System.Security.Cryptography.Pkcs",
-    "version": "10.0.0",
-    "hash": "sha256-d3sLG+LZ3+N/h/6gdJcVKOgbBO6wYb66NfXalAEDqnE="
+    "version": "10.0.13",
+    "hash": "sha256-VO0kV46tNLW1DSWQhCQ0MvEXM+J1S4sZbnmdNBjTBKc="
   },
   {
     "pname": "System.Security.Cryptography.ProtectedData",
diff --git a/pkgs/by-name/du/duplicati/package.nix b/pkgs/by-name/du/duplicati/package.nix
index d57f8cbcb4fa..81bdc20911ca 100644
--- a/pkgs/by-name/du/duplicati/package.nix
+++ b/pkgs/by-name/du/duplicati/package.nix
@@ -7,18 +7,19 @@
   autoPatchelfHook,
   dotnetCorePackages,
   npm-lockfile-fix,
+  dart-sass,
   icu,
   openssl,
   krb5,
 }:
 
 let
-  version = "2.4.0.1";
+  version = "2.4.1.0";
   channel = "stable";
-  buildDate = "2026-10-07";
-  ngclientVersion = "0.0.238";
-  ngclientRev = "374ce0d56d519caa88999989e10dc16ef39c4536";
-  ngclientHash = "sha256-4EGtVo79p7P+L21vnVhl1ameFe1RL+7nsEmickONrYw=";
+  buildDate = "2026-10-29";
+  ngclientVersion = "0.0.244";
+  ngclientRev = "4c2cb9a067d41e86359e7dcbcb10d8768342dbb5";
+  ngclientHash = "sha256-aeQ6P/SLsQPu2VnIEyouzZa0DHBH91X6kftZ1J0/cDE=";
 
   # from Duplicati/Server/webroot/ngclient/package.json
   ngclient = buildNpmPackage {
@@ -46,7 +47,7 @@ let
                        '"gen:font": "node node_modules/.bin/ship-fg'
     '';
 
-    npmDepsHash = "sha256-jDHpuGm7juGjlRQ4Sq85lW6lcSwYSczryYxdL8uE9gg=";
+    npmDepsHash = "sha256-1Np60bym1z4yTRq/kBgVosqw74b9UFL3ikFqgvGyCWs=";
 
     npmBuildScript = "build:prod";
 
@@ -55,6 +56,14 @@ let
       CI = "true";
     };
 
+    nativeBuildInputs = [ dart-sass ];
+
+    preBuild = ''
+      # force our dart-sass executable
+      echo "export const compilerCommand = ['dart-sass'];" \
+        > node_modules/sass-embedded/dist/lib/src/compiler-path.js
+    '';
+
     installPhase = ''
       runHook preInstall
 
@@ -79,7 +88,7 @@ buildDotnetModule {
     owner = "duplicati";
     repo = "duplicati";
     tag = "v${version}_${channel}_${buildDate}";
-    hash = "sha256-f/NOjUiePDt1kDxEEH0NSKlgIKuZmoFax2+wgjN5Sdk=";
+    hash = "sha256-Hl1NkYona6M3b24PA2C1W1fRgL6+ir5B1P09kgo0Qow=";
     stripRoot = true;
   };