diff --git a/pkgs/by-name/we/werf/package.nix b/pkgs/by-name/we/werf/package.nix
index 8b651d1030a9..744b8b8f29e8 100644
--- a/pkgs/by-name/we/werf/package.nix
+++ b/pkgs/by-name/we/werf/package.nix
@@ -10,19 +10,20 @@
 }:
 buildGoModule (finalAttrs: {
   pname = "werf";
-  version = "3.11.0";
+  version = "3.12.1";
   __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "werf";
     repo = "werf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Ai7EFuJDJBDeHS4CqY3kobG3RZi8Lii82i25kCHaydI=";
+    hash = "sha256-QAsb2mLCJR2GWXp3/J8DrIaKHlFx6D+fiW5Nf8ksmJc=";
   };
 
   proxyVendor = true;
-  vendorHash = "sha256-sA0Vz5UjIL3NfEV5AM8RG9KcQ1QVqQRV79dv+0d/qxI=";
+  vendorHash = "sha256-XNBoFr7dF41tL0JqRv/MB6cO8z6HZ53NMoXcKs5eqjg=";
 
+  strictDeps = true;
   nativeBuildInputs = [ installShellFiles ];
   buildInputs =
     lib.optionals stdenv.hostPlatform.isLinux [ btrfs-progs ]