diff --git a/pkgs/by-name/dn/dnsdiag/package.nix b/pkgs/by-name/dn/dnsdiag/package.nix
index ae1da2edbd49..c182a89d86a7 100644
--- a/pkgs/by-name/dn/dnsdiag/package.nix
+++ b/pkgs/by-name/dn/dnsdiag/package.nix
@@ -1,21 +1,23 @@
 {
   lib,
-  python3,
   fetchFromGitHub,
+  python3,
 }:
 
 python3.pkgs.buildPythonApplication rec {
   pname = "dnsdiag";
-  version = "2.7.0";
+  version = "2.9.1";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "farrokhi";
     repo = "dnsdiag";
     tag = "v${version}";
-    hash = "sha256-VTxIKqc7yFTLx7VLEjb4UwPKAmSD+4X+ZHrmriScVGA=";
+    hash = "sha256-2sFOjWjPzIT1ot0G60KvMrvlS6anHxCf/Cbh1cAXypo=";
   };
 
+  pythonRelaxDeps = [ "cryptography" ];
+
   build-system = with python3.pkgs; [ setuptools ];
 
   dependencies = with python3.pkgs; [
@@ -33,7 +35,7 @@ python3.pkgs.buildPythonApplication rec {
   meta = {
     description = "DNS Measurement, Troubleshooting and Security Auditing Toolset";
     homepage = "https://github.com/farrokhi/dnsdiag";
-    changelog = "https://github.com/farrokhi/dnsdiag/releases/tag/v${version}";
+    changelog = "https://github.com/farrokhi/dnsdiag/releases/tag/${src.tag}";
     license = lib.licenses.bsd2;
     maintainers = with lib.maintainers; [ fab ];
     mainProgram = "dnsdiag";