diff --git a/pkgs/development/python-modules/certbot/default.nix b/pkgs/development/python-modules/certbot/default.nix
index 8bef6cf2148e..c2f3c1f7915f 100644
--- a/pkgs/development/python-modules/certbot/default.nix
+++ b/pkgs/development/python-modules/certbot/default.nix
@@ -1,21 +1,38 @@
 { lib
 , buildPythonPackage
-, python, runCommand
+, python
+, runCommand
 , fetchFromGitHub
-, configargparse, acme, configobj, cryptography, distro, josepy, parsedatetime, pyRFC3339, pyopenssl, pytz, requests, six, zope_component, zope_interface
-, dialog, gnureadline
-, pytest-xdist, pytestCheckHook, python-dateutil
+, configargparse
+, acme
+, configobj
+, cryptography
+, distro
+, josepy
+, parsedatetime
+, pyRFC3339
+, pyopenssl
+, pytz
+, requests
+, six
+, zope_component
+, zope_interface
+, dialog
+, gnureadline
+, pytest-xdist
+, pytestCheckHook
+, python-dateutil
 }:
 
 buildPythonPackage rec {
   pname = "certbot";
-  version = "1.29.0";
+  version = "1.31.0";
 
   src = fetchFromGitHub {
     owner = pname;
     repo = pname;
     rev = "refs/tags/v${version}";
-    sha256 = "sha256-DFdXDFSqqkm4r59Kmd1wxcg2YePP3dI9squiW+iSmaU=";
+    sha256 = "sha256-JDhesUU6SQBEf0CG3vo1AhlRfGpltTEUmSqrpGIpptg=";
   };
 
   sourceRoot = "source/${pname}";
@@ -59,15 +76,17 @@ buildPythonPackage rec {
   # certbot.withPlugins has a similar calling convention as python*.withPackages
   # it gets invoked with a lambda, and invokes that lambda with the python package set matching certbot's:
   # certbot.withPlugins (cp: [ cp.certbot-dns-foo ])
-  passthru.withPlugins = f: let
-    pythonEnv = python.withPackages f;
+  passthru.withPlugins = f:
+    let
+      pythonEnv = python.withPackages f;
 
-  in runCommand "certbot-with-plugins" {
-  } ''
-    mkdir -p $out/bin
-    cd $out/bin
-    ln -s ${pythonEnv}/bin/certbot
-  '';
+    in
+    runCommand "certbot-with-plugins"
+      { } ''
+      mkdir -p $out/bin
+      cd $out/bin
+      ln -s ${pythonEnv}/bin/certbot
+    '';
 
   meta = with lib; {
     homepage = src.meta.homepage;