diff --git a/pkgs/by-name/gi/github-copilot-cli/package.nix b/pkgs/by-name/gi/github-copilot-cli/package.nix
index 7213a076159a..416ee7064abd 100644
--- a/pkgs/by-name/gi/github-copilot-cli/package.nix
+++ b/pkgs/by-name/gi/github-copilot-cli/package.nix
@@ -3,6 +3,7 @@
   stdenv,
   autoPatchelfHook,
   fetchurl,
+  makeBinaryWrapper,
   versionCheckHook,
 }:
 
@@ -21,7 +22,10 @@ stdenv.mkDerivation (finalAttrs: {
     inherit (srcConfig) hash;
   };
 
-  nativeBuildInputs = lib.optionals stdenv.hostPlatform.isLinux [ autoPatchelfHook ];
+  nativeBuildInputs = [
+    makeBinaryWrapper
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [ autoPatchelfHook ];
   buildInputs = lib.optionals stdenv.hostPlatform.isLinux [ stdenv.cc.cc.lib ];
   sourceRoot = ".";
   dontStrip = true;
@@ -32,8 +36,13 @@ stdenv.mkDerivation (finalAttrs: {
     runHook postInstall
   '';
 
+  postInstall = ''
+    wrapProgram $out/bin/copilot \
+      --add-flags "--no-auto-update"
+  '';
+
   nativeInstallCheckInputs = [ versionCheckHook ];
-  doInstallCheck = true;
+  doInstallCheck = !stdenv.hostPlatform.isDarwin; # skip on Darwin - OpenSSL errors in sandbox
 
   passthru.updateScript = ./update.sh;
 
diff --git a/pkgs/by-name/gi/github-copilot-cli/sources.json b/pkgs/by-name/gi/github-copilot-cli/sources.json
index 776a854b3831..a931685c340b 100644
--- a/pkgs/by-name/gi/github-copilot-cli/sources.json
+++ b/pkgs/by-name/gi/github-copilot-cli/sources.json
@@ -1,19 +1,19 @@
 {
-  "version": "0.0.415",
+  "version": "0.0.420",
   "x86_64-linux": {
     "name": "copilot-linux-x64",
-    "hash": "sha256-+gE7cZ3C8Ka5oHGu9d6F9dX1MmRBX06zo+XNPqwyGko="
+    "hash": "sha256-NE+J7h5hnJ/8sHI4G35TwvMFBTAItVWE3FhG0APBZ7k="
   },
   "aarch64-linux": {
     "name": "copilot-linux-arm64",
-    "hash": "sha256-uIkm0kPOhyxEQ4lBB7G+a4fQnz5v7AMysAMsWqYrp2c="
+    "hash": "sha256-YK/rz0dkTbHO3Uu+K+n8GOb/tLw5T1cKeJa3qP2In2M="
   },
   "x86_64-darwin": {
     "name": "copilot-darwin-x64",
-    "hash": "sha256-jdfS1PknqBxwi814EVQEuGx96htMSF4OETYaClUgnnI="
+    "hash": "sha256-zUfh1Sh/ckvgWs/YVkpGKL9vYi3egVb4smnhZBQJmJs="
   },
   "aarch64-darwin": {
     "name": "copilot-darwin-arm64",
-    "hash": "sha256-/uZiVmrMZ5Ox6VnUs7HwSE/dFRwMAWRRhXzCB0hW0jI="
+    "hash": "sha256-ghYxLSZjKeoLFEDMLmhcZraiaXfPo9ArA4jWBR8/tqs="
   }
 }