diff --git a/pkgs/by-name/cu/cunicu/package.nix b/pkgs/by-name/cu/cunicu/package.nix
index 334e9b0e18d0..031a8a8ad095 100644
--- a/pkgs/by-name/cu/cunicu/package.nix
+++ b/pkgs/by-name/cu/cunicu/package.nix
@@ -4,21 +4,25 @@
   buildGoModule,
   fetchFromGitHub,
   installShellFiles,
+  versionCheckHook,
   protobuf,
   protoc-gen-go,
   protoc-gen-go-grpc,
+  nix-update-script,
 }:
 buildGoModule rec {
   pname = "cunicu";
-  version = "0.5.68";
+  version = "0.5.72";
 
   src = fetchFromGitHub {
     owner = "cunicu";
     repo = "cunicu";
     rev = "v${version}";
-    hash = "sha256-bSX9Mf+7BNX37DrFut3c6HKdjBPh6xgdr8X2hNBjV54=";
+    hash = "sha256-W6EoFlRr8WVg5k5bk9L9RAMLLazd1uzufXmzP82WIiU=";
   };
 
+  vendorHash = "sha256-gLvTLXNJkgqmDr08kH0dg0MBVMRawBG7lJjIFy2US14=";
+
   nativeBuildInputs = [
     installShellFiles
     protobuf
@@ -26,9 +30,11 @@ buildGoModule rec {
     protoc-gen-go-grpc
   ];
 
-  CGO_ENABLED = 0;
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
 
-  vendorHash = "sha256-ATIDio2C71gm5/Ex3Ys9izJSxx4rb1jQU5snGS8idVU=";
+  CGO_ENABLED = 0;
 
   # These packages contain networking dependent tests which fail in the sandbox
   excludedPackages = [
@@ -43,6 +49,11 @@ buildGoModule rec {
     "-X cunicu.li/cunicu/pkg/buildinfo.BuiltBy=Nix"
   ];
 
+  doInstallCheck = true;
+  versionCheckProgramArg = "version";
+
+  passthru.updateScript = nix-update-script { };
+
   preBuild = ''
     go generate ./...
   '';