diff --git a/pkgs/by-name/bu/buf/package.nix b/pkgs/by-name/bu/buf/package.nix
index 37c480f5e3ba..33e733fdd90d 100644
--- a/pkgs/by-name/bu/buf/package.nix
+++ b/pkgs/by-name/bu/buf/package.nix
@@ -10,16 +10,16 @@
 
 buildGoModule (finalAttrs: {
   pname = "buf";
-  version = "1.68.4";
+  version = "1.69.0";
 
   src = fetchFromGitHub {
     owner = "bufbuild";
     repo = "buf";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-qxTRUYt2JKBE5WvfXlMsdXMJtrD9MLnMjy6+3PMkpvo=";
+    hash = "sha256-x8Dj4xl67Jq0ViWu+Tz+3lAnfIpE926dIr+oe4ul0gI=";
   };
 
-  vendorHash = "sha256-aQ4yWdHUmb0LaJ33T2vuVDS1UhYmBUYcwkbnkN7DOqQ=";
+  vendorHash = "sha256-zhXpWpYd/bim5f4EQJujVm072LPgBusjCFGYAwK10HE=";
 
   patches = [
     # Skip a test that requires networking to be available to work.
diff --git a/pkgs/by-name/bu/buf/skip_broken_tests.patch b/pkgs/by-name/bu/buf/skip_broken_tests.patch
index 8bde6a9f70bf..3867083e832d 100644
--- a/pkgs/by-name/bu/buf/skip_broken_tests.patch
+++ b/pkgs/by-name/bu/buf/skip_broken_tests.patch
@@ -1,15 +1,15 @@
 diff --git a/private/buf/buftesting/buftesting.go b/private/buf/buftesting/buftesting.go
-index 1c650077..5422f703 100644
+index 1b5557d..cec5736 100644
 --- a/private/buf/buftesting/buftesting.go
 +++ b/private/buf/buftesting/buftesting.go
-@@ -106,6 +106,10 @@ func RunActualProtoc(
+@@ -100,6 +100,10 @@ func RunActualProtoc(
  
  // GetGoogleapisDirPath gets the path to a clone of googleapis.
- func GetGoogleapisDirPath(t *testing.T, buftestingDirPath string) string {
+ func GetGoogleapisDirPath(tb testing.TB, buftestingDirPath string) string {
 +	// Requires network access, which is not available during
 +	// the nixpkgs sandboxed build
-+	t.Skip()
++	tb.Skip()
 +
  	googleapisDirPath := filepath.Join(buftestingDirPath, testGoogleapisDirPath)
  	require.NoError(
- 		t,
+ 		tb,