diff --git a/pkgs/by-name/ci/cider-2/updater.sh b/pkgs/by-name/ci/cider-2/updater.sh
index 20ab34f374659..f5bf8d71d9b88 100755
--- a/pkgs/by-name/ci/cider-2/updater.sh
+++ b/pkgs/by-name/ci/cider-2/updater.sh
@@ -30,6 +30,6 @@ cd ../../../..
 
 if [[ "${1-default}" != "--deps-only" ]]; then
     SHA="$(nix-prefetch-url --quiet --unpack --type sha256 $DEB_URL)"
-    SRI=$(nix --experimental-features nix-command hash to-sri "sha256:$SHA")
+    SRI=$(nix-hash --to-sri "sha256:$SHA")
     update-source-version cider-2 "$NEW_VERSION" "$SRI"
 fi
diff --git a/pkgs/by-name/er/erlang-language-platform/update.sh b/pkgs/by-name/er/erlang-language-platform/update.sh
index a7fbc9cb7a1da..78f5ace246c1b 100755
--- a/pkgs/by-name/er/erlang-language-platform/update.sh
+++ b/pkgs/by-name/er/erlang-language-platform/update.sh
@@ -18,7 +18,7 @@ for release in $releases; do
   IFS=: read -r name url <<< "$release"
   hash_name=$(echo "$name" | sed 's/.tar.gz$//')
   hash_prefetched=$(nix-prefetch-url --type sha256 "$url")
-  hash_sri=$(nix hash to-sri --type sha256 "$hash_prefetched")
+  hash_sri=$(nix-hash --to-sri --type sha256 "$hash_prefetched")
   echo "$hash_name" "$hash_sri"
 done |
   jq -sR 'rtrimstr("\n") | split("\n") | map(split(" ") | {(.[0]): .[1]}) | add' > hashes.json
diff --git a/pkgs/by-name/et/etcd_3_6/update.sh b/pkgs/by-name/et/etcd_3_6/update.sh
index 1330f88d9085f..520bcd981f6f5 100755
--- a/pkgs/by-name/et/etcd_3_6/update.sh
+++ b/pkgs/by-name/et/etcd_3_6/update.sh
@@ -27,7 +27,7 @@ OLD_VERSION="$(nix-instantiate --eval -E "with import $NIXPKGS_PATH {}; \
 if [ ! "$OLD_VERSION" = "$LATEST_VERSION" ]; then
     echo "Attempting to update etcd from $OLD_VERSION to $LATEST_VERSION"
     ETCD_SRC_HASH=$(nix-prefetch-url --quiet --unpack https://github.com/etcd-io/etcd/archive/refs/tags/${LATEST_TAG}.tar.gz)
-    ETCD_SRC_HASH=$(nix hash to-sri --type sha256 $ETCD_SRC_HASH)
+    ETCD_SRC_HASH=$(nix-hash --to-sri --type sha256 $ETCD_SRC_HASH)
 
     setKV () {
         sed -i "s|$1 = \".*\"|$1 = \"${2:-}\"|" "$ETCD_PATH/default.nix"
diff --git a/pkgs/by-name/ki/kiro/update.sh b/pkgs/by-name/ki/kiro/update.sh
index 4da06c84be349..617d2755e6e7d 100755
--- a/pkgs/by-name/ki/kiro/update.sh
+++ b/pkgs/by-name/ki/kiro/update.sh
@@ -86,7 +86,7 @@ echo "Updating to version: $max_version"
 echo "Calculating hashes..."
 for platform in "${!platform_urls[@]}"; do
     echo "  Calculating hash for $platform..."
-    platform_hashes["$platform"]=$(nix hash convert --hash-algo sha256 "$(nix-prefetch-url "${platform_urls[$platform]}")")
+    platform_hashes["$platform"]=$(nix-hash --to-sri --type sha256 "$(nix-prefetch-url "${platform_urls[$platform]}")")
 done
 
 # Update package.nix and generate sources.json
diff --git a/pkgs/by-name/li/libhsts/update.sh b/pkgs/by-name/li/libhsts/update.sh
index 911f919183320..8366bf3bcd280 100755
--- a/pkgs/by-name/li/libhsts/update.sh
+++ b/pkgs/by-name/li/libhsts/update.sh
@@ -7,7 +7,7 @@ cd "$(dirname "$0")"
 
 chromium_version=$(curl -s ${GITHUB_TOKEN:+-u ":$GITHUB_TOKEN"} "https://api.github.com/repos/chromium/chromium/tags" | jq -r 'map(select(.prerelease | not)) | .[1].name')
 sha256=$(nix-prefetch-url "https://raw.github.com/chromium/chromium/$chromium_version/net/http/transport_security_state_static.json")
-hash=$(nix hash convert --to sri "$sha256")
+hash=$(nix-hash --to-sri --type sha256 "$sha256")
 
 sed -e "0,/chromium_version/s/chromium_version = \".*\"/chromium_version = \"$chromium_version\"/" \
     -e "0,/hash/s/hash = \".*\"/sha256 = \"$hash\"/" \
diff --git a/pkgs/by-name/ry/ryubing/updater.sh b/pkgs/by-name/ry/ryubing/updater.sh
index a851801cccea1..7835a81ea4562 100755
--- a/pkgs/by-name/ry/ryubing/updater.sh
+++ b/pkgs/by-name/ry/ryubing/updater.sh
@@ -28,7 +28,7 @@ cd ../../../..
 
 if [[ "${1-default}" != "--deps-only" ]]; then
     SHA="$(nix-prefetch-git https://git.ryujinx.app/ryubing/ryujinx --rev "$NEW_VERSION" --quiet | jq -r '.sha256')"
-    SRI=$(nix --experimental-features nix-command hash to-sri "sha256:$SHA")
+    SRI=$(nix-hash --to-sri "sha256:$SHA")
     update-source-version ryubing "$NEW_VERSION" "$SRI"
 fi
 
diff --git a/pkgs/by-name/ta/tabnine/update.sh b/pkgs/by-name/ta/tabnine/update.sh
index 5269a027198b9..17875d97bb165 100755
--- a/pkgs/by-name/ta/tabnine/update.sh
+++ b/pkgs/by-name/ta/tabnine/update.sh
@@ -8,7 +8,7 @@ SCRIPT_DIR=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" &>/dev/null && pwd)
 
 function prefetch-sri() {
     nix-prefetch-url "$1" 2>/dev/null |
-        xargs nix --experimental-features nix-command hash to-sri --type sha256
+        xargs nix-hash --to-sri --type sha256
 }
 
 declare -A platforms=(
diff --git a/pkgs/development/compilers/dart/update.sh b/pkgs/development/compilers/dart/update.sh
index e8cfc3b432a6d..525f42e9d0590 100755
--- a/pkgs/development/compilers/dart/update.sh
+++ b/pkgs/development/compilers/dart/update.sh
@@ -16,6 +16,6 @@ update-source-version dart $latestVersion --file=$MY_PATH/sources.nix
 
 systems=$(nix eval --json -f . dart.meta.platforms | jq --raw-output '.[]')
 for system in $systems; do
-  hash=$(nix hash convert --to sri --hash-algo sha256 $(nix-prefetch-url $(nix eval --raw -f . dart.src.url --system "$system")))
+  hash=$(nix-hash --to-sri --type sha256 $(nix-prefetch-url $(nix eval --raw -f . dart.src.url --system "$system")))
   update-source-version dart $latestVersion $hash --file=$MY_PATH/sources.nix --system=$system --ignore-same-version --ignore-same-hash
 done
diff --git a/pkgs/os-specific/windows/mingw-w64/update.nu b/pkgs/os-specific/windows/mingw-w64/update.nu
index 4862aae5e37e2..0fd8fab03c2a6 100755
--- a/pkgs/os-specific/windows/mingw-w64/update.nu
+++ b/pkgs/os-specific/windows/mingw-w64/update.nu
@@ -70,7 +70,7 @@ def main [] {
 
   # Prefetch to get the new hash
   let new_hash = nix-prefetch-url --type sha256 $new_url
-  | nix hash to-sri --type sha256 $in
+  | nix-hash --to-sri --type sha256 $in
 
   # Set the hash
   replace ./pkgs/os-specific/windows/mingw-w64/headers.nix $current_hash $new_hash
diff --git a/pkgs/os-specific/windows/msvcSdk/update.nu b/pkgs/os-specific/windows/msvcSdk/update.nu
index 7c6ce40880e81..7d1f9b8ac2016 100755
--- a/pkgs/os-specific/windows/msvcSdk/update.nu
+++ b/pkgs/os-specific/windows/msvcSdk/update.nu
@@ -38,7 +38,7 @@ def main [] {
 
     xwin --accept-license --cache-dir $dir --manifest $"($PATH | path join manifest.json)" --arch $arch splat --preserve-ms-arch-notation
 
-    let hash = nix hash path ($dir | path join splat)
+    let hash = nix-hash --sri --type sha256 ($dir | path join splat)
 
     {arch: $arch, hash: $hash}
   } | transpose -r -d