Running nixpkgs-update (https://github.com/NixOS/infra/blob/main/non-critical-infra/modules/nixpkgs-update/README.md) with UPDATE_INFO: certbot 5.6.0 -> 5.9.0 https://github.com/certbot/certbot/releases
attrpath: certbot
Checking auto update branch...
[version] 
[version] skipping because derivation has updateScript
[rustCrateVersion] 
[rustCrateVersion] No cargoHash found
[golangModuleVersion] 
[golangModuleVersion] Not a buildGoModule package with vendorHash
[npmDepsVersion] 
[npmDepsVersion] No npmDepsHash
[updateScript] 
[updateScript] Success
[updateScript] this derivation will be built:
  /nix/store/l6yvmig6cpmzx0by5v1l3xhzf6qhwrgq-packages.json.drv
building '/nix/store/l6yvmig6cpmzx0by5v1l3xhzf6qhwrgq-packages.json.drv'...

Going to be running update for following packages:
 - certbot-5.6.0

Press Enter key to continue...
Running update for:
Enqueuing group of 1 packages
 - certbot-5.6.0: UPDATING ...
 - certbot-5.6.0: DONE.

Packages updated!

Diff after rewrites:
diff --git a/pkgs/development/python-modules/certbot/default.nix b/pkgs/development/python-modules/certbot/default.nix
index 446c88fa3358..fb2712c610bc 100644
--- a/pkgs/development/python-modules/certbot/default.nix
+++ b/pkgs/development/python-modules/certbot/default.nix
@@ -24,14 +24,14 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "certbot";
-  version = "5.6.0";
+  version = "5.9.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "certbot";
     repo = "certbot";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-knaEk4bjC0cdnMiO4ENvaDm/i/3tn6ZOJPdyqJxLKOs=";
+    hash = "sha256-Josk4he121DjSNGgP3aZwN9lHsX3H3YaKvghTycXvm0=";
   };
 
   sourceRoot = "${finalAttrs.src.name}/certbot";

No auto update branch exists
There might already be an open PR for this update:
- python3Packages.certbot: 5.6.0 -> 5.9.0, unbreak certbot-dns-cloudflare
  URL "https://api.github.com/repos/NixOS/nixpkgs/issues/581554"