diff --git a/pkgs/applications/science/logic/klee/default.nix b/pkgs/applications/science/logic/klee/default.nix
index 54c9cdc30c806..fd618fec2026c 100644
--- a/pkgs/applications/science/logic/klee/default.nix
+++ b/pkgs/applications/science/logic/klee/default.nix
@@ -133,7 +133,7 @@ llvmPackages.stdenv.mkDerivation rec {
     updateScript = nix-update-script {
       extraArgs = [
         "--version-regex"
-        "v(\d\.\d)"
+        "v(\\d\\.\\d)"
       ];
     };
     # Let the user access the chosen uClibc outside the derivation.
diff --git a/pkgs/applications/science/logic/klee/klee-uclibc.nix b/pkgs/applications/science/logic/klee/klee-uclibc.nix
index 61cb5892edd5f..695ff369d96c1 100644
--- a/pkgs/applications/science/logic/klee/klee-uclibc.nix
+++ b/pkgs/applications/science/logic/klee/klee-uclibc.nix
@@ -99,7 +99,7 @@ llvmPackages.stdenv.mkDerivation rec {
   passthru.updateScript = nix-update-script {
     extraArgs = [
       "--version-regex"
-      "v(\d\.\d)"
+      "v(\\d\\.\\d)"
     ];
   };
 
diff --git a/pkgs/build-support/trivial-builders/default.nix b/pkgs/build-support/trivial-builders/default.nix
index 65685d44c75fd..be67b7b177aca 100644
--- a/pkgs/build-support/trivial-builders/default.nix
+++ b/pkgs/build-support/trivial-builders/default.nix
@@ -719,7 +719,7 @@ rec {
           (name: value:
             {
               inherit value;
-              name = lib.head (builtins.match "${builtins.storeDir}/[${nixHashChars}]+-(.*)\.drv" name);
+              name = lib.head (builtins.match "${builtins.storeDir}/[${nixHashChars}]+-(.*)\\.drv" name);
             })
           derivations;
       # The syntax of output paths differs between outputs named `out`
diff --git a/pkgs/by-name/av/av1an-unwrapped/package.nix b/pkgs/by-name/av/av1an-unwrapped/package.nix
index 7c5280af9fa9a..e89f7116e118a 100644
--- a/pkgs/by-name/av/av1an-unwrapped/package.nix
+++ b/pkgs/by-name/av/av1an-unwrapped/package.nix
@@ -44,7 +44,7 @@ rustPlatform.buildRustPackage rec {
     updateScript = nix-update-script {
       extraArgs = [
         "--version-regex"
-        "'^(\d*\.\d*\.\d*)$'"
+        "'^(\\d*\\.\\d*\\.\\d*)$'"
       ];
     };
   };
diff --git a/pkgs/by-name/aw/awscli2/package.nix b/pkgs/by-name/aw/awscli2/package.nix
index cd7fd53de550f..d5b0118bf66b6 100644
--- a/pkgs/by-name/aw/awscli2/package.nix
+++ b/pkgs/by-name/aw/awscli2/package.nix
@@ -171,7 +171,7 @@ py.pkgs.buildPythonApplication rec {
       # Excludes 1.x versions from the Github tags list
       extraArgs = [
         "--version-regex"
-        "^(2\.(.*))"
+        "^(2\\.(.*))"
       ];
     };
     tests.version = testers.testVersion {
diff --git a/pkgs/by-name/ci/circt/package.nix b/pkgs/by-name/ci/circt/package.nix
index d8865be0b7542..9ea6dad79b341 100644
--- a/pkgs/by-name/ci/circt/package.nix
+++ b/pkgs/by-name/ci/circt/package.nix
@@ -63,17 +63,17 @@ stdenv.mkDerivation rec {
         #    https://github.com/NixOS/nixpkgs/issues/214945 discusses this issue.
         #
         # As a temporary fix, we disabled these tests when using clang stdenv
-        lib.optionals stdenv.cc.isClang [ "CIRCT :: Target/ExportSystemC/.*\.mlir" ]
+        lib.optionals stdenv.cc.isClang [ "CIRCT :: Target/ExportSystemC/.*\\.mlir" ]
         # Disable some tests on x86_64-darwin
         ++ lib.optionals (stdenv.hostPlatform.system == "x86_64-darwin") [
           # These test seem to pass on hydra (rosetta) but not on x86_64-darwin machines
-          "CIRCT :: Target/ExportSMTLIB/.*\.mlir"
-          "CIRCT :: circt-bmc/.*\.mlir"
+          "CIRCT :: Target/ExportSMTLIB/.*\\.mlir"
+          "CIRCT :: circt-bmc/.*\\.mlir"
           # These tests were having issues on rosetta
-          "CIRCT :: Dialect/.*/Reduction/.*\.mlir"
-          "CIRCT :: Dialect/SMT/.*\.mlir"
-          "CIRCT :: circt-as-dis/.*\.mlir"
-          "CIRCT :: circt-reduce/.*\.mlir"
+          "CIRCT :: Dialect/.*/Reduction/.*\\.mlir"
+          "CIRCT :: Dialect/SMT/.*\\.mlir"
+          "CIRCT :: circt-as-dis/.*\\.mlir"
+          "CIRCT :: circt-reduce/.*\\.mlir"
           "CIRCT :: circt-test/basic.mlir"
         ];
     in
diff --git a/pkgs/by-name/du/duplicity/package.nix b/pkgs/by-name/du/duplicity/package.nix
index f821a73aa2bf4..6417b0b8f1db3 100644
--- a/pkgs/by-name/du/duplicity/package.nix
+++ b/pkgs/by-name/du/duplicity/package.nix
@@ -156,7 +156,7 @@ let
       updateScript = nix-update-script {
         extraArgs = [
           "--version-regex"
-          "rel\.(.*)"
+          "rel\\.(.*)"
         ];
       };
 
diff --git a/pkgs/by-name/ma/mattermost/package.nix b/pkgs/by-name/ma/mattermost/package.nix
index 910d26dd9ef65..67a6207f3f77c 100644
--- a/pkgs/by-name/ma/mattermost/package.nix
+++ b/pkgs/by-name/ma/mattermost/package.nix
@@ -73,7 +73,7 @@ buildGoModule rec {
 
   passthru = {
     updateScript = nix-update-script {
-      extraArgs = [ "--version-regex" "^v(9\.11\.[0-9]+)$" ];
+      extraArgs = [ "--version-regex" "^v(9\\.11\\.[0-9]+)$" ];
     };
     tests.mattermost = nixosTests.mattermost;
   };
diff --git a/pkgs/by-name/pa/paperjam/package.nix b/pkgs/by-name/pa/paperjam/package.nix
index f71bae04ae813..ca9cbffd062d0 100644
--- a/pkgs/by-name/pa/paperjam/package.nix
+++ b/pkgs/by-name/pa/paperjam/package.nix
@@ -26,8 +26,8 @@ stdenv.mkDerivation (finalAttrs: {
   makeFlags = [
     "PREFIX=$(out)"
     # prevent real build date which is impure
-    "BUILD_DATE=\<unknown\>"
-    "BUILD_COMMIT=\<unknown\>"
+    "BUILD_DATE=\\<unknown\\>"
+    "BUILD_COMMIT=\\<unknown\\>"
   ];
 
   # provide backward compatible PointerHolder, suppress deprecation warnings
diff --git a/pkgs/by-name/pk/pkcs11-provider/package.nix b/pkgs/by-name/pk/pkcs11-provider/package.nix
index f27bd11a934d9..70f3f586cc3fb 100644
--- a/pkgs/by-name/pk/pkcs11-provider/package.nix
+++ b/pkgs/by-name/pk/pkcs11-provider/package.nix
@@ -80,7 +80,7 @@ stdenv.mkDerivation rec {
   passthru.updateScript = nix-update-script {
     extraArgs = [
       "--version-regex"
-      "v(\d\.\d)"
+      "v(\\d\\.\\d)"
     ];
   };
 
diff --git a/pkgs/by-name/re/renode-unstable/package.nix b/pkgs/by-name/re/renode-unstable/package.nix
index 7164233f75598..2c4653391fc64 100644
--- a/pkgs/by-name/re/renode-unstable/package.nix
+++ b/pkgs/by-name/re/renode-unstable/package.nix
@@ -16,7 +16,7 @@ renode.overrideAttrs (
 
     passthru.updateScript =
       let
-        versionRegex = "[0-9\.\+]+[^\+]*.";
+        versionRegex = "[0-9\\.\\+]+[^\\+]*.";
       in
       writeScript "${finalAttrs.pname}-updater" ''
         #!/usr/bin/env nix-shell
diff --git a/pkgs/by-name/te/teams/package.nix b/pkgs/by-name/te/teams/package.nix
index b1f8771a431df..6e52f351c7048 100644
--- a/pkgs/by-name/te/teams/package.nix
+++ b/pkgs/by-name/te/teams/package.nix
@@ -51,7 +51,7 @@ stdenv.mkDerivation {
     zcat < Teams_osx_app.pkg/Payload | cpio -i
   '';
 
-  sourceRoot = "Microsoft\ Teams.app";
+  sourceRoot = "Microsoft\\ Teams.app";
   dontPatch = true;
   dontConfigure = true;
   dontBuild = true;
diff --git a/pkgs/by-name/tu/turbo-unwrapped/package.nix b/pkgs/by-name/tu/turbo-unwrapped/package.nix
index 36e68b687da2e..e91fb9a2603e1 100644
--- a/pkgs/by-name/tu/turbo-unwrapped/package.nix
+++ b/pkgs/by-name/tu/turbo-unwrapped/package.nix
@@ -64,7 +64,7 @@ rustPlatform.buildRustPackage rec {
     updateScript = nix-update-script {
       extraArgs = [
         "--version-regex"
-        "'v(\d+\.\d+\.\d+)'"
+        "'v(\\d+\\.\\d+\\.\\d+)'"
       ];
     };
   };
diff --git a/pkgs/by-name/uu/uuu/package.nix b/pkgs/by-name/uu/uuu/package.nix
index 6ddf35a37b2f2..5f6bdfe368bf8 100644
--- a/pkgs/by-name/uu/uuu/package.nix
+++ b/pkgs/by-name/uu/uuu/package.nix
@@ -30,7 +30,7 @@ stdenv.mkDerivation (finalAttrs: {
   passthru.updateScript = nix-update-script {
     extraArgs = [
       "--version-regex"
-      "uuu_\([0-9.]+\)"
+      "uuu_\\([0-9.]+\\)"
     ];
   };
 
diff --git a/pkgs/by-name/vs/vscode-js-debug/package.nix b/pkgs/by-name/vs/vscode-js-debug/package.nix
index 9434ae1e361e2..526ce42a96df2 100644
--- a/pkgs/by-name/vs/vscode-js-debug/package.nix
+++ b/pkgs/by-name/vs/vscode-js-debug/package.nix
@@ -59,7 +59,7 @@ buildNpmPackage rec {
   passthru.updateScript = nix-update-script {
     extraArgs = [
       "--version-regex"
-      "v((?!\d{4}\.\d\.\d{3}).*)"
+      "v((?!\\d{4}\\.\\d\\.\\d{3}).*)"
     ];
   };
 
diff --git a/pkgs/development/compilers/mlton/20210117-binary.nix b/pkgs/development/compilers/mlton/20210117-binary.nix
index 6efb8fb863d25..9ed63cff6e3c2 100644
--- a/pkgs/development/compilers/mlton/20210117-binary.nix
+++ b/pkgs/development/compilers/mlton/20210117-binary.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation rec {
     (fetchpatch {
       name = "remove-duplicate-if.patch";
       url = "https://github.com/MLton/mlton/commit/22002cd0a53a1ab84491d74cb8dc6a4e50c1f7b7.patch";
-      decode = "sed -e 's|Makefile\.binary|Makefile|g'";
+      decode = "sed -e 's|Makefile\\.binary|Makefile|g'";
       hash = "sha256-Gtmc+OIh+m7ordSn74fpOKVDQDtYyLHe6Le2snNCBYQ=";
     })
   ];
diff --git a/pkgs/pkgs-lib/formats/hocon/test/comprehensive/default.nix b/pkgs/pkgs-lib/formats/hocon/test/comprehensive/default.nix
index 14b708140eb5e..c184b6bc72e43 100644
--- a/pkgs/pkgs-lib/formats/hocon/test/comprehensive/default.nix
+++ b/pkgs/pkgs-lib/formats/hocon/test/comprehensive/default.nix
@@ -37,7 +37,7 @@ let
         "b"
       ]
     ];
-    nasty_string = "\"@\n\\\t^*\b\f\n\0\";'''$";
+    nasty_string = "\"@\n\\\t^*bf\n0\";'''$";
 
     "misc attrs" = {
       x = 1;
diff --git a/pkgs/pkgs-lib/formats/java-properties/test/default.nix b/pkgs/pkgs-lib/formats/java-properties/test/default.nix
index fdc589d2c1cd4..2ea787a90341b 100644
--- a/pkgs/pkgs-lib/formats/java-properties/test/default.nix
+++ b/pkgs/pkgs-lib/formats/java-properties/test/default.nix
@@ -73,7 +73,7 @@ stdenv.mkDerivation {
   );
 
   src = lib.sourceByRegex ./. [
-    ".*\.java"
+    ".*\\.java"
   ];
   # On Linux, this can be C.UTF-8, but darwin + zulu requires en_US.UTF-8
   LANG = "en_US.UTF-8";
diff --git a/pkgs/pkgs-lib/formats/libconfig/test/comprehensive/default.nix b/pkgs/pkgs-lib/formats/libconfig/test/comprehensive/default.nix
index 94b782f943287..efcee72117a9f 100644
--- a/pkgs/pkgs-lib/formats/libconfig/test/comprehensive/default.nix
+++ b/pkgs/pkgs-lib/formats/libconfig/test/comprehensive/default.nix
@@ -61,7 +61,7 @@ let
         1
       ])
     ];
-    nasty_string = "\"@\n\\\t^*\b\f\n\0\";'''$";
+    nasty_string = "\"@\n\\\t^*bf\n0\";'''$";
 
     weirderTypes = {
       _includes = [ include_file ];
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 115ad0035cb81..864b5eb11fc29 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -865,7 +865,8 @@ mapAliases {
   nextcloud27Packages = throw "Nextcloud27 is EOL!"; # Added 2024-06-25
   nagiosPluginsOfficial = monitoring-plugins;
   neochat = libsForQt5.kdeGear.neochat; # added 2022-05-10
-  nerdfonts = throw ''nerdfonts has been separated into individual font packages under the namespace nerd-fonts.
+  nerdfonts = throw ''
+    nerdfonts has been separated into individual font packages under the namespace nerd-fonts.
     For example change:
       fonts.packages = [
         ...