diff --git a/machines/sashimi/brew.nix b/machines/sashimi/brew.nix
index 04e1c50..034f940 100644
--- a/machines/sashimi/brew.nix
+++ b/machines/sashimi/brew.nix
@@ -1,10 +1,9 @@
 {
   homebrew = {
     enable = true;
-    caskArgs = {
-      require_sha = true;
-    };
+    caskArgs.require_sha = true;
     onActivation.autoUpdate = true;
+    onActivation.upgrade = true;
     casks = let
       skipSha = name: {
         inherit name;