diff --git a/flake.nix b/flake.nix
index c1f47ab..ed7d67f 100644
--- a/flake.nix
+++ b/flake.nix
@@ -70,7 +70,33 @@
     }@inputs:
     let
       system = "x86_64-linux";
-      pkgs = nixpkgs.legacyPackages.${system};
+      pkgs = import nixpkgs {
+        inherit system;
+        config.allowUnfree = true;
+        overlays = [
+          # Workaround: Module-CPANTS-Analyse test fails with Archive::Any::Lite 0.11
+          # because SECURE EXTRACT MODE rejects the absolute-symlink test tarball.
+          # This cascades: Test-Kwalitee → Finance-Quote → gnucash breaks.
+          #
+          # Using `perl5.override { overrides = ... }` with the base `prev.perl5.pkgs`
+          # creates a top-level `//` merge that does NOT propagate to internal fixpoint
+          # references inside makeScopeWithSplicing'. Test-Kwalitee would still use the
+          # original ModuleCPANTSAnalyse (with tests enabled).
+          #
+          # Instead, use overrideScope on the perl package set itself. This rebuilds
+          # the entire scope fixpoint, so ALL packages that depend on ModuleCPANTSAnalyse
+          # (Test-Kwalitee, Finance-Quote, etc.) will use the overridden version internally.
+          (final: prev: {
+            perl5 = prev.perl5.override {
+              overrides = _: prev.perl5.pkgs.overrideScope (finalself: prevself: {
+                ModuleCPANTSAnalyse = prevself.ModuleCPANTSAnalyse.overrideAttrs (old: {
+                  doCheck = false;
+                });
+              });
+            };
+          })
+        ];
+      };
       pkgs-unstable = inputs.nixpkgs-unstable.legacyPackages.${system};
       pkgs-unstable-small = inputs.nixpkgs-unstable-small.legacyPackages.${system};
       pkgs-fast-release = import inputs.nixpkgs-fast-release {
diff --git a/piBTW b/piBTW
index 04b659c..c1f2746 160000
--- a/piBTW
+++ b/piBTW
@@ -1 +1 @@
-Subproject commit 04b659c4081edda8ca995d705163c9814e486c1b
+Subproject commit c1f27463440d531ba65221413beaaac5a0163ff1