diff --git a/tasks/neovim.yml b/tasks/neovim.yml
index b1b1e9d..21a3fbf 100644
--- a/tasks/neovim.yml
+++ b/tasks/neovim.yml
@@ -163,12 +163,12 @@
         neovim_installed_version: neovim_stats.stdout_lines[0] | regex_search('(v\d+\.\d+\.\d+)')
       when: neovim_stats.rc == 0
 
-      # TODO: verify checksum
     - name: Download neovim {{ neovim.version }}
       ansible.builtin.get_url:
-        url: 'https://github.com/neovim/neovim/releases/download/{{ neovim.version }}/nvim-linux64.tar.gz'
+        url: 'https://github.com/neovim/neovim/releases/download/{{ neovim.version }}/nvim-linux-x86_64.tar.gz'
         dest: /tmp/nvim-linux64.tar.gz
         mode: '0755'
+        checksum: '{{ neovim.download_checksum }}'
       when: neovim_stats.rc > 0 or neovim_installed_version != neovim.version
       register: neovim_download
 
diff --git a/vars/debian.yml b/vars/debian.yml
index 5c39383..cb7c8a3 100644
--- a/vars/debian.yml
+++ b/vars/debian.yml
@@ -10,9 +10,9 @@ packages:
   - ripgrep
 
 neovim:
-  version: 'v0.10.1'
+  version: 'v0.10.4'
   install_path: '/opt/nvim'
-  download_checksum: 4867de01a17f6083f902f8aa5215b40b0ed3a36e83cc0293de3f11708f1f9793
+  download_checksum: sha256:95aaa8e89473f5421114f2787c13ae0ec6e11ebbd1a13a1bd6fcf63420f8073f
 
 # TODO: add lua language server, see https://github.com/LuaLS/lua-language-server?
 language_servers: