chore(nix): update nixpkgs-unstable to 0267914b

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

.github/actions/update-flake-input/action.yaml

@@ -0,0 +1,260 @@
+name: Update Flake Input
+description: Update one GitHub-backed Nix flake input and create a pull request
+inputs:
+  input-name:
+    description: Name of the flake input to update
+    required: true
+  github-token:
+    description: Token used to query GitHub, push the update branch, and manage the pull request
+    required: true
+  base-branch:
+    description: Branch targeted by the pull request
+    required: false
+    default: main
+  minimum-release-age-days:
+    description: Minimum age of the target commit in days
+    required: false
+    default: "3"
+  skip-delay:
+    description: Update to the latest revision without applying the minimum age
+    required: false
+    default: "false"
+  auto-merge:
+    description: Enable squash auto-merge on the pull request
+    required: false
+    default: "true"
+  pr-labels:
+    description: Comma-separated labels to add when they already exist in the repository
+    required: false
+    default: dependencies,automated
+outputs:
+  updated:
+    description: Whether flake.lock changed
+    value: ${{ steps.update.outputs.updated }}
+  current-version:
+    description: Previous locked revision
+    value: ${{ steps.update.outputs.current_version }}
+  new-version:
+    description: New locked revision
+    value: ${{ steps.update.outputs.new_version }}
+  pr-url:
+    description: URL of the created or updated pull request
+    value: ${{ steps.pull-request.outputs.pr_url }}
+runs:
+  using: composite
+  steps:
+    - name: Update flake input
+      id: update
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.github-token }}
+        INPUT_NAME: ${{ inputs.input-name }}
+        MINIMUM_RELEASE_AGE_DAYS: ${{ inputs.minimum-release-age-days }}
+        SKIP_DELAY: ${{ inputs.skip-delay }}
+      run: |
+        set -euo pipefail
+
+        if [[ ! "$MINIMUM_RELEASE_AGE_DAYS" =~ ^[0-9]+$ ]]; then
+          echo "::error::minimum-release-age-days must be a non-negative integer"
+          exit 1
+        fi
+
+        node_key="$(
+          jq -er --arg input "$INPUT_NAME" '
+            .nodes.root.inputs[$input]
+            | if type == "array" then .[0] else . end
+          ' flake.lock
+        )"
+        input_type="$(jq -r --arg node "$node_key" '.nodes[$node].locked.type // ""' flake.lock)"
+        input_owner="$(jq -r --arg node "$node_key" '.nodes[$node].locked.owner // ""' flake.lock)"
+        input_repo="$(jq -r --arg node "$node_key" '.nodes[$node].locked.repo // ""' flake.lock)"
+        input_ref="$(jq -r --arg node "$node_key" '.nodes[$node].original.ref // ""' flake.lock)"
+        current_rev="$(jq -er --arg node "$node_key" '.nodes[$node].locked.rev' flake.lock)"
+
+        if [ "$input_type" != "github" ] || [ -z "$input_owner" ] || [ -z "$input_repo" ]; then
+          echo "::error::${INPUT_NAME} is not a GitHub-backed flake input"
+          exit 1
+        fi
+
+        echo "Input: $INPUT_NAME"
+        echo "Repository: ${input_owner}/${input_repo}"
+        echo "Current revision: $current_rev"
+
+        if [ "$SKIP_DELAY" = "true" ]; then
+          nix flake update "$INPUT_NAME"
+        else
+          cutoff="$(date --utc --date="${MINIMUM_RELEASE_AGE_DAYS} days ago" +%Y-%m-%dT%H:%M:%SZ)"
+          api_args=(
+            --method GET
+            "repos/${input_owner}/${input_repo}/commits"
+            -f "until=$cutoff"
+            -f per_page=1
+          )
+          if [ -n "$input_ref" ]; then
+            api_args+=(-f "sha=$input_ref")
+          fi
+
+          echo "Selecting the newest commit no later than $cutoff"
+          target_data="$(gh api "${api_args[@]}" --jq '.[0] | {sha: .sha, date: .commit.committer.date}')"
+          target_rev="$(jq -er '.sha' <<< "$target_data")"
+          target_date="$(jq -er '.date' <<< "$target_data")"
+
+          if [ "$target_rev" = "$current_rev" ]; then
+            echo "The input is already at the newest eligible revision"
+            {
+              echo "updated=false"
+              echo "current_version=$current_rev"
+              echo "new_version=$current_rev"
+            } >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          current_date="$(
+            gh api "repos/${input_owner}/${input_repo}/commits/${current_rev}" \
+              --jq '.commit.committer.date'
+          )"
+          current_timestamp="$(date --date="$current_date" +%s)"
+          target_timestamp="$(date --date="$target_date" +%s)"
+
+          if [ "$target_timestamp" -lt "$current_timestamp" ]; then
+            echo "The newest eligible revision is older than the current revision; skipping"
+            {
+              echo "updated=false"
+              echo "current_version=$current_rev"
+              echo "new_version=$current_rev"
+            } >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          nix flake update "$INPUT_NAME" \
+            --override-input "$INPUT_NAME" "github:${input_owner}/${input_repo}/${target_rev}"
+        fi
+
+        if git diff --quiet -- flake.lock; then
+          echo "No lock file changes were produced"
+          {
+            echo "updated=false"
+            echo "current_version=$current_rev"
+            echo "new_version=$current_rev"
+          } >> "$GITHUB_OUTPUT"
+          exit 0
+        fi
+
+        new_node_key="$(
+          jq -er --arg input "$INPUT_NAME" '
+            .nodes.root.inputs[$input]
+            | if type == "array" then .[0] else . end
+          ' flake.lock
+        )"
+        new_rev="$(jq -er --arg node "$new_node_key" '.nodes[$node].locked.rev' flake.lock)"
+
+        echo "New revision: $new_rev"
+        {
+          echo "updated=true"
+          echo "current_version=$current_rev"
+          echo "new_version=$new_rev"
+          echo "input_owner=$input_owner"
+          echo "input_repo=$input_repo"
+        } >> "$GITHUB_OUTPUT"
+    - name: Create or update pull request
+      id: pull-request
+      if: steps.update.outputs.updated == 'true'
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.github-token }}
+        INPUT_NAME: ${{ inputs.input-name }}
+        BASE_BRANCH: ${{ inputs.base-branch }}
+        CURRENT_REV: ${{ steps.update.outputs.current_version }}
+        NEW_REV: ${{ steps.update.outputs.new_version }}
+        INPUT_OWNER: ${{ steps.update.outputs.input_owner }}
+        INPUT_REPO: ${{ steps.update.outputs.input_repo }}
+        MINIMUM_RELEASE_AGE_DAYS: ${{ inputs.minimum-release-age-days }}
+        SKIP_DELAY: ${{ inputs.skip-delay }}
+        AUTO_MERGE: ${{ inputs.auto-merge }}
+        PR_LABELS: ${{ inputs.pr-labels }}
+      run: |
+        set -euo pipefail
+
+        branch_suffix="$(tr -c 'A-Za-z0-9._-' '-' <<< "$INPUT_NAME" | sed 's/-$//')"
+        branch="update-flake-${branch_suffix}"
+        current_short="${CURRENT_REV:0:8}"
+        new_short="${NEW_REV:0:8}"
+        title="chore(nix): update ${INPUT_NAME} to ${new_short}"
+
+        if [ "$SKIP_DELAY" = "true" ]; then
+          age_note="The minimum release age check was skipped for this manually requested update."
+        else
+          age_note="The target commit is at least ${MINIMUM_RELEASE_AGE_DAYS} days old."
+        fi
+
+        body="$(
+          printf '%s\n' \
+            "Automated update of the \`${INPUT_NAME}\` flake input." \
+            "" \
+            "- Previous revision: [\`${current_short}\`](https://github.com/${INPUT_OWNER}/${INPUT_REPO}/commit/${CURRENT_REV})" \
+            "- New revision: [\`${new_short}\`](https://github.com/${INPUT_OWNER}/${INPUT_REPO}/commit/${NEW_REV})" \
+            "- Changes: [compare](https://github.com/${INPUT_OWNER}/${INPUT_REPO}/compare/${CURRENT_REV}...${NEW_REV})" \
+            "" \
+            "$age_note"
+        )"
+
+        git config user.name "github-actions[bot]"
+        git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+        git add flake.lock
+        git switch -C "$branch"
+        git commit -m "$title"
+
+        git fetch origin "refs/heads/${branch}:refs/remotes/origin/${branch}" || true
+        git push --force-with-lease origin "HEAD:refs/heads/${branch}"
+
+        label_args=()
+        available_labels="$(gh label list --limit 100 --json name --jq '.[].name')"
+        IFS=',' read -ra requested_labels <<< "$PR_LABELS"
+        for label in "${requested_labels[@]}"; do
+          label="$(xargs <<< "$label")"
+          if [ -n "$label" ] && grep -Fxq "$label" <<< "$available_labels"; then
+            label_args+=(--add-label "$label")
+          elif [ -n "$label" ]; then
+            echo "::warning::Skipping missing pull request label: $label"
+          fi
+        done
+
+        pr_number="$(
+          gh pr list \
+            --state open \
+            --head "$branch" \
+            --json number \
+            --jq '.[0].number // empty'
+        )"
+
+        if [ -n "$pr_number" ]; then
+          gh pr edit "$pr_number" \
+            --title "$title" \
+            --body "$body" \
+            "${label_args[@]}"
+        else
+          gh pr create \
+            --base "$BASE_BRANCH" \
+            --head "$branch" \
+            --title "$title" \
+            --body "$body"
+          pr_number="$(
+            gh pr list \
+              --state open \
+              --head "$branch" \
+              --json number \
+              --jq '.[0].number'
+          )"
+          if [ "${#label_args[@]}" -gt 0 ]; then
+            gh pr edit "$pr_number" "${label_args[@]}"
+          fi
+        fi
+
+        if [ "$AUTO_MERGE" = "true" ]; then
+          gh pr merge "$pr_number" --auto --squash ||
+            echo "::warning::Auto-merge could not be enabled; check the repository merge settings"
+        fi
+
+        pr_url="$(gh pr view "$pr_number" --json url --jq '.url')"
+        echo "pr_url=$pr_url" >> "$GITHUB_OUTPUT"
+        echo "Pull request: $pr_url"

.github/workflows/renovate.yml

@@ -11,7 +11,7 @@ concurrency:
   cancel-in-progress: false
 jobs:
   renovate:
-    name: Update Nix flake inputs
+    name: Update GitHub Actions dependencies
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:

.github/workflows/update-flake-inputs.yml

@@ -0,0 +1,106 @@
+name: Update Flake Inputs
+on:
+  schedule:
+    # Every day at 03:30 JST (18:30 UTC on the previous day).
+    - cron: "30 18 * * *"
+  workflow_dispatch:
+    inputs:
+      input:
+        description: Update only this flake input (empty updates all inputs)
+        required: false
+        type: string
+      skip-delay:
+        description: Update to the latest revision without the three-day delay
+        required: false
+        default: false
+        type: boolean
+      auto-merge:
+        description: Enable auto-merge after required checks pass
+        required: false
+        default: true
+        type: boolean
+permissions:
+  contents: write
+  pull-requests: write
+concurrency:
+  group: update-flake-inputs
+  cancel-in-progress: false
+jobs:
+  discover:
+    name: Discover flake inputs
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    outputs:
+      matrix: ${{ steps.inputs.outputs.matrix }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - name: Build update matrix
+        id: inputs
+        env:
+          REQUESTED_INPUT: ${{ inputs.input }}
+        run: |
+          set -euo pipefail
+
+          github_inputs="$(
+            jq -c '
+              . as $lock
+              | [
+                  $lock.nodes.root.inputs
+                  | to_entries[]
+                  | .key as $name
+                  | (
+                      .value
+                      | if type == "array" then .[0] else . end
+                    ) as $node
+                  | select($lock.nodes[$node].locked.type == "github")
+                  | $name
+                ]
+              | sort
+            ' flake.lock
+          )"
+
+          if [ -n "$REQUESTED_INPUT" ]; then
+            if ! jq -e --arg input "$REQUESTED_INPUT" 'index($input) != null' <<< "$github_inputs" >/dev/null; then
+              echo "::error::Unknown or unsupported flake input: $REQUESTED_INPUT"
+              exit 1
+            fi
+            matrix="$(jq -cn --arg input "$REQUESTED_INPUT" '{input: [$input]}')"
+          else
+            matrix="$(jq -cn --argjson inputs "$github_inputs" '{input: $inputs}')"
+          fi
+
+          echo "matrix=$matrix" >> "$GITHUB_OUTPUT"
+          echo "Update matrix: $matrix"
+  update:
+    name: Update ${{ matrix.input }}
+    needs: discover
+    if: ${{ needs.discover.outputs.matrix != '{"input":[]}' }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    strategy:
+      fail-fast: false
+      max-parallel: 4
+      matrix: ${{ fromJSON(needs.discover.outputs.matrix) }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.RENOVATE_TOKEN }}
+      - name: Install Nix
+        uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31.11.0
+        with:
+          extra_nix_config: |
+            experimental-features = nix-command flakes
+            accept-flake-config = true
+            access-tokens = github.com=${{ secrets.RENOVATE_TOKEN }}
+      - name: Update input
+        uses: ./.github/actions/update-flake-input
+        with:
+          input-name: ${{ matrix.input }}
+          github-token: ${{ secrets.RENOVATE_TOKEN }}
+          skip-delay: ${{ github.event_name == 'workflow_dispatch' && inputs.skip-delay }}
+          auto-merge: ${{ github.event_name != 'workflow_dispatch' || inputs.auto-merge }}

flake.lock

@@ -104,9 +104,7 @@
     "codex-desktop-linux": {
       "inputs": {
         "flake-utils": "flake-utils",
-        "nixpkgs": [
+        "nixpkgs": "nixpkgs"
-          "nixpkgs-unstable"
-        ]
       },
       "locked": {
         "lastModified": 1784823421,
@@ -372,17 +370,17 @@
       "inputs": {
         "flake-compat": "flake-compat",
         "home-manager": "home-manager",
-        "nixpkgs": "nixpkgs",
+        "nixpkgs": "nixpkgs_2",
         "systems": "systems_2",
         "zig": "zig",
         "zon2nix": "zon2nix"
       },
       "locked": {
-        "lastModified": 1784838920,
+        "lastModified": 1784868212,
-        "narHash": "sha256-MTNHCKPqwjVcYh+DglaR3cQugMCz1kWDajV/nx2PDhw=",
+        "narHash": "sha256-DvPf4hVaD8iEeSfqhPCfAtD9kWkBAODqvxp9rmEBgPo=",
         "owner": "moons-14",
         "repo": "ghostty",
-        "rev": "5c258c2530878166893d805fba7079b9742f1fc5",
+        "rev": "4c725242b7dbe8c77c6e227ef1f9540c5ef17921",
         "type": "github"
       },
       "original": {
@@ -394,7 +392,7 @@
     "git-hooks-nix": {
       "inputs": {
         "flake-compat": "flake-compat_2",
-        "nixpkgs": "nixpkgs_2"
+        "nixpkgs": "nixpkgs_3"
       },
       "locked": {
         "lastModified": 1784288435,
@@ -519,9 +517,7 @@
       "inputs": {
         "bun2nix": "bun2nix",
         "flake-parts": "flake-parts_2",
-        "nixpkgs": [
+        "nixpkgs": "nixpkgs_4",
-          "nixpkgs-unstable"
-        ],
         "systems": "systems_3",
         "treefmt-nix": "treefmt-nix"
       },
@@ -543,17 +539,17 @@
       "inputs": {
         "niri-stable": "niri-stable",
         "niri-unstable": "niri-unstable",
-        "nixpkgs": "nixpkgs_3",
+        "nixpkgs": "nixpkgs_5",
         "nixpkgs-stable": "nixpkgs-stable",
         "xwayland-satellite-stable": "xwayland-satellite-stable",
         "xwayland-satellite-unstable": "xwayland-satellite-unstable"
       },
       "locked": {
-        "lastModified": 1784686714,
+        "lastModified": 1784874881,
-        "narHash": "sha256-6HCWRBQq/U2NPY2msnnysnWczZYzEzhS1UZURmrr2f0=",
+        "narHash": "sha256-u4jhSIf/Un0qZB+Cn3hTTaHSI20XeAxYbA5o4faqdJs=",
         "owner": "sodiboo",
         "repo": "niri-flake",
-        "rev": "4dfd38bad6150c07be6cc3fd7682787765092eea",
+        "rev": "ef7a2a3d719af46b906c22a3ebfb7d65627b2cd2",
         "type": "github"
       },
       "original": {
@@ -638,7 +634,7 @@
     },
     "nixos-hardware": {
       "inputs": {
-        "nixpkgs": "nixpkgs_4"
+        "nixpkgs": "nixpkgs_6"
       },
       "locked": {
         "lastModified": 1784723954,
@@ -658,7 +654,7 @@
     "nixos-wsl": {
       "inputs": {
         "flake-compat": "flake-compat_4",
-        "nixpkgs": "nixpkgs_5"
+        "nixpkgs": "nixpkgs_7"
       },
       "locked": {
         "lastModified": 1784642409,
@@ -676,15 +672,18 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1782545840,
+        "lastModified": 1772773019,
-        "narHash": "sha256-CAi8oAZaE6pTkcYQBnnOlvmfMgG/p1AO0FohKKN3J7I=",
+        "narHash": "sha256-E1bxHxNKfDoQUuvriG71+f+s/NT0qWkImXsYZNFFfCs=",
-        "rev": "3d46470bb3030020f7e1361f33514854f5bfa86d",
+        "owner": "NixOS",
-        "type": "tarball",
+        "repo": "nixpkgs",
-        "url": "https://releases.nixos.org/nixpkgs/nixpkgs-26.11pre1023445.3d46470bb303/nixexprs.tar.xz"
+        "rev": "aca4d95fce4914b3892661bcb80b8087293536c6",
+        "type": "github"
       },
       "original": {
-        "type": "tarball",
+        "owner": "NixOS",
-        "url": "https://channels.nixos.org/nixpkgs-unstable/nixexprs.tar.xz"
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
       }
     },
     "nixpkgs-lib": {
@@ -736,11 +735,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1784555310,
+        "lastModified": 1785009302,
-        "narHash": "sha256-/FCliTPgiuV1owejZFNx3Ch9irdvkOfOFl+HHZ+DrtM=",
+        "narHash": "sha256-IFv7UnewuC5hjMo8KdnGGHSYTW2UJZKZvvZyBd/Wj0s=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "421eebfd0ec7bccd4abe826ce62d7e6e83129493",
+        "rev": "0267914b93539fd1a77d38e7244f7efeca4d76a5",
         "type": "github"
       },
       "original": {
@@ -750,100 +749,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_2": {
+    "nixpkgs_10": {
-      "locked": {
-        "lastModified": 1782918843,
-        "narHash": "sha256-ETYnV9U7Sr+A45dohzZdfCZKOss4qrTkO+wgNZNvEc0=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "e8273b29fe1390ec8d4603f2477357555291432e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixpkgs-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_3": {
-      "locked": {
-        "lastModified": 1784497964,
-        "narHash": "sha256-vlHUuqAcbcH2RKmHbPiuQzbv1pnzzavXnI62RD0bqCU=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "241313f4e8e508cb9b13278c2b0fa25b9ca27163",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_4": {
-      "locked": {
-        "lastModified": 1767892417,
-        "narHash": "sha256-8bW3q88CEg2u4hSP66Vf4lpbLonHz7hqDNBMcCY7E9U=",
-        "rev": "3497aa5c9457a9d88d71fa93a4a8368816fbeeba",
-        "type": "tarball",
-        "url": "https://releases.nixos.org/nixos/unstable/nixos-26.05pre924538.3497aa5c9457/nixexprs.tar.xz"
-      },
-      "original": {
-        "type": "tarball",
-        "url": "https://channels.nixos.org/nixos-unstable/nixexprs.tar.xz"
-      }
-    },
-    "nixpkgs_5": {
-      "locked": {
-        "lastModified": 1783776592,
-        "narHash": "sha256-UgCQzxeWI75XM8G+hPrPh+MKzEPjG3SpAj7dtqSbksA=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "e7a3ca8092b61ff85b6a45bf863ea2b2d6a661b3",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_6": {
-      "locked": {
-        "lastModified": 1784707089,
-        "narHash": "sha256-2V/6imsUgB7mPZlHY54oeVBRDoZbPKnvzwkAHUSSufk=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "b3fe9581c9061c749abef42b6d4ee7b7c05c33fa",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-26.05",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_7": {
-      "locked": {
-        "lastModified": 1770107345,
-        "narHash": "sha256-tbS0Ebx2PiA1FRW8mt8oejR0qMXmziJmPaU1d4kYY9g=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "4533d9293756b63904b7238acb84ac8fe4c8c2c4",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "nixpkgs-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_8": {
       "locked": {
         "lastModified": 1772542754,
         "narHash": "sha256-WGV2hy+VIeQsYXpsLjdr4GvHv5eECMISX1zKLTedhdg=",
@@ -859,7 +765,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_9": {
+    "nixpkgs_11": {
       "locked": {
         "lastModified": 1778869304,
         "narHash": "sha256-30sZNZoA1cqF5JNO9fVX+wgiQYjB7HJqqJ4ztCDeBZE=",
@@ -875,6 +781,128 @@
         "type": "github"
       }
     },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1782545840,
+        "narHash": "sha256-CAi8oAZaE6pTkcYQBnnOlvmfMgG/p1AO0FohKKN3J7I=",
+        "rev": "3d46470bb3030020f7e1361f33514854f5bfa86d",
+        "type": "tarball",
+        "url": "https://releases.nixos.org/nixpkgs/nixpkgs-26.11pre1023445.3d46470bb303/nixexprs.tar.xz"
+      },
+      "original": {
+        "type": "tarball",
+        "url": "https://channels.nixos.org/nixpkgs-unstable/nixexprs.tar.xz"
+      }
+    },
+    "nixpkgs_3": {
+      "locked": {
+        "lastModified": 1782918843,
+        "narHash": "sha256-ETYnV9U7Sr+A45dohzZdfCZKOss4qrTkO+wgNZNvEc0=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "e8273b29fe1390ec8d4603f2477357555291432e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_4": {
+      "locked": {
+        "lastModified": 1784555310,
+        "narHash": "sha256-/FCliTPgiuV1owejZFNx3Ch9irdvkOfOFl+HHZ+DrtM=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "421eebfd0ec7bccd4abe826ce62d7e6e83129493",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_5": {
+      "locked": {
+        "lastModified": 1784796856,
+        "narHash": "sha256-wWFrV5/Qbm+lyt5x20E/bSbfJiGKMo4RCxZV8cl/WZI=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "e2587caef70cea85dd97d7daab492899902dbf5d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_6": {
+      "locked": {
+        "lastModified": 1767892417,
+        "narHash": "sha256-8bW3q88CEg2u4hSP66Vf4lpbLonHz7hqDNBMcCY7E9U=",
+        "rev": "3497aa5c9457a9d88d71fa93a4a8368816fbeeba",
+        "type": "tarball",
+        "url": "https://releases.nixos.org/nixos/unstable/nixos-26.05pre924538.3497aa5c9457/nixexprs.tar.xz"
+      },
+      "original": {
+        "type": "tarball",
+        "url": "https://channels.nixos.org/nixos-unstable/nixexprs.tar.xz"
+      }
+    },
+    "nixpkgs_7": {
+      "locked": {
+        "lastModified": 1783776592,
+        "narHash": "sha256-UgCQzxeWI75XM8G+hPrPh+MKzEPjG3SpAj7dtqSbksA=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "e7a3ca8092b61ff85b6a45bf863ea2b2d6a661b3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_8": {
+      "locked": {
+        "lastModified": 1784923315,
+        "narHash": "sha256-2e5BnQ0YLJMIRII1BdGsLiBcJ1fRVauvZypwZIR2JLw=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "d2f1d98be0573ebf42b96630bc8d7001ff62af43",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-26.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_9": {
+      "locked": {
+        "lastModified": 1770107345,
+        "narHash": "sha256-tbS0Ebx2PiA1FRW8mt8oejR0qMXmziJmPaU1d4kYY9g=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "4533d9293756b63904b7238acb84ac8fe4c8c2c4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "nixvim": {
       "inputs": {
         "flake-parts": "flake-parts_3",
@@ -905,11 +933,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1784838755,
+        "lastModified": 1784917398,
-        "narHash": "sha256-aTAnFf29sIVE9hpolWePKscnJfkJRdyFxEkdeP4y9YQ=",
+        "narHash": "sha256-lBVMJgBWbC3H6UGlCYiu8pbgUJqWWyJ70n/xIljk/1I=",
         "owner": "noctalia-dev",
         "repo": "noctalia",
-        "rev": "45ec7e33885540427d766c4a54e8f813dfdc9db9",
+        "rev": "0cd9b22e19fb71455c950a70c11324b7e245a790",
         "type": "github"
       },
       "original": {
@@ -980,7 +1008,7 @@
         "nix-index-database": "nix-index-database",
         "nixos-hardware": "nixos-hardware",
         "nixos-wsl": "nixos-wsl",
-        "nixpkgs": "nixpkgs_6",
+        "nixpkgs": "nixpkgs_8",
         "nixpkgs-unstable": "nixpkgs-unstable",
         "nixvim": "nixvim",
         "noctalia": "noctalia",
@@ -1051,7 +1079,7 @@
     },
     "soulver-cpp": {
       "inputs": {
-        "nixpkgs": "nixpkgs_9",
+        "nixpkgs": "nixpkgs_11",
         "nixpkgs-libxml2": "nixpkgs-libxml2"
       },
       "locked": {
@@ -1309,7 +1337,7 @@
     },
     "treefmt-nix_2": {
       "inputs": {
-        "nixpkgs": "nixpkgs_7"
+        "nixpkgs": "nixpkgs_9"
       },
       "locked": {
         "lastModified": 1784369104,
@@ -1327,16 +1355,16 @@
     },
     "vicinae": {
       "inputs": {
-        "nixpkgs": "nixpkgs_8",
+        "nixpkgs": "nixpkgs_10",
         "soulver-cpp": "soulver-cpp",
         "systems": "systems_7"
       },
       "locked": {
-        "lastModified": 1784819467,
+        "lastModified": 1784839524,
-        "narHash": "sha256-4vAwAdN7Z+5x4jLpqjd6oAwSMMDgQ7DrmrWw0mwDxSI=",
+        "narHash": "sha256-B87U5HDB/6JPxSnNQwnIiwtqUWvyxzqs7lV/GPzva68=",
         "owner": "vicinaehq",
         "repo": "vicinae",
-        "rev": "d3abfbc2afe149d48c9bc3ba95f6689e965891c7",
+        "rev": "632ca79e9f8fc9721384921f28ec069ff48aaf53",
         "type": "github"
       },
       "original": {

flake.nix

@@ -78,12 +78,10 @@
     # LLM agents
     llm-agents = {
       url = "github:numtide/llm-agents.nix";
-      inputs.nixpkgs.follows = "nixpkgs-unstable";
     };
 
     codex-desktop-linux = {
       url = "github:ilysenko/codex-desktop-linux";
-      inputs.nixpkgs.follows = "nixpkgs-unstable";
     };
 
     # Index / Search

overlays/default.nix

@@ -1,6 +1,6 @@
 { inputs, ... }:
 {
-  flake.overlays = {
+  flake.overlays.default = final: {
-    default = inputs.llm-agents.overlays.shared-nixpkgs;
+    llm-agents = inputs.llm-agents.packages.${final.stdenv.hostPlatform.system};
   };
 }

renovate.json

@@ -1,31 +1,13 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": ["config:recommended", "helpers:pinGitHubActionDigests"],
-  "enabledManagers": ["github-actions", "nix"],
+  "enabledManagers": ["github-actions"],
 
   "prHourlyLimit": 0,
 
-  "nix": {
-    "enabled": true
-  },
-
-  "lockFileMaintenance": {
-    "enabled": true,
-    "schedule": ["at any time"]
-  },
-
   "prCreation": "immediate",
 
   "semanticCommits": "enabled",
   "semanticCommitType": "chore",
-  "semanticCommitScope": "deps",
+  "semanticCommitScope": "deps"
-
-  "packageRules": [
-    {
-      "description": "Group Nix flake input updates",
-      "matchManagers": ["nix"],
-      "groupName": "Nix flake inputs",
-      "groupSlug": "nix-flake-inputs"
-    }
-  ]
 }