Skip to content

chore(deps): lock file maintenance - #1510

Merged
shunkakinoki merged 17 commits into
mainfrom
renovate/lock-file-maintenance
Apr 21, 2026
Merged

chore(deps): lock file maintenance#1510
shunkakinoki merged 17 commits into
mainfrom
renovate/lock-file-maintenance

Conversation

@shunkakinoki

@shunkakinoki shunkakinoki commented Apr 19, 2026

Copy link
Copy Markdown
Owner

This PR contains the following updates:

Update Change
lockFileMaintenance All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.


Summary by cubic

Refreshes bun.lock and flake.lock with the latest versions. Switches Neovim to extraLuaConfig for init.lua, replaces nodePackages.* LSPs with top-level packages, and removes vllm from Home Manager packages (managed via pyproject.toml).

  • Dependencies
    • Bumped core Nix inputs: nixpkgs (unstable/nightly), nixpkgs.lib, home-manager, flake-parts, NUR, nix-darwin, nixos-hardware.
    • Updated tooling: devenv and cachix/nix to devenv-2.34, plus treefmt-nix, nix2container, xremap v0.15.1.
    • Dev env updates: foundry.nix, neovim, and neovim-nightly-overlay.
    • Pin change: switched crate2nix to rossng/crate2nix@ba5dd398.

Written for commit 19782a4. Summary will update on new commits.

@shunkakinoki
shunkakinoki enabled auto-merge (squash) April 19, 2026 04:05
@mesa-dot-dev

mesa-dot-dev Bot commented Apr 19, 2026

Copy link
Copy Markdown

You do not have enough credits to review this pull request. Please purchase more credits to continue.

@coderabbitai

coderabbitai Bot commented Apr 19, 2026

Copy link
Copy Markdown

Warning

Rate limit exceeded

@shunkakinoki has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 16 minutes and 40 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 16 minutes and 40 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: f6928762-40da-405e-9973-71a5c7f9041a

📥 Commits

Reviewing files that changed from the base of the PR and between 319982f and 19782a4.

⛔ Files ignored due to path filters (2)
  • bun.lock is excluded by !**/*.lock
  • flake.lock is excluded by !**/*.lock
📒 Files selected for processing (5)
  • home-manager/packages/default.nix
  • home-manager/programs/bash/default.nix
  • home-manager/programs/neovim/default.nix
  • home-manager/programs/node/default.nix
  • home-manager/programs/php/default.nix
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/lock-file-maintenance

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@mesa-dot-dev

mesa-dot-dev Bot commented Apr 19, 2026

Copy link
Copy Markdown

Mesa Description

TL;DR

This PR performs lock file maintenance by updating flake.lock and bun.lock to pull in the latest dependency versions, refactors Neovim's init.lua configuration, and updates language server package references to direct pkgs references.

What changed?

  • flake.lock: Nix dependencies updated to ensure reproducible builds with the latest versions.
  • bun.lock: Lock file refreshed to use the latest dependency versions.
  • home-manager/programs/neovim/default.nix: Neovim's init.lua configuration refactored to use extraLuaConfig directly.
  • home-manager/packages/default.nix, home-manager/programs/bash/default.nix, home-manager/programs/node/default.nix, home-manager/programs/php/default.nix: Language server package references (e.g., typescript-language-server, bash-language-server, intelephense) updated to use direct pkgs references instead of nodePackages.*.

Description generated by Mesa. Update settings

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates several dependency pins in the flake.lock file, including updates for devenv, nixpkgs, home-manager, and xremap. A significant issue was identified regarding the crate2nix dependency, which has been switched from the official nix-community repository to a personal fork and shows a regression to an older version, posing a potential supply chain risk.

Comment thread flake.lock
Comment on lines +149 to +159
"lastModified": 1772186516,
"narHash": "sha256-8s28pzmQ6TOIUzznwFibtW1CMieMUl1rYJIxoQYor58=",
"owner": "rossng",
"repo": "crate2nix",
"rev": "e697d3049c909580128caa856ab8eb709556a97b",
"rev": "ba5dd398e31ee422fbe021767eb83b0650303a6e",
"type": "github"
},
"original": {
"owner": "nix-community",
"owner": "rossng",
"repo": "crate2nix",
"rev": "ba5dd398e31ee422fbe021767eb83b0650303a6e",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

security-high high

The crate2nix dependency has been switched from the community-maintained nix-community organization to a personal fork (rossng) and is now pinned to a specific revision (ba5dd39...). Furthermore, the lastModified timestamp has decreased (from 1773440526 to 1772186516), which indicates a regression to an older version of the code. This change introduces a potential supply chain risk and maintainability concerns by moving away from the official community repository.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@shunkakinoki

Copy link
Copy Markdown
Owner Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

shunkakinoki and others added 15 commits April 20, 2026 16:56
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* fix: tmux resurrect/continuum restore on NixOS

- Move plugin options to per-plugin extraConfig in default.nix so they
  are set before each plugin's run-shell
- Move status-right to continuum extraConfig so continuum can prepend
  its auto-save trigger (#(.../continuum_save.sh))
- Fix _two_function to create tmux server before resolving resurrect
  restore script path (was always empty after reboot)
- Switch grep -E to grep -P for tab matching in post-save hook

* fix: load resurrect before continuum in plugin order
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* fix: remap framework copy for editors

* chore: update

* chore: update

* chore: update

* chore: update

* chore: update

* fix(keyd): centralize app mapper config

Move the Slack app mapper config into the shared keyd module so the host does not inline repo config paths.

Keep the keyd application mapper service in the shared module and preserve the sg keyd launch path that fixes Slack Framework+C in stale user sessions.

Co-authored-by: Codex <noreply@openai.com>

* ref(home-manager): move keyd app mapper service

Move the keyd application mapper user unit into the Home Manager services tree so service wiring follows the repo's shared service layout.

Keep config/keyd focused on keyd config and enable the mapper through an explicit Home Manager service option so the service can consume app.conf without recursive evaluation.

Co-authored-by: Codex <noreply@openai.com>

* ref(keyd): simplify app mapper wiring

Write app.conf from the shared keyd module again and keep the Home Manager service focused on the user unit.

Have the service read the standard xdg config path instead of carrying a configFile option, while keeping the restart hash tied to the resolved app.conf source.

Co-authored-by: Codex <noreply@openai.com>

---------

Co-authored-by: Codex <noreply@openai.com>
@shunkakinoki
shunkakinoki disabled auto-merge April 21, 2026 20:44
@shunkakinoki
shunkakinoki merged commit d9a5d8c into main Apr 21, 2026
24 of 33 checks passed
@shunkakinoki
shunkakinoki deleted the renovate/lock-file-maintenance branch April 21, 2026 20:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants