[dependabot]

Bumps the nix group with 2 updates in the / directory: flake-utils and nixpkgs.

Updates flake-utils from b7a79d3 to bd48884

Commits

• bd48884 flake.lock: Update
• See full diff in compare view

Updates nixpkgs from 5c9de89 to 4fe25e1

Commits

• 4fe25e1 fan2go: enable structuredAttrs (#583167)
• c47aa11 home-assistant-custom-components.arpscan_tracker: init at 2.1.8 (#582911)
• dded81c godns: enable structuredAttrs (#583194)
• bc819cf maintainers: add mykiwi (#581970)
• 9ab850f home-assistant-custom-components.hcl_lighting: init at 0.9.3 (#582908)
• d738642 miru: 0.14.0 -> 0.15.0 (#583966)
• 6e2c99f ppl: use canonical homepage (#584037)
• 10da2dd python3Packages.flexit-bacnet: 2.2.3 -> 2.3.2 (#583969)
• 61006c1 pkgs/stdenv/problems: match kind not problem name (#584028)
• 2398c72 moreutils: migrate to by-name (#584004)
• Additional commits viewable in compare view

[kixelated]

@pullfrog review this pull request. Its base now requires an approving review, and this head predates Pullfrog's approvals here.

(Written by Opus 5.5)

[pullfrog]

Important

The nixpkgs bump changes the pinned Bun from 1.4.2 to 1.4.4. package.json still declares bun@1.4.2, so the flake.nix assertion fails and the toolchain CI job is red.

Reviewed changes

I reviewed this Dependabot flake.lock bump. It updates nixpkgs and flake-utils, which also pulls in a new systems revision.

• nixpkgs 5c9de89 → 4fe25e1: Bun in the pinned package set goes from 1.4.2 to 1.4.4, which breaks the Bun pin check.
• flake-utils b7a79d3 → bd48884: Routine update with no issues.
• systems da67096 → d36eeed: This comes in through the flake-utils update. Nothing here depends on it directly.

  ^{｜ Fix all ➔ ｜ Fix 👍s ➔ ｜ View workflow run ｜ Using claude-opus-5-5 ｜ 𝕏}

[pullfrog]

This nixpkgs revision ships Bun 1.4.4, but package.json still has "packageManager": "bun@1.4.2". The assertion at flake.nix:41-43 now throws Bun pins disagree: packageManager in package.json must be bun@1.4.4, which fails the toolchain job. Update packageManager to bun@1.4.4 in this PR.

Technical details

# Bun pin mismatch after nixpkgs bump

## Affected sites
- package.json:66 — `"packageManager": "bun@1.4.2"` must match `pkgs.bun.version` from the new nixpkgs (1.4.4)
- flake.nix:41-43 — the assertion that enforces the match (correct as is)

## Required outcome
- `packageManager` in `package.json` equals `bun@1.4.4`, so `nix develop` evaluates and the `toolchain` job passes.
- The `check` job reads `bun-version-file: package.json` through `oven-sh/setup-bun`, so it will switch to 1.4.4 too. Confirm `bun install --frozen-lockfile` still passes there.

## Open questions for the human
- Pushing a commit to a Dependabot branch stops Dependabot from auto-rebasing this PR. The alternative is to bump `packageManager` on `main` first, then run `@dependabot rebase`. That only works if `main` is not checked against the old nixpkgs Bun at that point. The flake assertion would fail on `main` until this lock lands, so the two changes probably have to ship together.