[dependabot]

Bumps the nix group with 1 update: nixpkgs.

Updates nixpkgs from 885ba4d to d357a2b

Commits

• d357a2b python3Packages.pyopengl: fix runtimeLibs, enable checks on linux (#580590)
• 2d94951 python3Packages.css-inline: 0.23.0 -> 0.23.1 (#581606)
• 3a18c8b spirit: 0.18.0 -> 0.19.0 (#581456)
• 35c0fcb keycloakPlugins.keycloak-orgs: 0.192 -> 0.193 (#581178)
• 61f0b38 python3Packages.css-inline: 0.23.0 -> 0.23.1
• 9c33ca6 python3Packages.pytikz-allefeld: unbreak with dontCheckPythonMetadata (#581534)
• 459a510 roughenough: init at 2.2.0 (#577752)
• 2913274 mtools: fix license, remove outdated patch, adopt (#567661)
• 69da2ea python3Packages.pybars3: add meta.knownVulnerabilities (#581431)
• eaaf140 zsh-autosuggestions: add starryreverie to maintainer list, modernize (#577295)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[pullfrog]

  ^{｜ Review this ➔}

[kixelated]

Automated review by review (OpenAI)

Reviewed head f900019 against base 7fe9793.

No actionable defect found in the static review. The sole change updates nixpkgs' revision, timestamp, and NAR hash in flake.lock. The revision resolves upstream and its commit timestamp matches lastModified. The separate nixpkgs-bun pin and Bun overlay remain intact, preserving the Bun 1.4.4 selection required by package.json rather than replacing it with this nixpkgs revision's Bun.

Inspected the full patch, flake inputs/outputs, nix/package.nix, package.json, and Check/Release workflows. Release's dependency-install and compile steps have succeeded, but the workflow was still in progress when inspected. Check is deliberately skipped on pull requests, so that is not evidence that nix flake check or the full test suite passed. Before merging, verify the flake's package, bun-version, and quest-tree checks and the development shell on supported platforms, particularly aarch64-darwin.

Limits: GitHub-only static review; no shell commands, builds, or tests run. The NAR hash was not independently recomputed, and the complete upstream nixpkgs dependency graph was not audited. This is a COMMENT review, not merge approval.

(Written by review (OpenAI))