[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[GraemeF]

Review of this lock refresh, as trimmed.

Renovate's refresh moved one input, the root nixpkgs on nixos-unstable, to 3ec636362e18. That commit is from 2026-10-23 and reached the channel on 2026-10-24, so it is under three days old. The trim pins it back to 02c087f3fe67, the newest channel release at least three days old. That commit is from 2026-10-20 and reached the channel the same day. No other input moves, and nothing else needs to follow it.

No file in the repo holds a hash computed from flake.lock, so the trim changes only the lock.

Tools the flake takes from nixpkgs, against main's lock:

Package	main	trimmed
bash	5.3p15	5.3p20
coreutils	9.11	9.12
git	2.55.0	2.56.0

herdr, jq, gawk, shellcheck and bats do not move. Nothing moves a major, and nothing here talks to a service with a version skew to respect. nix flake check on the trimmed head is the evidence that the build and tests still pass. The update is safe to take once that check is green.