Lock file maintenance

dev-shells/default.nix

@@ -24,7 +24,6 @@
       ++ (with pkgs; [
         attic-client
         deploy-rs
-        nixVersions.git
         nixd
         nixfmt-rfc-style
         nixos-anywhere

flake.lock

@@ -111,10 +111,10 @@
         ]
       },
       "locked": {
-        "lastModified": 1737552783,
-        "narHash": "sha256-pJ2lp36L3++a5HtdN7ULcVpdB4j7yo90TDayWuAO+T8=",
-        "rev": "33cf80043c64ddd6882268430454e3cbe98b692b",
-        "revCount": 11,
+        "lastModified": 1737489963,
+        "narHash": "sha256-1Qo3Qofx6W4s7tfvAKuq+hIUkkSRTU6j9PcDodM0hY4=",
+        "rev": "d42933081c8149ee536b0300020d4f31b206f514",
+        "revCount": 10,
         "type": "git",
         "url": "file:./private"
       },

nixos-modules/qois/renovate/default.nix

@@ -2,7 +2,6 @@
   config,
   pkgs,
   lib,
-  inputs,
   ...
 }:
 with lib;
@@ -27,14 +26,9 @@ in
 
   config = mkIf cfg.enable {
     sops.secrets."renovate/token".restartUnits = [ "renovate.service" ];
-    sops.secrets."renovate/host_rules".restartUnits = [ "renovate.service" ];
-    systemd.services.renovate.environment.LOG_LEVEL = "debug";
     services.renovate = {
       enable = true;
-      credentials = {
-        RENOVATE_TOKEN = config.sops.secrets."renovate/token".path;
-        RENOVATE_HOST_RULES = config.sops.secrets."renovate/host_rules".path;
-      };
+      credentials.RENOVATE_TOKEN = config.sops.secrets."renovate/token".path;
       runtimePackages = with pkgs; [
         nix
       ];
@@ -47,12 +41,5 @@ in
       };
       schedule = "*:0/10";
     };
-
-    systemd.services.renovate = {
-      path = mkBefore [ inputs.pkgs.nixVersions.git ]; # Circumvent submodule bug - remove after >=2.26 is the default.
-      script = mkBefore ''
-        echo -e "machine ${cfg.gitServer}\n    login $(systemd-creds cat 'SECRET-RENOVATE_TOKEN')\n    password x-oauth-basic" > ~/.netrc
-      '';
-    };
   };
 }

private

@@ -1 +1 @@
-Subproject commit 33cf80043c64ddd6882268430454e3cbe98b692b
+Subproject commit d42933081c8149ee536b0300020d4f31b206f514

renovate.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [ "config:recommended" ],
+  "extends": [ "config:base" ],
   "lockFileMaintenance": {
     "enabled": true,
     "extends": [ "schedule:weekly" ]