Is there an existing issue for this?

• I have searched the existing issues

Feature description

Nix is becoming, little by little, the only dependency management tool I'm using. It covers every possible case in the best possible way.

Modern nix is based on flakes, which is currently experimental, but is already quite stable. Read here about them please.

Did you read that? OK.

As you've seen, there are 2 things that could be auto-updated when using flakes:

1️⃣ flake.lock file. Reproduce a single input upgrade with:

git clone https://github.com/copier-org/copier
cd copier
git checkout f722b9acf5d7e21f35d410e015f4ae6f36587e4a
nix flake lock --update-input poetry2nix
git diff

You'll see that command updated only a single input from the flake lock file.

2️⃣ some inputs inside the flake.nix file. Usually flake users refer to the main branch on the input, but they can refer to a tag. If so, it'd be also helpful for dependabot to support those kind of updates.

For example, updating an input like this would result in:

-    devenv.url = "github:cachix/devenv/v0.5";
+    devenv.url = "github:cachix/devenv/v0.6.2";

... together with the corresponding lock file update, which would be done running nix flake lock.