Dependabot now supports Nix flakes for version updates. By adding `nix` as a package ecosystem in your `dependabot.yml` file, Dependabot will monitor `flake.lock` inputs and automatically open pull requests when newer commits are available upstream. Individual PRs are opened per outdated flake input, with support for GitHub, GitLab, Sourcehut, and plain git inputs. Note this covers version updates only, not security updates.

1m read timeFrom github.blog
Post cover image
Table of contents
Get startedLearn more

Sort: