[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[GraemeF]

Held until 2026-11-02 20:20 UTC.

This refresh moves nixpkgs (nixos-unstable) from 31ecbac to 1c89083, the same channel release that #111 trimmed out. That release was pushed on 2026-10-30 20:20 UTC, so it is under three days old. Pinning it back would leave the lock exactly as main already has it, so there is nothing to trim. The pull request is held until the release turns three days old, and will then be reviewed afresh as it stands.

[GraemeF]

Review: safe to take.

The hold on this refresh has ended. The refresh still moves only the root nixpkgs input (nixos-unstable), from 31ecbac to 1c89083. That channel release was pushed on 2026-10-30 20:20 UTC, so it is now over three days old and nothing needs trimming. The beads input and its own nixpkgs do not move.

Of the packages this flake uses, only claude-code changes version, from 2.1.311 to 2.1.312. That release was published on 2026-10-27. Its notes add a gateway OIDC claim setting and a click-to-send hint, fix a run of bugs, and cap prompt and agent hooks at 24 running at once per session. Nothing here changes authentication, networking or storage for us. The compact-at-rest tests run against it in nix flake check.

These are unchanged between the two revisions: bash, coreutils, gawk, git, herdr, jq and shellcheck. No file holds a hash computed from flake.lock, so no hash has to move.

The branch now includes main, and it will merge once the checks pass on its head commit.