From 36d63ae723392c07349092d493ed4265ee85253b Mon Sep 17 00:00:00 2001
From: Sam Rose <samuel@supabase.io>
Date: Mon, 16 Mar 2026 09:42:52 -0400
Subject: [PATCH 1/2] feat: mo update critical, bi monthly non critical, update
 together, all follow nixpkgs input

---
 .../update-flake-lock-non-critical.yml        | 53 +++++++++++++++++++
 .github/workflows/update-flake-lock.yml       | 45 ++++++++++++++++
 flake.nix                                     |  1 +
 3 files changed, 99 insertions(+)
 create mode 100644 .github/workflows/update-flake-lock-non-critical.yml
 create mode 100644 .github/workflows/update-flake-lock.yml

diff --git a/.github/workflows/update-flake-lock-non-critical.yml b/.github/workflows/update-flake-lock-non-critical.yml
new file mode 100644
index 000000000..ba8f58fea
--- /dev/null
+++ b/.github/workflows/update-flake-lock-non-critical.yml
@@ -0,0 +1,53 @@
+name: Update Flake Lock (Non-Critical)
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 0 1 */2 *'
+
+jobs:
+  update-flake-lock-non-critical:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+
+      - name: Install Nix
+        uses: ./.github/actions/nix-install-ephemeral
+
+      - name: Update non-critical flake inputs
+        run: |
+          nix flake update \
+            devshell \
+            flake-parts \
+            flake-utils \
+            git-hooks \
+            nix-darwin \
+            nix-editor \
+            nix2container \
+            treefmt-nix
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          commit-message: "chore: update flake.lock non-critical inputs (bimonthly)"
+          title: "chore: update flake.lock non-critical inputs (bimonthly)"
+          body: |
+            Automated bimonthly update of non-critical flake inputs:
+            - `devshell`
+            - `flake-parts`
+            - `flake-utils`
+            - `git-hooks`
+            - `nix-darwin`
+            - `nix-editor`
+            - `nix2container`
+            - `treefmt-nix`
+          branch: auto-update-flake-lock-non-critical
+          base: develop
+          labels: |
+            dependencies
+            automated
diff --git a/.github/workflows/update-flake-lock.yml b/.github/workflows/update-flake-lock.yml
new file mode 100644
index 000000000..fbae0232c
--- /dev/null
+++ b/.github/workflows/update-flake-lock.yml
@@ -0,0 +1,45 @@
+name: Update Flake Lock
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 0 1 * *'
+
+jobs:
+  update-flake-lock:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+
+      - name: Install Nix
+        uses: ./.github/actions/nix-install-ephemeral
+
+      - name: Update critical flake inputs
+        run: |
+          nix flake update \
+            nixpkgs \
+            rust-overlay \
+            multigres \
+            nix-eval-jobs
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          commit-message: "chore: update flake.lock (monthly)"
+          title: "chore: update flake.lock (monthly)"
+          body: |
+            Automated monthly update of critical flake inputs:
+            - `nixpkgs` (nixos-unstable channel)
+            - `rust-overlay`
+            - `multigres`
+            - `nix-eval-jobs`
+          branch: auto-update-flake-lock
+          base: develop
+          labels: |
+            dependencies
+            automated
diff --git a/flake.nix b/flake.nix
index dbabf994c..55073cf62 100644
--- a/flake.nix
+++ b/flake.nix
@@ -21,6 +21,7 @@
     nix-editor.inputs.utils.follows = "flake-utils";
     nix-editor.url = "github:snowfallorg/nix-editor";
     nix-eval-jobs.inputs.flake-parts.follows = "flake-parts";
+    nix-eval-jobs.inputs.nixpkgs.follows = "nixpkgs";
     nix-eval-jobs.inputs.treefmt-nix.follows = "treefmt-nix";
     nix-eval-jobs.url = "github:nix-community/nix-eval-jobs";
     nix2container.inputs.nixpkgs.follows = "nixpkgs";

From 17a91a1713635cc62092e083b615106bd394654c Mon Sep 17 00:00:00 2001
From: Sam Rose <samuel@supabase.io>
Date: Mon, 16 Mar 2026 09:48:00 -0400
Subject: [PATCH 2/2] fix: nix-eval-jobs bundles own nix

---
 flake.nix | 1 -
 1 file changed, 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 55073cf62..dbabf994c 100644
--- a/flake.nix
+++ b/flake.nix
@@ -21,7 +21,6 @@
     nix-editor.inputs.utils.follows = "flake-utils";
     nix-editor.url = "github:snowfallorg/nix-editor";
     nix-eval-jobs.inputs.flake-parts.follows = "flake-parts";
-    nix-eval-jobs.inputs.nixpkgs.follows = "nixpkgs";
     nix-eval-jobs.inputs.treefmt-nix.follows = "treefmt-nix";
     nix-eval-jobs.url = "github:nix-community/nix-eval-jobs";
     nix2container.inputs.nixpkgs.follows = "nixpkgs";