vpn: let renovate maintain the Go vendor hash #192

Merged

Doridian merged 3 commits from doridian/vpn-vendor-hash into main

2026-10-09 14:52:35 -07:00

AGit

Doridian commented

2026-10-09 14:26:26 -07:00

Owner

Move the foxden-vpn vendorHash into vpn/vendor-hash.txt and add a renovate rule (renovate-local.json) that regenerates it with maid's auto-nix-hash on Go dep updates under vpn/.
Fix the stale hash: the recent x/net/x/sync bumps changed the deps without updating it.
CI: run nixfmt with --inputs-from . (nixpkgs fetched by its locked rev). AGit PR runs get no secrets, so resolving the branch through api.github.com was rate limited. AGENTS.md now says to open branch PRs instead of AGit.
AGENTS.md: document the hash file, and that main is PR-only (merging deploys).

Depends on FoxDen/maid auto-nix-hash subdirectory-flake support; merge that first.

Verified locally: auto-nix-hash regenerates the hash and foxden-vpn builds with it.

🤖 Generated with Claude Code

https://claude.ai/code/session_01XDdCNW6ANunCpKwDVPPe1G

- Move the `foxden-vpn` `vendorHash` into `vpn/vendor-hash.txt` and add a renovate rule (`renovate-local.json`) that regenerates it with maid's `auto-nix-hash` on Go dep updates under `vpn/`. - Fix the stale hash: the recent `x/net`/`x/sync` bumps changed the deps without updating it. - CI: run nixfmt with `--inputs-from .` (nixpkgs fetched by its locked rev). AGit PR runs get no secrets, so resolving the branch through api.github.com was rate limited. AGENTS.md now says to open branch PRs instead of AGit. - AGENTS.md: document the hash file, and that `main` is PR-only (merging deploys). Depends on FoxDen/maid `auto-nix-hash` subdirectory-flake support; merge that first. Verified locally: `auto-nix-hash` regenerates the hash and `foxden-vpn` builds with it. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01XDdCNW6ANunCpKwDVPPe1G

Doridian added 2 commits

2026-10-09 14:26:26 -07:00

vpn: let renovate maintain the Go vendor hash 61a4a5268b

Move the foxden-vpn vendorHash into vpn/vendor-hash.txt and regenerate it
via maid's auto-nix-hash on Go dependency updates. Also fixes the stale
hash left by the recent x/net and x/sync bumps.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XDdCNW6ANunCpKwDVPPe1G

AGENTS.md: main is PR-only now

/ lint (pull_request) Failing after 3m5s

Details

baad63c36e

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XDdCNW6ANunCpKwDVPPe1G

Doridian added 1 commit

2026-10-09 14:44:11 -07:00

CI: resolve nixpkgs from the flake lock, avoid AGit PRs

/ lint (pull_request) Successful in 1m1s

Details

ccb9fc0d1d

AGit PRs are treated as fork PRs by Forgejo, so EXT_GITHUB_TOKEN is
empty in their CI runs and resolving github:NixOS/nixpkgs/nixos-26.05
via api.github.com gets rate limited. Use --inputs-from so nixpkgs is
fetched by its locked rev instead, and document using branch PRs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Sj6tB24ehbkSj99MKig5Te

Doridian referenced this pull request from FoxDen/maid

2026-10-09 14:44:23 -07:00

nix template: resolve nixpkgs from the flake lock #329

Doridian referenced this pull request from a commit

2026-10-09 14:52:32 -07:00

nix template: resolve nixpkgs from the flake lock (#329)

Doridian merged commit 795e24a160 into main

2026-10-09 14:52:35 -07:00

Doridian referenced this pull request from a commit

2026-10-09 14:52:36 -07:00

vpn: let renovate maintain the Go vendor hash (#192)