chore(deps): bump the nix group with 2 updates

[dependabot]

Bumps the nix group with 2 updates: nixpkgs and rust-overlay.

Updates nixpkgs from 17de0b9 to 02f5696

Commits

• 02f5696 terraform-providers.linode_linode: 4.4.0 -> 4.5.0 (#562738)
• f644628 terraform-providers.linode_linode: 4.4.0 -> 4.5.0
• af63def python3Packages.safety-schemas: 0.0.20 -> 0.0.21 (#562733)
• 114c075 giflib: fix cross compilation from Darwin (#556267)
• af186de brave{,-origin}: switch to dmg; don't strip on darwin (#560971)
• e257d0f python3Packages.safety-schemas: 0.0.20 -> 0.0.21
• 3f6d7da soju: 0.10.1 -> 0.11.0 (#562726)
• feb724c terraform-providers.checkly_checkly: 1.27.0 -> 1.29.0 (#562722)
• 954f268 soju: 0.10.1 -> 0.11.0
• e76be6e nixos/lib/qemu-common: restore x86_64-linux support on aarch64-darwin (#5...
• Additional commits viewable in compare view

Updates rust-overlay from 4748ec2 to 9c72e6d

Commits

• 9c72e6d manifest: update
• 228ecef manifest: update
• ab777f9 manifest: update
• 577bb1e manifest: update
• 5280ed1 manifest: update
• 6ae57a7 manifest: update
• ca7f624 manifest: update
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[kixelated]

MERGE

Positive improvement? Yes. Routine Dependabot group bump of the nix inputs: nixpkgs (17de0b9 → 02f5696) and rust-overlay (4748ec2 → 9c72e6d). Keeping flake pins current is normal maintenance.

Worth the complexity? Yes — complexity is minimal. Diff is only flake.lock (6/6), with no flake.nix or app code changes.

Different approach? No. Grouped Dependabot updates for these two inputs is the right mechanism; no reason to split or hand-pin.

Caveat: CI was still pending when this review was written (Check, Test, WASM, OBS). Merge once those are green; if nix evaluation or builds fail on the new pins, iterate by rebasing or investigating the broken input.

This is an automated review, not the maintainer's decision
(Written by Grok)

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml