Discovered during service review that nix-container-builder was running 12.7.2 but service-versions.yaml said 12.6.4 — flake updates had silently upgraded it. Add a nixpkgs-services flake input pinned to a specific nixpkgs commit, with an overlay that pulls forgejo-runner, snowflake, and k3s from it. The Dagger flake-update pipeline now excludes this input. Also adds k3s and minikube to service-versions.yaml tracking. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
297 B
297 B
Pin NixOS service versions (forgejo-runner, snowflake, k3s) via nixpkgs-services overlay in ringtail flake, preventing silent upgrades from nix flake update. Add k3s and minikube to service-versions.yaml tracking. Fix stale nix-container-builder version (was 12.6.4, actually running 12.7.2).