Dependabot now supports Nix flakes. Add nix as a package ecosystem in your dependabot.yml file. Dependabot will then monitor your flake.lock inputs and open pull requests when newer commits are available upstream. This applies to version updates, not security updates.
Dependabot opens individual pull requests for each outdated flake input. GitHub, GitLab, Sourcehut, and plain git inputs are all supported.
Get started
Add a nix entry to your .github/dependabot.yml file, and Dependabot will start opening pull requests for your flake inputs on the next scheduled run.