[dependabot]

Tender status

• Status: closed unmerged
• Reason: Build (22.x), Build (24.x) and Docker / Build (x86_64-linux) fail in yarn --frozen-lockfile: @hoprnet/hopr-sdk-4.0.0-rc.0-pr.159.tgz returns 404 from europe-west3-npm.pkg.dev.
• Tried: re-ran the failed jobs on 2026-11-02 at 13:00Z (run 40487431240, job 125289700406). They fail in the same Setup Node.js step. package.json and yarn.lock are identical to main and carry the same pin, so the missing artifact is a base-branch condition; the nix-flake-inputs bump does not cause it.
• Closed: Teebor-Choka closed this pull request unmerged at 2026-11-02T23:40:19Z, and Dependabot deleted the head branch dependabot/nix/nix-flake-inputs-5036dee794 at 23:40:31Z. main is still b6e9f10, so the 3 flake.lock updates did not land.
• Trigger: Merge run 41547215734 on head df6378f finished skipped at 23:40:24Z. Only Docker and Notify failure were created, both skipped, so the close produced no new failing check.

---

Bumps the nix-flake-inputs group (3 updates) in flake.lock.

This PR was generated by Dependabot; its generated summary was replaced by the status block above.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 35535586-0208-448e-ae00-9bdc948bfc9a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Teebor-Choka]

Tender: Build (22.x) fails because the npm dependency @hoprnet/hopr-sdk-4.0.0-rc.0-pr.159.tgz returns 404 Not Found — the referenced prerelease artifact no longer exists. Not mechanically fixable; needs a human to point at an existing version.

[Teebor-Choka]

@hoprnet/hopr-development this PR needs a human decision.

Tender: Build (22.x)/Build (24.x)/Docker / Build (x86_64-linux) all fail on yarn install: https://europe-west3-npm.pkg.dev/hoprassociation/npm/@hoprnet/hopr-sdk/-/@hoprnet/hopr-sdk-4.0.0-rc.0-pr.159.tgz returns 404 Not Found — the referenced prerelease artifact no longer exists. package.json is byte-identical to main, so this pin is already broken on the base branch and is not caused by this PR. Fixing it means repointing @hoprnet/hopr-sdk at an existing version, which is a human decision.

[augmentcode]

@hoprnet/hopr-development (team review request returns 422 here, so pinging in a comment)

Tender re-checked this PR on 2026-10-28. The diagnosis is unchanged: yarn --frozen-lockfile dies in Setup Node.js because @hoprnet/hopr-sdk-4.0.0-rc.0-pr.159.tgz returns 404 Not Found from europe-west3-npm.pkg.dev. package.json and yarn.lock here match main, so the base branch is broken the same way and this flake.lock bump cannot turn it green.

New detail for whoever fixes it: the registry has dropped the pinned prerelease, but these versions are still published, so a pin bump is possible:

• 4.0.0-rc.0-pr.172 (nearest surviving 4.x prerelease)
• 4.0.0-rc.0-commit.5f06421
• 5.0.0-rc.0-pr.188 (current alpha tag)

The bump needs a source check against whichever version you pick, so Tender left it alone. flake.lock in this PR is unaffected.

[augmentcode]

Tender could not make this green, and the failure is not caused by the bump.

Build (24.x) stops at yarn --frozen-lockfile with a 404 for https://europe-west3-npm.pkg.dev/hoprassociation/npm/@hoprnet/hopr-sdk/-/@hoprnet/hopr-sdk-4.0.0-rc.0-pr.159.tgz. package.json and yarn.lock on this branch are byte-identical to main, so the same install fails on the base branch.

To unblock: repin @hoprnet/hopr-sdk to a version that is present in the registry, in a separate PR. This flake-input bump can ride along afterwards.

[augmentcode]

@hoprnet/hopr-development this bump needs a human: Build (24.x) fails on a 404 for @hoprnet/hopr-sdk-4.0.0-rc.0-pr.159.tgz, and package.json/yarn.lock are unchanged from main.

[augmentcode]

@hoprnet/hopr-development — needs a decision on the base branch, not on this PR. Build (24.x) fails at yarn --frozen-lockfile because @hoprnet/hopr-sdk-4.0.0-rc.0-pr.159.tgz returns 404 from the Artifact Registry. package.json and yarn.lock here match main, and this PR only touches flake.lock.

Repointing @hoprnet/hopr-sdk to a published prerelease and checking the app against it is a compatibility decision, so it is left to a human.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml