Nix flake check fails: crates.io returns 403 to nix crate downloads

[LargeModGames]

Describe the bug
Since 2026-08-27 the Nix workflow fails in "Build the package": every crate tarball fetch from https://crates.io/api/v1/crates/<name>/<version>/download returns HTTP 403 (cannot download crate-<name>.tar.gz from any mirror), for pre-existing crates too. The last green run was 2026-08-19 on main with the same flake.lock pin (nixpkgs 8c809a14, 2026-03-03), so the change is on the crates.io side. That API endpoint is deprecated for non-cargo clients; newer nixpkgs importCargoLock fetches from static.crates.io.

To Reproduce

1. Open a PR that touches Cargo.lock (for example feat(sources): add Qobuz #489).
2. Watch the Flake check: it fails on the first crate download, and a rerun fails the same way.

Expected behavior
The flake builds.

Screenshots
None.

Desktop (please complete the following information):

• OS: CI, ubuntu-latest
• Terminal: n/a
• Version: main

Additional context
The fix is nix flake update nixpkgs (a flake.lock bump). The check is not in the main ruleset, so it does not block merges, but it is red on every PR that touches the lock until then.

[spotatui]

🎧 spotatui triage

Auto-triaged with DeepSeek V4-Flash.

Label: bug
Likely area: Nix flake build / packaging

Summary

The Nix flake check fails on PRs that touch Cargo.lock because crates.io returns HTTP 403 for every crate tarball download. This started around 2026-08-27 and is not caused by spotatui changes, but by crates.io deprecating an API endpoint. Updating the nixpkgs pin via nix flake update nixpkgs resolves the issue.

Key points

• CI environment: ubuntu-latest, running the 'Build the package' Nix workflow
• Every crate download from https://crates.io/api/v1/crates///download returns HTTP 403 since 2026-08-27
• Last green run was 2026-08-19 on main with the same flake.lock pin (nixpkgs 8c809a14, 2026-03-03)
• Failure occurs on PRs that modify Cargo.lock (example: feat(sources): add Qobuz #489); reruns fail identically
• Suggested fix: nix flake update nixpkgs to bump flake.lock

Possible duplicates: none found

_{Compared against the 29 most recently updated open issues.}