chore(deps): update gitea actions (major) #6

nix: 2.34.6 -> 2.34.7 by @github-actions[bot] in #275
GHSA-vh5x-56v6-4368: Fixes a coroutine stack-to-heap overflow via unbounded recursion in the NAR directory parser. Severity: High.
GHSA-gr92-w2r5-qw5p: Fixes an absolute path traversal vulnerability when unpacking archives to disk. Severity: Moderate.

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31...v31.10.6

`v31.10.5`

Compare Source

What's Changed

nix: 2.34.5 -> 2.34.6 by @github-actions[bot] in #274

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31...v31.10.5

`v31.10.4`

Compare Source

What's Changed

nix: 2.34.4 -> 2.34.5 by @github-actions[bot] in #273
[SECURITY] Fixes a root privilege escalation vulnerability via sandbox escape https://github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.10.3...v31.10.4

`v31.10.3`

Compare Source

What's Changed

nix: 2.34.2 -> 2.34.4 by @github-actions[bot] in #271

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31...v31.10.3

`v31.10.2`

Compare Source

What's Changed

nix: 2.34.1 -> 2.34.2 by @github-actions[bot] in #270

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31...v31.10.2

`v31.10.1`

Compare Source

What's Changed

nix: 2.34.0 -> 2.34.1 by @github-actions[bot] in #269
Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load authentication keys configured by cachix-action.

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.10.0...v31.10.1

`v31.10.0`

Compare Source

What's Changed

nix: 2.33.3 -> 2.34.0 by @github-actions[bot] in #267
Release notes: https://discourse.nixos.org/t/nix-2-34-0-released/75818

⚠️ Nix 2.34.0 contains a regression that, under certain scenarios (a trusted-user + a client-side netrc-file), breaks authentication with private caches that rely on netrc files. This regression affects cachix/cachix-action.

UPD: 2.34.1 has been released with a patch for the authentication issue

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.9.1...v31.10.0

`v31.9.1`

Compare Source

What's Changed

nix: 2.33.0 -> 2.33.3 by @github-actions[bot] in #266

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31...v31.9.1

`v31.9.0`

Compare Source

What's Changed

nix: 2.32.4 -> 2.33.0 by @github-actions[bot] in #264
chore(deps): bump peter-evans/create-pull-request from 7 to 8 by @dependabot[bot] in #263
chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #262

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.8.4...v31.9.0

`v31.8.4`

Compare Source

What's Changed

nix: 2.32.3 -> 2.32.4 by @github-actions[bot] in #261

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.8.3...v31.8.4

`v31.8.3`

Compare Source

What's Changed

nix: 2.32.2 -> 2.32.3 by @github-actions[bot] in #260

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.8.2...v31.8.3

`v31.8.2`

Compare Source

What's Changed

nix: 2.32.1 -> 2.32.2 by @github-actions[bot] in #259

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.8.1...v31.8.2

`v31.8.1`

Compare Source

What's Changed

nix: 2.32.0 -> 2.32.1 by @github-actions[bot] in #258

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31...v31.8.1

What's Changed

feat: set up the environment based on the installer shell scripts by @sandydoo in #251

Configures the following environment variables:
- NIX_PROFILES
- NIX_SSL_CERT_FILE (if not set)
Adds the bin directory from the user's profile to $PATH.

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.6.2...v31.7.0

`v31.6.2`

Compare Source

What's Changed

nix: 2.31.1 -> 2.31.2 by @github-actions[bot] in #256

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31...v31.6.2

`v31.6.1`

Compare Source

What's Changed

ci: adjust oldest supported installer for macos-15 by @sandydoo in #252
nix: 2.31.0 -> 2.31.1 by @github-actions[bot] in #253

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31...v31.6.1

`v31.6.0`

Compare Source

What's Changed

chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #249
docs: add example for nix develop by @jennydaman in #248
nix: 2.30.2 -> 2.31.0 by @github-actions[bot] in #250
Release notes: https://discourse.nixos.org/t/nix-2-31-0-released/68465

New Contributors

@jennydaman made their first contribution in #248

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.5.2...v31.6.0

`v31.5.2`

Compare Source

What's Changed

nix: 2.30.1 -> 2.30.2 by @github-actions[bot] in #246

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31...v31.5.2

`v31.5.1`

Compare Source

What's Changed

nix: 2.30.0 -> 2.30.1 by @xokdvium in #245
[SECURITY] Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. https://github.com/NixOS/nix/security/advisories/GHSA-qc7j-jgf3-qmhg

New Contributors

@xokdvium made their first contribution in #245

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.5.0...v31.5.1

`v31.5.0`

Compare Source

What's Changed

nix: 2.29.1 -> 2.30.0 by @github-actions in #244
Release notes: https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.4.1...v31.5.0

`v31.4.1`

Compare Source

What's Changed

nix: 2.29.0 -> 2.29.1 by @github-actions in #243
[SECURITY] https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017

New Contributors

@github-actions made their first contribution in #243

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.4.0...v31.4.1

`v31.4.0`

Compare Source

What's Changed

nix: 2.28.3 -> 2.29.0 by @Mic92 in #239
Release notes: https://nix.dev/manual/nix/2.29/release-notes/rl-2.29
Automate nix updates in CI by @Mic92 in #241

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.3.0...v31.4.0

`v31.3.0`

Compare Source

What's Changed

feat: Pin actions to hashes by @l0b0 in #201
chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot in #234
docs: document how to provide AWS credentials to the nix-daemon by @sandydoo in #235
nix: 2.28.2 -> 2.28.3 by @Mic92 in #236

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.2.0...v31.3.0

`v31.2.0`

Compare Source

What's Changed

nix: 2.26.3 -> 2.28.2 by @Mic92 in #232

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.1.0...v31.2.0

`v31.1.0`

Compare Source

What's Changed

Remove deprecated --darwin-use-unencrypted-nix-store-volume flag by @sandydoo in #230
action: add option to configure updating trusted users by @Enzime in #231

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.0.0...v31.1.0

`v31.0.0`

Compare Source

What's Changed

nix: 2.24.9 -> 2.25.2 by @Mic92 in #218
ci: fix latest installer tests by @sandydoo in #220
GitHub test.yml: add ubuntu-24.04-arm to matrix by @msgilligan in #221
nix: 2.25.2 -> 2.26.2 by @Mic92 in #226
nix: 2.26.2 -> 2.26.3 by @sandydoo in #228

New Contributors

@msgilligan made their first contribution in #221

Full Changelog: https://github.com/cachix/install-nix-action/compare/v30...v31.0.0

`v31`

Compare Source

Starting with v31, this action will use semantic versioning for releases.
Major tags, like v31, will be bumped to point to the latest minor/patch release.
This is in line with how most GitHub actions manage releases.

What's Changed

nix: 2.26.3 -> 2.28.2 by @Mic92 in #232
nix: 2.24.9 -> 2.25.2 by @Mic92 in #218
ci: fix latest installer tests by @sandydoo in #220
ci: add ubuntu-24.04-arm to matrix by @msgilligan in #221
nix: 2.25.2 -> 2.26.2 by @Mic92 in #226
nix: 2.26.2 -> 2.26.3 by @sandydoo in #228
feat: Pin actions to hashes by @l0b0 in #201
chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot in #234
docs: document how to provide AWS credentials to the nix-daemon by @sandydoo in #235
nix: 2.28.2 -> 2.28.3 by @Mic92 in #236
nix: 2.28.3 -> 2.29.0 by @Mic92 in #239
Release notes: https://nix.dev/manual/nix/latest/release-notes/rl-2.29
Automate nix updates in CI by @Mic92 in #241
nix: 2.29.0 -> 2.29.1 by @github-actions in #243
[SECURITY] https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017
nix: 2.29.1 -> 2.30.0 by @github-actions in #244
Release notes: https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html
nix: 2.30.0 -> 2.30.1 by @xokdvium in #245
[SECURITY] Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. https://github.com/NixOS/nix/security/advisories/GHSA-qc7j-jgf3-qmhg
docs: add example for nix develop by @jennydaman in #248
nix: 2.30.2 -> 2.31.0 by @github-actions[bot] in #250
Release notes: https://discourse.nixos.org/t/nix-2-31-0-released/68465
nix: 2.31.0 -> 2.31.1 by @github-actions[bot] in #253
nix: 2.31.1 -> 2.31.2 by @github-actions[bot] in #256
feat: set up the environment based on the installer shell scripts by @sandydoo in #251
Adds the bin directory from the user's profile to $PATH.
Configures the following environment variables:
- NIX_PROFILES
- NIX_SSL_CERT_FILE (if not set)
nix: 2.31.2 -> 2.32.0 by @github-actions[bot] in #257
Release notes: https://discourse.nixos.org/t/nix-2-32-0-released/70528
nix: 2.32.0 -> 2.32.1 by @github-actions[bot] in #258
nix: 2.32.1 -> 2.32.2 by @github-actions[bot] in #259
nix: 2.32.2 -> 2.32.3 by @github-actions[bot] in #260
nix: 2.32.3 -> 2.32.4 by @github-actions[bot] in #261
nix: 2.32.4 -> 2.33.0 by @github-actions[bot] in #264
nix: 2.33.0 -> 2.33.3 by @github-actions[bot] in #266
nix: 2.33.3 -> 2.34.0 by @github-actions[bot] in #267
Release notes: https://discourse.nixos.org/t/nix-2-34-0-released/75818 Rolled back due to reports of issues with cachix-action
nix: 2.34.0 -> 2.34.1 by @github-actions[bot] in #269
Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load authentication keys configured by cachix-action.
nix: 2.34.1 -> 2.34.2 by @github-actions[bot] in #270
nix: 2.34.2 -> 2.34.4 by @github-actions[bot] in #271
nix: 2.34.4 -> 2.34.5 by @github-actions[bot] in #273
CVE-2026-39860 Fixes a root privilege escalation vulnerability via sandbox escape. Severity: Critical.
nix: 2.34.5 -> 2.34.6 by @github-actions[bot] in #274
nix: 2.34.6 -> 2.34.7 by @github-actions[bot] in #275
GHSA-vh5x-56v6-4368: Fixes a coroutine stack-to-heap overflow via unbounded recursion in the NAR directory parser. Severity: High.
GHSA-gr92-w2r5-qw5p: Fixes an absolute path traversal vulnerability when unpacking archives to disk. Severity: Moderate.

Full Changelog: https://github.com/cachix/install-nix-action/compare/v30...v31

Configuration

📅 Schedule: (in timezone Europe/London)

Branch creation
- Monday through Friday (* * * * 1-5)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v6` | | [cachix/install-nix-action](https://github.com/cachix/install-nix-action) | action | major | `v30` → `v31` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](https://github.com/actions/checkout/pull/2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](https://github.com/actions/checkout/pull/2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@ericsciple](https://github.com/ericsciple) in [#2356](https://github.com/actions/checkout/pull/2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](https://github.com/actions/checkout/compare/v6...v6.0.1) - Add worktree support for persist-credentials includeIf by [@ericsciple](https://github.com/ericsciple) in [#2327](https://github.com/actions/checkout/pull/2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](https://github.com/actions/checkout/compare/v6...v6) - Persist creds to a separate file by [@ericsciple](https://github.com/ericsciple) in [#2286](https://github.com/actions/checkout/pull/2286) - Update README to include Node.js 24 support details and requirements by [@salmanmkc](https://github.com/salmanmkc) in [#2248](https://github.com/actions/checkout/pull/2248) ### [`v6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](https://github.com/actions/checkout/compare/v5.0.1...v6) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](https://github.com/actions/checkout/pull/2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](https://github.com/actions/checkout/pull/2414) ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](https://github.com/actions/checkout/compare/v5...v5.0.1) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](https://github.com/actions/checkout/pull/2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](https://github.com/actions/checkout/compare/v5...v5) - Update actions checkout to use node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#2226](https://github.com/actions/checkout/pull/2226) ### [`v5`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](https://github.com/actions/checkout/compare/v4.3.1...v5) - Port v6 cleanup to v5 by [@ericsciple](https://github.com/ericsciple) in [#2301](https://github.com/actions/checkout/pull/2301) </details> <details> <summary>cachix/install-nix-action (cachix/install-nix-action)</summary> ### [`v31.10.6`](https://github.com/cachix/install-nix-action/releases/tag/v31.10.6) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.10.5...v31.10.6) #### What's Changed - nix: 2.34.6 -> 2.34.7 by [@github-actions](https://github.com/github-actions)\[bot] in [#275](https://github.com/cachix/install-nix-action/pull/275) **[GHSA-vh5x-56v6-4368](https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368)**: Fixes a coroutine stack-to-heap overflow via unbounded recursion in the NAR directory parser. **Severity: High.** **[GHSA-gr92-w2r5-qw5p](https://github.com/NixOS/nix/security/advisories/GHSA-gr92-w2r5-qw5p)**: Fixes an absolute path traversal vulnerability when unpacking archives to disk. Severity: Moderate. **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31...v31.10.6> ### [`v31.10.5`](https://github.com/cachix/install-nix-action/releases/tag/v31.10.5) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.10.4...v31.10.5) #### What's Changed - nix: 2.34.5 -> 2.34.6 by [@github-actions](https://github.com/github-actions)\[bot] in [#274](https://github.com/cachix/install-nix-action/pull/274) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31...v31.10.5> ### [`v31.10.4`](https://github.com/cachix/install-nix-action/releases/tag/v31.10.4) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.10.3...v31.10.4) #### What's Changed - nix: 2.34.4 -> 2.34.5 by [@github-actions](https://github.com/github-actions)\[bot] in [#273](https://github.com/cachix/install-nix-action/pull/273) **\[SECURITY]** Fixes a root privilege escalation vulnerability via sandbox escape <https://github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj> **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.10.3...v31.10.4> ### [`v31.10.3`](https://github.com/cachix/install-nix-action/releases/tag/v31.10.3) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.10.2...v31.10.3) #### What's Changed - nix: 2.34.2 -> 2.34.4 by [@github-actions](https://github.com/github-actions)\[bot] in [#271](https://github.com/cachix/install-nix-action/pull/271) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31...v31.10.3> ### [`v31.10.2`](https://github.com/cachix/install-nix-action/releases/tag/v31.10.2) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.10.1...v31.10.2) #### What's Changed - nix: 2.34.1 -> 2.34.2 by [@github-actions](https://github.com/github-actions)\[bot] in [#270](https://github.com/cachix/install-nix-action/pull/270) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31...v31.10.2> ### [`v31.10.1`](https://github.com/cachix/install-nix-action/releases/tag/v31.10.1) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.10.0...v31.10.1) #### What's Changed - nix: 2.34.0 -> 2.34.1 by [@github-actions](https://github.com/github-actions)\[bot] in [#269](https://github.com/cachix/install-nix-action/pull/269) Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load authentication keys configured by `cachix-action`. **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.10.0...v31.10.1> ### [`v31.10.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.10.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.9.1...v31.10.0) #### What's Changed - nix: 2.33.3 -> 2.34.0 by [@github-actions](https://github.com/github-actions)\[bot] in [#267](https://github.com/cachix/install-nix-action/pull/267) Release notes: <https://discourse.nixos.org/t/nix-2-34-0-released/75818> ⚠️ Nix 2.34.0 contains a regression that, under certain scenarios (a `trusted-user` + a client-side `netrc-file`), breaks authentication with private caches that rely on `netrc` files. This regression affects `cachix/cachix-action`. **UPD: 2.34.1 has been released with a patch for the authentication issue** **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.9.1...v31.10.0> ### [`v31.9.1`](https://github.com/cachix/install-nix-action/releases/tag/v31.9.1) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.9.0...v31.9.1) #### What's Changed - nix: 2.33.0 -> 2.33.3 by [@github-actions](https://github.com/github-actions)\[bot] in [#266](https://github.com/cachix/install-nix-action/pull/266) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31...v31.9.1> ### [`v31.9.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.9.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.8.4...v31.9.0) #### What's Changed - nix: 2.32.4 -> 2.33.0 by [@github-actions](https://github.com/github-actions)\[bot] in [#264](https://github.com/cachix/install-nix-action/pull/264) - chore(deps): bump peter-evans/create-pull-request from 7 to 8 by [@dependabot](https://github.com/dependabot)\[bot] in [#263](https://github.com/cachix/install-nix-action/pull/263) - chore(deps): bump actions/checkout from 5 to 6 by [@dependabot](https://github.com/dependabot)\[bot] in [#262](https://github.com/cachix/install-nix-action/pull/262) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.8.4...v31.9.0> ### [`v31.8.4`](https://github.com/cachix/install-nix-action/releases/tag/v31.8.4) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.8.3...v31.8.4) #### What's Changed - nix: 2.32.3 -> 2.32.4 by [@github-actions](https://github.com/github-actions)\[bot] in [#261](https://github.com/cachix/install-nix-action/pull/261) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.8.3...v31.8.4> ### [`v31.8.3`](https://github.com/cachix/install-nix-action/releases/tag/v31.8.3) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.8.2...v31.8.3) #### What's Changed - nix: 2.32.2 -> 2.32.3 by [@github-actions](https://github.com/github-actions)\[bot] in [#260](https://github.com/cachix/install-nix-action/pull/260) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.8.2...v31.8.3> ### [`v31.8.2`](https://github.com/cachix/install-nix-action/releases/tag/v31.8.2) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.8.1...v31.8.2) #### What's Changed - nix: 2.32.1 -> 2.32.2 by [@github-actions](https://github.com/github-actions)\[bot] in [#259](https://github.com/cachix/install-nix-action/pull/259) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.8.1...v31.8.2> ### [`v31.8.1`](https://github.com/cachix/install-nix-action/releases/tag/v31.8.1) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.8.0...v31.8.1) #### What's Changed - nix: 2.32.0 -> 2.32.1 by [@github-actions](https://github.com/github-actions)\[bot] in [#258](https://github.com/cachix/install-nix-action/pull/258) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31...v31.8.1> ### [`v31.8.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.8.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.7.0...v31.8.0) #### What's Changed - nix: 2.31.2 -> 2.32.0 by [@github-actions](https://github.com/github-actions)\[bot] in [#257](https://github.com/cachix/install-nix-action/pull/257) Release notes: <https://discourse.nixos.org/t/nix-2-32-0-released/70528> **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.7.0...v31.8.0> ### [`v31.7.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.7.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.6.2...v31.7.0) #### What's Changed - feat: set up the environment based on the installer shell scripts by [@sandydoo](https://github.com/sandydoo) in [#251](https://github.com/cachix/install-nix-action/pull/251) Configures the following environment variables: - `NIX_PROFILES` - `NIX_SSL_CERT_FILE` (if not set) Adds the bin directory from the user's profile to `$PATH`. **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.6.2...v31.7.0> ### [`v31.6.2`](https://github.com/cachix/install-nix-action/releases/tag/v31.6.2) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.6.1...v31.6.2) #### What's Changed - nix: 2.31.1 -> 2.31.2 by [@github-actions](https://github.com/github-actions)\[bot] in [#256](https://github.com/cachix/install-nix-action/pull/256) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31...v31.6.2> ### [`v31.6.1`](https://github.com/cachix/install-nix-action/releases/tag/v31.6.1) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.6.0...v31.6.1) #### What's Changed - ci: adjust oldest supported installer for macos-15 by [@sandydoo](https://github.com/sandydoo) in [#252](https://github.com/cachix/install-nix-action/pull/252) - nix: 2.31.0 -> 2.31.1 by [@github-actions](https://github.com/github-actions)\[bot] in [#253](https://github.com/cachix/install-nix-action/pull/253) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31...v31.6.1> ### [`v31.6.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.6.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.5.2...v31.6.0) #### What's Changed - chore(deps): bump actions/checkout from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#249](https://github.com/cachix/install-nix-action/pull/249) - docs: add example for `nix develop` by [@jennydaman](https://github.com/jennydaman) in [#248](https://github.com/cachix/install-nix-action/pull/248) - nix: 2.30.2 -> 2.31.0 by [@github-actions](https://github.com/github-actions)\[bot] in [#250](https://github.com/cachix/install-nix-action/pull/250) Release notes: <https://discourse.nixos.org/t/nix-2-31-0-released/68465> #### New Contributors - [@jennydaman](https://github.com/jennydaman) made their first contribution in [#248](https://github.com/cachix/install-nix-action/pull/248) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.5.2...v31.6.0> ### [`v31.5.2`](https://github.com/cachix/install-nix-action/releases/tag/v31.5.2) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.5.1...v31.5.2) #### What's Changed - nix: 2.30.1 -> 2.30.2 by [@github-actions](https://github.com/github-actions)\[bot] in [#246](https://github.com/cachix/install-nix-action/pull/246) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31...v31.5.2> ### [`v31.5.1`](https://github.com/cachix/install-nix-action/releases/tag/v31.5.1) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.5.0...v31.5.1) #### What's Changed - nix: 2.30.0 -> 2.30.1 by [@xokdvium](https://github.com/xokdvium) in [#245](https://github.com/cachix/install-nix-action/pull/245) **\[SECURITY]** Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. <https://github.com/NixOS/nix/security/advisories/GHSA-qc7j-jgf3-qmhg> #### New Contributors - [@xokdvium](https://github.com/xokdvium) made their first contribution in [#245](https://github.com/cachix/install-nix-action/pull/245) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.5.0...v31.5.1> ### [`v31.5.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.5.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.4.1...v31.5.0) #### What's Changed - nix: 2.29.1 -> 2.30.0 by [@github-actions](https://github.com/github-actions) in [#244](https://github.com/cachix/install-nix-action/pull/244) Release notes: <https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html> **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.4.1...v31.5.0> ### [`v31.4.1`](https://github.com/cachix/install-nix-action/releases/tag/v31.4.1) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.4.0...v31.4.1) #### What's Changed - nix: 2.29.0 -> 2.29.1 by [@github-actions](https://github.com/github-actions) in [#243](https://github.com/cachix/install-nix-action/pull/243) **\[SECURITY]** <https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017> #### New Contributors - [@github-actions](https://github.com/github-actions) made their first contribution in [#243](https://github.com/cachix/install-nix-action/pull/243) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.4.0...v31.4.1> ### [`v31.4.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.4.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.3.0...v31.4.0) #### What's Changed - nix: 2.28.3 -> 2.29.0 by [@Mic92](https://github.com/Mic92) in [#239](https://github.com/cachix/install-nix-action/pull/239) Release notes: <https://nix.dev/manual/nix/2.29/release-notes/rl-2.29> - Automate nix updates in CI by [@Mic92](https://github.com/Mic92) in [#241](https://github.com/cachix/install-nix-action/pull/241) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.3.0...v31.4.0> ### [`v31.3.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.3.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.2.0...v31.3.0) #### What's Changed - feat: Pin actions to hashes by [@l0b0](https://github.com/l0b0) in [#201](https://github.com/cachix/install-nix-action/pull/201) - chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by [@dependabot](https://github.com/dependabot) in [#234](https://github.com/cachix/install-nix-action/pull/234) - docs: document how to provide AWS credentials to the nix-daemon by [@sandydoo](https://github.com/sandydoo) in [#235](https://github.com/cachix/install-nix-action/pull/235) - nix: 2.28.2 -> 2.28.3 by [@Mic92](https://github.com/Mic92) in [#236](https://github.com/cachix/install-nix-action/pull/236) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.2.0...v31.3.0> ### [`v31.2.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.2.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31.1.0...v31.2.0) #### What's Changed - nix: 2.26.3 -> 2.28.2 by [@Mic92](https://github.com/Mic92) in [#232](https://github.com/cachix/install-nix-action/pull/232) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.1.0...v31.2.0> ### [`v31.1.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.1.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31...v31.1.0) #### What's Changed - Remove deprecated `--darwin-use-unencrypted-nix-store-volume` flag by [@sandydoo](https://github.com/sandydoo) in [#230](https://github.com/cachix/install-nix-action/pull/230) - action: add option to configure updating trusted users by [@Enzime](https://github.com/Enzime) in [#231](https://github.com/cachix/install-nix-action/pull/231) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v31.0.0...v31.1.0> ### [`v31.0.0`](https://github.com/cachix/install-nix-action/releases/tag/v31.0.0) [Compare Source](https://github.com/cachix/install-nix-action/compare/v31...v31) #### What's Changed - nix: 2.24.9 -> 2.25.2 by [@Mic92](https://github.com/Mic92) in [#218](https://github.com/cachix/install-nix-action/pull/218) - ci: fix latest installer tests by [@sandydoo](https://github.com/sandydoo) in [#220](https://github.com/cachix/install-nix-action/pull/220) - GitHub test.yml: add ubuntu-24.04-arm to matrix by [@msgilligan](https://github.com/msgilligan) in [#221](https://github.com/cachix/install-nix-action/pull/221) - nix: 2.25.2 -> 2.26.2 by [@Mic92](https://github.com/Mic92) in [#226](https://github.com/cachix/install-nix-action/pull/226) - nix: 2.26.2 -> 2.26.3 by [@sandydoo](https://github.com/sandydoo) in [#228](https://github.com/cachix/install-nix-action/pull/228) #### New Contributors - [@msgilligan](https://github.com/msgilligan) made their first contribution in [#221](https://github.com/cachix/install-nix-action/pull/221) **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v30...v31.0.0> ### [`v31`](https://github.com/cachix/install-nix-action/releases/tag/v31) [Compare Source](https://github.com/cachix/install-nix-action/compare/v30...v31) Starting with v31, this action will use semantic versioning for releases. Major tags, like v31, will be bumped to point to the latest minor/patch release. This is in line with how most GitHub actions manage releases. #### What's Changed - nix: 2.26.3 -> 2.28.2 by [@Mic92](https://github.com/Mic92) in [#232](https://github.com/cachix/install-nix-action/pull/232) - nix: 2.24.9 -> 2.25.2 by [@Mic92](https://github.com/Mic92) in [#218](https://github.com/cachix/install-nix-action/pull/218) - ci: fix latest installer tests by [@sandydoo](https://github.com/sandydoo) in [#220](https://github.com/cachix/install-nix-action/pull/220) - ci: add ubuntu-24.04-arm to matrix by [@msgilligan](https://github.com/msgilligan) in [#221](https://github.com/cachix/install-nix-action/pull/221) - nix: 2.25.2 -> 2.26.2 by [@Mic92](https://github.com/Mic92) in [#226](https://github.com/cachix/install-nix-action/pull/226) - nix: 2.26.2 -> 2.26.3 by [@sandydoo](https://github.com/sandydoo) in [#228](https://github.com/cachix/install-nix-action/pull/228) - feat: Pin actions to hashes by [@l0b0](https://github.com/l0b0) in [#201](https://github.com/cachix/install-nix-action/pull/201) - chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by [@dependabot](https://github.com/dependabot) in [#234](https://github.com/cachix/install-nix-action/pull/234) - docs: document how to provide AWS credentials to the nix-daemon by [@sandydoo](https://github.com/sandydoo) in [#235](https://github.com/cachix/install-nix-action/pull/235) - nix: 2.28.2 -> 2.28.3 by [@Mic92](https://github.com/Mic92) in [#236](https://github.com/cachix/install-nix-action/pull/236) - nix: 2.28.3 -> 2.29.0 by [@Mic92](https://github.com/Mic92) in [#239](https://github.com/cachix/install-nix-action/pull/239) Release notes: <https://nix.dev/manual/nix/latest/release-notes/rl-2.29> - Automate nix updates in CI by [@Mic92](https://github.com/Mic92) in [#241](https://github.com/cachix/install-nix-action/pull/241) - nix: 2.29.0 -> 2.29.1 by [@github-actions](https://github.com/github-actions) in [#243](https://github.com/cachix/install-nix-action/pull/243) **\[SECURITY]** <https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017> - nix: 2.29.1 -> 2.30.0 by [@github-actions](https://github.com/github-actions) in [#244](https://github.com/cachix/install-nix-action/pull/244) Release notes: <https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html> - nix: 2.30.0 -> 2.30.1 by [@xokdvium](https://github.com/xokdvium) in [#245](https://github.com/cachix/install-nix-action/pull/245) **\[SECURITY]** Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. <https://github.com/NixOS/nix/security/advisories/GHSA-qc7j-jgf3-qmhg> - docs: add example for `nix develop` by [@jennydaman](https://github.com/jennydaman) in [#248](https://github.com/cachix/install-nix-action/pull/248) - nix: 2.30.2 -> 2.31.0 by [@github-actions](https://github.com/github-actions)\[bot] in [#250](https://github.com/cachix/install-nix-action/pull/250) Release notes: <https://discourse.nixos.org/t/nix-2-31-0-released/68465> - nix: 2.31.0 -> 2.31.1 by [@github-actions](https://github.com/github-actions)\[bot] in [#253](https://github.com/cachix/install-nix-action/pull/253) - nix: 2.31.1 -> 2.31.2 by [@github-actions](https://github.com/github-actions)\[bot] in [#256](https://github.com/cachix/install-nix-action/pull/256) - feat: set up the environment based on the installer shell scripts by [@sandydoo](https://github.com/sandydoo) in [#251](https://github.com/cachix/install-nix-action/pull/251) Adds the bin directory from the user's profile to `$PATH`. Configures the following environment variables: - `NIX_PROFILES` - `NIX_SSL_CERT_FILE` (if not set) - nix: 2.31.2 -> 2.32.0 by [@github-actions](https://github.com/github-actions)\[bot] in [#257](https://github.com/cachix/install-nix-action/pull/257) Release notes: <https://discourse.nixos.org/t/nix-2-32-0-released/70528> - nix: 2.32.0 -> 2.32.1 by [@github-actions](https://github.com/github-actions)\[bot] in [#258](https://github.com/cachix/install-nix-action/pull/258) - nix: 2.32.1 -> 2.32.2 by [@github-actions](https://github.com/github-actions)\[bot] in [#259](https://github.com/cachix/install-nix-action/pull/259) - nix: 2.32.2 -> 2.32.3 by [@github-actions](https://github.com/github-actions)\[bot] in [#260](https://github.com/cachix/install-nix-action/pull/260) - nix: 2.32.3 -> 2.32.4 by [@github-actions](https://github.com/github-actions)\[bot] in [#261](https://github.com/cachix/install-nix-action/pull/261) - nix: 2.32.4 -> 2.33.0 by [@github-actions](https://github.com/github-actions)\[bot] in [#264](https://github.com/cachix/install-nix-action/pull/264) - nix: 2.33.0 -> 2.33.3 by [@github-actions](https://github.com/github-actions)\[bot] in [#266](https://github.com/cachix/install-nix-action/pull/266) - ~~nix: 2.33.3 -> 2.34.0 by [@github-actions](https://github.com/github-actions)\[bot] in [#267](https://github.com/cachix/install-nix-action/pull/267) Release notes: <https://discourse.nixos.org/t/nix-2-34-0-released/75818>~~ **Rolled back due to reports of issues with cachix-action** - nix: 2.34.0 -> 2.34.1 by [@github-actions](https://github.com/github-actions)\[bot] in [#269](https://github.com/cachix/install-nix-action/pull/269) Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load authentication keys configured by `cachix-action`. - nix: 2.34.1 -> 2.34.2 by [@github-actions](https://github.com/github-actions)\[bot] in [#270](https://github.com/cachix/install-nix-action/pull/270) - nix: 2.34.2 -> 2.34.4 by [@github-actions](https://github.com/github-actions)\[bot] in [#271](https://github.com/cachix/install-nix-action/pull/271) - nix: 2.34.4 -> 2.34.5 by [@github-actions](https://github.com/github-actions)\[bot] in [#273](https://github.com/cachix/install-nix-action/pull/273) **[CVE-2026-39860](https://github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj)** Fixes a root privilege escalation vulnerability via sandbox escape. **Severity: Critical.** - nix: 2.34.5 -> 2.34.6 by [@github-actions](https://github.com/github-actions)\[bot] in [#274](https://github.com/cachix/install-nix-action/pull/274) - nix: 2.34.6 -> 2.34.7 by [@github-actions](https://github.com/github-actions)\[bot] in [#275](https://github.com/cachix/install-nix-action/pull/275) **[GHSA-vh5x-56v6-4368](https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368)**: Fixes a coroutine stack-to-heap overflow via unbounded recursion in the NAR directory parser. **Severity: High.** **[GHSA-gr92-w2r5-qw5p](https://github.com/NixOS/nix/security/advisories/GHSA-gr92-w2r5-qw5p)**: Fixes an absolute path traversal vulnerability when unpacking archives to disk. Severity: Moderate. **Full Changelog**: <https://github.com/cachix/install-nix-action/compare/v30...v31> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - Monday through Friday (`* * * * 1-5`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit 2026-06-02 16:49:39 +01:00

chore(deps): update gitea actions

CI / flake (pull_request) Successful in 1m49s

Details

c01bb46393

lyrathorpe was assigned by renovate-bot

2026-06-02 16:49:41 +01:00

renovate-bot requested review from lyrathorpe 2026-06-02 16:49:42 +01:00

lyrathorpe merged commit a81064f086 into main

2026-06-02 17:11:51 +01:00

lyrathorpe deleted branch renovate/major-gitea-actions

2026-06-02 17:11:51 +01:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: lyrathorpe/nixfiles#6