commit e7072d135f40c89bbb37fc5316dd9723967ee06a

··· 20 20 lib 21 21 maintainers 22 22 23 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 23 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 24 24 with: 25 25 extra_nix_config: sandbox = true 26 26

+1 -1

.github/workflows/check-nix-format.yml

··· 23 23 with: 24 24 ref: ${{ needs.get-merge-commit.outputs.mergedSha }} 25 25 26 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 26 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 27 27 with: 28 28 extra_nix_config: sandbox = true 29 29

+1 -1

.github/workflows/check-nixf-tidy.yml

··· 34 34 rev=$(jq -r .rev ci/pinned-nixpkgs.json) 35 35 echo "url=https://github.com/NixOS/nixpkgs/archive/$rev.tar.gz" >> "$GITHUB_ENV" 36 36 37 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 37 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 38 38 with: 39 39 extra_nix_config: sandbox = true 40 40 nix_path: nixpkgs=${{ env.url }}

+1 -1

.github/workflows/check-shell.yml

··· 27 27 with: 28 28 ref: refs/pull/${{ github.event.pull_request.number }}/merge 29 29 30 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 30 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 31 31 32 32 - name: Build shell 33 33 run: nix-build shell.nix

+2 -2

.github/workflows/codeowners-v2.yml

··· 45 45 needs: get-merge-commit 46 46 if: github.repository_owner == 'NixOS' && needs.get-merge-commit.outputs.mergedSha 47 47 steps: 48 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 48 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 49 49 50 50 - uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad # v16 51 51 with: ··· 92 92 runs-on: ubuntu-24.04 93 93 if: github.repository_owner == 'NixOS' 94 94 steps: 95 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 95 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 96 96 97 97 # Important: Because we use pull_request_target, this checks out the base branch of the PR, not the PR head. 98 98 # This is intentional, because we need to request the review of owners as declared in the base branch.

+1 -1

.github/workflows/editorconfig-v2.yml

··· 32 32 with: 33 33 ref: ${{ needs.get-merge-commit.outputs.mergedSha }} 34 34 35 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 35 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 36 36 with: 37 37 # nixpkgs commit is pinned so that it doesn't break 38 38 # editorconfig-checker 2.4.0

+1 -1

.github/workflows/eval-lib-tests.yml

··· 22 22 with: 23 23 ref: ${{ needs.get-merge-commit.outputs.mergedSha }} 24 24 25 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 25 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 26 26 with: 27 27 extra_nix_config: sandbox = true 28 28

+5 -5

.github/workflows/eval.yml

··· 43 43 echo "targetSha=$targetSha" >> "$GITHUB_OUTPUT" 44 44 45 45 - name: Install Nix 46 - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 46 + uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 47 47 with: 48 48 extra_nix_config: sandbox = true 49 49 ··· 71 71 path: nixpkgs 72 72 73 73 - name: Install Nix 74 - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 74 + uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 75 75 with: 76 76 extra_nix_config: sandbox = true 77 77 ··· 111 111 path: nixpkgs 112 112 113 113 - name: Install Nix 114 - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 114 + uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 115 115 with: 116 116 extra_nix_config: sandbox = true 117 117 ··· 152 152 path: nixpkgs 153 153 154 154 - name: Install Nix 155 - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 155 + uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 156 156 with: 157 157 extra_nix_config: sandbox = true 158 158 ··· 260 260 path: comparison 261 261 262 262 - name: Install Nix 263 - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 263 + uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 264 264 265 265 # Important: This workflow job runs with extra permissions, 266 266 # so we need to make sure to not run untrusted code from PRs

+1 -1

.github/workflows/keep-sorted.yml

··· 27 27 rev=$(jq -r .rev ci/pinned-nixpkgs.json) 28 28 echo "url=https://github.com/NixOS/nixpkgs/archive/$rev.tar.gz" >> "$GITHUB_ENV" 29 29 30 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 30 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 31 31 with: 32 32 extra_nix_config: sandbox = true 33 33 nix_path: nixpkgs=${{ env.url }}

+1 -1

.github/workflows/manual-nixos-v2.yml

··· 33 33 with: 34 34 ref: refs/pull/${{ github.event.pull_request.number }}/merge 35 35 36 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 36 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 37 37 with: 38 38 extra_nix_config: sandbox = true 39 39

+1 -1

.github/workflows/manual-nixpkgs-v2.yml

··· 20 20 with: 21 21 ref: refs/pull/${{ github.event.pull_request.number }}/merge 22 22 23 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 23 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 24 24 with: 25 25 extra_nix_config: sandbox = true 26 26

+1 -1

.github/workflows/nix-parse-v2.yml

··· 32 32 ref: ${{ needs.get-merge-commit.outputs.mergedSha }} 33 33 if: ${{ env.CHANGED_FILES && env.CHANGED_FILES != '' }} 34 34 35 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 35 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 36 36 with: 37 37 extra_nix_config: sandbox = true 38 38 nix_path: nixpkgs=channel:nixpkgs-unstable

+1 -1

.github/workflows/nixpkgs-vet.yml

··· 43 43 git worktree add "$target" "$(git rev-parse HEAD^1)" 44 44 echo "target=$target" >> "$GITHUB_ENV" 45 45 46 - - uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31 46 + - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31 47 47 48 48 - name: Fetching the pinned tool 49 49 # Update the pinned version using ci/nixpkgs-vet/update-pinned-tool.sh