From 5f2829bd1b4d1ce316cc49cf66587372f6709830 Mon Sep 17 00:00:00 2001 From: "rigelbuild-renovate[bot]" <319700990+rigelbuild-renovate[bot]@users.noreply.github.com> Date: Tue, 1 Sep 2026 10:59:36 +0000 Subject: [PATCH] chore(deps): update cachix/install-nix-action digest to 13d8dd5 --- .github/workflows/ci.yml | 16 ++++++++-------- .github/workflows/eng-docs-deploy.yml | 2 +- .github/workflows/release.yml | 8 ++++---- .github/workflows/renovate.yml | 2 +- 4 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0d005817f..6b179c301 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -174,7 +174,7 @@ jobs: # triggering ref. ref: ${{ github.event.inputs.pr != '' && format('refs/pull/{0}/merge', github.event.inputs.pr) || '' }} - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # The forks' functional CI is `nix build` of their own flakes, and the # whole toolchain — language runtimes AND the nixpkgs tools — is built @@ -288,7 +288,7 @@ jobs: ref: ${{ github.event.inputs.pr != '' && format('refs/pull/{0}/merge', github.event.inputs.pr) || '' }} - if: matrix.run == 'true' - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # The forks' functional CI is `nix build` of their own flakes, and the # whole toolchain — language runtimes AND the nixpkgs tools — is built @@ -463,7 +463,7 @@ jobs: # on every other event (see setup's checkout). ref: ${{ github.event.inputs.pr != '' && format('refs/pull/{0}/merge', github.event.inputs.pr) || '' }} - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # The forks' functional CI is `nix build` of their own flakes, and the # whole toolchain — language runtimes AND the nixpkgs tools — is built @@ -650,7 +650,7 @@ jobs: # on every other event (see setup's checkout). ref: ${{ github.event.inputs.pr != '' && format('refs/pull/{0}/merge', github.event.inputs.pr) || '' }} - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # The forks' functional CI is `nix build` of their own flakes, and the # whole toolchain — language runtimes AND the nixpkgs tools — is built @@ -878,7 +878,7 @@ jobs: # on every other event (see setup's checkout). ref: ${{ github.event.inputs.pr != '' && format('refs/pull/{0}/merge', github.event.inputs.pr) || '' }} - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # The forks' functional CI is `nix build` of their own flakes, and the # whole toolchain — language runtimes AND the nixpkgs tools — is built @@ -1146,7 +1146,7 @@ jobs: # on every other event (see setup's checkout). ref: ${{ github.event.inputs.pr != '' && format('refs/pull/{0}/merge', github.event.inputs.pr) || '' }} - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # The forks' functional CI is `nix build` of their own flakes, and the # whole toolchain — language runtimes AND the nixpkgs tools — is built @@ -1457,7 +1457,7 @@ jobs: # on every other event (see setup's checkout). ref: ${{ github.event.inputs.pr != '' && format('refs/pull/{0}/merge', github.event.inputs.pr) || '' }} - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # The whole toolchain — Go + bun — is built from nix (Global Constraint # 3), never a `setup-go` drift. nix runs on macos-14. The two caches @@ -2290,7 +2290,7 @@ jobs: # cleanly, matching the moon job's checkout. fetch-depth: 0 - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # The SAME two-cache trust posture as the moon job — the two # substituters the vendored forks use plus their trusted keys, never diff --git a/.github/workflows/eng-docs-deploy.yml b/.github/workflows/eng-docs-deploy.yml index 691ef0a59..d8b5a3d3b 100644 --- a/.github/workflows/eng-docs-deploy.yml +++ b/.github/workflows/eng-docs-deploy.yml @@ -39,7 +39,7 @@ jobs: # ci.yml's checkout (ci.yml:130-135). fetch-depth: 0 - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # The docsite build runs under moon, whose toolchain (bun/node/moon) # comes from nix, not `setup-*` actions — the same posture ci.yml diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1d61866f2..ea4276898 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -201,7 +201,7 @@ jobs: echo "should_publish=$should_publish" >> "$GITHUB_OUTPUT" echo "changed-path gate over the image closure set: should_publish=$should_publish" - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 if: steps.gate.outputs.should_publish == 'true' with: # nix-command + flakes for the RigelBuild forks' flakes. The two caches @@ -344,7 +344,7 @@ jobs: with: ref: ${{ needs.release-pr.outputs.sha }} - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # nix-command + flakes; the toolchain (Go + bun) is built from nix # (Global Constraint 3), never `setup-go`. The two caches are declared @@ -448,7 +448,7 @@ jobs: with: ref: ${{ needs.release-pr.outputs.sha }} - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # nix-command + flakes for the RigelBuild forks' flakes. The two caches # are declared HERE, not delegated via `accept-flake-config` — that @@ -698,7 +698,7 @@ jobs: ref: ${{ needs.release-pr.outputs.sha }} fetch-depth: 0 - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # nix-command + flakes for the RigelBuild forks' flakes. The two caches # are declared HERE, not delegated via `accept-flake-config` — that diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 78845edf6..922bcf8b6 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -50,7 +50,7 @@ jobs: # shallow single-ref checkout. fetch-depth: 0 - - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 + - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31 with: # Same trust posture as ci.yml — name the two caches the devenv build # legitimately uses in this reviewed file rather than delegating via