1668 Commits

Author SHA1 Message Date
Marcin Serwin
d6678d806e ci: pin @actions/artifact to 5.0.3
Signed-off-by: Marcin Serwin <marcin@serwin.dev>
2026-01-29 20:25:06 +01:00
K900
230e0e4cbd Merge remote-tracking branch 'origin/master' into staging-nixos 2026-01-27 21:15:07 +03:00
Philip Taron
c066ab53a5 workflows/eval: Un-parallelize misc, fixing check, and add modules meta check (#484265) 2026-01-27 15:51:41 +00:00
Samuel Dionne-Riel
f58b11edad workflows/eval: Ensure NixOS modules meta is valid
As observed in #484155, it was possible for broken meta information to
slip its way into the NixOS modules system. It looks like that data was
never checked. At this point I wonder if it ever was *used* in a
programmatic manner, given how long it took for it to get noticed.

This simple check causes the results to be evaluated in a format that
isn't "Nix-brained". Not using `--json` *could* allow `<LAMBDA>` to be
in the output, which is AFAICT undesirable.

```
 $ nix-instantiate --strict --eval --expr '{ x = a: a; }'
{ x = <LAMBDA>; }

 $ nix-instantiate --strict --eval --expr --json '{ x = a: a; }'
error:
       … while evaluating attribute 'x'
         at «string»:1:3:
            1| { x = a: a; }
             |   ^

       error: cannot convert a function to JSON
       at «string»:1:3:
            1| { x = a: a; }
             |   ^
```
2026-01-27 08:43:50 -05:00
Samuel Dionne-Riel
40d295d46d Revert "workflows/eval.misc: run tasks in parallel"
This reverts commit 3d9cb9f355.

In 3d9cb9f355 (#436171), the two check
commands were combined in the same step, and backgrounded, `wait`ing on
their completion.

`help wait` states the following:

> If ID is not given, waits for all currently active child processes,
> and the return status is zero.

The result was that this check's misc check results were accidentally
thrown away. Oops.
2026-01-27 08:43:50 -05:00
nixpkgs-ci[bot]
24bf3a7395 Merge master into staging-nixos 2026-01-27 00:21:30 +00:00
Michael Daniels
509f71892d workflows/test: correct 'dry' parameter 2026-01-26 19:04:14 -05:00
nixpkgs-ci[bot]
4f189086d0 Merge master into staging-nixos 2026-01-26 18:08:53 +00:00
Philip Taron
27e350c16d build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#483978) 2026-01-26 12:44:43 +00:00
Philip Taron
b50c080ddb build(deps): bump cachix/cachix-action from 0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad to 3ba601ff5bbb07c7220846facfa2cd81eeee15a1 (#483979) 2026-01-26 12:44:25 +00:00
dependabot[bot]
cd561c72fe build(deps): bump cachix/cachix-action
Bumps [cachix/cachix-action](https://github.com/cachix/cachix-action) from 0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad to 3ba601ff5bbb07c7220846facfa2cd81eeee15a1.
- [Release notes](https://github.com/cachix/cachix-action/releases)
- [Commits](0fc020193b...3ba601ff5b)

---
updated-dependencies:
- dependency-name: cachix/cachix-action
  dependency-version: 3ba601ff5bbb07c7220846facfa2cd81eeee15a1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-26 12:25:15 +00:00
dependabot[bot]
d5e4fa4444 build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 8.0.0 to 8.1.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](98357b18bf...c0f553fe54)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-26 12:25:00 +00:00
dependabot[bot]
0f2f886044 build(deps): bump actions/checkout from 6.0.1 to 6.0.2
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](8e8c483db8...de0fac2e45)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-26 12:24:55 +00:00
nixpkgs-ci[bot]
6689fa0984 Merge master into staging-nixos 2026-01-26 00:21:28 +00:00
Philip Taron
f5d93a1e69 workflows/periodic-merge: fix comment syntax (#483727) 2026-01-25 21:11:04 +00:00
Michael Daniels
1260a929cf ci: auto add '8.has: package (new)' and '8.has: package (update)' labels (#482478) 2026-01-25 20:37:50 +00:00
Michael Daniels
729d7d3ae0 workflows/periodic-merge: fix comment syntax 2026-01-25 14:02:39 -05:00
Michael Daniels
006ecdbdeb treewide: fix typos (#479869) 2026-01-24 21:36:44 +00:00
Aliaksandr
20ca66ac68 ci(bot): add token fallback for labeler actions
Use github.token when app token is not available (in forks).
2026-01-24 01:15:34 +02:00
Michael Daniels
4ca1898100 workflows/periodic-merge: link the target branch on GitHub when posting failure
Makes it easier to determine whether someone else has already manually merged.
2026-01-23 17:13:58 -05:00
Matt Sturgeon
cbf9173b17 github/labeler: fix auto-tag backport for .github/actions
.github/actions/* does not match deeply nested files like
.github/actions/checkout/action.yml

Instead, we need a recursive glob like **/*
2026-01-22 01:55:56 +00:00
Matt Sturgeon
79f6bf1d2d actions/checkout: manually fetch ci/pinned.json patch
In a shallow clone, `git fetch` may fail to apply thin packs due to
missing base objects.

We typically don't notice this with first-parent commits and prospective
merge commits, but it seems fairly common with arbitrary PR-branch
commits.

In this instance we don't need the full commit data, we only need to
apply its diff as a patch. So fetch the diff from GitHub's API and apply
using `git apply`.

This partially reverts commit 4787f35ede
2026-01-22 00:30:25 +00:00
Dyego Aurélio
8c4f3d3aa4 workflows/eval: find and isolate ci/pinned.json bump commits
When testVersions is enabled, the version matrix check now identifies
the specific commit that modified ci/pinned.json, rather than evaluating
the full PR. This allows formatting changes and other modifications to
coexist in the same PR without affecting the hash consistency check.

The workflow now:
- Adds headSha input to compare PR commits against target
- Finds the single commit that touched ci/pinned.json
- Errors if multiple commits modify it (to ensure clear attribution)
- Passes the bump commit to the checkout action for isolated evaluation
- Reports which commit was evaluated in the summary

The actual cherry-pick and pinned checkout handling is delegated to
the checkout action via the new `untrusted-pin-bump` input.

Co-Authored-By: Matt Sturgeon <matt@sturgeon.me.uk>
2026-01-20 18:37:28 -03:00
Matt Sturgeon
4787f35ede actions/checkout: handle ci/pinned.json bump commits 2026-01-20 17:13:42 -03:00
Silvan Mosberger
91ff1ffa45 ci: Don't run non-reproducible doc urls check
Causes non-reproducible CI failures: https://github.com/NixOS/nixpkgs/actions/runs/21102527291/job/60688698991?pr=480436
2026-01-20 20:51:55 +01:00
Philip Taron
3334170f35 {workflows/eval,ci/github-script}: check for mass and NixOS test rebuilds targeting master/release-* branches (#481205) 2026-01-19 19:15:49 +00:00
Michael Daniels
a4d5f8a6b1 {workflows/eval,ci/github-script}: check for mass rebuilds targeting master/release-* branches 2026-01-19 13:02:09 -05:00
Wolfgang Walther
c89c90dfa1 .github/PULL_REQUEST_TEMPLATE: remove +1 footer
The footer has the following problems:
- It's not consistently added in all PRs, for example backports or those
where the template is not used. Inconsistency in a voting skews the
results.
- It's arguably not effective, because people use reactions naturally to
interact with PRs anyway. As long as there are multiple different
reaction types, what does it mean that one PR has 20 👍, but another
has 22 🎉? The latter won't show up in the ranking for 👍, so at
the minimum confusing. Same for ❤️.
- It's not useful to determine priority as in "higher number of votes
should be merged". A PR's quality should be determined independently of
votes - when it's good, it will be merged. The currently most upvoted PR
has serious issues, so this invites drive-by questions like "Why isn't
this merged, given the number of upvotes?".
2026-01-16 06:37:27 +02:00
Ben Siraphob
c7e10647ea treewide: fix typos 2026-01-13 14:45:11 -05:00
Gutyina Gergő
00133a4cb1 .github/ISSUE_TEMPLATE: include closed issues when checking duplicates 2026-01-04 10:52:55 +01:00
Michael Daniels
a6ec4bf808 {README.md,.github/*}: remove/replace references to 25.05 release 2026-01-01 21:23:07 -05:00
Bobby Rong
2e7019cb5b .github/labeler.yml: update xfce paths
Core packages and most panel plugins and thunar plugins.
Some of the apps are not covered but I don't plan to make the list
too long for now.
2025-12-28 20:59:39 +08:00
Wolfgang Walther
d599e45906 workflows/labels: add "6.topic: tree-sitter" label (#473040) 2025-12-26 11:08:01 +00:00
teto
e8518435e8 workflows/labels: add "6.topic: tree-sitter" label
Add automatic labeling for tree-sitter related changes including:
- Tree-sitter core parsing tools
- Python tree-sitter modules and bindings
- Vim/Neovim tree-sitter plugins
- Emacs tree-sitter packages
- Tree-sitter documentation
2025-12-22 17:50:17 +01:00
dependabot[bot]
5685208a8e build(deps): bump korthout/backport-action from 4.0.0 to 4.0.1
Bumps [korthout/backport-action](https://github.com/korthout/backport-action) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](3634249d41...c656f5d585)

---
updated-dependencies:
- dependency-name: korthout/backport-action
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-22 11:03:06 +00:00
Matt Sturgeon
20ab35ae0c github/labeler: auto-tag backports for labeler
The labeler reads its config from the PR's base branch. Therefore, its
config files need to be kept in sync across development branches, like
other CI files.
2025-12-20 18:19:29 +00:00
rorosen
a14741d2ef nixos/tests/{k3s,rke2}: merge & cleanup (#469788) 2025-12-20 14:15:44 +00:00
Michael Daniels
e30855a4d4 github/labeler: do not auto-tag backports for backport
E.g. #472010, #472185
2025-12-18 17:15:17 -05:00
Matt Sturgeon
7cfe9b8c85 workflows/lint: fully skip the commits job in Merge Queues
Follow-up to 7cf5972410

While the JS script already returned early, we can save a few resources
by skipping the job entirely when there's no `pull_request` context.
2025-12-18 13:09:17 +00:00
Matt Sturgeon
e97d1c56ad {workflows/lint,ci/github-script}: lint commit messages (#470523) 2025-12-18 12:41:54 +00:00
Philip Taron
1fb8c4a221 build(deps): bump cachix/install-nix-action from 31.8.4 to 31.9.0 (#470998) 2025-12-17 01:41:35 +00:00
Philip Taron
7dde039464 build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (#470996) 2025-12-16 17:58:02 +00:00
Philip Taron
a3aeb77ddf build(deps): bump korthout/backport-action from 3.4.1 to 4.0.0 (#470997) 2025-12-16 17:57:00 +00:00
Philip Taron
4adfd48b0b build(deps): bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (#471000) 2025-12-16 17:55:15 +00:00
dependabot[bot]
ae757e2c85 build(deps): bump peter-evans/create-pull-request from 7.0.11 to 8.0.0
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 7.0.11 to 8.0.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](22a9089034...98357b18bf)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 11:03:45 +00:00
dependabot[bot]
be73f48212 build(deps): bump cachix/install-nix-action from 31.8.4 to 31.9.0
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 31.8.4 to 31.9.0.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md)
- [Commits](0b0e072294...4e002c8ec8)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-version: 31.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 11:03:40 +00:00
dependabot[bot]
7e249c37da build(deps): bump korthout/backport-action from 3.4.1 to 4.0.0
Bumps [korthout/backport-action](https://github.com/korthout/backport-action) from 3.4.1 to 4.0.0.
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](d07416681c...3634249d41)

---
updated-dependencies:
- dependency-name: korthout/backport-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 11:03:34 +00:00
dependabot[bot]
1463c436d8 build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](018cc2cf5b...37930b1c2a)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 11:03:28 +00:00
dependabot[bot]
c789135d93 build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](330a01c490...b7c566a772)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 11:03:24 +00:00
Michael Daniels
7cf5972410 {workflows/lint,ci/github-script}: lint commit messages 2025-12-13 16:43:41 -05:00