Michael Daniels
2496d47b76
ci/github-script/check-target-branch: convert to TypeScript
...
Only doing this one for now as a proof-of-concept.
2026-08-10 20:26:01 -04:00
Ihar Hrachyshka
830255b283
.github: avoid full checkout on backport
...
The backport action should work with a sparse tree, so materializing all
files is just wasteful.
Since total time allocated for backport jobs is just 3 mins, sometimes a
slow worktree checkout consumes a good chunk of it and pushes the job to
timeout, resulting in missed backport. See for example:
https://github.com/NixOS/nixpkgs/actions/runs/30587897004/job/91023481883
2026-07-30 20:03:42 -04:00
Philip Taron
efa8264ee0
Revert ".github: Bump actions/checkout from 6.0.3 to 7.0.1"
2026-07-27 13:23:38 -07:00
Philip Taron
4b0320094b
.github: Bump actions/checkout from 6.0.3 to 7.0.1 ( #545205 )
2026-07-27 20:04:22 +00:00
dependabot[bot]
121838ea38
.github: Bump actions/labeler from 6.2.0 to 7.0.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.2.0 to 7.0.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](b8dd2d9be0...bf12e9b00b )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 11:22:52 +00:00
dependabot[bot]
7079e863e7
.github: Bump actions/checkout from 6.0.3 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](df4cb1c069...3d3c42e5aa )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 11:22:46 +00:00
Matt Sturgeon
e4a4855697
ci/pinned: bump nixpkgs ( #544224 )
2026-07-22 13:20:37 +00:00
Michael Daniels
4a45de05bd
workflows: appease zizmor by installing npm pkgs from lockfile
2026-07-21 19:30:53 -04:00
klea
9322705190
workflows: Node 24 is now the default
...
https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Says they updated the migration date to 2026-06-16.
2026-07-20 09:10:13 +00:00
dependabot[bot]
942be243bd
.github: Bump cachix/install-nix-action from 31.10.7 to 31.11.0
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 31.10.7 to 31.11.0.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md )
- [Commits](a49548c11d...630ae543ea )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-version: 31.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-17 11:22:54 +00:00
Michael Daniels
1402b5012c
workflows/{check,lint}: prevent git timeouts
2026-07-11 18:58:40 -04:00
Michael Daniels
ffc7f8ce99
.github: Bump cachix/install-nix-action from 31.10.6 to 31.10.7 ( #540295 )
2026-07-11 00:24:46 +00:00
dependabot[bot]
58b83392e9
.github: Bump actions/labeler from 6.1.0 to 6.2.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](f27b608878...b8dd2d9be0 )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 11:22:52 +00:00
dependabot[bot]
53c53d5d5b
.github: Bump cachix/install-nix-action from 31.10.6 to 31.10.7
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 31.10.6 to 31.10.7.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md )
- [Commits](8aa03977d8...a49548c11d )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-version: 31.10.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 11:22:46 +00:00
dependabot[bot]
39762b3336
.github: Bump korthout/backport-action from 4.5.2 to 4.6.0
...
Bumps [korthout/backport-action](https://github.com/korthout/backport-action ) from 4.5.2 to 4.6.0.
- [Release notes](https://github.com/korthout/backport-action/releases )
- [Commits](6606540695...2e830a1d0b )
---
updated-dependencies:
- dependency-name: korthout/backport-action
dependency-version: 4.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-03 11:22:48 +00:00
yaya
976c1f007e
.github/workflows: Remove 25.11 workflows
...
NixOS 25.11 is end-of-life.
2026-07-01 13:36:17 +02:00
Matt Sturgeon
62d2c2fb9d
workflows/test: test release-supported-systems changes
2026-06-29 15:22:20 +01:00
Emily
8ccb319a2e
workflows/build: stop building for x86_64-darwin
...
This will apply to the stable release branches too, but that seems
unavoidable: we use `nixpkgs-unstable` in `ci/pinned.json`, which
means that the development shell for stable release branches is based
on the unstable branch. Once we drop support for a system on the
unstable branch, it can no longer be used for Nixpkgs development on
the next pin, even when targeting already‐released stable branches.
Since Nixpkgs contributors would generally be expected to be less
likely to be using deprecated platforms, and we usually operate with
a backport workflow where changes target the unstable branch first,
this is probably acceptable. A potential alternative would be to pin
the stable branch for CI instead.
2026-06-21 19:22:33 +01:00
Aliaksandr
a100d091a0
ci/eval: name the base branch in the performance comparison summary
...
The performance comparison summary previously stated it compared against
"its pull request base branch (e.g., 'master')" regardless of the actual
base branch.
Plumb the base branch classification computed in prepare.js through the
eval workflow to the `compare` derivation so the summary names the real
base branch (e.g. "staging-25.11"). The local `eval.full` helper defaults
to "master", matching its touched-files convention.
Assisted-by: claude-code with claude-opus-4-8[1m]-high
2026-06-17 01:08:45 +03:00
Hythera
8bbed87799
workflows/teams: fix execution day of comment
2026-06-08 22:41:22 +02:00
dependabot[bot]
d90a8da39f
.github: Bump actions/checkout from 6.0.2 to 6.0.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](de0fac2e45...df4cb1c069 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-05 11:22:54 +00:00
zowoq
10056dd40d
linux: add stable staging-nixos workflow
...
stable counterpart to d28cc2a2f5
2026-05-28 09:42:28 +10:00
Martin Weinelt
1cf127e528
workflows: migrate from app-id to client-id
...
See https://github.com/actions/create-github-app-token/releases/tag/v3.1.0 .
2026-05-26 03:06:17 +02:00
Wolfgang Walther
5439176950
workflows/periodic-merge: update haskell-updates PR's base branch
...
This gives us better UI in the PR by hiding the commits that are already
on the base branch (mostly staging) after the periodic merge. Without
this, the PR has 100s of commits listed after a few days.
2026-05-25 00:02:51 +02:00
Wolfgang Walther
fe5cea9c90
workflows/periodic-merge: allow testing in forks
...
Manually dispatching in your fork should still trigger the workflow to
test.
2026-05-24 19:00:02 +02:00
yaya
41a5348c15
.github: Add release-26.05 CI config
2026-05-24 14:51:41 +02:00
Michael Daniels
092416be16
github/workflows: build nixos manual on PRs targeting staging-nixos ( #509875 )
2026-05-17 21:15:21 +00:00
Michael Daniels
6acad97b9c
ci/github-script: update npm versions ( #520661 )
2026-05-17 18:47:56 +00:00
Michael Daniels
8a89d7a286
ci/github-script: update npm versions
2026-05-17 14:41:57 -04:00
Michael Daniels
f572465c7a
workflows/pull-request-target: don't try to use secrets in pull_request context on Dependabot PRs
...
Secrets can't be accessed on dependabot PRs (https://github.com/dependabot/dependabot-core/issues/3253#issuecomment-852541544 ), so don't try.
(This should be the only change needed, as all other uses of secrets seem to
be conditioned on pull_request not being the current event.)
Fixes (e.g.) https://github.com/NixOS/nixpkgs/actions/runs/25553044633/job/75065769199?pr=518033
2026-05-15 20:32:58 -04:00
Michael Daniels
21211019cf
.github: Bump cachix/cachix-action from 1eb2ef646ac0255473d23a5907ad7b04ce94065c to 5f2d7c5294214f71b873db4b969586b980625e71 ( #520405 )
2026-05-15 23:21:22 +00:00
Michael Daniels
aa7cf0cd79
.github: Bump actions/create-github-app-token from 3.1.1 to 3.2.0 ( #520404 )
2026-05-15 22:21:01 +00:00
dependabot[bot]
40120a3150
.github: Bump korthout/backport-action from 4.5.1 to 4.5.2
...
Bumps [korthout/backport-action](https://github.com/korthout/backport-action ) from 4.5.1 to 4.5.2.
- [Release notes](https://github.com/korthout/backport-action/releases )
- [Commits](bf97bcfb53...6606540695 )
---
updated-dependencies:
- dependency-name: korthout/backport-action
dependency-version: 4.5.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-15 11:25:52 +00:00
dependabot[bot]
5d15d396db
.github: Bump cachix/cachix-action
...
Bumps [cachix/cachix-action](https://github.com/cachix/cachix-action ) from 1eb2ef646ac0255473d23a5907ad7b04ce94065c to 5f2d7c5294214f71b873db4b969586b980625e71.
- [Release notes](https://github.com/cachix/cachix-action/releases )
- [Changelog](https://github.com/cachix/cachix-action/blob/master/RELEASE.md )
- [Commits](1eb2ef646a...5f2d7c5294 )
---
updated-dependencies:
- dependency-name: cachix/cachix-action
dependency-version: 5f2d7c5294214f71b873db4b969586b980625e71
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-15 11:25:48 +00:00
dependabot[bot]
8a91364b57
.github: Bump actions/create-github-app-token from 3.1.1 to 3.2.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md )
- [Commits](1b10c78c78...bcd2ba4921 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-15 11:25:37 +00:00
yaya
d6dbfa193f
workflows/periodic-merges: integrate with staging-26.05
...
For now this uses `master` as root before branch-off.
2026-05-11 10:49:35 +02:00
Michael Daniels
da5ad661ba
.github: Bump actions/labeler from 6.0.1 to 6.1.0 ( #518033 )
2026-05-10 19:57:52 +00:00
Matt Sturgeon
b4772dcc67
workflows/backport: Label failed backports ( #517744 )
2026-05-10 10:05:07 +00:00
Michael Daniels
68c93c8ef2
.github: Bump korthout/backport-action from 4.5.0 to 4.5.1 ( #518034 )
2026-05-08 18:19:37 +00:00
dependabot[bot]
04e886c586
.github: Bump korthout/backport-action from 4.5.0 to 4.5.1
...
Bumps [korthout/backport-action](https://github.com/korthout/backport-action ) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/korthout/backport-action/releases )
- [Commits](7c3f6cd584...bf97bcfb53 )
---
updated-dependencies:
- dependency-name: korthout/backport-action
dependency-version: 4.5.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-08 11:27:34 +00:00
dependabot[bot]
79a640a7f1
.github: Bump actions/labeler from 6.0.1 to 6.1.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.0.1 to 6.1.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](634933edcd...f27b608878 )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-08 11:27:27 +00:00
dependabot[bot]
0b995b605e
.github: Bump cachix/install-nix-action from 31.10.5 to 31.10.6
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 31.10.5 to 31.10.6.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md )
- [Commits](ab739621df...8aa03977d8 )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-version: 31.10.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-08 11:27:24 +00:00
Samuel Dionne-Riel
afb1bec526
workflows/backport: Label failed backports
...
The intent behind this new label is to allow filtering on the label,
which can then allow Nixpkgs contributors to *act* on such failures.
The label **must** be removed *only* when a PR was then successfully
made, or the change has been verified to not need a backport.
Removing the label is intended to make the list of PRs with the label
actionable.
The following search query could be used to ensure no security changes
that were marked for being backported are left behind:
- https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+label%3A%221.severity%3A+security%22+label%3A%228.has%3A+failed+backport%22+
(Obviously not right now. The label does not exist and isn't used.)
2026-05-07 12:05:25 -04:00
Michael Daniels
1c3e149546
Reapply {ci,workflows}: allow multiple blocking reviews"
...
A couple of bugfixes, but the problem was that the apps weren't installed.
2026-05-03 18:17:03 -04:00
Michael Daniels
cd2e5a371b
Revert "{ci,workflows}: allow multiple blocking reviews"
2026-05-03 13:21:39 -04:00
Michael Daniels
636fc13366
{ci,workflows}: allow multiple blocking reviews
2026-05-02 18:09:26 -04:00
dependabot[bot]
e745785f80
.github: Bump korthout/backport-action from 4.4.0 to 4.5.0
...
Bumps [korthout/backport-action](https://github.com/korthout/backport-action ) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/korthout/backport-action/releases )
- [Commits](ad30f01dbe...7c3f6cd584 )
---
updated-dependencies:
- dependency-name: korthout/backport-action
dependency-version: 4.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-01 13:06:17 +00:00
Michael Daniels
f8b81cd1c9
.github: Bump cachix/install-nix-action from 31.10.4 to 31.10.5 ( #513059 )
2026-04-25 00:17:53 +00:00
dependabot[bot]
9c623775f2
.github: Bump korthout/backport-action from 4.3.0 to 4.4.0
...
Bumps [korthout/backport-action](https://github.com/korthout/backport-action ) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/korthout/backport-action/releases )
- [Commits](3c06f323a5...ad30f01dbe )
---
updated-dependencies:
- dependency-name: korthout/backport-action
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-24 11:23:19 +00:00
dependabot[bot]
416db884b3
.github: Bump cachix/install-nix-action from 31.10.4 to 31.10.5
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 31.10.4 to 31.10.5.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md )
- [Commits](616559265b...ab739621df )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-version: 31.10.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-24 11:23:13 +00:00