dependabot[bot]
5aef9f3dd5
.github: Bump cachix/install-nix-action from 31.11.2 to 31.11.3
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 31.11.2 to 31.11.3.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md )
- [Commits](448cde739a...75c75c31eb )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-version: 31.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-30 11:24:49 +00:00
dependabot[bot]
38c0a9b489
.github: Bump cachix/install-nix-action from 31.11.1 to 31.11.2
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 31.11.1 to 31.11.2.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md )
- [Commits](13d8dd58da...448cde739a )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-version: 31.11.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-23 11:24:23 +00:00
Ihar Hrachyshka
fb0b1d025b
.github: migrate macos runner to macos-15
...
GitHub is retiring macOS 14 runners on November 2, 2026, with
brownouts already in place.
https://github.com/actions/runner-images/issues/13518
2026-10-22 19:47:52 -04:00
Ryan Lahfa
be40b5a848
lib/tests/strings.sh: accept Nix and Lix error wording ( #574183 )
2026-10-22 01:07:07 +00:00
Matt Sturgeon
fc179fe19c
.github: Bump actions/create-github-app-token from 3.2.0 to 3.3.0 ( #574807 )
2026-10-17 21:26:29 +00:00
Michael Daniels
cd8ae31c3a
.github: Bump actions/download-artifact from 8.0.1 to 8.0.2 ( #574806 )
2026-10-16 23:03:06 +00:00
dependabot[bot]
68ceec67cf
.github: Bump actions/create-github-app-token from 3.2.0 to 3.3.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md )
- [Commits](bcd2ba4921...64ab729a62 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-16 11:24:32 +00:00
dependabot[bot]
83293bb68d
.github: Bump actions/download-artifact from 8.0.1 to 8.0.2
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 8.0.1 to 8.0.2.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](3e5f45b2cf...9000827ccb )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 8.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-16 11:24:22 +00:00
dependabot[bot]
c8da02114f
.github: Bump actions/upload-artifact from 7.0.1 to 7.0.2
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](043fb46d1a...cf430e030d )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-16 11:24:13 +00:00
Raito Bezarius
db996807d1
ci: run the lib tests under Lix
...
The lib tests exercise things like `nix-instantiate` and their error
messages. Therefore, they can regress when the wording is too coupled to
a specific version or implementation.
Given that Lix is already easy to reach out in nixpkgs and
`lib/tests/test-with-nix.nix` is consumed by Lix's own CI, we propose to
run the suite under `pkgs.lix` too.
The default `lib-tests` output stays Nix-only because it is part of the
release tarball closure; `lib-tests-lix` is a separate CI job and not
part of the release tarball closure.
As far as I can tell:
- that extra test takes ~55s on my system under Lix in the sandbox. Over
a faster builder, it takes ~20s.
- this is a new *step* in an existing job, no new checkout, no new
install or whatever, so no extra setup cost.
- the symlink join do not cause rebuild of the nix-unit things and so
on. pkgs.lix is substituted and not rebuilt.
- the existing lib-tests are already doing 2 runs of testWithNix, Lix is
a 3rd.
If this proves to be a problem for CI performance, we can always revert
the long part (fileset) and decrease even further the cost of this
additional minute check.
2026-10-15 02:36:20 +02:00
Michael Daniels
9e37f67efc
ci/github-script/reminders: don't remind on cherry-picks
...
Addresses https://github.com/NixOS/nixpkgs/pull/562912#issuecomment-6101844681
2026-10-11 17:04:34 -04:00
Michael Daniels
148a05c8b7
ci/github-script/{bot,merge,reviewers}: convert to TypeScript
...
Assisted-by: gpt-6.1-sol (Codex, light)
2026-10-03 22:31:08 -04:00
Philip Taron
46ed4a2ccb
ci/github-script: convert more to TypeScript ( #567584 )
2026-10-02 21:02:21 +00:00
Michael Daniels
00954dbca6
ci/github-script: convert more to TypeScript
2026-10-02 16:53:03 -04:00
Matt Sturgeon
e1a8d57ed5
.github: Bump korthout/backport-action from 4.6.1 to 4.7.0 ( #569409 )
2026-10-02 18:24:19 +00:00
Philip Taron
9d1a3338ee
workflows/eval: allow fork PR checkout of ci/pinned.json
...
actions/checkout v7 refuses to check out fork PR commits from
pull_request_target workflows unless allow-unsafe-pr-checkout is set.
The versions job checks out ci/pinned.json at the PR's merge commit,
which matches pull_request.merge_commit_sha (or head.sha) in the event
payload and would be rejected.
Only ci/pinned.json is checked out, without persisted credentials, and
it is read as data by trusted/ci/supportedVersions.nix, so opting in is
safe.
Assisted-by: Claude Code (claude-opus-5-5)
2026-10-02 05:38:33 -07:00
Philip Taron
6f71237561
workflows/backport: allow fork PR checkout with actions/checkout v7
...
actions/checkout v7 refuses to check out fork PR commits from
pull_request_target workflows unless allow-unsafe-pr-checkout is set.
The backport job checks out the merged PR's head to cherry-pick it,
which broke after #545205 and led to the revert in #546423 .
The PR is already merged and its commits are only handled by git,
never executed, so opting in is safe.
Assisted-by: Claude Code (claude-opus-5-5)
2026-10-02 05:38:33 -07:00
dependabot[bot]
8c09b93f27
.github: Bump actions/checkout from 6.0.3 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](df4cb1c069...3d3c42e5aa )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-02 05:38:32 -07:00
dependabot[bot]
754c76eccc
.github: Bump actions/checkout from 6.0.3 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](df4cb1c069...9c091bb21b )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-02 05:38:32 -07:00
dependabot[bot]
8a0a2750fc
.github: Bump korthout/backport-action from 4.6.1 to 4.7.0
...
Bumps [korthout/backport-action](https://github.com/korthout/backport-action ) from 4.6.1 to 4.7.0.
- [Release notes](https://github.com/korthout/backport-action/releases )
- [Commits](6b65649031...8560fb503c )
---
updated-dependencies:
- dependency-name: korthout/backport-action
dependency-version: 4.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-02 11:25:24 +00:00
Michael Daniels
32675f4b92
ci/github-script: convert various to TypeScript
2026-09-26 12:48:43 -04:00
Michael Daniels
fb37e8e8bd
workflows/*: use self-repository syntax
2026-09-25 21:01:39 -04:00
Michael Daniels
b7a3adaa10
ci/github-script/commits: convert to TypeScript ( #559961 )
2026-09-26 00:21:56 +00:00
dependabot[bot]
cdb0fb82ce
.github: Bump korthout/backport-action from 4.6.0 to 4.6.1
...
Bumps [korthout/backport-action](https://github.com/korthout/backport-action ) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/korthout/backport-action/releases )
- [Commits](2e830a1d0b...6b65649031 )
---
updated-dependencies:
- dependency-name: korthout/backport-action
dependency-version: 4.6.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-25 11:23:57 +00:00
Matt Sturgeon
27ed56e84d
ci: point documentation PRs at the styleguide ( #562912 )
2026-09-22 13:02:06 +00:00
Johannes Kirschbauer
40bb73107d
ci: post a reminder for updated paths
...
docs are the first example
Assisted-by: Oh My Pi (Claude Opus 5)
2026-09-22 14:41:40 +02:00
Michael Daniels
7f822c9dc8
ci/github-script/commits: convert to TypeScript
...
Assisted-by: gpt-5.6-terra (Codex)
2026-09-19 11:33:08 -04:00
Michael Daniels
4a7ddd0795
ci/github-script/manual-file-edits: convert to TypeScript
2026-09-18 19:24:33 -04:00
Michael Daniels
b73c356f8d
workflows/periodic-merge: use correct permissions
2026-09-13 14:22:34 -04:00
Michael Daniels
fa947fe0d2
workflows/periodic-merge.yml: use new issue for failure reporting
...
Previously, #105153 was used.
That is no longer possible because it now has too many (2500+) comments.
2026-09-13 10:58:20 -04:00
Ihar Hrachyshka
887655a786
.github: disable npm ci audit
...
It's currently very slow and often times brings jobs past the 3min
limit. No one is reading these audit reports in ci output, and in slight
chance we care to stay on top of these CVE audit reports from npm, we
should have a dedicated procedure to monitor and bump lock file that
doesn't involve routinely executing it in every job.
2026-09-03 22:57:15 -04:00
Michael Daniels
eb501c45ae
ci/github-script: convert to ES modules
...
ES modules work better with TypeScript than CommonJS modules do.
Assisted-by: GPT 5.6 Luna & Terra (Codex)
2026-08-31 18:09:18 -04:00
Michael Daniels
2d813b7719
ci/supportedBranches.js: move to ci/github-script
...
This way it will be covered by our package.json when we configure ES Modules
in the next commit.
2026-08-31 18:06:11 -04:00
Matt Sturgeon
71094a65c5
ci: Flag mass rebuilds on staging-nixos ( #553786 )
2026-08-28 08:05:36 +00:00
dependabot[bot]
f91f92f75b
.github: Bump cachix/install-nix-action from 31.11.0 to 31.11.1
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 31.11.0 to 31.11.1.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md )
- [Commits](630ae543ea...13d8dd58da )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-version: 31.11.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-21 11:24:22 +00:00
Ihar Hrachyshka
198d0cd473
ci/github-script: add npm scripts
...
Allows running `npm run typecheck` or `npm test`.
2026-08-20 17:33:22 -04:00
Michael Daniels
e27ea4e33d
workflows/check: check github-script types
2026-08-18 18:20:04 -04:00
Michael Daniels
2496d47b76
ci/github-script/check-target-branch: convert to TypeScript
...
Only doing this one for now as a proof-of-concept.
2026-08-10 20:26:01 -04:00
Ihar Hrachyshka
830255b283
.github: avoid full checkout on backport
...
The backport action should work with a sparse tree, so materializing all
files is just wasteful.
Since total time allocated for backport jobs is just 3 mins, sometimes a
slow worktree checkout consumes a good chunk of it and pushes the job to
timeout, resulting in missed backport. See for example:
https://github.com/NixOS/nixpkgs/actions/runs/30587897004/job/91023481883
2026-07-30 20:03:42 -04:00
Philip Taron
efa8264ee0
Revert ".github: Bump actions/checkout from 6.0.3 to 7.0.1"
2026-07-27 13:23:38 -07:00
Philip Taron
4b0320094b
.github: Bump actions/checkout from 6.0.3 to 7.0.1 ( #545205 )
2026-07-27 20:04:22 +00:00
dependabot[bot]
121838ea38
.github: Bump actions/labeler from 6.2.0 to 7.0.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.2.0 to 7.0.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](b8dd2d9be0...bf12e9b00b )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 11:22:52 +00:00
dependabot[bot]
7079e863e7
.github: Bump actions/checkout from 6.0.3 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](df4cb1c069...3d3c42e5aa )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 11:22:46 +00:00
Matt Sturgeon
e4a4855697
ci/pinned: bump nixpkgs ( #544224 )
2026-07-22 13:20:37 +00:00
Michael Daniels
4a45de05bd
workflows: appease zizmor by installing npm pkgs from lockfile
2026-07-21 19:30:53 -04:00
klea
9322705190
workflows: Node 24 is now the default
...
https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Says they updated the migration date to 2026-06-16.
2026-07-20 09:10:13 +00:00
dependabot[bot]
942be243bd
.github: Bump cachix/install-nix-action from 31.10.7 to 31.11.0
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 31.10.7 to 31.11.0.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md )
- [Commits](a49548c11d...630ae543ea )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-version: 31.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-17 11:22:54 +00:00
Michael Daniels
1402b5012c
workflows/{check,lint}: prevent git timeouts
2026-07-11 18:58:40 -04:00
Michael Daniels
ffc7f8ce99
.github: Bump cachix/install-nix-action from 31.10.6 to 31.10.7 ( #540295 )
2026-07-11 00:24:46 +00:00
dependabot[bot]
58b83392e9
.github: Bump actions/labeler from 6.1.0 to 6.2.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](f27b608878...b8dd2d9be0 )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 11:22:52 +00:00