chore(deps): cachix/install-nix-action ^ v31.10.6#1285
Merged
Conversation
andrinoff
approved these changes
May 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What?
This PR contains the following updates:
v30→v31Release Notes
cachix/install-nix-action (cachix/install-nix-action)
v31.10.6Compare Source
What's Changed
GHSA-vh5x-56v6-4368: Fixes a coroutine stack-to-heap overflow via unbounded recursion in the NAR directory parser. Severity: High.
GHSA-gr92-w2r5-qw5p: Fixes an absolute path traversal vulnerability when unpacking archives to disk. Severity: Moderate.
Full Changelog: cachix/install-nix-action@v31...v31.10.6
v31.10.5Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.10.5
v31.10.4Compare Source
What's Changed
[SECURITY] Fixes a root privilege escalation vulnerability via sandbox escape GHSA-g3g9-5vj6-r3gj
Full Changelog: cachix/install-nix-action@v31.10.3...v31.10.4
v31.10.3Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.10.3
v31.10.2Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.10.2
v31.10.1Compare Source
What's Changed
Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load authentication keys configured by
cachix-action.Full Changelog: cachix/install-nix-action@v31.10.0...v31.10.1
v31.10.0Compare Source
What's Changed
Release notes: https://discourse.nixos.org/t/nix-2-34-0-released/75818
trusted-user+ a client-sidenetrc-file), breaks authentication with private caches that rely onnetrcfiles. This regression affectscachix/cachix-action.UPD: 2.34.1 has been released with a patch for the authentication issue
Full Changelog: cachix/install-nix-action@v31.9.1...v31.10.0
v31.9.1Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.9.1
v31.9.0Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.8.4...v31.9.0
v31.8.4Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.8.3...v31.8.4
v31.8.3Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.8.2...v31.8.3
v31.8.2Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.8.1...v31.8.2
v31.8.1Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.8.1
v31.8.0Compare Source
What's Changed
Release notes: https://discourse.nixos.org/t/nix-2-32-0-released/70528
Full Changelog: cachix/install-nix-action@v31.7.0...v31.8.0
v31.7.0Compare Source
What's Changed
feat: set up the environment based on the installer shell scripts by @sandydoo in #251
Configures the following environment variables:
NIX_PROFILESNIX_SSL_CERT_FILE(if not set)Adds the bin directory from the user's profile to
$PATH.Full Changelog: cachix/install-nix-action@v31.6.2...v31.7.0
v31.6.2Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.6.2
v31.6.1Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.6.1
v31.6.0Compare Source
What's Changed
nix developby @jennydaman in #248Release notes: https://discourse.nixos.org/t/nix-2-31-0-released/68465
New Contributors
Full Changelog: cachix/install-nix-action@v31.5.2...v31.6.0
v31.5.2Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31...v31.5.2
v31.5.1Compare Source
What's Changed
[SECURITY] Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. GHSA-qc7j-jgf3-qmhg
New Contributors
Full Changelog: cachix/install-nix-action@v31.5.0...v31.5.1
v31.5.0Compare Source
What's Changed
Release notes: https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html
Full Changelog: cachix/install-nix-action@v31.4.1...v31.5.0
v31.4.1Compare Source
What's Changed
[SECURITY] https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017
New Contributors
Full Changelog: cachix/install-nix-action@v31.4.0...v31.4.1
v31.4.0Compare Source
What's Changed
Release notes: https://nix.dev/manual/nix/2.29/release-notes/rl-2.29
Full Changelog: cachix/install-nix-action@v31.3.0...v31.4.0
v31.3.0Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.2.0...v31.3.0
v31.2.0Compare Source
What's Changed
Full Changelog: cachix/install-nix-action@v31.1.0...v31.2.0
v31.1.0Compare Source
What's Changed
--darwin-use-unencrypted-nix-store-volumeflag by @sandydoo in #230Full Changelog: cachix/install-nix-action@v31.0.0...v31.1.0
v31.0.0Compare Source
What's Changed
New Contributors
Full Changelog: cachix/install-nix-action@v30...v31.0.0
v31Compare Source
Starting with v31, this action will use semantic versioning for releases.
Major tags, like v31, will be bumped to point to the latest minor/patch release.
This is in line with how most GitHub actions manage releases.
What's Changed
nix: 2.26.3 -> 2.28.2 by @Mic92 in #232
nix: 2.24.9 -> 2.25.2 by @Mic92 in #218
ci: fix latest installer tests by @sandydoo in #220
ci: add ubuntu-24.04-arm to matrix by @msgilligan in #221
nix: 2.25.2 -> 2.26.2 by @Mic92 in #226
nix: 2.26.2 -> 2.26.3 by @sandydoo in #228
feat: Pin actions to hashes by @l0b0 in #201
chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot in #234
docs: document how to provide AWS credentials to the nix-daemon by @sandydoo in #235
nix: 2.28.2 -> 2.28.3 by @Mic92 in #236
nix: 2.28.3 -> 2.29.0 by @Mic92 in #239
Release notes: https://nix.dev/manual/nix/latest/release-notes/rl-2.29
Automate nix updates in CI by @Mic92 in #241
nix: 2.29.0 -> 2.29.1 by @github-actions in #243
[SECURITY] https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017
nix: 2.29.1 -> 2.30.0 by @github-actions in #244
Release notes: https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html
nix: 2.30.0 -> 2.30.1 by @xokdvium in #245
[SECURITY] Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. GHSA-qc7j-jgf3-qmhg
docs: add example for
nix developby @jennydaman in #248nix: 2.30.2 -> 2.31.0 by @github-actions[bot] in #250
Release notes: https://discourse.nixos.org/t/nix-2-31-0-released/68465
nix: 2.31.0 -> 2.31.1 by @github-actions[bot] in #253
nix: 2.31.1 -> 2.31.2 by @github-actions[bot] in #256
feat: set up the environment based on the installer shell scripts by @sandydoo in #251
Adds the bin directory from the user's profile to
$PATH.Configures the following environment variables:
NIX_PROFILESNIX_SSL_CERT_FILE(if not set)nix: 2.31.2 -> 2.32.0 by @github-actions[bot] in #257
Release notes: https://discourse.nixos.org/t/nix-2-32-0-released/70528
nix: 2.32.0 -> 2.32.1 by @github-actions[bot] in #258
nix: 2.32.1 -> 2.32.2 by @github-actions[bot] in #259
nix: 2.32.2 -> 2.32.3 by @github-actions[bot] in #260
nix: 2.32.3 -> 2.32.4 by @github-actions[bot] in #261
nix: 2.32.4 -> 2.33.0 by @github-actions[bot] in #264
nix: 2.33.0 -> 2.33.3 by @github-actions[bot] in #266
nix: 2.33.3 -> 2.34.0 by @github-actions[bot] in #267Rolled back due to reports of issues with cachix-actionRelease notes: https://discourse.nixos.org/t/nix-2-34-0-released/75818
nix: 2.34.0 -> 2.34.1 by @github-actions[bot] in #269
Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load authentication keys configured by
cachix-action.nix: 2.34.1 -> 2.34.2 by @github-actions[bot] in #270
nix: 2.34.2 -> 2.34.4 by @github-actions[bot] in #271
nix: 2.34.4 -> 2.34.5 by @github-actions[bot] in #273
CVE-2026-39860 Fixes a root privilege escalation vulnerability via sandbox escape. Severity: Critical.
nix: 2.34.5 -> 2.34.6 by @github-actions[bot] in #274
nix: 2.34.6 -> 2.34.7 by @github-actions[bot] in #275
GHSA-vh5x-56v6-4368: Fixes a coroutine stack-to-heap overflow via unbounded recursion in the NAR directory parser. Severity: High.
GHSA-gr92-w2r5-qw5p: Fixes an absolute path traversal vulnerability when unpacking archives to disk. Severity: Moderate.
Full Changelog: cachix/install-nix-action@v30...v31
Why?
Automated dependency update via Renovate.
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.