Prefer newer Nix action for better cache (#13)

* Prefer newer Nix action for better cache

https://discourse.nixos.org/t/the-magic-nix-cache-a-github-action-for-speeding-up-your-nix-workflows/29665

* GitHub Actions does not have purl prefix?

* Looks like this is the PURL

* Required version tag in PURL?

https://github.com/package-url/purl-spec/tree/604c1ae693892f78986d87b2985f81100aba739a#some-purl-examples

* Might be a secret use inside of GitHub

* Drop actionlint with the wrong detection

https://github.com/rhysd/actionlint/blob/557341428508177b0e1059afa7f11ca1c6935426/docs/checks.md#popular-action-inputs-validation-at-with

The popular checks makes wrong detection
I will prefer https://github.com/actions/languageservices/tree/8f2f59092edf10e9c4494dd13db3f497bb8d579b

.github/workflows/ci-dev.yml

@@ -17,28 +17,13 @@ on:
   workflow_dispatch:
 
 jobs:
-  get-version:
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    outputs:
-      current: ${{ steps.current.outputs.current }}
-    steps:
-      - uses: actions/checkout@v3
-      - name: Install nix parser
-        run: curl -L https://github.com/kachick/nix-headbump/releases/download/v0.2.0/nix-headbump_Linux_x86_64.tar.gz | tar xvz -C ./ nix-headbump
-      - id: current
-        run: |
-          current="$(./nix-headbump detect --current)"
-          echo "current=${current}" | tee -a "$GITHUB_OUTPUT"
   tasks:
     runs-on: ubuntu-latest
     timeout-minutes: 30
-    needs: [get-version]
     steps:
       - uses: actions/checkout@v3
-      - uses: cachix/install-nix-action@v22
-        with:
-          nix_path: nixpkgs=https://github.com/NixOS/nixpkgs/archive/${{ needs.get-version.outputs.current }}.tar.gz
+      - uses: DeterminateSystems/nix-installer-action@v4
+      - uses: DeterminateSystems/magic-nix-cache-action@v2
       - run: nix-build
       - name: Log current versions
         run: nix-shell --run 'task versions'

.github/workflows/dependency-review.yml

@@ -22,3 +22,7 @@ jobs:
         with:
           # https://spdx.org/licenses/
           allow-licenses: MIT, BSD-3-Clause, BSD-2-Clause, 0BSD, Unlicense, ISC, Apache-2.0, CC-BY-4.0
+          # The PURL prefix is got from following command
+          # `gh api -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" /repos/kachick/nix-headbump/dependency-graph/compare/87d736b80a8a254bcac003d97e0b84712176b04f...5ba877ff1048d5fedcc6758484623eb67737f0fb`
+          # Not found in https://github.com/package-url/packageurl-js
+          allow-dependencies-licenses: pkg:githubactions/DeterminateSystems/nix-installer-action@4

CONTRIBUTING.md

@@ -19,7 +19,6 @@ task: [build] ..."
 task: [test] go test
 task: [lint] dprint check
 task: [lint] go vet
-task: [lint] actionlint
 PASS
 ok      nix-headbump    0.313s
 

Taskfile.yml

@@ -27,7 +27,6 @@ tasks:
     cmds:
       - dprint check
       - go vet
-      - actionlint
       - goreleaser check
       - nixpkgs-fmt --check ./*.nix
   versions:
@@ -36,5 +35,4 @@ tasks:
       - task --version
       - go version
       - dprint --version
-      - actionlint --version
       - goreleaser --version