From 6e92370df659830da0f21940d1e81502e8ac14c6 Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Thu, 23 Oct 2025 14:05:08 +1000
Subject: [PATCH] modules/shared/community-builder: rotate token

---
 modules/secrets/community-builder.yaml | 13 ++++---------
 modules/shared/community-builder.nix   |  2 +-
 2 files changed, 5 insertions(+), 10 deletions(-)

diff --git a/modules/secrets/community-builder.yaml b/modules/secrets/community-builder.yaml
index f8487eaf2..01e139f54 100644
--- a/modules/secrets/community-builder.yaml
+++ b/modules/secrets/community-builder.yaml
@@ -1,9 +1,5 @@
-community-builder-nix-access-tokens: ENC[AES256_GCM,data:AIMsjuuJ9hG2tDGyY+GjaOh654moBwgNkc/m+GYIm5+YPkyujQ7H/pIlgyTTqgDZniysE1QUm9xJBwwmbUdwghICPsje829sLjUGcZ+xqq7iNoP9/123+XD099pTU1eNKQhhWLpjvnHCRJxv7nbhFuE10OQdJ3SQLA==,iv:ARs8xyXXLFp7KAvHI7y70DINzdVtEtGW0k7DQTFb5EU=,tag:PROuSQIXPKod3ul+QCW5ww==,type:str]
+community-builder-nix-access-tokens: ENC[AES256_GCM,data:I65MWCDXx9EAVpQDOrtoyZQU74KTPLBonSpkGGon/6P924fGT2jC5O8scheKdqsLVe7NDsKByvLvGfHTomde9z4RdHZBpSXJvlCAfTUboRqp8qVKBj4VHv184vKFG3Ii4nbtpoGrWjsuY1W4EEry6k5ODYjmoxen/Q==,iv:wQAUOFhA2Buv/Ii7QcieU8+Vqke3vI63aK/ID/naGq4=,tag:wbk1LSh2wZ2zSZXO0QOslA==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
         - recipient: age17jtyn2y4fpey6q7ers9gtnh4580xj89zdjuew9nqhxywmsaw94fs5udupc
           enc: |
@@ -77,8 +73,7 @@ sops:
             cGxZYklteUg5dHVnTmNUOEpGQUtkSncKp+iUiNmHlDAxco5U57UQXDrBavIpslvB
             s0eYBh586A9PKaIWmmQo4T8YM61MIFrG4za+uiIP2th+WHjGGH9a5Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-19T00:27:32Z"
-    mac: ENC[AES256_GCM,data:hKJQ1ef7CyPOD8xd/PCqOpGSBYpSpdW37P9nOXeKQEHE58vCaiQyy5RziUIGKUI7KIcxHwa1agn/yBdaWigSWihImH2WlRMQnQJAQoSV2Tc8sDhDFFckJEDqh0Pm0g+HcjL/59J4G4QJuRgVdxNBeRT472gQN/u/Lw1CE2s6ONQ=,iv:IU2cLIfCT6DuViUTFH8EnvaWA4ok96CzXs86DRsonqM=,tag:T/+HmZLWvYNkR3u2jSWM9Q==,type:str]
-    pgp: []
+    lastmodified: "2025-10-23T04:02:45Z"
+    mac: ENC[AES256_GCM,data:GpOf//1h7tlRDB3Ulm10YrJ1WJEvliMlNcHlkaxecMmep5N41v9CbSEtzL6CwQhU0nn8Mvw1iO9maMigb3jQaaNkMXrgskU35q1zynmqWpFB0sQOp8sa/3nmaH+P/jGeLkvBd+K7aUfGojcujz7O51H6PT/4bnGJABaN4nlyKnI=,iv:YDSJItrCdMc6XQ8YSNlINoySYx72hrfObEq9qi+iyQ0=,tag:yHEKmGQKer2jtdULzePH0w==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.9.2
+    version: 3.11.0
diff --git a/modules/shared/community-builder.nix b/modules/shared/community-builder.nix
index 29ecee970..04b1a7b10 100644
--- a/modules/shared/community-builder.nix
+++ b/modules/shared/community-builder.nix
@@ -37,7 +37,7 @@
       mode = "444";
     };
 
-    # fine-grained, no permissions github token, expires 2025-10-29
+    # fine-grained, no permissions github token, expires 2026-10-23
     # from `nix-community-buildbot` (user account, not the github app)
     nix.extraOptions = ''
       !include ${config.sops.secrets.community-builder-nix-access-tokens.path}