v2.5.2
Native flake checks now declare commit-fetched consumer repositories as shallow when evaluating the pull-request or merge-group base. This fixes the v2.5.1 behavior where Nix rejected the base URL and conservatively rebuilt every check.
The URL remains pinned to a validated full commit ID and retains submodule evaluation. Exact derivation-path equality remains the only skip condition; unavailable history and failed base evaluation still rebuild current checks.
Validation passed locally and in pull-request and merge-group CI: 74 regression tests, a real shallow-repository Nix comparison covering equal and changed derivations, workflow lint and security checks, and CodeQL.