build(deps): bump the github-actions group with 4 updates

[dependabot]

Bumps the github-actions group with 4 updates: actions/checkout, cachix/install-nix-action, cachix/cachix-action and actions/create-github-app-token.

Updates actions/checkout from 4 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248
• Persist creds to a separate file by @​ericsciple in actions/checkout#2286
• v6-beta by @​ericsciple in actions/checkout#2298
• update readme/changelog for v6 by @​ericsciple in actions/checkout#2311

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

• Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226
• Prepare v5.0.0 release by @​salmanmkc in actions/checkout#2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

• Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

• docs: update README.md by @​motss in actions/checkout#1971
• Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
• Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

• Persist creds to a separate file by @​ericsciple in actions/checkout#2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

• Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

• Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

• docs: update README.md by @​motss in actions/checkout#1971
• Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
• Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
• Update README.md by @​nebuk89 in actions/checkout#2194
• Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
• Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

• url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
• Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

• Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
• Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
• Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
• Check out other refs/* by commit by @​orhantoy in actions/checkout#1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in actions/checkout#1776

v4.1.6

• Check platform to set archive extension appropriately by @​cory-miller in actions/checkout#1732

... (truncated)

Commits

• de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
• 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
• 8e8c483 Clarify v6 README (#2328)
• 033fa0d Add worktree support for persist-credentials includeIf (#2327)
• c2d88d3 Update all references from v5 and v4 to v6 (#2314)
• 1af3b93 update readme/changelog for v6 (#2311)
• 71cf226 v6-beta (#2298)
• 069c695 Persist creds to a separate file (#2286)
• ff7abcd Update README to include Node.js 24 support details and requirements (#2248)
• 08c6903 Prepare v5.0.0 release (#2238)
• Additional commits viewable in compare view

Updates cachix/install-nix-action from 30 to 31

Release notes

Sourced from cachix/install-nix-action's releases.

v31

Starting with v31, this action will use semantic versioning for releases. Major tags, like v31, will be bumped to point to the latest minor/patch release. This is in line with how most GitHub actions manage releases.

What's Changed

• nix: 2.26.3 -> 2.28.2 by @​Mic92 in cachix/install-nix-action#232

• nix: 2.24.9 -> 2.25.2 by @​Mic92 in cachix/install-nix-action#218

• ci: fix latest installer tests by @​sandydoo in cachix/install-nix-action#220

• ci: add ubuntu-24.04-arm to matrix by @​msgilligan in cachix/install-nix-action#221

• nix: 2.25.2 -> 2.26.2 by @​Mic92 in cachix/install-nix-action#226

• nix: 2.26.2 -> 2.26.3 by @​sandydoo in cachix/install-nix-action#228

• feat: Pin actions to hashes by @​l0b0 in cachix/install-nix-action#201

• chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @​dependabot in cachix/install-nix-action#234

• docs: document how to provide AWS credentials to the nix-daemon by @​sandydoo in cachix/install-nix-action#235

• nix: 2.28.2 -> 2.28.3 by @​Mic92 in cachix/install-nix-action#236

• nix: 2.28.3 -> 2.29.0 by @​Mic92 in cachix/install-nix-action#239 Release notes: https://nix.dev/manual/nix/latest/release-notes/rl-2.29

• Automate nix updates in CI by @​Mic92 in cachix/install-nix-action#241

• nix: 2.29.0 -> 2.29.1 by @​github-actions in cachix/install-nix-action#243 [SECURITY] https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017

• nix: 2.29.1 -> 2.30.0 by @​github-actions in cachix/install-nix-action#244 Release notes: https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html

• nix: 2.30.0 -> 2.30.1 by @​xokdvium in cachix/install-nix-action#245 [SECURITY] Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. GHSA-qc7j-jgf3-qmhg

• docs: add example for nix develop by @​jennydaman in cachix/install-nix-action#248

• nix: 2.30.2 -> 2.31.0 by @​github-actions[bot] in cachix/install-nix-action#250 Release notes: https://discourse.nixos.org/t/nix-2-31-0-released/68465

• nix: 2.31.0 -> 2.31.1 by @​github-actions[bot] in cachix/install-nix-action#253

• nix: 2.31.1 -> 2.31.2 by @​github-actions[bot] in cachix/install-nix-action#256

• feat: set up the environment based on the installer shell scripts by @​sandydoo in cachix/install-nix-action#251 Adds the bin directory from the user's profile to $PATH. Configures the following environment variables:

  • NIX_PROFILES
  • NIX_SSL_CERT_FILE (if not set)

• nix: 2.31.2 -> 2.32.0 by @​github-actions[bot] in cachix/install-nix-action#257 Release notes: https://discourse.nixos.org/t/nix-2-32-0-released/70528

• nix: 2.32.0 -> 2.32.1 by @​github-actions[bot] in cachix/install-nix-action#258

• nix: 2.32.1 -> 2.32.2 by @​github-actions[bot] in cachix/install-nix-action#259

• nix: 2.32.2 -> 2.32.3 by @​github-actions[bot] in cachix/install-nix-action#260

• nix: 2.32.3 -> 2.32.4 by @​github-actions[bot] in cachix/install-nix-action#261

• nix: 2.32.4 -> 2.33.0 by @​github-actions[bot] in cachix/install-nix-action#264

• nix: 2.33.0 -> 2.33.3 by @​github-actions[bot] in cachix/install-nix-action#266

• nix: 2.33.3 -> 2.34.0 by @​github-actions[bot] in cachix/install-nix-action#267 Release notes: https://discourse.nixos.org/t/nix-2-34-0-released/75818 Rolled back due to reports of issues with cachix-action

Full Changelog: cachix/install-nix-action@v30...v31

Changelog

Sourced from cachix/install-nix-action's changelog.

Release

As of v31, releases of this action follow Semantic Versioning.

Publishing a new release

Publish the release

Draft a new release on GitHub:

• In Choose a tag, create a new tag, like v31.2.1, following semver.
• Click Generate release notes.
• Set as the latest release should be selected automatically.
• Publish release

Update the major tag

The major tag, like v31, allows downstream users to opt-in to automatic non-breaking updates.

This process follows GitHub's own guidelines: https://github.com/actions/toolkit/blob/main/docs/action-versioning.md

Fetch the latest tags

git pull --tags --force

Move the tag

git tag -fa v31

git push origin v31 --force

Update the release notes for the major tag

Find the release on GitHub: https://github.com/cachix/install-nix-action/releases

Edit the release and click Generate release notes. Edit the formatting and publish.

Commits

• 2126ae7 Merge pull request #266 from cachix/create-pull-request/patch
• eb3d7b0 nix: 2.33.0 -> 2.33.3
• 4e002c8 Merge pull request #262 from cachix/dependabot/github_actions/actions/checkout-6
• 65fe369 Merge pull request #263 from cachix/dependabot/github_actions/peter-evans/cre...
• c61d28f Merge pull request #264 from cachix/create-pull-request/patch
• 72e7d40 nix: 2.32.4 -> 2.33.0
• 15a7ab2 chore(deps): bump peter-evans/create-pull-request from 7 to 8
• 523410f chore(deps): bump actions/checkout from 5 to 6
• 7e59789 ci: drop macos-13 runner
• 0b0e072 Merge pull request #261 from cachix/create-pull-request/patch
• Additional commits viewable in compare view

Updates cachix/cachix-action from 15 to 16

Release notes

Sourced from cachix/cachix-action's releases.

v16

What's Changed

• Fall back to os.tmpdir when the daemon socket path becomes too long by @​sandydoo in cachix/cachix-action#209
• Added a small delay to allow post-build hooks to flush through by @​sandydoo in cachix/cachix-action#196
• Upgraded dependencies

Full Changelog: cachix/cachix-action@v15...v16

Commits

• 3ba601f deps: bump devenv
• 74ef2c6 Merge pull request #209 from cachix/socket-fallback
• 005ab3f daemon: fall back to os.tmpdir if the socket path is too long
• 29121a2 ci: migrate from macos-13 to macos-15-intel
• ee79db5 Merge pull request #207 from cachix/dependabot/github_actions/actions/checkout-5
• 88d030f chore(deps): bump actions/checkout from 4 to 5
• 1d49a1c docs: update badge
• a7ae943 dev: enable shellcheck and lint
• 3e77af4 docs: expand dev docs
• d28f02e docs: update more descriptions
• Additional commits viewable in compare view

Updates actions/create-github-app-token from 1 to 2

Release notes

Sourced from actions/create-github-app-token's releases.

v2.0.0

2.0.0 (2025-04-03)

• feat!: remove deprecated inputs (#213) (5cc811b)

BREAKING CHANGES

• Removed deprecated inputs (app_id, private_key, skip_token_revoke) and made app-id and private-key required in the action configuration.

v1.12.0

1.12.0 (2025-03-27)

Features

• permissions (#168) (0e0aa99)

v1.11.7

1.11.7 (2025-03-20)

Bug Fixes

• deps: bump undici from 5.28.4 to 7.5.0 (#214) (a24b46a)

v1.11.6

1.11.6 (2025-03-03)

Bug Fixes

• deps: bump the production-dependencies group with 2 updates (#210) (1ff1dea)

v1.11.5

1.11.5 (2025-02-15)

Bug Fixes

... (truncated)

Commits

• 29824e6 build(release): 2.2.1 [skip ci]
• b212e6a fix(deps): bump the production-dependencies group with 2 updates (#311)
• 8efbf9b ci: create stale workflow (#309)
• 7e473ef build(release): 2.2.0 [skip ci]
• dce3be8 fix(deps): bump p-retry from 6.2.1 to 7.1.0 (#294)
• 5480f43 fix(deps): bump glob from 10.4.5 to 10.5.0 (#305)
• d90aa53 feat: update permission inputs (#296)
• 55e2a4b fix(deps): bump the production-dependencies group with 2 updates (#292)
• cc6f999 ci(test): trigger on merge_group (#308)
• 40fa6b5 build(deps-dev): bump @​sinonjs/fake-timers from 14.0.0 to 15.0.0 (#295)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions