Skip to content

build(deps): bump the updates group with 3 updates - #6

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/updates-e0ee378138
Closed

build(deps): bump the updates group with 3 updates#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/updates-e0ee378138

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the updates group with 3 updates: actions/checkout, cachix/install-nix-action and cachix/cachix-action.

Updates actions/checkout from 4 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates cachix/install-nix-action from 27 to 31

Release notes

Sourced from cachix/install-nix-action's releases.

v31

Starting with v31, this action will use semantic versioning for releases. Major tags, like v31, will be bumped to point to the latest minor/patch release. This is in line with how most GitHub actions manage releases.

What's Changed

... (truncated)

Changelog

Sourced from cachix/install-nix-action's changelog.

Release

As of v31, releases of this action follow Semantic Versioning.

Publishing a new release

Publish the release

Draft a new release on GitHub:

  • In Choose a tag, create a new tag, like v31.2.1, following semver.
  • Click Generate release notes.
  • Set as the latest release should be selected automatically.
  • Publish release

Update the major tag

The major tag, like v31, allows downstream users to opt-in to automatic non-breaking updates.

This process follows GitHub's own guidelines: https://github.com/actions/toolkit/blob/main/docs/action-versioning.md

Fetch the latest tags
git pull --tags --force
Move the tag
git tag -fa v31

git push origin v31 --force

Update the release notes for the major tag

Find the release on GitHub: https://github.com/cachix/install-nix-action/releases

Edit the release and click Generate release notes. Edit the formatting and publish.

Commits
  • 13d8dd5 fix(ci): skip latest installer on x86_64-darwin
  • 875018f Merge pull request #281 from cachix/create-pull-request/patch
  • 6624a11 nix: 2.35.1 -> 2.35.2
  • 630ae54 Merge pull request #279 from cachix/create-pull-request/patch
  • 0247906 nix: 2.34.8 -> 2.35.1
  • a49548c Merge pull request #278 from cachix/create-pull-request/patch
  • 147e749 nix: 2.34.7 -> 2.34.8
  • 23cf0fe Merge pull request #276 from cachix/dependabot/github_actions/actions/checkout-7
  • 8bdfc70 chore(deps): bump actions/checkout from 6 to 7
  • 8aa0397 Merge pull request #275 from cachix/create-pull-request/patch
  • Additional commits viewable in compare view

Updates cachix/cachix-action from 15 to 17

Release notes

Sourced from cachix/cachix-action's releases.

v17

What's Changed

Breaking changes

Bug fixes

  • Harden the post-build daemon hook against failing. Caching issues should not prevent builds from continuing.
  • Await main functions so that errors bubble up properly.
  • Updated dependencies.

Full Changelog: cachix/cachix-action@v16...v17

v16

What's Changed

Full Changelog: cachix/cachix-action@v15...v16

Changelog

Sourced from cachix/cachix-action's changelog.

Release

  1. Create and push a new tag:

    git tag v17
git push origin v17

  2. Wait for CI to pass.

  3. Create a release for the new tag.

  4. Move the major version tag to the latest release:

    git tag -fa v17
git push origin v17 --force
Commits
  • 38b0826 dev: cleanup tests and dev files
  • 0fe030c dist
  • 792dafc deps: bump dependencies
  • b690244 ci: improve Nix compatibility test coverage
  • f495f3f Merge pull request #217 from cachix/dependabot/github_actions/actions/checkout-7
  • 9ee3c77 chore(deps): bump actions/checkout from 6 to 7
  • 5f2d7c5 fix: await main functions
  • 4ee5453 rebuilt dist
  • 9f82c7e fix: ensure that the post-build hook never fails
  • a593539 ci: add a workflow to auto-bump version in README
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 18, 2026
@coderabbitai

coderabbitai Bot commented Sep 18, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 9c9b3880-7bca-4017-91a6-1b17126e7fde

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @zippy
build(deps): bump the updates group with 3 updates
656778a 
Bumps the updates group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [cachix/install-nix-action](https://github.com/cachix/install-nix-action) and [cachix/cachix-action](https://github.com/cachix/cachix-action).


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

Updates `cachix/install-nix-action` from 27 to 31
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md)
- [Commits](cachix/install-nix-action@v27...v31)

Updates `cachix/cachix-action` from 15 to 17
- [Release notes](https://github.com/cachix/cachix-action/releases)
- [Changelog](https://github.com/cachix/cachix-action/blob/master/RELEASE.md)
- [Commits](cachix/cachix-action@v15...v17)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: updates
- dependency-name: cachix/install-nix-action
  dependency-version: '31'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: updates
- dependency-name: cachix/cachix-action
  dependency-version: '17'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@zippy
zippy force-pushed the dependabot/github_actions/updates-e0ee378138 branch from eb9a2c3 to 656778a Compare September 18, 2026 19:05
@zippy
zippy requested a review from a team as a code owner September 18, 2026 19:05
@cocogitto-bot

cocogitto-bot Bot commented Sep 18, 2026

Copy link
Copy Markdown

✔️ 656778a - Conventional commits check succeeded.

@zippy zippy mentioned this pull request Sep 18, 2026
Merged
2 tasks
@zippy

zippy commented Sep 18, 2026

Copy link
Copy Markdown
Member

superceeded by #12

@zippy zippy closed this Sep 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/github_actions/updates-e0ee378138 branch September 18, 2026 21:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@zippy zippy zippy approved these changes
@mattyg mattyg mattyg approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@zippy @mattyg