Skip to content

chore(deps): bump cachix/install-nix-action from 27 to 31#33

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/cachix/install-nix-action-31
Open

chore(deps): bump cachix/install-nix-action from 27 to 31#33
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/cachix/install-nix-action-31

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 14, 2026 •
edited
Loading

Bumps cachix/install-nix-action from 27 to 31.

Release notes

Sourced from cachix/install-nix-action's releases.

v31

Starting with v31, this action will use semantic versioning for releases. Major tags, like v31, will be bumped to point to the latest minor/patch release. This is in line with how most GitHub actions manage releases.

What's Changed

... (truncated)

Changelog

Sourced from cachix/install-nix-action's changelog.

Release

As of v31, releases of this action follow Semantic Versioning.

Publishing a new release

Publish the release

Draft a new release on GitHub:

  • In Choose a tag, create a new tag, like v31.2.1, following semver.
  • Click Generate release notes.
  • Set as the latest release should be selected automatically.
  • Publish release

Update the major tag

The major tag, like v31, allows downstream users to opt-in to automatic non-breaking updates.

This process follows GitHub's own guidelines: https://github.com/actions/toolkit/blob/main/docs/action-versioning.md

Fetch the latest tags
git pull --tags --force
Move the tag
git tag -fa v31

git push origin v31 --force

Update the release notes for the major tag

Find the release on GitHub: https://github.com/cachix/install-nix-action/releases

Edit the release and click Generate release notes. Edit the formatting and publish.

Commits
  • 51f3067 Revert "ci: use 25.11 for channel tests"
  • 15118c1 ci: use 25.11 for channel tests
  • e1ac057 Merge pull request #270 from cachix/create-pull-request/patch
  • d181b96 nix: 2.34.1 -> 2.34.2
  • 1ca7d21 Merge pull request #269 from cachix/create-pull-request/patch
  • b613734 nix: 2.34.0 -> 2.34.1
  • 19effe9 Merge pull request #267 from cachix/create-pull-request/patch
  • d3f3b99 nix: 2.33.3 -> 2.34.0
  • 2126ae7 Merge pull request #266 from cachix/create-pull-request/patch
  • eb3d7b0 nix: 2.33.0 -> 2.33.3
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 14, 2026
@dependabot
chore(deps): bump cachix/install-nix-action from 27 to 31
f11b32a 
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 27 to 31.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md)
- [Commits](cachix/install-nix-action@v27...v31)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-version: '31'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/cachix/install-nix-action-31 branch from 97912b1 to f11b32a Compare March 27, 2026 04:49
@arkanaai
Copy link
Copy Markdown

arkanaai bot commented Mar 27, 2026

🔍 Arkana PR Review — ArkLabsHQ/enclave#33

Summary: Dependabot bump of cachix/install-nix-action from v27 → v31 across two CI workflows (integration-test.yml, release.yml).

Changes: Minimal — two line changes, version tag only. No config changes to nix_path or extra_nix_config.

Assessment:

  • ✅ Safe upgrade — v31 brings Nix 2.27→2.34.2 with several security patches (privilege escalation fix in 2.29.1, macOS root execution fix in 2.30.1)
  • ✅ No breaking changes to action inputs/outputs between v27 and v31
  • ✅ Semantic versioning now used by install-nix-action starting at v31 — future minor/patch updates auto-included under the v31 tag
  • ⚠️ Minor note: The jump skips v28-v30 entirely. The release notes mention a rollback of Nix 2.34.0 due to cachix-action auth key issues, but 2.34.1 fixed that. Current v31 pins to 2.34.2 which is stable.

Verdict: Clean dependency bump with security improvements. No concerns.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants