[renovate]

This PR contains the following updates:

Package	Type	Update	Change
cachix/install-nix-action	action	minor	v31.9.1 → v31.11.3

---

Release Notes

cachix/install-nix-action

v31.11.3

Compare Source

What's Changed

• nix: 2.35.3 -> 2.35.4 by @​xokdvium in #​283
  Security: Updates the bundled certificates shipped with the installer to remove the compromised eMudhra certificates.

Re-release of 31.11.3, which was tagged incorrectly.

Full Changelog: cachix/install-nix-action@v31.11.2...v31.11.3

v31.11.2

Compare Source

What's Changed

• nix: 2.35.2 -> 2.35.3 by @​github-actions[bot] in #​282
  Security: Fixes a number of vulnerabilities that could be combined to achieve root priviledge escalation.
  See https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547

Full Changelog: cachix/install-nix-action@v31.11.1...v31.11.2

v31.11.1

Compare Source

What's Changed

• nix: 2.35.1 -> 2.35.2 by @​github-actions[bot] in #​281
  Fixes a crash (Assertion '!awake.empty()' failed) that could abort builds.

Full Changelog: cachix/install-nix-action@v31.11.0...v31.11.1

v31.11.0

Compare Source

What's Changed

• nix: 2.34.8 -> 2.35.1 by @​github-actions[bot] in #​279
  Release notes: https://discourse.nixos.org/t/nix-2-35-0-released/78914

Full Changelog: cachix/install-nix-action@v31.10.7...v31.11.0

v31.10.7

Compare Source

What's Changed

• nix: 2.34.7 -> 2.34.8 by @​github-actions[bot] in #​278

Full Changelog: cachix/install-nix-action@v31.10.6...v31.10.7

v31.10.6

Compare Source

What's Changed

• nix: 2.34.6 -> 2.34.7 by @​github-actions[bot] in #​275
  GHSA-vh5x-56v6-4368: Fixes a coroutine stack-to-heap overflow via unbounded recursion in the NAR directory parser. Severity: High.
  GHSA-gr92-w2r5-qw5p: Fixes an absolute path traversal vulnerability when unpacking archives to disk. Severity: Moderate.

Full Changelog: cachix/install-nix-action@v31...v31.10.6

v31.10.5

Compare Source

What's Changed

• nix: 2.34.5 -> 2.34.6 by @​github-actions[bot] in #​274

Full Changelog: cachix/install-nix-action@v31...v31.10.5

v31.10.4

Compare Source

What's Changed

• nix: 2.34.4 -> 2.34.5 by @​github-actions[bot] in #​273
  [SECURITY] Fixes a root privilege escalation vulnerability via sandbox escape GHSA-g3g9-5vj6-r3gj

Full Changelog: cachix/install-nix-action@v31.10.3...v31.10.4

v31.10.3

Compare Source

What's Changed

• nix: 2.34.2 -> 2.34.4 by @​github-actions[bot] in #​271

Full Changelog: cachix/install-nix-action@v31...v31.10.3

v31.10.2

Compare Source

What's Changed

• nix: 2.34.1 -> 2.34.2 by @​github-actions[bot] in #​270

Full Changelog: cachix/install-nix-action@v31...v31.10.2

v31.10.1

Compare Source

What's Changed

• nix: 2.34.0 -> 2.34.1 by @​github-actions[bot] in #​269
  Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load authentication keys configured by cachix-action.

Full Changelog: cachix/install-nix-action@v31.10.0...v31.10.1

v31.10.0

Compare Source

What's Changed

• nix: 2.33.3 -> 2.34.0 by @​github-actions[bot] in #​267
  Release notes: https://discourse.nixos.org/t/nix-2-34-0-released/75818

⚠️ Nix 2.34.0 contains a regression that, under certain scenarios (a trusted-user + a client-side netrc-file), breaks authentication with private caches that rely on netrc files. This regression affects cachix/cachix-action.

UPD: 2.34.1 has been released with a patch for the authentication issue

Full Changelog: cachix/install-nix-action@v31.9.1...v31.10.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: ec88fcb5-f1ab-4376-a435-51534021965c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}