Bernardo Meurer Costa
ad664ce64e
ci: cancel previous workflow runs on PR updates
...
Add concurrency group configuration to the CI workflow to automatically
cancel outdated runs when a PR receives new commits or is force-pushed.
This prevents wasting CI resources on superseded code.
2025-10-27 20:56:56 +00:00
Sergei Zimmerman
4c4eb5d07f
ci: Bump magic-nix-cache with post-build-hook fix
...
No tagged release with the fix for [^].
[^]: 578f01e147
2025-10-24 01:34:09 +03:00
Sergei Zimmerman
3c83856494
ci: Update pinned install_url 2.30.2 -> 2.32.1
2025-10-23 02:17:12 +03:00
Sergei Zimmerman
f3d8d1f719
ci: Reuse composite install-nix-action for docker_push_image job
2025-10-23 02:17:11 +03:00
Sergei Zimmerman
c8a15bf70d
ci: Pin cachix action
2025-10-23 02:17:10 +03:00
Sergei Zimmerman
ad5c6a53b9
ci: Move magic-nix-cache-action into install-nix-action composite
...
This reduces duplication and pins the underlying version of magic-nix-cache,
as we already do with other actions.
2025-10-23 02:17:09 +03:00
Bernardo Meurer Costa
fa0d00e668
ci: cleanup s3 tests
...
This cleans up the work done in 8c2828387#13752 has landed,
there's no need to test configurations without AWS auth in CI.
2025-10-15 23:51:08 +03:00
Bernardo Meurer Costa
1f710300c9
refactor(libstore): withCurlS3 -> withAWS
...
Now that the legacy S3 implementation is gone, we can go back to calling
things `NIX_WITH_S3_SUPPORT`.
2025-10-15 18:23:56 +00:00
Bernardo Meurer Costa
9295c14a35
refactor(libstore): replace AWS SDK with curl-based S3 implementation
...
This commit replaces the AWS C++ SDK with a lighter curl-based approach
for S3 binary cache operations.
- Removed dependency on the heavy aws-cpp-sdk-s3 and aws-cpp-sdk-transfer
- Added lightweight aws-crt-cpp for credential resolution only
- Leverages curl's native AWS SigV4 authentication (requires curl >= 7.75.0)
- S3BinaryCacheStore now delegates to HttpBinaryCacheStore
- Function s3ToHttpsUrl converts ParsedS3URL to ParsedURL
- Multipart uploads are no longer supported (may be reimplemented later)
- Build now requires curl >= 7.75.0 for AWS SigV4 support
Fixes : #13084 , #12671 , #11748 , #12403 , #5947
2025-10-15 18:23:55 +00:00
Eelco Dolstra
c44d2d5913
Merge pull request #14241 from NixOS/dependabot/github_actions/actions/create-github-app-token-2
...
build(deps): bump actions/create-github-app-token from 1 to 2
2025-10-14 11:55:43 +00:00
dependabot[bot]
b846f27682
build(deps): bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-10-13 22:00:59 +00:00
dependabot[bot]
962862e9e0
build(deps): bump actions/create-github-app-token from 1 to 2
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1 to 2.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](https://github.com/actions/create-github-app-token/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: '2'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-10-13 22:00:55 +00:00
Jörg Thalheim
118acc84ba
only build on push to master
...
we have now merge queues for maintainance branches. We still build it
for master to have our installer beeing updated. In future this part
could go in new workflow instead.
2025-10-09 14:16:14 +01:00
Jörg Thalheim
090f7fb05e
Merge pull request #14002 from getchoo-contrib/getchoo/dogfood-experimental-installer
...
Add experimental installer to installer tests
2025-10-08 04:05:46 +00:00
Bernardo Meurer Costa
a400ea4257
ci: integrate vm_tests into main tests job
...
This consolidates the separate vm_tests job into the main tests job,
simplifying the CI workflow. VM tests now run as part of the regular
test matrix.
2025-10-08 02:46:56 +00:00
Sergei Zimmerman
fc8b784924
Merge pull request #14147 from lovesegfault/nix-multi-ci
...
ci: test without s3 and with curl-based-s3
2025-10-08 02:38:03 +03:00
Jörg Thalheim
63e8b5f94a
ci: Switch away from mergify to backport action
...
We want to use github native queues.
2025-10-07 23:43:03 +03:00
Bernardo Meurer Costa
8c28283876
ci: test without s3 and with curl-based-s3
2025-10-06 16:24:21 +00:00
Seth Flynn
92d7381826
ci: allow for using the latest build of the experimental installer
...
Until these repos are potentially merged, this is good for dogfooding
alongside the experimental installer. It also uses the more official
`artifacts.nixos.org` endpoint to install stable releases now
More immediately though, we need a patch for the experimental installer
to really work in CI at all, and that hasn't landed in a tag yet. So,
this lets us use it right from `main`!
2025-10-03 03:37:59 -04:00
Seth Flynn
d2293fb458
ci: enable experimental installer tests
2025-10-03 01:26:55 -04:00
Seth Flynn
2cbbb63628
ci: enable use of the experimental installer
2025-10-03 01:26:52 -04:00
Jörg Thalheim
85d6c8af4d
link to jitsi meeting in the PR docs
2025-10-01 22:23:31 +02:00
Jörg Thalheim
00775ad83c
Apply suggestion from @getchoo
...
Co-authored-by: Seth Flynn <getchoo@tuta.io>
2025-09-24 13:14:00 +02:00
Sergei Zimmerman
35d8ffe01d
ci: Split formatting check into a separate job, gate other jobs
...
This makes the CI fail fast and more explicitly in case the formatting
is incorrect and provides a better error messages. This also ensures
that we don't burn CI on useless checks for code that wouldn't pass lints
anyway.
2025-09-24 00:34:35 +03:00
dependabot[bot]
7128abd217
build(deps): bump actions/labeler from 5 to 6
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 5 to 6.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](https://github.com/actions/labeler/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-09-08 22:00:58 +00:00
Jörg Thalheim
677b1c0f8f
prepare merge queues for nix
2025-08-15 08:05:01 +02:00
Sergei Zimmerman
26dbda6302
ci/docker_push_image: Remove dead step
...
This step is now part of the check_secrets job and
the output is completely unused.
2025-08-14 14:54:45 +03:00
Sergei Zimmerman
48d15ed1fb
ci/check_secrets: Remove deprecated set-output
2025-08-14 14:54:20 +03:00
dependabot[bot]
4fb89eb2ea
build(deps): bump actions/download-artifact from 4 to 5
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-12 09:05:31 +00:00
dependabot[bot]
e8d780642d
build(deps): bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-12 08:21:23 +00:00
Jörg Thalheim
f62b022872
ci: add workflow dispatch to bypass nix installer dogfooding
...
This helps to fix CI if our dogfooding Nix installer is broken
2025-08-11 19:51:46 +02:00
Sergei Zimmerman
920a878eaa
Merge pull request #13733 from xokdvium/fix-ci-2
...
ci: Bump pinned stable nix version
2025-08-11 20:36:38 +03:00
Sergei Zimmerman
9d033733f2
ci: Bump pinned stable nix version
...
2.30.1 can't build our daemon tests. The fix is in 2.30.2.
2025-08-11 20:35:12 +03:00
Sergei Zimmerman
2b2c832f0a
ci: Disable dogfooding
...
To unbreak the CI.
2025-08-11 20:30:03 +03:00
Sergei Zimmerman
6ec88b93ba
ci: Remove max-jobs = 1
...
This change was necessary when we were using `nix flake check` for CI
(see 6db6b269ed
2025-08-09 01:13:59 +03:00
Sergei Zimmerman
4333a9d5a8
ci: Collect code coverage in tests
...
This adds the necessary infrastructure to collect
code coverage in CI, which could be useful to look
at munually or track consistently via something like
codecov.
Co-authored-by: Jade Lovelace <lix@jade.fyi>
2025-08-04 23:50:02 +03:00
Sergei Zimmerman
413f782176
ci: Run sanitizer tests in a separate job
...
This should speed up the CI somewhat by parallelizing
the work across the matrix of configurations.
2025-07-28 23:37:04 +03:00
Robert Hensing
49f411c08c
Update developer facing links to nix.dev
...
Not broken, but it's a tiny bit quicker
2025-07-25 10:59:44 +02:00
Sergei Zimmerman
f0695e177f
ci: Make it actually possible to disable dogfooding
...
Github composite actions are a real treat. Boolean inputs
are not actually booleans but rather strings [1].
[1]: https://www.github.com/actions/runner/issues/2238
2025-07-25 00:31:04 +03:00
Sergei Zimmerman
c6d0d33e4d
ci: Simplify installer tests
2025-07-23 21:52:23 +02:00
Sergei Zimmerman
9c58c8f739
ci: Add build profiling job
...
This adds a GHA jobs to help analyze build times
and its regressions. It is based on `clangStdenv` with `-ftime-trace`
together with `ClangBuildAnalyzer` to prepare markdown summary for
individual components.
This also has the minor benefit of dogfooding CA and impure derivations.
2025-07-20 18:26:26 +03:00
Sergei Zimmerman
3b3c02160d
ci: Dogfood nix from master for vm_tests and flake_regressions
...
This should provide more coverage for the build from master that
is being dogfooded.
2025-07-14 17:03:12 +03:00
Sergei Zimmerman
04f6974d2c
ci: Dogfood Nix from master
2025-07-14 17:03:10 +03:00
gustavderdrache
8e5814d972
CI: Roll nix version to 2.29.1
...
This works around the macOS issue that the prior commit addresses.
2025-07-11 18:46:01 -04:00
Eelco Dolstra
9b57573bae
Revert "Drop magic-nix-cache"
...
This reverts commit 9cc8be2674
2025-06-18 18:06:24 +02:00
Eelco Dolstra
9cc8be2674
Drop magic-nix-cache
...
This no longer works, see https://determinate.systems/posts/magic-nix-cache-free-tier-eol/ .
2025-05-26 23:30:16 +02:00
Martin Fischer
81683a845b
fix(docs): update Matrix channel links
2025-05-04 12:17:48 +02:00
dependabot[bot]
3387d5a3c4
build(deps): bump cachix/install-nix-action from 30 to 31
...
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action ) from 30 to 31.
- [Release notes](https://github.com/cachix/install-nix-action/releases )
- [Commits](https://github.com/cachix/install-nix-action/compare/v30...v31 )
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-10 22:58:40 +00:00
Valentin Gagarin
0358007da3
remove fricklerhandwerk from CODEOWNERS
...
stepping aside as a Nix maintainer:
https://discourse.nixos.org/t/time-to-step-aside/61050
2025-03-02 00:06:15 +01:00
Robert Hensing
5e21bdc623
.github/ci: Use fixed names
...
This lets us update "runs-on" without creating a mismatch with the
required checks that are configured for the repo in the github ui.
2024-12-31 17:35:07 +01:00
