Release v3.21.2 (#71)
Some checks failed
/ Build (push) Failing after -3s
zizmor / zizmor (push) Failing after -3s

* Prepare release v3.21.2

* Update the state.json for v3.21.2

* Update README.md and action.yml for v3.21.2

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.1011622%2Brev-a799d3e3886da994fa307f817a6bc705ae538eeb/019ea4be-9303-7001-8232-6b7ec45c4f5b/source.tar.gz' (2026-06-06)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.1017464%2Brev-567a49d1913ce81ac6e9582e3553dd90a955875f/019ed27e-44b2-7462-b1ef-3564aa6c28ee/source.tar.gz' (2026-06-16)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
This commit is contained in:
github-actions[bot] 2026-06-20 09:27:06 -07:00 committed by GitHub
parent 8ebfb805c6
commit 629b284231
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 55 additions and 38 deletions

View file

@ -52,8 +52,8 @@ jobs:
id-token: write
contents: read
steps:
- uses: actions/checkout@v6.0.3
- uses: DeterminateSystems/determinate-nix-action@main # or v3.21.1 to pin to a release
- uses: actions/checkout@v7.0.0
- uses: DeterminateSystems/determinate-nix-action@main # or v3.21.2 to pin to a release
- run: nix build .
```
@ -67,10 +67,10 @@ jobs:
Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.21.1` guarantees:
📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.21.2` guarantees:
- Same `nix-installer-action` revision every time
- Consistent Determinate Nix v3.21.1 installation
- Consistent Determinate Nix v3.21.2 installation
- Reproducible CI workflows, even years later
✨ Using `@main` instead? You'll:
@ -97,7 +97,7 @@ updates:
## ️⚙️ Configuration
| Parameter | Description | Required | Default |
|-------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------|----------------------------|
|---------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------|----------------------------|
| `extra-conf` | Extra configuration lines for `/etc/nix/nix.conf` (includes `access-tokens` with `secrets.GITHUB_TOKEN` automatically if `github-token` is set) | | |
| `github-server-url` | The URL for the GitHub server, to use with the `github-token` token. Defaults to the current GitHub server, supporting GitHub Enterprise Server automatically. Only change this value if the provided `github-token` is for a different GitHub server than the current server. | | `${{ github.server_url }}` |
| `github-token` | A GitHub token for making authenticated requests (which have a higher rate-limit quota than unauthenticated requests) | | `${{ github.token }}` |
@ -113,8 +113,15 @@ updates:
| `source-branch` | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`) | | |
| `source-pr` | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`) | | |
| `source-revision` | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`) | | |
| `source-tag` | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`) | | `v3.21.1` |
| `source-tag` | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`) | | `v3.21.2` |
| `source-url` | A URL pointing to a `nix-installer` executable | | |
| `source-checksums-url` | URL of a `shasum`-format checksums file listing the SHA-256 of each
`nix-installer-<arch>-<os>` artifact. Used together with
`source-checksums-sha256` to verify the downloaded installer.
| | |
| `source-checksums-sha256` | Pinned SHA-256 (hex) of the file served at `source-checksums-url`. Must
be set together with `source-checksums-url`.
| | |
| `backtrace` | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables) | | |
| `diagnostic-endpoint` | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string. | | `-` |
| `log-directives` | A list of Tracing directives, comma separated, `-`s replaced with `_` (eg. `nix_installer=trace`, see https://docs.rs/tracing-subscriber/latest/tracing_subscriber/filter/struct.EnvFilter.html#directives) | | |

View file

@ -72,12 +72,20 @@
"source-tag": {
"description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
"required": false,
"default": "v3.21.1"
"default": "v3.21.2"
},
"source-url": {
"description": "A URL pointing to a `nix-installer` executable",
"required": false
},
"source-checksums-url": {
"description": "URL of a `shasum`-format checksums file listing the SHA-256 of each\n`nix-installer-<arch>-<os>` artifact. Used together with\n`source-checksums-sha256` to verify the downloaded installer.\n",
"required": false
},
"source-checksums-sha256": {
"description": "Pinned SHA-256 (hex) of the file served at `source-checksums-url`. Must\nbe set together with `source-checksums-url`.\n",
"required": false
},
"backtrace": {
"description": "The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)",
"required": false
@ -105,7 +113,7 @@
"using": "composite",
"steps": [
{
"uses": "DeterminateSystems/nix-installer-action@1d87d45818068401a10cf16bdc5f00b24994a83f",
"uses": "DeterminateSystems/nix-installer-action@a7ad9c4f0c65208097f4d34f3cfa1913b80cce5c",
"with": {
"extra-conf": "${{ inputs.extra-conf }}",
"github-server-url": "${{ inputs.github-server-url }}",
@ -124,6 +132,8 @@
"source-revision": "${{ inputs.source-revision }}",
"source-tag": "${{ inputs.source-tag }}",
"source-url": "${{ inputs.source-url }}",
"source-checksums-url": "${{ inputs.source-checksums-url }}",
"source-checksums-sha256": "${{ inputs.source-checksums-sha256 }}",
"backtrace": "${{ inputs.backtrace }}",
"diagnostic-endpoint": "${{ inputs.diagnostic-endpoint }}",
"log-directives": "${{ inputs.log-directives }}",

10
flake.lock generated
View file

@ -2,12 +2,12 @@
"nodes": {
"nixpkgs": {
"locked": {
"lastModified": 1780749050,
"narHash": "sha256-3av0pIjlOWQ6rDbNOmpUSvbNnJkGORQKKjb4LtCZsIY=",
"rev": "a799d3e3886da994fa307f817a6bc705ae538eeb",
"revCount": 1011622,
"lastModified": 1781577229,
"narHash": "sha256-lrp67w8AulE9Ks53n27I45ADSzbOCn4H+CNW1Ck8B+8=",
"rev": "567a49d1913ce81ac6e9582e3553dd90a955875f",
"revCount": 1017464,
"type": "tarball",
"url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.1011622%2Brev-a799d3e3886da994fa307f817a6bc705ae538eeb/019ea4be-9303-7001-8232-6b7ec45c4f5b/source.tar.gz"
"url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.1017464%2Brev-567a49d1913ce81ac6e9582e3553dd90a955875f/019ed27e-44b2-7462-b1ef-3564aa6c28ee/source.tar.gz"
},
"original": {
"type": "tarball",

View file

@ -1,5 +1,5 @@
{
"nix_installer_action_revision": "1d87d45818068401a10cf16bdc5f00b24994a83f",
"determinate_nix_tag": "v3.21.1",
"checkout_action_tag": "v6.0.3"
"nix_installer_action_revision": "a7ad9c4f0c65208097f4d34f3cfa1913b80cce5c",
"determinate_nix_tag": "v3.21.2",
"checkout_action_tag": "v7.0.0"
}