From 48d806fc09e3474e1b9e9f3ef4f01855e837ab6e Mon Sep 17 00:00:00 2001
From: Graham Christensen <graham@grahamc.com>
Date: Thu, 15 May 2025 12:18:39 -0400
Subject: [PATCH 01/56] Fixup the collapsed NOTE line, which vscode insisted on
 collapsing without the extra >

---
 README.md                | 4 +++-
 tools/README.template.md | 4 +++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 5c3cc40..d50fbed 100644
--- a/README.md
+++ b/README.md
@@ -16,7 +16,9 @@ It is an end-to-end toolchain for using Nix, from installation to collaboration
 
 Based on the [Determinate Nix Installer](https://github.com/DeterminateSystems/nix-installer) and its corresponding [Nix Installer Action](https://github.com/DeterminateSystems/nix-installer-action), responsible for over tens of thousands of Nix installs daily.
 
-> [!NOTE] > **Why a different action?**
+> [!NOTE]
+>
+> **Why a different action?**
 >
 > We created a new action to synchronize version tags to Determinate Nix releases.
 > GitHub Actions are tagged with the specific version, like `v3.5.2`, with a moving `v3` tag for the major version.
diff --git a/tools/README.template.md b/tools/README.template.md
index 2b92d92..d46a51f 100644
--- a/tools/README.template.md
+++ b/tools/README.template.md
@@ -16,7 +16,9 @@ It is an end-to-end toolchain for using Nix, from installation to collaboration
 
 Based on the [Determinate Nix Installer](https://github.com/DeterminateSystems/nix-installer) and its corresponding [Nix Installer Action](https://github.com/DeterminateSystems/nix-installer-action), responsible for over tens of thousands of Nix installs daily.
 
-> [!NOTE] > **Why a different action?**
+> [!NOTE]
+>
+> **Why a different action?**
 >
 > We created a new action to synchronize version tags to Determinate Nix releases.
 > GitHub Actions are tagged with the specific version, like `v3.5.2`, with a moving `v3` tag for the major version.

From 769948d79878f686850a1852910167823d79d180 Mon Sep 17 00:00:00 2001
From: Luc Perkins <lucperkins@gmail.com>
Date: Thu, 15 May 2025 15:09:41 -0400
Subject: [PATCH 02/56] Add note about permissions block

---
 README.md                | 15 +++++++++++----
 tools/README.template.md | 15 +++++++++++----
 2 files changed, 22 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index d50fbed..13fd497 100644
--- a/README.md
+++ b/README.md
@@ -36,6 +36,8 @@ Based on the [Determinate Nix Installer](https://github.com/DeterminateSystems/n
 
 ## ️🔧 Usage
 
+Here's an example Actions workflow configuration that uses `determinate-nix-action`:
+
 ```yaml
 on:
   pull_request:
@@ -43,18 +45,21 @@ on:
     branches: [main]
 
 jobs:
-  lints:
-    name: Build
+  build-pkg:
+    name: Build Nix package
     runs-on: ubuntu-latest
     permissions:
-      id-token: "write"
-      contents: "read"
+      id-token: write
+      contents: read
     steps:
       - uses: actions/checkout@v4.2.2
       - uses: DeterminateSystems/determinate-nix-action@main # or v3.5.2 to pin to a release
       - run: nix build .
 ```
 
+> [!IMPORTANT]
+> You must add a `permissions` block like the one in the example above or else Determinate Nix won't be able to authenticate with [FlakeHub].
+
 ## 📌 Version Pinning: Lock It Down!
 
 ### Why Pin Your Action?
@@ -124,3 +129,5 @@ We're committed to making your experience with Determinate Nix as smooth as poss
 - 📧 **Need direct support?** Email us at [support@determinate.systems](mailto:support@determinate.systems)
 
 🤝 **Looking for enterprise support?** We offer dedicated support contracts and shared Slack channels for organizations requiring priority assistance. [Contact us](mailto:support@determinate.systems) to learn more.
+
+[flakehub]: https//flakehub.com
diff --git a/tools/README.template.md b/tools/README.template.md
index d46a51f..6b9d698 100644
--- a/tools/README.template.md
+++ b/tools/README.template.md
@@ -36,6 +36,8 @@ Based on the [Determinate Nix Installer](https://github.com/DeterminateSystems/n
 
 ## ️🔧 Usage
 
+Here's an example Actions workflow configuration that uses `determinate-nix-action`:
+
 ```yaml
 on:
   pull_request:
@@ -43,18 +45,21 @@ on:
     branches: [main]
 
 jobs:
-  lints:
-    name: Build
+  build-pkg:
+    name: Build Nix package
     runs-on: ubuntu-latest
     permissions:
-      id-token: "write"
-      contents: "read"
+      id-token: write
+      contents: read
     steps:
       - uses: actions/checkout@<!-- checkout_action_tag -->
       - uses: DeterminateSystems/determinate-nix-action@main # or <!-- version --> to pin to a release
       - run: nix build .
 ```
 
+> [!IMPORTANT]
+> You must add a `permissions` block like the one in the example above or else Determinate Nix won't be able to authenticate with [FlakeHub].
+
 ## 📌 Version Pinning: Lock It Down!
 
 ### Why Pin Your Action?
@@ -102,3 +107,5 @@ We're committed to making your experience with Determinate Nix as smooth as poss
 - 📧 **Need direct support?** Email us at [support@determinate.systems](mailto:support@determinate.systems)
 
 🤝 **Looking for enterprise support?** We offer dedicated support contracts and shared Slack channels for organizations requiring priority assistance. [Contact us](mailto:support@determinate.systems) to learn more.
+
+[flakehub]: https//flakehub.com

From 0c803e71017b0f5ea6f2695a4647fb795cdfd68f Mon Sep 17 00:00:00 2001
From: Luc Perkins <lucperkins@gmail.com>
Date: Thu, 15 May 2025 16:03:22 -0400
Subject: [PATCH 03/56] Update wording

---
 README.md                | 3 ++-
 tools/README.template.md | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 13fd497..bb15360 100644
--- a/README.md
+++ b/README.md
@@ -58,7 +58,7 @@ jobs:
 ```
 
 > [!IMPORTANT]
-> You must add a `permissions` block like the one in the example above or else Determinate Nix won't be able to authenticate with [FlakeHub].
+> If you use [FlakeHub], you need to add a `permissions` block like the one in the example above or else Determinate Nix can't authenticate with FlakeHub or [FlakeHub Cache][cache].
 
 ## 📌 Version Pinning: Lock It Down!
 
@@ -130,4 +130,5 @@ We're committed to making your experience with Determinate Nix as smooth as poss
 
 🤝 **Looking for enterprise support?** We offer dedicated support contracts and shared Slack channels for organizations requiring priority assistance. [Contact us](mailto:support@determinate.systems) to learn more.
 
+[cache]: https://flakehub.com/cache
 [flakehub]: https//flakehub.com
diff --git a/tools/README.template.md b/tools/README.template.md
index 6b9d698..f5f6d8b 100644
--- a/tools/README.template.md
+++ b/tools/README.template.md
@@ -58,7 +58,7 @@ jobs:
 ```
 
 > [!IMPORTANT]
-> You must add a `permissions` block like the one in the example above or else Determinate Nix won't be able to authenticate with [FlakeHub].
+> If you use [FlakeHub], you need to add a `permissions` block like the one in the example above or else Determinate Nix can't authenticate with FlakeHub or [FlakeHub Cache][cache].
 
 ## 📌 Version Pinning: Lock It Down!
 
@@ -108,4 +108,5 @@ We're committed to making your experience with Determinate Nix as smooth as poss
 
 🤝 **Looking for enterprise support?** We offer dedicated support contracts and shared Slack channels for organizations requiring priority assistance. [Contact us](mailto:support@determinate.systems) to learn more.
 
+[cache]: https://flakehub.com/cache
 [flakehub]: https//flakehub.com

From 7bdbe146aa83ed81fe935908b8bc76332403a0e1 Mon Sep 17 00:00:00 2001
From: Luc Perkins <lucperkins@gmail.com>
Date: Thu, 15 May 2025 16:32:20 -0400
Subject: [PATCH 04/56] Fix rendering of Booleans

---
 README.md         | 10 +++++-----
 tools/generate.py | 10 ++++++++--
 2 files changed, 13 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index d50fbed..c6cf322 100644
--- a/README.md
+++ b/README.md
@@ -96,13 +96,13 @@ updates:
 | `extra-conf`            | Extra configuration lines for `/etc/nix/nix.conf` (includes `access-tokens` with `secrets.GITHUB_TOKEN` automatically if `github-token` is set)                                                                                                                                |          |                            |
 | `github-server-url`     | The URL for the GitHub server, to use with the `github-token` token. Defaults to the current GitHub server, supporting GitHub Enterprise Server automatically. Only change this value if the provided `github-token` is for a different GitHub server than the current server. |          | `${{ github.server_url }}` |
 | `github-token`          | A GitHub token for making authenticated requests (which have a higher rate-limit quota than unauthenticated requests)                                                                                                                                                          |          | `${{ github.token }}`      |
-| `trust-runner-user`     | Whether to make the runner user trusted by the Nix daemon                                                                                                                                                                                                                      |          | `True`                     |
-| `force-no-systemd`      | Force using other methods than systemd to launch the daemon. This setting is automatically enabled when necessary.                                                                                                                                                             |          | `False`                    |
+| `trust-runner-user`     | Whether to make the runner user trusted by the Nix daemon                                                                                                                                                                                                                      |          | `true`                     |
+| `force-no-systemd`      | Force using other methods than systemd to launch the daemon. This setting is automatically enabled when necessary.                                                                                                                                                             |          | `false`                    |
 | `init`                  | The init system to configure, requires `planner: linux-multi` (allowing the choice between `none` or `systemd`)                                                                                                                                                                |          |                            |
-| `kvm`                   | Automatically configure the GitHub Actions Runner for NixOS test supports, if the host supports it.                                                                                                                                                                            |          | `True`                     |
+| `kvm`                   | Automatically configure the GitHub Actions Runner for NixOS test supports, if the host supports it.                                                                                                                                                                            |          | `true`                     |
 | `planner`               | A planner to use                                                                                                                                                                                                                                                               |          |                            |
 | `proxy`                 | The proxy to use (if any), valid proxy bases are `https://$URL`, `http://$URL` and `socks5://$URL`                                                                                                                                                                             |          |                            |
-| `reinstall`             | Force a reinstall if an existing installation is detected (consider backing up `/nix/store`)                                                                                                                                                                                   |          | `False`                    |
+| `reinstall`             | Force a reinstall if an existing installation is detected (consider backing up `/nix/store`)                                                                                                                                                                                   |          | `false`                    |
 | `source-binary`         | Run a version of the nix-installer binary from somewhere already on disk. Conflicts with all other `source-*` options. Intended only for testing this Action.                                                                                                                  |          |                            |
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
@@ -113,7 +113,7 @@ updates:
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
 | `log-directives`        | A list of Tracing directives, comma separated, `-`s replaced with `_` (eg. `nix_installer=trace`, see https://docs.rs/tracing-subscriber/latest/tracing_subscriber/filter/struct.EnvFilter.html#directives)                                                                    |          |                            |
 | `logger`                | The logger to use for install (eg. `pretty`, `json`, `full`, `compact`)                                                                                                                                                                                                        |          |                            |
-| `_internal-strict-mode` | Whether to fail when any errors are thrown. Used only to test the Action; do not set this in your own workflows.                                                                                                                                                               |          | `False`                    |
+| `_internal-strict-mode` | Whether to fail when any errors are thrown. Used only to test the Action; do not set this in your own workflows.                                                                                                                                                               |          | `false`                    |
 
 ## 🛟 Need Help? We're Here For You!
 
diff --git a/tools/generate.py b/tools/generate.py
index 884f587..696d4a1 100644
--- a/tools/generate.py
+++ b/tools/generate.py
@@ -8,7 +8,6 @@ import sys
 def eprintln(line):
     print(line, file=sys.stderr)
 
-
 def make_inputs_table(inputs):
     headers = ["Parameter", "Description", "Required", "Default"]
     rows = []
@@ -16,12 +15,19 @@ def make_inputs_table(inputs):
         required = input_options.get("required", False)
         default = input_options.get("default")
 
+        if isinstance(default, bool):
+            default_str = f"`{str(default).lower()}`"
+        elif default is not None:
+            default_str = f"`{default}`"
+        else:
+            default_str = ""
+
         rows.append(
             [
                 f"`{input_name}`",
                 input_options["description"],
                 "📍" if required else "",
-                f"`{default}`" if default is not None else "",
+                default_str,
             ]
         )
 

From 1ae6376b0c5683fe84d7d1121fd1191c915f1b9c Mon Sep 17 00:00:00 2001
From: Luc Perkins <lucperkins@gmail.com>
Date: Thu, 15 May 2025 16:34:52 -0400
Subject: [PATCH 05/56] Fix formatting issue

---
 tools/generate.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tools/generate.py b/tools/generate.py
index 696d4a1..fcf01a1 100644
--- a/tools/generate.py
+++ b/tools/generate.py
@@ -8,6 +8,7 @@ import sys
 def eprintln(line):
     print(line, file=sys.stderr)
 
+
 def make_inputs_table(inputs):
     headers = ["Parameter", "Description", "Required", "Default"]
     rows = []

From 703c21b79407347a7d5fc56aaabd5291b0513e41 Mon Sep 17 00:00:00 2001
From: Luc Perkins <lucperkins@gmail.com>
Date: Fri, 16 May 2025 12:39:52 -0400
Subject: [PATCH 06/56] Enforce sentence case in README

---
 README.md                | 35 ++++++++++++++++++++---------------
 tools/README.template.md | 35 ++++++++++++++++++++---------------
 2 files changed, 40 insertions(+), 30 deletions(-)

diff --git a/README.md b/README.md
index 4e76693..230e1de 100644
--- a/README.md
+++ b/README.md
@@ -11,18 +11,18 @@
 
 # ️❄️ Determinate Nix Action
 
-Determinate is the best way to use Nix on macOS, WSL, and Linux.
+[Determinate] is the best way to use Nix on macOS, WSL, and Linux.
 It is an end-to-end toolchain for using Nix, from installation to collaboration to deployment.
 
-Based on the [Determinate Nix Installer](https://github.com/DeterminateSystems/nix-installer) and its corresponding [Nix Installer Action](https://github.com/DeterminateSystems/nix-installer-action), responsible for over tens of thousands of Nix installs daily.
+Based on the [Determinate Nix Installer][nix-installer] and its corresponding [Nix Installer Action][nix-installer-action], responsible for over tens of thousands of Nix installs daily.
 
 > [!NOTE]
 >
-> **Why a different action?**
+> **Why a different Action?**
 >
-> We created a new action to synchronize version tags to Determinate Nix releases.
+> We created a new Action to synchronize version tags to [Determinate Nix][det-nix] releases.
 > GitHub Actions are tagged with the specific version, like `v3.5.2`, with a moving `v3` tag for the major version.
-> We needed a fresh tag namespace since nix-installer-action already has a `v3` tag.
+> We needed a fresh tag namespace since `nix-installer-action` already has a `v3` tag.
 
 ## 🫶 Platform support
 
@@ -60,12 +60,12 @@ jobs:
 > [!IMPORTANT]
 > If you use [FlakeHub], you need to add a `permissions` block like the one in the example above or else Determinate Nix can't authenticate with FlakeHub or [FlakeHub Cache][cache].
 
-## 📌 Version Pinning: Lock It Down!
+## 📌 Version pinning: lock it down!
 
-### Why Pin Your Action?
+### Why pin your Action?
 
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
-This action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
+This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
 📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.5.2` guarantees:
 
@@ -79,19 +79,19 @@ This action is **automatically tagged** for every Determinate Nix release, givin
 - Occasionally participate in phased rollouts (helping us test new releases!)
 
 > [!IMPORTANT]
-> Set up Dependabot to stay current with Determinate Nix releases without sacrificing stability.
+> Set up [Dependabot] to stay current with Determinate Nix releases without sacrificing stability.
 
-### 🤖 Automate Updates with Dependabot
+### 🤖 Automate updates with Dependabot
 
-Keep your GitHub actions fresh without manual work! Create `.github/dependabot.yml` with:
+Keep your GitHub Actions fresh without manual work! Create `.github/dependabot.yml` with:
 
 ```yaml
 version: 2
 updates:
-  - package-ecosystem: "github-actions"
-    directory: "/"
+  - package-ecosystem: github-actions
+    directory: /
     schedule:
-      interval: "weekly"
+      interval: weekly
 ```
 
 ## ️⚙️ Configuration
@@ -120,7 +120,7 @@ updates:
 | `logger`                | The logger to use for install (eg. `pretty`, `json`, `full`, `compact`)                                                                                                                                                                                                        |          |                            |
 | `_internal-strict-mode` | Whether to fail when any errors are thrown. Used only to test the Action; do not set this in your own workflows.                                                                                                                                                               |          | `false`                    |
 
-## 🛟 Need Help? We're Here For You!
+## 🛟 Need help? We're here for you!
 
 We're committed to making your experience with Determinate Nix as smooth as possible. If you encounter any issues or have questions, here's how to reach us:
 
@@ -131,4 +131,9 @@ We're committed to making your experience with Determinate Nix as smooth as poss
 🤝 **Looking for enterprise support?** We offer dedicated support contracts and shared Slack channels for organizations requiring priority assistance. [Contact us](mailto:support@determinate.systems) to learn more.
 
 [cache]: https://flakehub.com/cache
+[dependabot]: https://github.com/dependabot
+[det-nix]: https://docs.determinate.systems/determinate-nix
+[determinate]: https://docs.determinate.systems
 [flakehub]: https//flakehub.com
+[nix-installer]: https://github.com/DeterminateSystems/nix-installer
+[nix-installer-action]: https://github.com/DeterminateSystems/nix-installer-action
diff --git a/tools/README.template.md b/tools/README.template.md
index f5f6d8b..159118a 100644
--- a/tools/README.template.md
+++ b/tools/README.template.md
@@ -11,18 +11,18 @@
 
 # ️❄️ Determinate Nix Action
 
-Determinate is the best way to use Nix on macOS, WSL, and Linux.
+[Determinate] is the best way to use Nix on macOS, WSL, and Linux.
 It is an end-to-end toolchain for using Nix, from installation to collaboration to deployment.
 
-Based on the [Determinate Nix Installer](https://github.com/DeterminateSystems/nix-installer) and its corresponding [Nix Installer Action](https://github.com/DeterminateSystems/nix-installer-action), responsible for over tens of thousands of Nix installs daily.
+Based on the [Determinate Nix Installer][nix-installer] and its corresponding [Nix Installer Action][nix-installer-action], responsible for over tens of thousands of Nix installs daily.
 
 > [!NOTE]
 >
-> **Why a different action?**
+> **Why a different Action?**
 >
-> We created a new action to synchronize version tags to Determinate Nix releases.
+> We created a new Action to synchronize version tags to [Determinate Nix][det-nix] releases.
 > GitHub Actions are tagged with the specific version, like `v3.5.2`, with a moving `v3` tag for the major version.
-> We needed a fresh tag namespace since nix-installer-action already has a `v3` tag.
+> We needed a fresh tag namespace since `nix-installer-action` already has a `v3` tag.
 
 ## 🫶 Platform support
 
@@ -60,12 +60,12 @@ jobs:
 > [!IMPORTANT]
 > If you use [FlakeHub], you need to add a `permissions` block like the one in the example above or else Determinate Nix can't authenticate with FlakeHub or [FlakeHub Cache][cache].
 
-## 📌 Version Pinning: Lock It Down!
+## 📌 Version pinning: lock it down!
 
-### Why Pin Your Action?
+### Why pin your Action?
 
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
-This action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
+This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
 📍 Pinning to `DeterminateSystems/determinate-nix-action@<!-- version -->` guarantees:
 
@@ -79,26 +79,26 @@ This action is **automatically tagged** for every Determinate Nix release, givin
 - Occasionally participate in phased rollouts (helping us test new releases!)
 
 > [!IMPORTANT]
-> Set up Dependabot to stay current with Determinate Nix releases without sacrificing stability.
+> Set up [Dependabot] to stay current with Determinate Nix releases without sacrificing stability.
 
-### 🤖 Automate Updates with Dependabot
+### 🤖 Automate updates with Dependabot
 
-Keep your GitHub actions fresh without manual work! Create `.github/dependabot.yml` with:
+Keep your GitHub Actions fresh without manual work! Create `.github/dependabot.yml` with:
 
 ```yaml
 version: 2
 updates:
-  - package-ecosystem: "github-actions"
-    directory: "/"
+  - package-ecosystem: github-actions
+    directory: /
     schedule:
-      interval: "weekly"
+      interval: weekly
 ```
 
 ## ️⚙️ Configuration
 
 <!-- table -->
 
-## 🛟 Need Help? We're Here For You!
+## 🛟 Need help? We're here for you!
 
 We're committed to making your experience with Determinate Nix as smooth as possible. If you encounter any issues or have questions, here's how to reach us:
 
@@ -109,4 +109,9 @@ We're committed to making your experience with Determinate Nix as smooth as poss
 🤝 **Looking for enterprise support?** We offer dedicated support contracts and shared Slack channels for organizations requiring priority assistance. [Contact us](mailto:support@determinate.systems) to learn more.
 
 [cache]: https://flakehub.com/cache
+[dependabot]: https://github.com/dependabot
+[det-nix]: https://docs.determinate.systems/determinate-nix
+[determinate]: https://docs.determinate.systems
 [flakehub]: https//flakehub.com
+[nix-installer]: https://github.com/DeterminateSystems/nix-installer
+[nix-installer-action]: https://github.com/DeterminateSystems/nix-installer-action

From 62314431cefeb596075fb3c598f330e4d418b1ef Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 23 May 2025 12:59:25 +0000
Subject: [PATCH 07/56] Release v3.6.0 (#10)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.6.0

* Update the state.json for v3.6.0

* Update README.md and action.yml for v3.6.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.799423%2Brev-adaa24fbf46737f3f1b5497bf64bae750f82942e/0196d1c3-1974-7bf1-bcf6-06620ac40c8c/source.tar.gz?narHash=sha256-qhFMmDkeJX9KJwr5H32f1r7Prs7XbQWtO0h3V0a0rFY%3D' (2025-05-13)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.803506%2Brev-2795c506fe8fb7b03c36ccb51f75b6df0ab2553f/0196f0ab-a5df-7f4a-ab77-08177eaa0159/source.tar.gz?narHash=sha256-W7lqHp0qZiENCDwUZ5EX/lNhxjMdNapFnbErcbnP11Q%3D' (2025-05-20)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 230e1de..3e8ad99 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.5.2 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.5.2` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.5.2 installation
+- Consistent Determinate Nix v3.6.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.5.2`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.0`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 4e042ed..5f2aabb 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.5.2"
+            "default": "v3.6.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@780ad73c034fe05a894ab1de77fa8691ad69228d",
+                "uses": "DeterminateSystems/nix-installer-action@4a562136e63e880cb5a5293b6bd1bd47e739028a",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 2f8ebec..e527aac 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1747179050,
-        "narHash": "sha256-qhFMmDkeJX9KJwr5H32f1r7Prs7XbQWtO0h3V0a0rFY=",
-        "rev": "adaa24fbf46737f3f1b5497bf64bae750f82942e",
-        "revCount": 799423,
+        "lastModified": 1747744144,
+        "narHash": "sha256-W7lqHp0qZiENCDwUZ5EX/lNhxjMdNapFnbErcbnP11Q=",
+        "rev": "2795c506fe8fb7b03c36ccb51f75b6df0ab2553f",
+        "revCount": 803506,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.799423%2Brev-adaa24fbf46737f3f1b5497bf64bae750f82942e/0196d1c3-1974-7bf1-bcf6-06620ac40c8c/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.803506%2Brev-2795c506fe8fb7b03c36ccb51f75b6df0ab2553f/0196f0ab-a5df-7f4a-ab77-08177eaa0159/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 4604247..5b6a9d4 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "780ad73c034fe05a894ab1de77fa8691ad69228d",
-  "determinate_nix_tag": "v3.5.2",
+  "nix_installer_action_revision": "4a562136e63e880cb5a5293b6bd1bd47e739028a",
+  "determinate_nix_tag": "v3.6.0",
   "checkout_action_tag": "v4.2.2"
 }

From 441b9e401ac050c38a07d8313748c5c2d17e8aff Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Sat, 24 May 2025 12:48:37 -0400
Subject: [PATCH 08/56] Release v3.6.1 (#11)

* Prepare release v3.6.1

* Update the state.json for v3.6.1

* Update README.md and action.yml for v3.6.1

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        | 8 ++++----
 action.yml       | 2 +-
 tools/state.json | 2 +-
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 3e8ad99..c98dfaa 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.1 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.1` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.6.0 installation
+- Consistent Determinate Nix v3.6.1 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.0`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.1`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 5f2aabb..66529d1 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.6.0"
+            "default": "v3.6.1"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/tools/state.json b/tools/state.json
index 5b6a9d4..8fe660b 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "4a562136e63e880cb5a5293b6bd1bd47e739028a",
-  "determinate_nix_tag": "v3.6.0",
+  "determinate_nix_tag": "v3.6.1",
   "checkout_action_tag": "v4.2.2"
 }

From 264d01cecf7fae65f9e0a81b12df5b94ded99111 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 3 Jun 2025 14:00:29 +0000
Subject: [PATCH 09/56] Release v3.6.2 (#12)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.6.2

* Update the state.json for v3.6.2

* Update README.md and action.yml for v3.6.2

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.803506%2Brev-2795c506fe8fb7b03c36ccb51f75b6df0ab2553f/0196f0ab-a5df-7f4a-ab77-08177eaa0159/source.tar.gz?narHash=sha256-W7lqHp0qZiENCDwUZ5EX/lNhxjMdNapFnbErcbnP11Q%3D' (2025-05-20)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.808478%2Brev-910796cabe436259a29a72e8d3f5e180fc6dfacc/01972ad6-3b3d-7826-b788-216d339063fe/source.tar.gz?narHash=sha256-StSrWhklmDuXT93yc3GrTlb0cKSS0agTAxMGjLKAsY8%3D' (2025-05-31)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index c98dfaa..5b5b294 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.1 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.2 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.1` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.2` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.6.1 installation
+- Consistent Determinate Nix v3.6.2 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.1`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.2`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 66529d1..40fb8a5 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.6.1"
+            "default": "v3.6.2"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@4a562136e63e880cb5a5293b6bd1bd47e739028a",
+                "uses": "DeterminateSystems/nix-installer-action@999d616271516551cacca0c8b34a02e94d4f79e8",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index e527aac..b1e78e6 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1747744144,
-        "narHash": "sha256-W7lqHp0qZiENCDwUZ5EX/lNhxjMdNapFnbErcbnP11Q=",
-        "rev": "2795c506fe8fb7b03c36ccb51f75b6df0ab2553f",
-        "revCount": 803506,
+        "lastModified": 1748693115,
+        "narHash": "sha256-StSrWhklmDuXT93yc3GrTlb0cKSS0agTAxMGjLKAsY8=",
+        "rev": "910796cabe436259a29a72e8d3f5e180fc6dfacc",
+        "revCount": 808478,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.803506%2Brev-2795c506fe8fb7b03c36ccb51f75b6df0ab2553f/0196f0ab-a5df-7f4a-ab77-08177eaa0159/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.808478%2Brev-910796cabe436259a29a72e8d3f5e180fc6dfacc/01972ad6-3b3d-7826-b788-216d339063fe/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 8fe660b..0cc7f64 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "4a562136e63e880cb5a5293b6bd1bd47e739028a",
-  "determinate_nix_tag": "v3.6.1",
+  "nix_installer_action_revision": "999d616271516551cacca0c8b34a02e94d4f79e8",
+  "determinate_nix_tag": "v3.6.2",
   "checkout_action_tag": "v4.2.2"
 }

From 5122d3f7147baa166b8f8e73cfdbdc232d6a2ebd Mon Sep 17 00:00:00 2001
From: Cole Helbling <cole.helbling@determinate.systems>
Date: Thu, 5 Jun 2025 14:16:20 -0700
Subject: [PATCH 10/56] ci: only publish on "published" event

From our testing, this is the only event that triggers once-and-only-once per release.
---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 11192d3..b0aa906 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,7 +1,7 @@
 on:
   release:
     types:
-      - released
+      - published
 
 jobs:
   PushLooseTag:

From ae697bf2519f7d3981016b04219c47aeb2477581 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 17 Jun 2025 07:31:21 -0400
Subject: [PATCH 11/56] Release v3.6.5 (#14)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.6.5

* Update the state.json for v3.6.5

* Update README.md and action.yml for v3.6.5

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.808478%2Brev-910796cabe436259a29a72e8d3f5e180fc6dfacc/01972ad6-3b3d-7826-b788-216d339063fe/source.tar.gz?narHash=sha256-StSrWhklmDuXT93yc3GrTlb0cKSS0agTAxMGjLKAsY8%3D' (2025-05-31)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.814309%2Brev-ee930f9755f58096ac6e8ca94a1887e0534e2d81/01976d76-ca1f-7eaa-bdc7-ea929d2f1723/source.tar.gz?narHash=sha256-Kh9K4taXbVuaLC0IL%2B9HcfvxsSUx8dPB5s5weJcc9pc%3D' (2025-06-13)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 5b5b294..b93486a 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.2 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.5 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.2` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.5` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.6.2 installation
+- Consistent Determinate Nix v3.6.5 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.2`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.5`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 40fb8a5..e0966a7 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.6.2"
+            "default": "v3.6.5"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index b1e78e6..fe1f35b 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1748693115,
-        "narHash": "sha256-StSrWhklmDuXT93yc3GrTlb0cKSS0agTAxMGjLKAsY8=",
-        "rev": "910796cabe436259a29a72e8d3f5e180fc6dfacc",
-        "revCount": 808478,
+        "lastModified": 1749794982,
+        "narHash": "sha256-Kh9K4taXbVuaLC0IL+9HcfvxsSUx8dPB5s5weJcc9pc=",
+        "rev": "ee930f9755f58096ac6e8ca94a1887e0534e2d81",
+        "revCount": 814309,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.808478%2Brev-910796cabe436259a29a72e8d3f5e180fc6dfacc/01972ad6-3b3d-7826-b788-216d339063fe/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.814309%2Brev-ee930f9755f58096ac6e8ca94a1887e0534e2d81/01976d76-ca1f-7eaa-bdc7-ea929d2f1723/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 0cc7f64..d7abb55 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "999d616271516551cacca0c8b34a02e94d4f79e8",
-  "determinate_nix_tag": "v3.6.2",
+  "determinate_nix_tag": "v3.6.5",
   "checkout_action_tag": "v4.2.2"
 }

From d10ab0752b8a41f8c786f1c4337f87e3d255aa47 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 17 Jun 2025 21:42:14 -0400
Subject: [PATCH 12/56] Release v3.6.6 (#15)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.6.6

* Update the state.json for v3.6.6

* Update README.md and action.yml for v3.6.6

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.814309%2Brev-ee930f9755f58096ac6e8ca94a1887e0534e2d81/01976d76-ca1f-7eaa-bdc7-ea929d2f1723/source.tar.gz?narHash=sha256-Kh9K4taXbVuaLC0IL%2B9HcfvxsSUx8dPB5s5weJcc9pc%3D' (2025-06-13)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.816272%2Brev-9e83b64f727c88a7711a2c463a7b16eedb69a84c/01977fb5-daf4-741f-bbb9-d7589f1b897f/source.tar.gz?narHash=sha256-v263g4GbxXv87hMXMCpjkIxd/viIF7p3JpJrwgKdNiI%3D' (2025-06-17)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index b93486a..6def05c 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.5 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.6 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.5` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.6` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.6.5 installation
+- Consistent Determinate Nix v3.6.6 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.5`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.6`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index e0966a7..af8ac4b 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.6.5"
+            "default": "v3.6.6"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index fe1f35b..ba44ee5 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1749794982,
-        "narHash": "sha256-Kh9K4taXbVuaLC0IL+9HcfvxsSUx8dPB5s5weJcc9pc=",
-        "rev": "ee930f9755f58096ac6e8ca94a1887e0534e2d81",
-        "revCount": 814309,
+        "lastModified": 1750134718,
+        "narHash": "sha256-v263g4GbxXv87hMXMCpjkIxd/viIF7p3JpJrwgKdNiI=",
+        "rev": "9e83b64f727c88a7711a2c463a7b16eedb69a84c",
+        "revCount": 816272,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.814309%2Brev-ee930f9755f58096ac6e8ca94a1887e0534e2d81/01976d76-ca1f-7eaa-bdc7-ea929d2f1723/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.816272%2Brev-9e83b64f727c88a7711a2c463a7b16eedb69a84c/01977fb5-daf4-741f-bbb9-d7589f1b897f/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index d7abb55..56231da 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "999d616271516551cacca0c8b34a02e94d4f79e8",
-  "determinate_nix_tag": "v3.6.5",
+  "determinate_nix_tag": "v3.6.6",
   "checkout_action_tag": "v4.2.2"
 }

From 99d69447336e47dd56852368449fb14b58bd1c3b Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 24 Jun 2025 16:46:14 +0000
Subject: [PATCH 13/56] Prepare release v3.6.7


From afe0551140b6ef8858e7a3d3044cdb0b0d5b3a5c Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 24 Jun 2025 16:46:16 +0000
Subject: [PATCH 14/56] Update the state.json for v3.6.7

---
 tools/state.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tools/state.json b/tools/state.json
index 56231da..8f06edc 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "999d616271516551cacca0c8b34a02e94d4f79e8",
-  "determinate_nix_tag": "v3.6.6",
+  "nix_installer_action_revision": "b336b210d0cb834c37359adfc085c405d31b78b8",
+  "determinate_nix_tag": "v3.6.7",
   "checkout_action_tag": "v4.2.2"
 }

From cac40869605ce795f3801c5ffe2ab716555595db Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 24 Jun 2025 16:46:20 +0000
Subject: [PATCH 15/56] Update README.md and action.yml for v3.6.7

---
 README.md  | 8 ++++----
 action.yml | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 6def05c..bca33cd 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.6 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.7 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.6` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.7` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.6.6 installation
+- Consistent Determinate Nix v3.6.7 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.6`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.7`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index af8ac4b..94f7a30 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.6.6"
+            "default": "v3.6.7"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@999d616271516551cacca0c8b34a02e94d4f79e8",
+                "uses": "DeterminateSystems/nix-installer-action@b336b210d0cb834c37359adfc085c405d31b78b8",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",

From 02956b5c5481e6fcbe6a79e18d15eb2861301488 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 24 Jun 2025 16:46:23 +0000
Subject: [PATCH 16/56] flake.lock: Update
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.816272%2Brev-9e83b64f727c88a7711a2c463a7b16eedb69a84c/01977fb5-daf4-741f-bbb9-d7589f1b897f/source.tar.gz?narHash=sha256-v263g4GbxXv87hMXMCpjkIxd/viIF7p3JpJrwgKdNiI%3D' (2025-06-17)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.819493%2Brev-4206c4cb56751df534751b058295ea61357bbbaa/019799e6-cf8d-7795-8efd-0d63f27e6ad8/source.tar.gz?narHash=sha256-VLFNc4egNjovYVxDGyBYTrvVCgDYgENp5bVi9fPTDYc%3D' (2025-06-21)
---
 flake.lock | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/flake.lock b/flake.lock
index ba44ee5..207c2c7 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1750134718,
-        "narHash": "sha256-v263g4GbxXv87hMXMCpjkIxd/viIF7p3JpJrwgKdNiI=",
-        "rev": "9e83b64f727c88a7711a2c463a7b16eedb69a84c",
-        "revCount": 816272,
+        "lastModified": 1750506804,
+        "narHash": "sha256-VLFNc4egNjovYVxDGyBYTrvVCgDYgENp5bVi9fPTDYc=",
+        "rev": "4206c4cb56751df534751b058295ea61357bbbaa",
+        "revCount": 819493,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.816272%2Brev-9e83b64f727c88a7711a2c463a7b16eedb69a84c/01977fb5-daf4-741f-bbb9-d7589f1b897f/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.819493%2Brev-4206c4cb56751df534751b058295ea61357bbbaa/019799e6-cf8d-7795-8efd-0d63f27e6ad8/source.tar.gz"
       },
       "original": {
         "type": "tarball",

From be37d3c211163697faaad696b47c35ecf27fc3d6 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 25 Jun 2025 19:44:04 +0000
Subject: [PATCH 17/56] Release v3.6.8 (#18)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.6.8

* Update the state.json for v3.6.8

* Update README.md and action.yml for v3.6.8

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.819493%2Brev-4206c4cb56751df534751b058295ea61357bbbaa/019799e6-cf8d-7795-8efd-0d63f27e6ad8/source.tar.gz?narHash=sha256-VLFNc4egNjovYVxDGyBYTrvVCgDYgENp5bVi9fPTDYc%3D' (2025-06-21)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.820697%2Brev-4b1164c3215f018c4442463a27689d973cffd750/0197a680-0b31-75b6-a2ae-2a097616dd90/source.tar.gz?narHash=sha256-Z0djmTa1YmnGMfE9jEe05oO4zggjDmxOGKwt844bUhE%3D' (2025-06-24)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index bca33cd..06ecd30 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.7 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.8 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.7` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.8` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.6.7 installation
+- Consistent Determinate Nix v3.6.8 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.7`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.8`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 94f7a30..e06d4db 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.6.7"
+            "default": "v3.6.8"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@b336b210d0cb834c37359adfc085c405d31b78b8",
+                "uses": "DeterminateSystems/nix-installer-action@41e0dcf2158a3d6eefca89332cc236df1733e8a7",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 207c2c7..f1873bd 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1750506804,
-        "narHash": "sha256-VLFNc4egNjovYVxDGyBYTrvVCgDYgENp5bVi9fPTDYc=",
-        "rev": "4206c4cb56751df534751b058295ea61357bbbaa",
-        "revCount": 819493,
+        "lastModified": 1750741721,
+        "narHash": "sha256-Z0djmTa1YmnGMfE9jEe05oO4zggjDmxOGKwt844bUhE=",
+        "rev": "4b1164c3215f018c4442463a27689d973cffd750",
+        "revCount": 820697,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.819493%2Brev-4206c4cb56751df534751b058295ea61357bbbaa/019799e6-cf8d-7795-8efd-0d63f27e6ad8/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.820697%2Brev-4b1164c3215f018c4442463a27689d973cffd750/0197a680-0b31-75b6-a2ae-2a097616dd90/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 8f06edc..28fa9c7 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "b336b210d0cb834c37359adfc085c405d31b78b8",
-  "determinate_nix_tag": "v3.6.7",
+  "nix_installer_action_revision": "41e0dcf2158a3d6eefca89332cc236df1733e8a7",
+  "determinate_nix_tag": "v3.6.8",
   "checkout_action_tag": "v4.2.2"
 }

From d4b23d0b9eeeaeba3648c24d43bcb623dcf75336 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 3 Jul 2025 14:50:21 -0700
Subject: [PATCH 18/56] Release v3.7.0 (#19)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.7.0

* Update the state.json for v3.7.0

* Update README.md and action.yml for v3.7.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.820697%2Brev-4b1164c3215f018c4442463a27689d973cffd750/0197a680-0b31-75b6-a2ae-2a097616dd90/source.tar.gz?narHash=sha256-Z0djmTa1YmnGMfE9jEe05oO4zggjDmxOGKwt844bUhE%3D' (2025-06-24)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.823481%2Brev-3016b4b15d13f3089db8a41ef937b13a9e33a8df/0197c395-ee09-7755-bdd6-ec3500ffc720/source.tar.gz?narHash=sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU%2Btt4YY%3D' (2025-06-30)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 06ecd30..838dff3 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.6.8 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.7.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.6.8` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.7.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.6.8 installation
+- Consistent Determinate Nix v3.7.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.6.8`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.7.0`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index e06d4db..8235bc1 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.6.8"
+            "default": "v3.7.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@41e0dcf2158a3d6eefca89332cc236df1733e8a7",
+                "uses": "DeterminateSystems/nix-installer-action@c723f3a885e3f1d866d91f4f0c33dd44b1fc7c60",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index f1873bd..df55af7 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1750741721,
-        "narHash": "sha256-Z0djmTa1YmnGMfE9jEe05oO4zggjDmxOGKwt844bUhE=",
-        "rev": "4b1164c3215f018c4442463a27689d973cffd750",
-        "revCount": 820697,
+        "lastModified": 1751271578,
+        "narHash": "sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU+tt4YY=",
+        "rev": "3016b4b15d13f3089db8a41ef937b13a9e33a8df",
+        "revCount": 823481,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.820697%2Brev-4b1164c3215f018c4442463a27689d973cffd750/0197a680-0b31-75b6-a2ae-2a097616dd90/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.823481%2Brev-3016b4b15d13f3089db8a41ef937b13a9e33a8df/0197c395-ee09-7755-bdd6-ec3500ffc720/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 28fa9c7..cd33486 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "41e0dcf2158a3d6eefca89332cc236df1733e8a7",
-  "determinate_nix_tag": "v3.6.8",
+  "nix_installer_action_revision": "c723f3a885e3f1d866d91f4f0c33dd44b1fc7c60",
+  "determinate_nix_tag": "v3.7.0",
   "checkout_action_tag": "v4.2.2"
 }

From 9770a4910c6cacf42ba4e6de9b689ac8d66326df Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 10 Jul 2025 19:32:05 +0000
Subject: [PATCH 19/56] Release v3.8.0 (#20)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.8.0

* Update the state.json for v3.8.0

* Update README.md and action.yml for v3.8.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.823481%2Brev-3016b4b15d13f3089db8a41ef937b13a9e33a8df/0197c395-ee09-7755-bdd6-ec3500ffc720/source.tar.gz?narHash=sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU%2Btt4YY%3D' (2025-06-30)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.826938%2Brev-9807714d6944a957c2e036f84b0ff8caf9930bc0/0197efe4-f8f2-7c09-b804-8da5cce18d2e/source.tar.gz?narHash=sha256-LwWRsENAZJKUdD3SpLluwDmdXY9F45ZEgCb0X%2BxgOL0%3D' (2025-07-08)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 838dff3..840666a 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.7.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.7.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.7.0 installation
+- Consistent Determinate Nix v3.8.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.7.0`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.0`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 8235bc1..d59af9b 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.7.0"
+            "default": "v3.8.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index df55af7..a4dd61d 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1751271578,
-        "narHash": "sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU+tt4YY=",
-        "rev": "3016b4b15d13f3089db8a41ef937b13a9e33a8df",
-        "revCount": 823481,
+        "lastModified": 1751984180,
+        "narHash": "sha256-LwWRsENAZJKUdD3SpLluwDmdXY9F45ZEgCb0X+xgOL0=",
+        "rev": "9807714d6944a957c2e036f84b0ff8caf9930bc0",
+        "revCount": 826938,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.823481%2Brev-3016b4b15d13f3089db8a41ef937b13a9e33a8df/0197c395-ee09-7755-bdd6-ec3500ffc720/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.826938%2Brev-9807714d6944a957c2e036f84b0ff8caf9930bc0/0197efe4-f8f2-7c09-b804-8da5cce18d2e/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index cd33486..b3240ae 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "c723f3a885e3f1d866d91f4f0c33dd44b1fc7c60",
-  "determinate_nix_tag": "v3.7.0",
+  "determinate_nix_tag": "v3.8.0",
   "checkout_action_tag": "v4.2.2"
 }

From 9360bb845c9affd9ee1fd41d4e893b32b92dacf4 Mon Sep 17 00:00:00 2001
From: Graham Christensen <graham@grahamc.com>
Date: Fri, 11 Jul 2025 18:26:00 -0400
Subject: [PATCH 20/56] Revert "Release v3.8.0 (#20)"

This reverts commit 9770a4910c6cacf42ba4e6de9b689ac8d66326df.
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 840666a..838dff3 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.7.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.7.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.8.0 installation
+- Consistent Determinate Nix v3.7.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.0`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.7.0`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index d59af9b..8235bc1 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.8.0"
+            "default": "v3.7.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index a4dd61d..df55af7 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1751984180,
-        "narHash": "sha256-LwWRsENAZJKUdD3SpLluwDmdXY9F45ZEgCb0X+xgOL0=",
-        "rev": "9807714d6944a957c2e036f84b0ff8caf9930bc0",
-        "revCount": 826938,
+        "lastModified": 1751271578,
+        "narHash": "sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU+tt4YY=",
+        "rev": "3016b4b15d13f3089db8a41ef937b13a9e33a8df",
+        "revCount": 823481,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.826938%2Brev-9807714d6944a957c2e036f84b0ff8caf9930bc0/0197efe4-f8f2-7c09-b804-8da5cce18d2e/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.823481%2Brev-3016b4b15d13f3089db8a41ef937b13a9e33a8df/0197c395-ee09-7755-bdd6-ec3500ffc720/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index b3240ae..cd33486 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "c723f3a885e3f1d866d91f4f0c33dd44b1fc7c60",
-  "determinate_nix_tag": "v3.8.0",
+  "determinate_nix_tag": "v3.7.0",
   "checkout_action_tag": "v4.2.2"
 }

From d4c81d785cbaecf985a15bd726638c5c405c9923 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 11 Jul 2025 21:40:37 -0400
Subject: [PATCH 21/56] Release v3.8.1 (#22)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.8.1

* Update the state.json for v3.8.1

* Update README.md and action.yml for v3.8.1

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.823481%2Brev-3016b4b15d13f3089db8a41ef937b13a9e33a8df/0197c395-ee09-7755-bdd6-ec3500ffc720/source.tar.gz?narHash=sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU%2Btt4YY%3D' (2025-06-30)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.826938%2Brev-9807714d6944a957c2e036f84b0ff8caf9930bc0/0197efe4-f8f2-7c09-b804-8da5cce18d2e/source.tar.gz?narHash=sha256-LwWRsENAZJKUdD3SpLluwDmdXY9F45ZEgCb0X%2BxgOL0%3D' (2025-07-08)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 838dff3..85e74d3 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.7.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.1 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.7.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.1` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.7.0 installation
+- Consistent Determinate Nix v3.8.1 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.7.0`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.1`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 8235bc1..ba3a3fc 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.7.0"
+            "default": "v3.8.1"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index df55af7..a4dd61d 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1751271578,
-        "narHash": "sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU+tt4YY=",
-        "rev": "3016b4b15d13f3089db8a41ef937b13a9e33a8df",
-        "revCount": 823481,
+        "lastModified": 1751984180,
+        "narHash": "sha256-LwWRsENAZJKUdD3SpLluwDmdXY9F45ZEgCb0X+xgOL0=",
+        "rev": "9807714d6944a957c2e036f84b0ff8caf9930bc0",
+        "revCount": 826938,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.823481%2Brev-3016b4b15d13f3089db8a41ef937b13a9e33a8df/0197c395-ee09-7755-bdd6-ec3500ffc720/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.826938%2Brev-9807714d6944a957c2e036f84b0ff8caf9930bc0/0197efe4-f8f2-7c09-b804-8da5cce18d2e/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index cd33486..9ab831a 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "c723f3a885e3f1d866d91f4f0c33dd44b1fc7c60",
-  "determinate_nix_tag": "v3.7.0",
+  "determinate_nix_tag": "v3.8.1",
   "checkout_action_tag": "v4.2.2"
 }

From 2b7bca919ce8854111c6f9135091ddf5eea8e0eb Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Sat, 12 Jul 2025 09:42:48 -0700
Subject: [PATCH 22/56] Release v3.8.2 (#23)

* Prepare release v3.8.2

* Update the state.json for v3.8.2

* Update README.md and action.yml for v3.8.2

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        | 8 ++++----
 action.yml       | 2 +-
 tools/state.json | 2 +-
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 85e74d3..aec3677 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.1 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.2 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.1` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.2` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.8.1 installation
+- Consistent Determinate Nix v3.8.2 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.1`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.2`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index ba3a3fc..8f83511 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.8.1"
+            "default": "v3.8.2"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/tools/state.json b/tools/state.json
index 9ab831a..2fcd7bd 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "c723f3a885e3f1d866d91f4f0c33dd44b1fc7c60",
-  "determinate_nix_tag": "v3.8.1",
+  "determinate_nix_tag": "v3.8.2",
   "checkout_action_tag": "v4.2.2"
 }

From 861e8b3c76e62e31b75460bc69265e6965fedb55 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 17 Jul 2025 15:10:34 +0000
Subject: [PATCH 23/56] Prepare release v3.8.2


From faff3a464afeb23567cf206187d75642c2fcb656 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 17 Jul 2025 15:10:37 +0000
Subject: [PATCH 24/56] Update the state.json for v3.8.2

---
 tools/state.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/state.json b/tools/state.json
index 2fcd7bd..096da4b 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "c723f3a885e3f1d866d91f4f0c33dd44b1fc7c60",
+  "nix_installer_action_revision": "90bb610b90bf290cad97484ba341453bd1cbefea",
   "determinate_nix_tag": "v3.8.2",
   "checkout_action_tag": "v4.2.2"
 }

From c8a01ff6ebcd5ddf41c6ab283d3a663f8cd18407 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 17 Jul 2025 15:10:40 +0000
Subject: [PATCH 25/56] Update README.md and action.yml for v3.8.2

---
 action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index 8f83511..c92ec78 100644
--- a/action.yml
+++ b/action.yml
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@c723f3a885e3f1d866d91f4f0c33dd44b1fc7c60",
+                "uses": "DeterminateSystems/nix-installer-action@90bb610b90bf290cad97484ba341453bd1cbefea",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",

From f52ec4409ef760781b1144aa60e0dff34532a27a Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 17 Jul 2025 15:10:43 +0000
Subject: [PATCH 26/56] flake.lock: Update
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.826938%2Brev-9807714d6944a957c2e036f84b0ff8caf9930bc0/0197efe4-f8f2-7c09-b804-8da5cce18d2e/source.tar.gz?narHash=sha256-LwWRsENAZJKUdD3SpLluwDmdXY9F45ZEgCb0X%2BxgOL0%3D' (2025-07-08)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.830073%2Brev-62e0f05ede1da0d54515d4ea8ce9c733f12d9f08/01980c9b-b772-7845-b3a6-0d40f1f219ce/source.tar.gz?narHash=sha256-JHQbm%2BOcGp32wAsXTE/FLYGNpb%2B4GLi5oTvCxwSoBOA%3D' (2025-07-14)
---
 flake.lock | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/flake.lock b/flake.lock
index a4dd61d..0117e65 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1751984180,
-        "narHash": "sha256-LwWRsENAZJKUdD3SpLluwDmdXY9F45ZEgCb0X+xgOL0=",
-        "rev": "9807714d6944a957c2e036f84b0ff8caf9930bc0",
-        "revCount": 826938,
+        "lastModified": 1752480373,
+        "narHash": "sha256-JHQbm+OcGp32wAsXTE/FLYGNpb+4GLi5oTvCxwSoBOA=",
+        "rev": "62e0f05ede1da0d54515d4ea8ce9c733f12d9f08",
+        "revCount": 830073,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.826938%2Brev-9807714d6944a957c2e036f84b0ff8caf9930bc0/0197efe4-f8f2-7c09-b804-8da5cce18d2e/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.830073%2Brev-62e0f05ede1da0d54515d4ea8ce9c733f12d9f08/01980c9b-b772-7845-b3a6-0d40f1f219ce/source.tar.gz"
       },
       "original": {
         "type": "tarball",

From b5dfbf08e65766ea49e57ba19c5cb42dd2d3f409 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 29 Jul 2025 10:11:40 -0700
Subject: [PATCH 27/56] Release v3.8.4 (#25)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.8.4

* Update the state.json for v3.8.4

* Update README.md and action.yml for v3.8.4

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.830073%2Brev-62e0f05ede1da0d54515d4ea8ce9c733f12d9f08/01980c9b-b772-7845-b3a6-0d40f1f219ce/source.tar.gz?narHash=sha256-JHQbm%2BOcGp32wAsXTE/FLYGNpb%2B4GLi5oTvCxwSoBOA%3D' (2025-07-14)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.835620%2Brev-17f6bd177404d6d43017595c5264756764444ab8/0198521f-e242-717e-8a25-d1421749c0c3/source.tar.gz?narHash=sha256-Znl7rzuxKg/Mdm6AhimcKynM7V3YeNDIcLjBuoBcmNs%3D' (2025-07-26)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index aec3677..ffd871e 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.2 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.4 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.2` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.4` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.8.2 installation
+- Consistent Determinate Nix v3.8.4 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.2`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.4`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index c92ec78..05c52a9 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.8.2"
+            "default": "v3.8.4"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index 0117e65..d958ddc 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1752480373,
-        "narHash": "sha256-JHQbm+OcGp32wAsXTE/FLYGNpb+4GLi5oTvCxwSoBOA=",
-        "rev": "62e0f05ede1da0d54515d4ea8ce9c733f12d9f08",
-        "revCount": 830073,
+        "lastModified": 1753549186,
+        "narHash": "sha256-Znl7rzuxKg/Mdm6AhimcKynM7V3YeNDIcLjBuoBcmNs=",
+        "rev": "17f6bd177404d6d43017595c5264756764444ab8",
+        "revCount": 835620,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.830073%2Brev-62e0f05ede1da0d54515d4ea8ce9c733f12d9f08/01980c9b-b772-7845-b3a6-0d40f1f219ce/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.835620%2Brev-17f6bd177404d6d43017595c5264756764444ab8/0198521f-e242-717e-8a25-d1421749c0c3/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 096da4b..02d0056 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "90bb610b90bf290cad97484ba341453bd1cbefea",
-  "determinate_nix_tag": "v3.8.2",
+  "determinate_nix_tag": "v3.8.4",
   "checkout_action_tag": "v4.2.2"
 }

From 379b47b8e270e906339a489d56466ccfd2f69d8c Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 5 Aug 2025 12:46:04 -0700
Subject: [PATCH 28/56] Release v3.8.5 (#26)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.8.5

* Update the state.json for v3.8.5

* Update README.md and action.yml for v3.8.5

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.835620%2Brev-17f6bd177404d6d43017595c5264756764444ab8/0198521f-e242-717e-8a25-d1421749c0c3/source.tar.gz?narHash=sha256-Znl7rzuxKg/Mdm6AhimcKynM7V3YeNDIcLjBuoBcmNs%3D' (2025-07-26)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.838708%2Brev-5b09dc45f24cf32316283e62aec81ffee3c3e376/0198762e-0143-77ff-9b8e-5845fdbe02c7/source.tar.gz?narHash=sha256-Q/I2xJn/j1wpkGhWkQnm20nShYnG7TI99foDBpXm1SY%3D' (2025-08-03)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index ffd871e..0f36383 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.4 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.5 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.4` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.5` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.8.4 installation
+- Consistent Determinate Nix v3.8.5 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.4`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.5`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 05c52a9..425b88b 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.8.4"
+            "default": "v3.8.5"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@90bb610b90bf290cad97484ba341453bd1cbefea",
+                "uses": "DeterminateSystems/nix-installer-action@428f3c64a3f56011a8bfb3044a519374aff8e7df",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index d958ddc..13ec6a1 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1753549186,
-        "narHash": "sha256-Znl7rzuxKg/Mdm6AhimcKynM7V3YeNDIcLjBuoBcmNs=",
-        "rev": "17f6bd177404d6d43017595c5264756764444ab8",
-        "revCount": 835620,
+        "lastModified": 1754214453,
+        "narHash": "sha256-Q/I2xJn/j1wpkGhWkQnm20nShYnG7TI99foDBpXm1SY=",
+        "rev": "5b09dc45f24cf32316283e62aec81ffee3c3e376",
+        "revCount": 838708,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.835620%2Brev-17f6bd177404d6d43017595c5264756764444ab8/0198521f-e242-717e-8a25-d1421749c0c3/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.838708%2Brev-5b09dc45f24cf32316283e62aec81ffee3c3e376/0198762e-0143-77ff-9b8e-5845fdbe02c7/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 02d0056..ebb8232 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "90bb610b90bf290cad97484ba341453bd1cbefea",
-  "determinate_nix_tag": "v3.8.4",
+  "nix_installer_action_revision": "428f3c64a3f56011a8bfb3044a519374aff8e7df",
+  "determinate_nix_tag": "v3.8.5",
   "checkout_action_tag": "v4.2.2"
 }

From b7303d63f88908d15f0bcb207e60b3a0ea7f1712 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 20 Aug 2025 20:09:32 -0400
Subject: [PATCH 29/56] Release v3.8.6 (#27)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.8.6

* Update the state.json for v3.8.6

* Update README.md and action.yml for v3.8.6

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.838708%2Brev-5b09dc45f24cf32316283e62aec81ffee3c3e376/0198762e-0143-77ff-9b8e-5845fdbe02c7/source.tar.gz?narHash=sha256-Q/I2xJn/j1wpkGhWkQnm20nShYnG7TI99foDBpXm1SY%3D' (2025-08-03)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.846535%2Brev-20075955deac2583bb12f07151c2df830ef346b4/0198c7b8-5e15-730c-959e-40cbb5fe01b3/source.tar.gz?narHash=sha256-HMwfAJBdrr8wXAkbGhtcby1zGFvs%2BStOp19xNsbqdOg%3D' (2025-08-19)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        | 10 +++++-----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 0f36383..e965c2a 100644
--- a/README.md
+++ b/README.md
@@ -52,8 +52,8 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4.2.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.5 to pin to a release
+      - uses: actions/checkout@v5.0.0
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.6 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.5` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.6` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.8.5 installation
+- Consistent Determinate Nix v3.8.6 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.5`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.6`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 425b88b..ba96234 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.8.5"
+            "default": "v3.8.6"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index 13ec6a1..f4d74a3 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1754214453,
-        "narHash": "sha256-Q/I2xJn/j1wpkGhWkQnm20nShYnG7TI99foDBpXm1SY=",
-        "rev": "5b09dc45f24cf32316283e62aec81ffee3c3e376",
-        "revCount": 838708,
+        "lastModified": 1755615617,
+        "narHash": "sha256-HMwfAJBdrr8wXAkbGhtcby1zGFvs+StOp19xNsbqdOg=",
+        "rev": "20075955deac2583bb12f07151c2df830ef346b4",
+        "revCount": 846535,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.838708%2Brev-5b09dc45f24cf32316283e62aec81ffee3c3e376/0198762e-0143-77ff-9b8e-5845fdbe02c7/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.846535%2Brev-20075955deac2583bb12f07151c2df830ef346b4/0198c7b8-5e15-730c-959e-40cbb5fe01b3/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index ebb8232..9bb56b1 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "428f3c64a3f56011a8bfb3044a519374aff8e7df",
-  "determinate_nix_tag": "v3.8.5",
-  "checkout_action_tag": "v4.2.2"
+  "determinate_nix_tag": "v3.8.6",
+  "checkout_action_tag": "v5.0.0"
 }

From edc15760afe38ba03548cbefd597fffcb8f2a05d Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 26 Aug 2025 19:24:45 -0400
Subject: [PATCH 30/56] Release v3.9.0 (#28)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.9.0

* Update the state.json for v3.9.0

* Update README.md and action.yml for v3.9.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.846535%2Brev-20075955deac2583bb12f07151c2df830ef346b4/0198c7b8-5e15-730c-959e-40cbb5fe01b3/source.tar.gz?narHash=sha256-HMwfAJBdrr8wXAkbGhtcby1zGFvs%2BStOp19xNsbqdOg%3D' (2025-08-19)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.851350%2Brev-3b9f00d7a7bf68acd4c4abb9d43695afb04e03a5/0198e4ae-49a1-775e-8b7c-803015cc6285/source.tar.gz?narHash=sha256-XexyKZpf46cMiO5Vbj%2BdWSAXOnr285GHsMch8FBoHbc%3D' (2025-08-25)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index e965c2a..1f76e74 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.8.6 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.9.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.8.6` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.9.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.8.6 installation
+- Consistent Determinate Nix v3.9.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.8.6`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.9.0`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index ba96234..4bfb04f 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.8.6"
+            "default": "v3.9.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index f4d74a3..77477b5 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1755615617,
-        "narHash": "sha256-HMwfAJBdrr8wXAkbGhtcby1zGFvs+StOp19xNsbqdOg=",
-        "rev": "20075955deac2583bb12f07151c2df830ef346b4",
-        "revCount": 846535,
+        "lastModified": 1756125398,
+        "narHash": "sha256-XexyKZpf46cMiO5Vbj+dWSAXOnr285GHsMch8FBoHbc=",
+        "rev": "3b9f00d7a7bf68acd4c4abb9d43695afb04e03a5",
+        "revCount": 851350,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.846535%2Brev-20075955deac2583bb12f07151c2df830ef346b4/0198c7b8-5e15-730c-959e-40cbb5fe01b3/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.851350%2Brev-3b9f00d7a7bf68acd4c4abb9d43695afb04e03a5/0198e4ae-49a1-775e-8b7c-803015cc6285/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 9bb56b1..13021de 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "428f3c64a3f56011a8bfb3044a519374aff8e7df",
-  "determinate_nix_tag": "v3.8.6",
+  "determinate_nix_tag": "v3.9.0",
   "checkout_action_tag": "v5.0.0"
 }

From fd3eb131b9b46cc1dd978a7c0ba3fce79dd7d3eb Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 28 Aug 2025 00:29:20 -0400
Subject: [PATCH 31/56] Release v3.9.1 (#29)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.9.1

* Update the state.json for v3.9.1

* Update README.md and action.yml for v3.9.1

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.851350%2Brev-3b9f00d7a7bf68acd4c4abb9d43695afb04e03a5/0198e4ae-49a1-775e-8b7c-803015cc6285/source.tar.gz?narHash=sha256-XexyKZpf46cMiO5Vbj%2BdWSAXOnr285GHsMch8FBoHbc%3D' (2025-08-25)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.852432%2Brev-8a6d5427d99ec71c64f0b93d45778c889005d9c2/0198ed0a-af20-7ff9-9fe3-8435302f9575/source.tar.gz?narHash=sha256-cr748nSmpfvnhqSXPiCfUPxRz2FJnvf/RjJGvFfaCsM%3D' (2025-08-27)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 1f76e74..6299da5 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.9.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.9.1 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.9.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.9.1` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.9.0 installation
+- Consistent Determinate Nix v3.9.1 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.9.0`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.9.1`                   |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 4bfb04f..edfc5d4 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.9.0"
+            "default": "v3.9.1"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index 77477b5..a8acf51 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1756125398,
-        "narHash": "sha256-XexyKZpf46cMiO5Vbj+dWSAXOnr285GHsMch8FBoHbc=",
-        "rev": "3b9f00d7a7bf68acd4c4abb9d43695afb04e03a5",
-        "revCount": 851350,
+        "lastModified": 1756266583,
+        "narHash": "sha256-cr748nSmpfvnhqSXPiCfUPxRz2FJnvf/RjJGvFfaCsM=",
+        "rev": "8a6d5427d99ec71c64f0b93d45778c889005d9c2",
+        "revCount": 852432,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.851350%2Brev-3b9f00d7a7bf68acd4c4abb9d43695afb04e03a5/0198e4ae-49a1-775e-8b7c-803015cc6285/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.852432%2Brev-8a6d5427d99ec71c64f0b93d45778c889005d9c2/0198ed0a-af20-7ff9-9fe3-8435302f9575/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 13021de..8b8e47d 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "428f3c64a3f56011a8bfb3044a519374aff8e7df",
-  "determinate_nix_tag": "v3.9.0",
+  "determinate_nix_tag": "v3.9.1",
   "checkout_action_tag": "v5.0.0"
 }

From f6255c9bf03fc30426ffd8050567cac5e59f9076 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 2 Sep 2025 08:29:17 -0400
Subject: [PATCH 32/56] Release v3.10.0 (#30)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.10.0

* Update the state.json for v3.10.0

* Update README.md and action.yml for v3.10.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.852432%2Brev-8a6d5427d99ec71c64f0b93d45778c889005d9c2/0198ed0a-af20-7ff9-9fe3-8435302f9575/source.tar.gz?narHash=sha256-cr748nSmpfvnhqSXPiCfUPxRz2FJnvf/RjJGvFfaCsM%3D' (2025-08-27)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.854036%2Brev-d7600c775f877cd87b4f5a831c28aa94137377aa/0198fc13-c2a8-7fe8-b34c-7e1f9e975869/source.tar.gz?narHash=sha256-tlOn88coG5fzdyqz6R93SQL5Gpq%2Bm/DsWpekNFhqPQk%3D' (2025-08-30)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 6299da5..4bea676 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.9.1 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.10.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.9.1` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.10.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.9.1 installation
+- Consistent Determinate Nix v3.10.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.9.1`                   |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.10.0`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index edfc5d4..4623dcb 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.9.1"
+            "default": "v3.10.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index a8acf51..42effac 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1756266583,
-        "narHash": "sha256-cr748nSmpfvnhqSXPiCfUPxRz2FJnvf/RjJGvFfaCsM=",
-        "rev": "8a6d5427d99ec71c64f0b93d45778c889005d9c2",
-        "revCount": 852432,
+        "lastModified": 1756542300,
+        "narHash": "sha256-tlOn88coG5fzdyqz6R93SQL5Gpq+m/DsWpekNFhqPQk=",
+        "rev": "d7600c775f877cd87b4f5a831c28aa94137377aa",
+        "revCount": 854036,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.852432%2Brev-8a6d5427d99ec71c64f0b93d45778c889005d9c2/0198ed0a-af20-7ff9-9fe3-8435302f9575/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.854036%2Brev-d7600c775f877cd87b4f5a831c28aa94137377aa/0198fc13-c2a8-7fe8-b34c-7e1f9e975869/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 8b8e47d..8e4500d 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "428f3c64a3f56011a8bfb3044a519374aff8e7df",
-  "determinate_nix_tag": "v3.9.1",
+  "determinate_nix_tag": "v3.10.0",
   "checkout_action_tag": "v5.0.0"
 }

From 0ee5aed84c3e8eb46692f03b747f659533fc40d5 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 2 Sep 2025 17:10:23 -0400
Subject: [PATCH 33/56] Release v3.10.1 (#31)

* Prepare release v3.10.1

* Update the state.json for v3.10.1

* Update README.md and action.yml for v3.10.1

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        | 8 ++++----
 action.yml       | 2 +-
 tools/state.json | 2 +-
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 4bea676..cd5f6dd 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.10.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.10.1 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.10.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.10.1` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.10.0 installation
+- Consistent Determinate Nix v3.10.1 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.10.0`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.10.1`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 4623dcb..e248825 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.10.0"
+            "default": "v3.10.1"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/tools/state.json b/tools/state.json
index 8e4500d..b357ee4 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "428f3c64a3f56011a8bfb3044a519374aff8e7df",
-  "determinate_nix_tag": "v3.10.0",
+  "determinate_nix_tag": "v3.10.1",
   "checkout_action_tag": "v5.0.0"
 }

From 2e4c1e0a6dc9891bf08da17fcf572cec9e5f7e70 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 3 Sep 2025 19:02:54 -0400
Subject: [PATCH 34/56] Release v3.11.0 (#32)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.11.0

* Update the state.json for v3.11.0

* Update README.md and action.yml for v3.11.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.854036%2Brev-d7600c775f877cd87b4f5a831c28aa94137377aa/0198fc13-c2a8-7fe8-b34c-7e1f9e975869/source.tar.gz?narHash=sha256-tlOn88coG5fzdyqz6R93SQL5Gpq%2Bm/DsWpekNFhqPQk%3D' (2025-08-30)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.855242%2Brev-d0fc30899600b9b3466ddb260fd83deb486c32f1/01990df1-e511-7b09-83a4-f9910966d674/source.tar.gz?narHash=sha256-rw/PHa1cqiePdBxhF66V7R%2BWAP8WekQ0mCDG4CFqT8Y%3D' (2025-09-02)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index cd5f6dd..abbf036 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.10.1 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.10.1` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.10.1 installation
+- Consistent Determinate Nix v3.11.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.10.1`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.0`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index e248825..501ac5a 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.10.1"
+            "default": "v3.11.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@428f3c64a3f56011a8bfb3044a519374aff8e7df",
+                "uses": "DeterminateSystems/nix-installer-action@2c3a2981f15d2bf82ad96bd3cf62a00941f310b5",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 42effac..dc93784 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1756542300,
-        "narHash": "sha256-tlOn88coG5fzdyqz6R93SQL5Gpq+m/DsWpekNFhqPQk=",
-        "rev": "d7600c775f877cd87b4f5a831c28aa94137377aa",
-        "revCount": 854036,
+        "lastModified": 1756787288,
+        "narHash": "sha256-rw/PHa1cqiePdBxhF66V7R+WAP8WekQ0mCDG4CFqT8Y=",
+        "rev": "d0fc30899600b9b3466ddb260fd83deb486c32f1",
+        "revCount": 855242,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.854036%2Brev-d7600c775f877cd87b4f5a831c28aa94137377aa/0198fc13-c2a8-7fe8-b34c-7e1f9e975869/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.855242%2Brev-d0fc30899600b9b3466ddb260fd83deb486c32f1/01990df1-e511-7b09-83a4-f9910966d674/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index b357ee4..13a3578 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "428f3c64a3f56011a8bfb3044a519374aff8e7df",
-  "determinate_nix_tag": "v3.10.1",
+  "nix_installer_action_revision": "2c3a2981f15d2bf82ad96bd3cf62a00941f310b5",
+  "determinate_nix_tag": "v3.11.0",
   "checkout_action_tag": "v5.0.0"
 }

From a7e500c712ad97316904566d98013596e868d2fb Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 5 Sep 2025 02:01:56 +0000
Subject: [PATCH 35/56] Release v3.11.1 (#33)

* Prepare release v3.11.1

* Update the state.json for v3.11.1

* Update README.md and action.yml for v3.11.1

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        | 8 ++++----
 action.yml       | 2 +-
 tools/state.json | 2 +-
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index abbf036..cd98198 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.1 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.1` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.11.0 installation
+- Consistent Determinate Nix v3.11.1 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.0`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.1`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 501ac5a..d2054c0 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.11.0"
+            "default": "v3.11.1"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/tools/state.json b/tools/state.json
index 13a3578..8424997 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "2c3a2981f15d2bf82ad96bd3cf62a00941f310b5",
-  "determinate_nix_tag": "v3.11.0",
+  "determinate_nix_tag": "v3.11.1",
   "checkout_action_tag": "v5.0.0"
 }

From dbda91f6efef3ee627f56175120aa9543687d830 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 12 Sep 2025 17:16:41 -0400
Subject: [PATCH 36/56] Release v3.11.2 (#34)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.11.2

* Update the state.json for v3.11.2

* Update README.md and action.yml for v3.11.2

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.855242%2Brev-d0fc30899600b9b3466ddb260fd83deb486c32f1/01990df1-e511-7b09-83a4-f9910966d674/source.tar.gz?narHash=sha256-rw/PHa1cqiePdBxhF66V7R%2BWAP8WekQ0mCDG4CFqT8Y%3D' (2025-09-02)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.859555%2Brev-ab0f3607a6c7486ea22229b92ed2d355f1482ee0/01993860-4c2b-73a3-9c67-955d87cd3025/source.tar.gz?narHash=sha256-zwE/e7CuPJUWKdvvTCB7iunV4E/%2BG0lKfv4kk/5Izdg%3D' (2025-09-10)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index cd98198..bdcc034 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.1 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.2 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.1` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.2` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.11.1 installation
+- Consistent Determinate Nix v3.11.2 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.1`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.2`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index d2054c0..058e4db 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.11.1"
+            "default": "v3.11.2"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@2c3a2981f15d2bf82ad96bd3cf62a00941f310b5",
+                "uses": "DeterminateSystems/nix-installer-action@45a18a69953f27af3c2bfad0a5e01c38ef2da462",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index dc93784..0f8165b 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1756787288,
-        "narHash": "sha256-rw/PHa1cqiePdBxhF66V7R+WAP8WekQ0mCDG4CFqT8Y=",
-        "rev": "d0fc30899600b9b3466ddb260fd83deb486c32f1",
-        "revCount": 855242,
+        "lastModified": 1757487488,
+        "narHash": "sha256-zwE/e7CuPJUWKdvvTCB7iunV4E/+G0lKfv4kk/5Izdg=",
+        "rev": "ab0f3607a6c7486ea22229b92ed2d355f1482ee0",
+        "revCount": 859555,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.855242%2Brev-d0fc30899600b9b3466ddb260fd83deb486c32f1/01990df1-e511-7b09-83a4-f9910966d674/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.859555%2Brev-ab0f3607a6c7486ea22229b92ed2d355f1482ee0/01993860-4c2b-73a3-9c67-955d87cd3025/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 8424997..f7a1462 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "2c3a2981f15d2bf82ad96bd3cf62a00941f310b5",
-  "determinate_nix_tag": "v3.11.1",
+  "nix_installer_action_revision": "45a18a69953f27af3c2bfad0a5e01c38ef2da462",
+  "determinate_nix_tag": "v3.11.2",
   "checkout_action_tag": "v5.0.0"
 }

From 762d7fdba79d046449732c729c1d3aaad021baa2 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 10 Oct 2025 08:22:10 -0700
Subject: [PATCH 37/56] Release v3.11.3 (#35)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.11.3

* Update the state.json for v3.11.3

* Update README.md and action.yml for v3.11.3

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.859555%2Brev-ab0f3607a6c7486ea22229b92ed2d355f1482ee0/01993860-4c2b-73a3-9c67-955d87cd3025/source.tar.gz?narHash=sha256-zwE/e7CuPJUWKdvvTCB7iunV4E/%2BG0lKfv4kk/5Izdg%3D' (2025-09-10)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.873798%2Brev-c9b6fb798541223bbb396d287d16f43520250518/0199c273-922a-7e58-9985-2e0e56e6b960/source.tar.gz?narHash=sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH%2B47XEBo%3D' (2025-10-07)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index bdcc034..6eef6dd 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.2 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.3 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.2` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.3` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.11.2 installation
+- Consistent Determinate Nix v3.11.3 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.2`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.3`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 058e4db..eaa9daa 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.11.2"
+            "default": "v3.11.3"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index 0f8165b..24541f0 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1757487488,
-        "narHash": "sha256-zwE/e7CuPJUWKdvvTCB7iunV4E/+G0lKfv4kk/5Izdg=",
-        "rev": "ab0f3607a6c7486ea22229b92ed2d355f1482ee0",
-        "revCount": 859555,
+        "lastModified": 1759831965,
+        "narHash": "sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH+47XEBo=",
+        "rev": "c9b6fb798541223bbb396d287d16f43520250518",
+        "revCount": 873798,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.859555%2Brev-ab0f3607a6c7486ea22229b92ed2d355f1482ee0/01993860-4c2b-73a3-9c67-955d87cd3025/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.873798%2Brev-c9b6fb798541223bbb396d287d16f43520250518/0199c273-922a-7e58-9985-2e0e56e6b960/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index f7a1462..915ce1a 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "45a18a69953f27af3c2bfad0a5e01c38ef2da462",
-  "determinate_nix_tag": "v3.11.2",
+  "determinate_nix_tag": "v3.11.3",
   "checkout_action_tag": "v5.0.0"
 }

From 37e4fa31a956a3fc4db59b8d63153b21a528f174 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 30 Oct 2025 16:31:51 +0100
Subject: [PATCH 38/56] Release v3.12.0 (#37)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.12.0

* Update the state.json for v3.12.0

* Update README.md and action.yml for v3.12.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.873798%2Brev-c9b6fb798541223bbb396d287d16f43520250518/0199c273-922a-7e58-9985-2e0e56e6b960/source.tar.gz?narHash=sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH%2B47XEBo%3D' (2025-10-07)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.886100%2Brev-08dacfca559e1d7da38f3cf05f1f45ee9bfd213c/019a329e-32b1-7e68-9599-4784bdd5f623/source.tar.gz?narHash=sha256-o9KF3DJL7g7iYMZq9SWgfS1BFlNbsm6xplRjVlOCkXI%3D' (2025-10-28)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 6eef6dd..3dd9e9d 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.3 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.12.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.3` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.12.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.11.3 installation
+- Consistent Determinate Nix v3.12.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.3`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.12.0`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index eaa9daa..0892e23 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.11.3"
+            "default": "v3.12.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@45a18a69953f27af3c2bfad0a5e01c38ef2da462",
+                "uses": "DeterminateSystems/nix-installer-action@2fd3724578c33f9f62507d651600d52b8de3c0b9",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 24541f0..218ebcf 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1759831965,
-        "narHash": "sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH+47XEBo=",
-        "rev": "c9b6fb798541223bbb396d287d16f43520250518",
-        "revCount": 873798,
+        "lastModified": 1761672384,
+        "narHash": "sha256-o9KF3DJL7g7iYMZq9SWgfS1BFlNbsm6xplRjVlOCkXI=",
+        "rev": "08dacfca559e1d7da38f3cf05f1f45ee9bfd213c",
+        "revCount": 886100,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.873798%2Brev-c9b6fb798541223bbb396d287d16f43520250518/0199c273-922a-7e58-9985-2e0e56e6b960/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.886100%2Brev-08dacfca559e1d7da38f3cf05f1f45ee9bfd213c/019a329e-32b1-7e68-9599-4784bdd5f623/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 915ce1a..cf00821 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "45a18a69953f27af3c2bfad0a5e01c38ef2da462",
-  "determinate_nix_tag": "v3.11.3",
+  "nix_installer_action_revision": "2fd3724578c33f9f62507d651600d52b8de3c0b9",
+  "determinate_nix_tag": "v3.12.0",
   "checkout_action_tag": "v5.0.0"
 }

From 074be2e1d79b707f789ae92c5ecabdeaafc7a6c8 Mon Sep 17 00:00:00 2001
From: Graham Christensen <graham@grahamc.com>
Date: Mon, 3 Nov 2025 20:38:38 -0500
Subject: [PATCH 39/56] Revert "Release v3.12.0 (#37)"

This reverts commit 37e4fa31a956a3fc4db59b8d63153b21a528f174.
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 3dd9e9d..6eef6dd 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.12.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.3 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.12.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.3` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.12.0 installation
+- Consistent Determinate Nix v3.11.3 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.12.0`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.3`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 0892e23..eaa9daa 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.12.0"
+            "default": "v3.11.3"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@2fd3724578c33f9f62507d651600d52b8de3c0b9",
+                "uses": "DeterminateSystems/nix-installer-action@45a18a69953f27af3c2bfad0a5e01c38ef2da462",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 218ebcf..24541f0 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1761672384,
-        "narHash": "sha256-o9KF3DJL7g7iYMZq9SWgfS1BFlNbsm6xplRjVlOCkXI=",
-        "rev": "08dacfca559e1d7da38f3cf05f1f45ee9bfd213c",
-        "revCount": 886100,
+        "lastModified": 1759831965,
+        "narHash": "sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH+47XEBo=",
+        "rev": "c9b6fb798541223bbb396d287d16f43520250518",
+        "revCount": 873798,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.886100%2Brev-08dacfca559e1d7da38f3cf05f1f45ee9bfd213c/019a329e-32b1-7e68-9599-4784bdd5f623/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.873798%2Brev-c9b6fb798541223bbb396d287d16f43520250518/0199c273-922a-7e58-9985-2e0e56e6b960/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index cf00821..915ce1a 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "2fd3724578c33f9f62507d651600d52b8de3c0b9",
-  "determinate_nix_tag": "v3.12.0",
+  "nix_installer_action_revision": "45a18a69953f27af3c2bfad0a5e01c38ef2da462",
+  "determinate_nix_tag": "v3.11.3",
   "checkout_action_tag": "v5.0.0"
 }

From b8b92273ba88abf50b7598dcd79fd45d9be3d9a0 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 4 Nov 2025 12:42:04 -0800
Subject: [PATCH 40/56] Release v3.12.1 (#39)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.12.1

* Update the state.json for v3.12.1

* Update README.md and action.yml for v3.12.1

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.873798%2Brev-c9b6fb798541223bbb396d287d16f43520250518/0199c273-922a-7e58-9985-2e0e56e6b960/source.tar.gz?narHash=sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH%2B47XEBo%3D' (2025-10-07)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.888552%2Brev-b3d51a0365f6695e7dd5cdf3e180604530ed33b4/019a4ac5-41ea-7209-b0c4-883187b7dcdd/source.tar.gz?narHash=sha256-4vhDuZ7OZaZmKKrnDpxLZZpGIJvAeMtK6FKLJYUtAdw%3D' (2025-11-02)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 6eef6dd..9b0c21a 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.3 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.12.1 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.3` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.12.1` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.11.3 installation
+- Consistent Determinate Nix v3.12.1 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.3`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.12.1`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index eaa9daa..fd04028 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.11.3"
+            "default": "v3.12.1"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@45a18a69953f27af3c2bfad0a5e01c38ef2da462",
+                "uses": "DeterminateSystems/nix-installer-action@2fd3724578c33f9f62507d651600d52b8de3c0b9",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 24541f0..9a176c2 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1759831965,
-        "narHash": "sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH+47XEBo=",
-        "rev": "c9b6fb798541223bbb396d287d16f43520250518",
-        "revCount": 873798,
+        "lastModified": 1762111121,
+        "narHash": "sha256-4vhDuZ7OZaZmKKrnDpxLZZpGIJvAeMtK6FKLJYUtAdw=",
+        "rev": "b3d51a0365f6695e7dd5cdf3e180604530ed33b4",
+        "revCount": 888552,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.873798%2Brev-c9b6fb798541223bbb396d287d16f43520250518/0199c273-922a-7e58-9985-2e0e56e6b960/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.888552%2Brev-b3d51a0365f6695e7dd5cdf3e180604530ed33b4/019a4ac5-41ea-7209-b0c4-883187b7dcdd/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 915ce1a..91cf7d3 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "45a18a69953f27af3c2bfad0a5e01c38ef2da462",
-  "determinate_nix_tag": "v3.11.3",
+  "nix_installer_action_revision": "2fd3724578c33f9f62507d651600d52b8de3c0b9",
+  "determinate_nix_tag": "v3.12.1",
   "checkout_action_tag": "v5.0.0"
 }

From 797f18edfcd68c339b2aadead62615524b5668c8 Mon Sep 17 00:00:00 2001
From: Graham Christensen <graham@grahamc.com>
Date: Tue, 4 Nov 2025 22:52:31 -0500
Subject: [PATCH 41/56] Revert "Release v3.12.1 (#39)"

This reverts commit b8b92273ba88abf50b7598dcd79fd45d9be3d9a0.
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 9b0c21a..6eef6dd 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.12.1 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.3 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.12.1` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.3` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.12.1 installation
+- Consistent Determinate Nix v3.11.3 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.12.1`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.3`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index fd04028..eaa9daa 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.12.1"
+            "default": "v3.11.3"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@2fd3724578c33f9f62507d651600d52b8de3c0b9",
+                "uses": "DeterminateSystems/nix-installer-action@45a18a69953f27af3c2bfad0a5e01c38ef2da462",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 9a176c2..24541f0 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1762111121,
-        "narHash": "sha256-4vhDuZ7OZaZmKKrnDpxLZZpGIJvAeMtK6FKLJYUtAdw=",
-        "rev": "b3d51a0365f6695e7dd5cdf3e180604530ed33b4",
-        "revCount": 888552,
+        "lastModified": 1759831965,
+        "narHash": "sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH+47XEBo=",
+        "rev": "c9b6fb798541223bbb396d287d16f43520250518",
+        "revCount": 873798,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.888552%2Brev-b3d51a0365f6695e7dd5cdf3e180604530ed33b4/019a4ac5-41ea-7209-b0c4-883187b7dcdd/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.873798%2Brev-c9b6fb798541223bbb396d287d16f43520250518/0199c273-922a-7e58-9985-2e0e56e6b960/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 91cf7d3..915ce1a 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "2fd3724578c33f9f62507d651600d52b8de3c0b9",
-  "determinate_nix_tag": "v3.12.1",
+  "nix_installer_action_revision": "45a18a69953f27af3c2bfad0a5e01c38ef2da462",
+  "determinate_nix_tag": "v3.11.3",
   "checkout_action_tag": "v5.0.0"
 }

From 0261e3554149588c911e068afc042bdc0627f227 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 6 Nov 2025 19:01:35 +0100
Subject: [PATCH 42/56] Release v3.12.2 (#41)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.12.2

* Update the state.json for v3.12.2

* Update README.md and action.yml for v3.12.2

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.873798%2Brev-c9b6fb798541223bbb396d287d16f43520250518/0199c273-922a-7e58-9985-2e0e56e6b960/source.tar.gz?narHash=sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH%2B47XEBo%3D' (2025-10-07)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.888552%2Brev-b3d51a0365f6695e7dd5cdf3e180604530ed33b4/019a4ac5-41ea-7209-b0c4-883187b7dcdd/source.tar.gz?narHash=sha256-4vhDuZ7OZaZmKKrnDpxLZZpGIJvAeMtK6FKLJYUtAdw%3D' (2025-11-02)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 6eef6dd..aabe928 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.11.3 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.12.2 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.11.3` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.12.2` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.11.3 installation
+- Consistent Determinate Nix v3.12.2 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.11.3`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.12.2`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index eaa9daa..e8e960b 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.11.3"
+            "default": "v3.12.2"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@45a18a69953f27af3c2bfad0a5e01c38ef2da462",
+                "uses": "DeterminateSystems/nix-installer-action@2fd3724578c33f9f62507d651600d52b8de3c0b9",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 24541f0..9a176c2 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1759831965,
-        "narHash": "sha256-vgPm2xjOmKdZ0xKA6yLXPJpjOtQPHfaZDRtH+47XEBo=",
-        "rev": "c9b6fb798541223bbb396d287d16f43520250518",
-        "revCount": 873798,
+        "lastModified": 1762111121,
+        "narHash": "sha256-4vhDuZ7OZaZmKKrnDpxLZZpGIJvAeMtK6FKLJYUtAdw=",
+        "rev": "b3d51a0365f6695e7dd5cdf3e180604530ed33b4",
+        "revCount": 888552,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.873798%2Brev-c9b6fb798541223bbb396d287d16f43520250518/0199c273-922a-7e58-9985-2e0e56e6b960/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.888552%2Brev-b3d51a0365f6695e7dd5cdf3e180604530ed33b4/019a4ac5-41ea-7209-b0c4-883187b7dcdd/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 915ce1a..60df194 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "45a18a69953f27af3c2bfad0a5e01c38ef2da462",
-  "determinate_nix_tag": "v3.11.3",
+  "nix_installer_action_revision": "2fd3724578c33f9f62507d651600d52b8de3c0b9",
+  "determinate_nix_tag": "v3.12.2",
   "checkout_action_tag": "v5.0.0"
 }

From 75c10b446a77562b7eb5707d019264ab76a18aa4 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 10 Nov 2025 11:31:11 -0500
Subject: [PATCH 43/56] Release v3.13.0 (#42)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.13.0

* Update the state.json for v3.13.0

* Update README.md and action.yml for v3.13.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.888552%2Brev-b3d51a0365f6695e7dd5cdf3e180604530ed33b4/019a4ac5-41ea-7209-b0c4-883187b7dcdd/source.tar.gz?narHash=sha256-4vhDuZ7OZaZmKKrnDpxLZZpGIJvAeMtK6FKLJYUtAdw%3D' (2025-11-02)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.891611%2Brev-b6a8526db03f735b89dd5ff348f53f752e7ddc8e/019a684c-ea63-75fd-99cc-3b869954e5f9/source.tar.gz?narHash=sha256-rXXuz51Bq7DHBlfIjN7jO8Bu3du5TV%2B3DSADBX7/9YQ%3D' (2025-11-08)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index aabe928..9caf3c5 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.12.2 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.13.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.12.2` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.13.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.12.2 installation
+- Consistent Determinate Nix v3.13.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.12.2`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.13.0`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index e8e960b..f08150e 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.12.2"
+            "default": "v3.13.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@2fd3724578c33f9f62507d651600d52b8de3c0b9",
+                "uses": "DeterminateSystems/nix-installer-action@c5a866b6ab867e88becbed4467b93592bce69f8a",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 9a176c2..967e416 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1762111121,
-        "narHash": "sha256-4vhDuZ7OZaZmKKrnDpxLZZpGIJvAeMtK6FKLJYUtAdw=",
-        "rev": "b3d51a0365f6695e7dd5cdf3e180604530ed33b4",
-        "revCount": 888552,
+        "lastModified": 1762596750,
+        "narHash": "sha256-rXXuz51Bq7DHBlfIjN7jO8Bu3du5TV+3DSADBX7/9YQ=",
+        "rev": "b6a8526db03f735b89dd5ff348f53f752e7ddc8e",
+        "revCount": 891611,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.888552%2Brev-b3d51a0365f6695e7dd5cdf3e180604530ed33b4/019a4ac5-41ea-7209-b0c4-883187b7dcdd/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.891611%2Brev-b6a8526db03f735b89dd5ff348f53f752e7ddc8e/019a684c-ea63-75fd-99cc-3b869954e5f9/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 60df194..85c3b69 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "2fd3724578c33f9f62507d651600d52b8de3c0b9",
-  "determinate_nix_tag": "v3.12.2",
+  "nix_installer_action_revision": "c5a866b6ab867e88becbed4467b93592bce69f8a",
+  "determinate_nix_tag": "v3.13.0",
   "checkout_action_tag": "v5.0.0"
 }

From 9596b92e70cbf68a494a2b0273cb5b680184f5fc Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 13 Nov 2025 07:55:32 -0800
Subject: [PATCH 44/56] Release v3.13.1 (#43)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.13.1

* Update the state.json for v3.13.1

* Update README.md and action.yml for v3.13.1

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.891611%2Brev-b6a8526db03f735b89dd5ff348f53f752e7ddc8e/019a684c-ea63-75fd-99cc-3b869954e5f9/source.tar.gz?narHash=sha256-rXXuz51Bq7DHBlfIjN7jO8Bu3du5TV%2B3DSADBX7/9YQ%3D' (2025-11-08)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.892896%2Brev-9da7f1cf7f8a6e2a7cb3001b048546c92a8258b4/019a7741-1258-7808-8a20-6cf62c2d1dec/source.tar.gz?narHash=sha256-SlybxLZ1/e4T2lb1czEtWVzDCVSTvk9WLwGhmxFmBxI%3D' (2025-11-11)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 9caf3c5..7d5d786 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.13.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.13.1 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.13.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.13.1` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.13.0 installation
+- Consistent Determinate Nix v3.13.1 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.13.0`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.13.1`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index f08150e..4193c5a 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.13.0"
+            "default": "v3.13.1"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index 967e416..071c1a0 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1762596750,
-        "narHash": "sha256-rXXuz51Bq7DHBlfIjN7jO8Bu3du5TV+3DSADBX7/9YQ=",
-        "rev": "b6a8526db03f735b89dd5ff348f53f752e7ddc8e",
-        "revCount": 891611,
+        "lastModified": 1762844143,
+        "narHash": "sha256-SlybxLZ1/e4T2lb1czEtWVzDCVSTvk9WLwGhmxFmBxI=",
+        "rev": "9da7f1cf7f8a6e2a7cb3001b048546c92a8258b4",
+        "revCount": 892896,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.891611%2Brev-b6a8526db03f735b89dd5ff348f53f752e7ddc8e/019a684c-ea63-75fd-99cc-3b869954e5f9/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.892896%2Brev-9da7f1cf7f8a6e2a7cb3001b048546c92a8258b4/019a7741-1258-7808-8a20-6cf62c2d1dec/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 85c3b69..fe76353 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "c5a866b6ab867e88becbed4467b93592bce69f8a",
-  "determinate_nix_tag": "v3.13.0",
+  "determinate_nix_tag": "v3.13.1",
   "checkout_action_tag": "v5.0.0"
 }

From b3e3f405539b332fcb96794525f35fb10c230baa Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 19 Nov 2025 18:15:20 +0000
Subject: [PATCH 45/56] Release v3.13.2 (#44)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.13.2

* Update the state.json for v3.13.2

* Update README.md and action.yml for v3.13.2

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.892896%2Brev-9da7f1cf7f8a6e2a7cb3001b048546c92a8258b4/019a7741-1258-7808-8a20-6cf62c2d1dec/source.tar.gz' (2025-11-11)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.897910%2Brev-89c2b2330e733d6cdb5eae7b899326930c2c0648/019a9888-31f2-7667-abe4-5a1c43721ef0/source.tar.gz' (2025-11-17)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        | 10 +++++-----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 7d5d786..c10b707 100644
--- a/README.md
+++ b/README.md
@@ -52,8 +52,8 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v5.0.0
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.13.1 to pin to a release
+      - uses: actions/checkout@v5.0.1
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.13.2 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.13.1` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.13.2` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.13.1 installation
+- Consistent Determinate Nix v3.13.2 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.13.1`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.13.2`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 4193c5a..80cebf9 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.13.1"
+            "default": "v3.13.2"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index 071c1a0..2d45847 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1762844143,
-        "narHash": "sha256-SlybxLZ1/e4T2lb1czEtWVzDCVSTvk9WLwGhmxFmBxI=",
-        "rev": "9da7f1cf7f8a6e2a7cb3001b048546c92a8258b4",
-        "revCount": 892896,
+        "lastModified": 1763421233,
+        "narHash": "sha256-Stk9ZYRkGrnnpyJ4eqt9eQtdFWRRIvMxpNRf4sIegnw=",
+        "rev": "89c2b2330e733d6cdb5eae7b899326930c2c0648",
+        "revCount": 897910,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.892896%2Brev-9da7f1cf7f8a6e2a7cb3001b048546c92a8258b4/019a7741-1258-7808-8a20-6cf62c2d1dec/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.897910%2Brev-89c2b2330e733d6cdb5eae7b899326930c2c0648/019a9888-31f2-7667-abe4-5a1c43721ef0/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index fe76353..8d0d9d6 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "c5a866b6ab867e88becbed4467b93592bce69f8a",
-  "determinate_nix_tag": "v3.13.1",
-  "checkout_action_tag": "v5.0.0"
+  "determinate_nix_tag": "v3.13.2",
+  "checkout_action_tag": "v5.0.1"
 }

From 5190e13f0912791dc014cfefd6ee8575bca42462 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 9 Dec 2025 17:02:45 +0000
Subject: [PATCH 46/56] Prepare release v3.14.0


From ad70bbbde77594284790154c808bd617780a5c22 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 9 Dec 2025 17:02:48 +0000
Subject: [PATCH 47/56] Update the state.json for v3.14.0

---
 tools/state.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tools/state.json b/tools/state.json
index 8d0d9d6..e3fc8e6 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "c5a866b6ab867e88becbed4467b93592bce69f8a",
-  "determinate_nix_tag": "v3.13.2",
-  "checkout_action_tag": "v5.0.1"
+  "nix_installer_action_revision": "e4fb5e65d88bc1ed7f248eda4e6645126ed90438",
+  "determinate_nix_tag": "v3.14.0",
+  "checkout_action_tag": "v6.0.1"
 }

From e0b34c6bed80c07ec4f1ea632c00adc8eabc6359 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 9 Dec 2025 17:02:52 +0000
Subject: [PATCH 48/56] Update README.md and action.yml for v3.14.0

---
 README.md  | 10 +++++-----
 action.yml |  4 ++--
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index c10b707..ce6b16f 100644
--- a/README.md
+++ b/README.md
@@ -52,8 +52,8 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v5.0.1
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.13.2 to pin to a release
+      - uses: actions/checkout@v6.0.1
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.14.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.13.2` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.14.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.13.2 installation
+- Consistent Determinate Nix v3.14.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.13.2`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.14.0`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 80cebf9..ecebf0b 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.13.2"
+            "default": "v3.14.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@c5a866b6ab867e88becbed4467b93592bce69f8a",
+                "uses": "DeterminateSystems/nix-installer-action@e4fb5e65d88bc1ed7f248eda4e6645126ed90438",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",

From 10c9db6e8ce32f42a6249ed81d01e832070a55f3 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 9 Dec 2025 17:02:55 +0000
Subject: [PATCH 49/56] flake.lock: Update
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.897910%2Brev-89c2b2330e733d6cdb5eae7b899326930c2c0648/019a9888-31f2-7667-abe4-5a1c43721ef0/source.tar.gz' (2025-11-17)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.908783%2Brev-addf7cf5f383a3101ecfba091b98d0a1263dc9b8/019b03a0-b1e4-7f2a-9d10-ad8434116660/source.tar.gz' (2025-12-08)
---
 flake.lock | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/flake.lock b/flake.lock
index 2d45847..9f53a77 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1763421233,
-        "narHash": "sha256-Stk9ZYRkGrnnpyJ4eqt9eQtdFWRRIvMxpNRf4sIegnw=",
-        "rev": "89c2b2330e733d6cdb5eae7b899326930c2c0648",
-        "revCount": 897910,
+        "lastModified": 1765186076,
+        "narHash": "sha256-hM20uyap1a0M9d344I692r+ik4gTMyj60cQWO+hAYP8=",
+        "rev": "addf7cf5f383a3101ecfba091b98d0a1263dc9b8",
+        "revCount": 908783,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.897910%2Brev-89c2b2330e733d6cdb5eae7b899326930c2c0648/019a9888-31f2-7667-abe4-5a1c43721ef0/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.908783%2Brev-addf7cf5f383a3101ecfba091b98d0a1263dc9b8/019b03a0-b1e4-7f2a-9d10-ad8434116660/source.tar.gz"
       },
       "original": {
         "type": "tarball",

From 95732e95d70db3ba1e0adc26a63c5e0375aba78c Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Sat, 20 Dec 2025 09:39:43 -0500
Subject: [PATCH 50/56] Release v3.15.0 (#46)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.15.0

* Update the state.json for v3.15.0

* Update README.md and action.yml for v3.15.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.908783%2Brev-addf7cf5f383a3101ecfba091b98d0a1263dc9b8/019b03a0-b1e4-7f2a-9d10-ad8434116660/source.tar.gz' (2025-12-08)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.913595%2Brev-c6245e83d836d0433170a16eb185cefe0572f8b8/019b38ed-77a4-7329-b290-49e4d1914b8c/source.tar.gz' (2025-12-18)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index ce6b16f..0406093 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v6.0.1
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.14.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.15.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.14.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.15.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.14.0 installation
+- Consistent Determinate Nix v3.15.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.14.0`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.15.0`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index ecebf0b..d37dac7 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.14.0"
+            "default": "v3.15.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,7 +101,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@e4fb5e65d88bc1ed7f248eda4e6645126ed90438",
+                "uses": "DeterminateSystems/nix-installer-action@ab0a9732c6464e5bb81efb82a2103c7d98f0946f",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 9f53a77..a7e2830 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1765186076,
-        "narHash": "sha256-hM20uyap1a0M9d344I692r+ik4gTMyj60cQWO+hAYP8=",
-        "rev": "addf7cf5f383a3101ecfba091b98d0a1263dc9b8",
-        "revCount": 908783,
+        "lastModified": 1766070988,
+        "narHash": "sha256-G/WVghka6c4bAzMhTwT2vjLccg/awmHkdKSd2JrycLc=",
+        "rev": "c6245e83d836d0433170a16eb185cefe0572f8b8",
+        "revCount": 913595,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.908783%2Brev-addf7cf5f383a3101ecfba091b98d0a1263dc9b8/019b03a0-b1e4-7f2a-9d10-ad8434116660/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.913595%2Brev-c6245e83d836d0433170a16eb185cefe0572f8b8/019b38ed-77a4-7329-b290-49e4d1914b8c/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index e3fc8e6..76adfd4 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "e4fb5e65d88bc1ed7f248eda4e6645126ed90438",
-  "determinate_nix_tag": "v3.14.0",
+  "nix_installer_action_revision": "ab0a9732c6464e5bb81efb82a2103c7d98f0946f",
+  "determinate_nix_tag": "v3.15.0",
   "checkout_action_tag": "v6.0.1"
 }

From 1d699fc25db3f9e079cd2f168ca007a4183389be Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 24 Dec 2025 08:14:52 -0500
Subject: [PATCH 51/56] Release v3.15.1 (#47)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.15.1

* Update the state.json for v3.15.1

* Update README.md and action.yml for v3.15.1

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.913595%2Brev-c6245e83d836d0433170a16eb185cefe0572f8b8/019b38ed-77a4-7329-b290-49e4d1914b8c/source.tar.gz' (2025-12-18)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.914755%2Brev-a6531044f6d0bef691ea18d4d4ce44d0daa6e816/019b4613-7276-7c80-8e57-953e4698fb6e/source.tar.gz' (2025-12-21)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 0406093..afad7a4 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v6.0.1
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.15.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.15.1 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.15.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.15.1` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.15.0 installation
+- Consistent Determinate Nix v3.15.1 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -112,7 +112,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.15.0`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.15.1`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index d37dac7..ad4aaa3 100644
--- a/action.yml
+++ b/action.yml
@@ -68,7 +68,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.15.0"
+            "default": "v3.15.1"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index a7e2830..9937896 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1766070988,
-        "narHash": "sha256-G/WVghka6c4bAzMhTwT2vjLccg/awmHkdKSd2JrycLc=",
-        "rev": "c6245e83d836d0433170a16eb185cefe0572f8b8",
-        "revCount": 913595,
+        "lastModified": 1766309749,
+        "narHash": "sha256-3xY8CZ4rSnQ0NqGhMKAy5vgC+2IVK0NoVEzDoOh4DA4=",
+        "rev": "a6531044f6d0bef691ea18d4d4ce44d0daa6e816",
+        "revCount": 914755,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.913595%2Brev-c6245e83d836d0433170a16eb185cefe0572f8b8/019b38ed-77a4-7329-b290-49e4d1914b8c/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.914755%2Brev-a6531044f6d0bef691ea18d4d4ce44d0daa6e816/019b4613-7276-7c80-8e57-953e4698fb6e/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 76adfd4..492e031 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "ab0a9732c6464e5bb81efb82a2103c7d98f0946f",
-  "determinate_nix_tag": "v3.15.0",
+  "determinate_nix_tag": "v3.15.1",
   "checkout_action_tag": "v6.0.1"
 }

From 0637893efcccdc1e077b2f26ee7ea685155e9fe1 Mon Sep 17 00:00:00 2001
From: Graham Christensen <graham@grahamc.com>
Date: Wed, 21 Jan 2026 12:07:36 -0500
Subject: [PATCH 52/56] Update the action generator: summarize is a new field

---
 tools/generate.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tools/generate.py b/tools/generate.py
index fcf01a1..e9e41b2 100644
--- a/tools/generate.py
+++ b/tools/generate.py
@@ -59,6 +59,7 @@ keep_inputs = [
     "github-server-url",
     "github-token",
     "trust-runner-user",
+    "summarize",
     # Advanced run-time environment options
     "force-no-systemd",
     "init",

From 89ab342bd48ff7318caf8d39d6a330c7b1df8f2f Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 21 Jan 2026 17:15:34 +0000
Subject: [PATCH 53/56] Release v3.15.2 (#49)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.15.2

* Update the state.json for v3.15.2

* Update README.md and action.yml for v3.15.2

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.914755%2Brev-a6531044f6d0bef691ea18d4d4ce44d0daa6e816/019b4613-7276-7c80-8e57-953e4698fb6e/source.tar.gz' (2025-12-21)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.930839%2Brev-80e4adbcf8992d3fd27ad4964fbb84907f9478b0/019bdece-8709-77ea-a1d6-9d410df27131/source.tar.gz' (2026-01-20)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  9 +++++----
 action.yml       |  9 +++++++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 19 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index afad7a4..64b5ced 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v6.0.1
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.15.1 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.15.2 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.15.1` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.15.2` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.15.1 installation
+- Consistent Determinate Nix v3.15.2 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -102,6 +102,7 @@ updates:
 | `github-server-url`     | The URL for the GitHub server, to use with the `github-token` token. Defaults to the current GitHub server, supporting GitHub Enterprise Server automatically. Only change this value if the provided `github-token` is for a different GitHub server than the current server. |          | `${{ github.server_url }}` |
 | `github-token`          | A GitHub token for making authenticated requests (which have a higher rate-limit quota than unauthenticated requests)                                                                                                                                                          |          | `${{ github.token }}`      |
 | `trust-runner-user`     | Whether to make the runner user trusted by the Nix daemon                                                                                                                                                                                                                      |          | `true`                     |
+| `summarize`             | Whether to add a build summary and timeline chart to the GitHub job summary                                                                                                                                                                                                    |          | `true`                     |
 | `force-no-systemd`      | Force using other methods than systemd to launch the daemon. This setting is automatically enabled when necessary.                                                                                                                                                             |          | `false`                    |
 | `init`                  | The init system to configure, requires `planner: linux-multi` (allowing the choice between `none` or `systemd`)                                                                                                                                                                |          |                            |
 | `kvm`                   | Automatically configure the GitHub Actions Runner for NixOS test supports, if the host supports it.                                                                                                                                                                            |          | `true`                     |
@@ -112,7 +113,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.15.1`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.15.2`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index ad4aaa3..80522fc 100644
--- a/action.yml
+++ b/action.yml
@@ -22,6 +22,10 @@
             "description": "Whether to make the runner user trusted by the Nix daemon",
             "default": true
         },
+        "summarize": {
+            "description": "Whether to add a build summary and timeline chart to the GitHub job summary",
+            "default": true
+        },
         "force-no-systemd": {
             "description": "Force using other methods than systemd to launch the daemon. This setting is automatically enabled when necessary.",
             "required": false,
@@ -68,7 +72,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.15.1"
+            "default": "v3.15.2"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -101,12 +105,13 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@ab0a9732c6464e5bb81efb82a2103c7d98f0946f",
+                "uses": "DeterminateSystems/nix-installer-action@58e64ed13a4f3f90ba0cba819752b6df4b548da8",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
                     "github-token": "${{ inputs.github-token }}",
                     "trust-runner-user": "${{ inputs.trust-runner-user }}",
+                    "summarize": "${{ inputs.summarize }}",
                     "force-no-systemd": "${{ inputs.force-no-systemd }}",
                     "init": "${{ inputs.init }}",
                     "kvm": "${{ inputs.kvm }}",
diff --git a/flake.lock b/flake.lock
index 9937896..9e49ebc 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1766309749,
-        "narHash": "sha256-3xY8CZ4rSnQ0NqGhMKAy5vgC+2IVK0NoVEzDoOh4DA4=",
-        "rev": "a6531044f6d0bef691ea18d4d4ce44d0daa6e816",
-        "revCount": 914755,
+        "lastModified": 1768886240,
+        "narHash": "sha256-C2TjvwYZ2VDxYWeqvvJ5XPPp6U7H66zeJlRaErJKoEM=",
+        "rev": "80e4adbcf8992d3fd27ad4964fbb84907f9478b0",
+        "revCount": 930839,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.914755%2Brev-a6531044f6d0bef691ea18d4d4ce44d0daa6e816/019b4613-7276-7c80-8e57-953e4698fb6e/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.930839%2Brev-80e4adbcf8992d3fd27ad4964fbb84907f9478b0/019bdece-8709-77ea-a1d6-9d410df27131/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index 492e031..eeefd64 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "ab0a9732c6464e5bb81efb82a2103c7d98f0946f",
-  "determinate_nix_tag": "v3.15.1",
+  "nix_installer_action_revision": "58e64ed13a4f3f90ba0cba819752b6df4b548da8",
+  "determinate_nix_tag": "v3.15.2",
   "checkout_action_tag": "v6.0.1"
 }

From f9ebef276016dd519d188ee7b71879732418f8b9 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 16 Feb 2026 16:51:08 -0800
Subject: [PATCH 54/56] Release v3.16.0 (#52)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.16.0

* Update the state.json for v3.16.0

* Update README.md and action.yml for v3.16.0

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.930839%2Brev-80e4adbcf8992d3fd27ad4964fbb84907f9478b0/019bdece-8709-77ea-a1d6-9d410df27131/source.tar.gz' (2026-01-20)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.945868%2Brev-a82ccc39b39b621151d6732718e3e250109076fa/019c5b2e-592f-7d17-b9ce-868f25acfeca/source.tar.gz' (2026-02-13)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        | 10 +++++-----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  6 +++---
 4 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/README.md b/README.md
index 64b5ced..6d150b4 100644
--- a/README.md
+++ b/README.md
@@ -52,8 +52,8 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v6.0.1
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.15.2 to pin to a release
+      - uses: actions/checkout@v6.0.2
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.16.0 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.15.2` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.16.0` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.15.2 installation
+- Consistent Determinate Nix v3.16.0 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -113,7 +113,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.15.2`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.16.0`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 80522fc..aeec5d5 100644
--- a/action.yml
+++ b/action.yml
@@ -72,7 +72,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.15.2"
+            "default": "v3.16.0"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -105,7 +105,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@58e64ed13a4f3f90ba0cba819752b6df4b548da8",
+                "uses": "DeterminateSystems/nix-installer-action@86cbc893b3c44423bb3b27da33c306deba1e1ef4",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 9e49ebc..5216308 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1768886240,
-        "narHash": "sha256-C2TjvwYZ2VDxYWeqvvJ5XPPp6U7H66zeJlRaErJKoEM=",
-        "rev": "80e4adbcf8992d3fd27ad4964fbb84907f9478b0",
-        "revCount": 930839,
+        "lastModified": 1771008912,
+        "narHash": "sha256-gf2AmWVTs8lEq7z/3ZAsgnZDhWIckkb+ZnAo5RzSxJg=",
+        "rev": "a82ccc39b39b621151d6732718e3e250109076fa",
+        "revCount": 945868,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.930839%2Brev-80e4adbcf8992d3fd27ad4964fbb84907f9478b0/019bdece-8709-77ea-a1d6-9d410df27131/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.945868%2Brev-a82ccc39b39b621151d6732718e3e250109076fa/019c5b2e-592f-7d17-b9ce-868f25acfeca/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index eeefd64..d443297 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "58e64ed13a4f3f90ba0cba819752b6df4b548da8",
-  "determinate_nix_tag": "v3.15.2",
-  "checkout_action_tag": "v6.0.1"
+  "nix_installer_action_revision": "86cbc893b3c44423bb3b27da33c306deba1e1ef4",
+  "determinate_nix_tag": "v3.16.0",
+  "checkout_action_tag": "v6.0.2"
 }

From 681d8e8bfdb5d7af56f113ba2425b1fb00ec9edc Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Sun, 22 Feb 2026 22:09:54 -0500
Subject: [PATCH 55/56] Release v3.16.1 (#53)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.16.1

* Update the state.json for v3.16.1

* Update README.md and action.yml for v3.16.1

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.945868%2Brev-a82ccc39b39b621151d6732718e3e250109076fa/019c5b2e-592f-7d17-b9ce-868f25acfeca/source.tar.gz' (2026-02-13)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.948083%2Brev-0182a361324364ae3f436a63005877674cf45efb/019c71f3-061e-7c0e-b75b-ea375738503a/source.tar.gz' (2026-02-17)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  4 ++--
 flake.lock       | 10 +++++-----
 tools/state.json |  4 ++--
 4 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 6d150b4..10fbaca 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v6.0.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.16.0 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.16.1 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.16.0` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.16.1` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.16.0 installation
+- Consistent Determinate Nix v3.16.1 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -113,7 +113,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.16.0`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.16.1`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index aeec5d5..0652ae7 100644
--- a/action.yml
+++ b/action.yml
@@ -72,7 +72,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.16.0"
+            "default": "v3.16.1"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
@@ -105,7 +105,7 @@
         "using": "composite",
         "steps": [
             {
-                "uses": "DeterminateSystems/nix-installer-action@86cbc893b3c44423bb3b27da33c306deba1e1ef4",
+                "uses": "DeterminateSystems/nix-installer-action@95f009f8cba987d36d7e3396d29de81b2883654a",
                 "with": {
                     "extra-conf": "${{ inputs.extra-conf }}",
                     "github-server-url": "${{ inputs.github-server-url }}",
diff --git a/flake.lock b/flake.lock
index 5216308..d1ea64f 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1771008912,
-        "narHash": "sha256-gf2AmWVTs8lEq7z/3ZAsgnZDhWIckkb+ZnAo5RzSxJg=",
-        "rev": "a82ccc39b39b621151d6732718e3e250109076fa",
-        "revCount": 945868,
+        "lastModified": 1771369470,
+        "narHash": "sha256-0NBlEBKkN3lufyvFegY4TYv5mCNHbi5OmBDrzihbBMQ=",
+        "rev": "0182a361324364ae3f436a63005877674cf45efb",
+        "revCount": 948083,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.945868%2Brev-a82ccc39b39b621151d6732718e3e250109076fa/019c5b2e-592f-7d17-b9ce-868f25acfeca/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.948083%2Brev-0182a361324364ae3f436a63005877674cf45efb/019c71f3-061e-7c0e-b75b-ea375738503a/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index d443297..b5213d5 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
-  "nix_installer_action_revision": "86cbc893b3c44423bb3b27da33c306deba1e1ef4",
-  "determinate_nix_tag": "v3.16.0",
+  "nix_installer_action_revision": "95f009f8cba987d36d7e3396d29de81b2883654a",
+  "determinate_nix_tag": "v3.16.1",
   "checkout_action_tag": "v6.0.2"
 }

From 73327eb48f028efaaf5013656ba216ca3cdeca7b Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 24 Feb 2026 01:19:50 -0500
Subject: [PATCH 56/56] Release v3.16.3 (#54)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Prepare release v3.16.3

* Update the state.json for v3.16.3

* Update README.md and action.yml for v3.16.3

* flake.lock: Update

Flake lock file updates:

• Updated input 'nixpkgs':
    'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.948083%2Brev-0182a361324364ae3f436a63005877674cf45efb/019c71f3-061e-7c0e-b75b-ea375738503a/source.tar.gz' (2026-02-17)
  → 'https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.953160%2Brev-2fc6539b481e1d2569f25f8799236694180c0993/019c8e05-d2f6-7c7e-9ead-612154b18bfb/source.tar.gz' (2026-02-23)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 README.md        |  8 ++++----
 action.yml       |  2 +-
 flake.lock       | 10 +++++-----
 tools/state.json |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 10fbaca..8cfe0e2 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v6.0.2
-      - uses: DeterminateSystems/determinate-nix-action@main # or v3.16.1 to pin to a release
+      - uses: DeterminateSystems/determinate-nix-action@main # or v3.16.3 to pin to a release
       - run: nix build .
 ```
 
@@ -67,10 +67,10 @@ jobs:
 Unlike `DeterminateSystems/nix-installer-action`, we fully support explicit version pinning for maximum consistency.
 This Action is **automatically tagged** for every Determinate Nix release, giving you complete control over your CI environment:
 
-📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.16.1` guarantees:
+📍 Pinning to `DeterminateSystems/determinate-nix-action@v3.16.3` guarantees:
 
 - Same `nix-installer-action` revision every time
-- Consistent Determinate Nix v3.16.1 installation
+- Consistent Determinate Nix v3.16.3 installation
 - Reproducible CI workflows, even years later
 
 ✨ Using `@main` instead? You'll:
@@ -113,7 +113,7 @@ updates:
 | `source-branch`         | The branch of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-pr`)                                                                                                                                                                             |          |                            |
 | `source-pr`             | The PR of `nix-installer` to use (conflicts with `source-tag`, `source-revision`, `source-branch`)                                                                                                                                                                             |          |                            |
 | `source-revision`       | The revision of `nix-installer` to use (conflicts with `source-tag`, `source-branch`, `source-pr`)                                                                                                                                                                             |          |                            |
-| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.16.1`                  |
+| `source-tag`            | The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)                                                                                                                                                                             |          | `v3.16.3`                  |
 | `source-url`            | A URL pointing to a `nix-installer` executable                                                                                                                                                                                                                                 |          |                            |
 | `backtrace`             | The setting for `RUST_BACKTRACE` (see https://doc.rust-lang.org/std/backtrace/index.html#environment-variables)                                                                                                                                                                |          |                            |
 | `diagnostic-endpoint`   | Diagnostic endpoint url where the installer sends data to. To disable set this to an empty string.                                                                                                                                                                             |          | `-`                        |
diff --git a/action.yml b/action.yml
index 0652ae7..4670ae4 100644
--- a/action.yml
+++ b/action.yml
@@ -72,7 +72,7 @@
         "source-tag": {
             "description": "The tag of `nix-installer` to use (conflicts with `source-revision`, `source-branch`, `source-pr`)",
             "required": false,
-            "default": "v3.16.1"
+            "default": "v3.16.3"
         },
         "source-url": {
             "description": "A URL pointing to a `nix-installer` executable",
diff --git a/flake.lock b/flake.lock
index d1ea64f..d37a53a 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1771369470,
-        "narHash": "sha256-0NBlEBKkN3lufyvFegY4TYv5mCNHbi5OmBDrzihbBMQ=",
-        "rev": "0182a361324364ae3f436a63005877674cf45efb",
-        "revCount": 948083,
+        "lastModified": 1771848320,
+        "narHash": "sha256-0MAd+0mun3K/Ns8JATeHT1sX28faLII5hVLq0L3BdZU=",
+        "rev": "2fc6539b481e1d2569f25f8799236694180c0993",
+        "revCount": 953160,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.948083%2Brev-0182a361324364ae3f436a63005877674cf45efb/019c71f3-061e-7c0e-b75b-ea375738503a/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.953160%2Brev-2fc6539b481e1d2569f25f8799236694180c0993/019c8e05-d2f6-7c7e-9ead-612154b18bfb/source.tar.gz"
       },
       "original": {
         "type": "tarball",
diff --git a/tools/state.json b/tools/state.json
index b5213d5..1af7049 100644
--- a/tools/state.json
+++ b/tools/state.json
@@ -1,5 +1,5 @@
 {
   "nix_installer_action_revision": "95f009f8cba987d36d7e3396d29de81b2883654a",
-  "determinate_nix_tag": "v3.16.1",
+  "determinate_nix_tag": "v3.16.3",
   "checkout_action_tag": "v6.0.2"
 }