Skip to content

feat(ci): add reusable nix-hash-autofix workflow#356

Closed
JacobPEvans-personal wants to merge 1 commit into
mainfrom
feat/nix-hash-autofix
Closed

feat(ci): add reusable nix-hash-autofix workflow#356
JacobPEvans-personal wants to merge 1 commit into
mainfrom
feat/nix-hash-autofix

Conversation

@JacobPEvans-personal
Copy link
Copy Markdown
Owner

Summary

Adds a reusable _nix-hash-autofix.yml workflow that fixes stale fetchFromGitHub hashes on Renovate PRs.

  • Problem: Renovate's regex manager bumps version strings in .nix files but cannot recalculate source/vendor hashes, breaking builds
  • Solution: After Renovate bumps a version, this workflow runs nix-update to recalculate hashes and pushes a fixup commit
  • Workflow accepts a packages input (space-separated flake attribute names) and is called from ci-gate.yml only on Renovate bot PRs that touch .nix files

Test plan

  • Renovate PR on a repo that imports this .github triggers the autofix correctly
  • Non-Renovate PRs are not affected

Renovate's regex manager bumps version strings in .nix files but
cannot update fetchFromGitHub hashes or vendorHash. This workflow
runs nix-update with --version=skip on Renovate PRs to fix hashes
and pushes a fixup commit.

Callers pass a list of package attribute names to update. Only runs
on Renovate bot PRs (jacobpevans-github-actions[bot]).

(claude)
@gemini-code-assist
Copy link
Copy Markdown

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

@JacobPEvans-personal JacobPEvans-personal deleted the feat/nix-hash-autofix branch May 31, 2026 07:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant