Update GH Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	v4 → v5
actions/checkout	action	major	v4 → v6
actions/download-artifact	action	major	v4 → v7
actions/upload-artifact	action	major	v4 → v6
aws-actions/configure-aws-credentials	action	major	v4 → v6
cachix/cachix-action	action	major	v15 → v16
cachix/install-nix-action	action	major	v27 → v31
cygwin/cygwin-install-action	action	major	v4 → v6
ilammy/setup-nasm	action	patch	v1.5.1 → v1.5.2
msys2/setup-msys2	action	minor	v2.24.1 → v2.30.0
ubuntu	github-runner	major	22.04 → 24.04
windows	github-runner	major	2022 → 2025

---

Release Notes

actions/cache (actions/cache)

v5

Compare Source

actions/checkout (actions/checkout)

v6

Compare Source

v5

Compare Source

actions/download-artifact (actions/download-artifact)

v7

Compare Source

v6

Compare Source

v5

Compare Source

actions/upload-artifact (actions/upload-artifact)

v6

Compare Source

v5

Compare Source

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v6

Compare Source

v5

Compare Source

cachix/cachix-action (cachix/cachix-action)

v16

Compare Source

What's Changed

• Fall back to os.tmpdir when the daemon socket path becomes too long by @​sandydoo in #​209
• Added a small delay to allow post-build hooks to flush through by @​sandydoo in #​196
• Upgraded dependencies

Full Changelog: cachix/cachix-action@v15...v16

cachix/install-nix-action (cachix/install-nix-action)

v31

Compare Source

Starting with v31, this action will use semantic versioning for releases.
Major tags, like v31, will be bumped to point to the latest minor/patch release.
This is in line with how most GitHub actions manage releases.

What's Changed

• nix: 2.26.3 -> 2.28.2 by @​Mic92 in #​232

• nix: 2.24.9 -> 2.25.2 by @​Mic92 in #​218

• ci: fix latest installer tests by @​sandydoo in #​220

• ci: add ubuntu-24.04-arm to matrix by @​msgilligan in #​221

• nix: 2.25.2 -> 2.26.2 by @​Mic92 in #​226

• nix: 2.26.2 -> 2.26.3 by @​sandydoo in #​228

• feat: Pin actions to hashes by @​l0b0 in #​201

• chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @​dependabot in #​234

• docs: document how to provide AWS credentials to the nix-daemon by @​sandydoo in #​235

• nix: 2.28.2 -> 2.28.3 by @​Mic92 in #​236

• nix: 2.28.3 -> 2.29.0 by @​Mic92 in #​239
  Release notes: https://nix.dev/manual/nix/latest/release-notes/rl-2.29

• Automate nix updates in CI by @​Mic92 in #​241

• nix: 2.29.0 -> 2.29.1 by @​github-actions in #​243
  [SECURITY] https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017

• nix: 2.29.1 -> 2.30.0 by @​github-actions in #​244
  Release notes: https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html

• nix: 2.30.0 -> 2.30.1 by @​xokdvium in #​245
  [SECURITY] Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. GHSA-qc7j-jgf3-qmhg

• docs: add example for nix develop by @​jennydaman in #​248

• nix: 2.30.2 -> 2.31.0 by @​github-actions[bot] in #​250
  Release notes: https://discourse.nixos.org/t/nix-2-31-0-released/68465

• nix: 2.31.0 -> 2.31.1 by @​github-actions[bot] in #​253

• nix: 2.31.1 -> 2.31.2 by @​github-actions[bot] in #​256

• feat: set up the environment based on the installer shell scripts by @​sandydoo in #​251
  Adds the bin directory from the user's profile to $PATH.
  Configures the following environment variables:

  • NIX_PROFILES
  • NIX_SSL_CERT_FILE (if not set)

• nix: 2.31.2 -> 2.32.0 by @​github-actions[bot] in #​257
  Release notes: https://discourse.nixos.org/t/nix-2-32-0-released/70528

• nix: 2.32.0 -> 2.32.1 by @​github-actions[bot] in #​258

• nix: 2.32.1 -> 2.32.2 by @​github-actions[bot] in #​259

• nix: 2.32.2 -> 2.32.3 by @​github-actions[bot] in #​260

• nix: 2.32.3 -> 2.32.4 by @​github-actions[bot] in #​261

• nix: 2.32.4 -> 2.33.0 by @​github-actions[bot] in #​264

Full Changelog: cachix/install-nix-action@v30...v31

v30

Compare Source

• Nix: 2.24.7 -> 2.24.9, fixing GHSA-6fjr-mq49-mm2c

v29

Compare Source

Bumps Nix to 2.24.7

cygwin/cygwin-install-action (cygwin/cygwin-install-action)

v6

Compare Source

What's Changed

• Add warning about using SHELLOPTS to set igncr by @​tobil4sk in #​22
• Add work-vol option by @​gstrauss in #​27
• For performance, default work-vol to D: (if it exists) by @​gstrauss in #​27
• Add a retry mechanism for fetching setup executable by @​jon-turney in #​26
• Check Authenticode signature on setup executable by @​jon-turney
• Give the action some outputs (e.g. so uses can find out where we installed) by @​jon-turney

New Contributors

• @​tobil4sk made their first contribution in #​22

Full Changelog: cygwin/cygwin-install-action@v5...v6

v5

Compare Source

What's Changed

• Drop the -g/--upgrade-also from the options used to invoke setup
• Use action/checkout v4 instead of v2 in tests by @​mlocati in #​16
• Add allow-test-packages option by @​gstrauss in #​12
• Check hash of downloaded setup by @​mlocati in #​17

New Contributors

• @​mlocati made their first contribution in #​16
• @​gstrauss made their first contribution in #​12

Full Changelog: cygwin/cygwin-install-action@v4...v5

ilammy/setup-nasm (ilammy/setup-nasm)

v1.5.2: setup-nasm v1.5.2

Compare Source

• Update package-lock.json (#​41)

msys2/setup-msys2 (msys2/setup-msys2)

v2.30.0

Compare Source

• Update base distribution to 20251213. [#​565]
• Remove folder-hash dependency [#​555]
• Update dependencies

v2.29.0

Compare Source

• Allow installation to C:\msys64 if it doesn't exist already. Like with the new windows-11-arm image, for example. [#​542]
• Update base distribution to 20250830. [#​548]
• Update dependencies

v2.28.0

Compare Source

• Update base distribution to 20250622. [#​518]
• Update dependencies

v2.27.0

Compare Source

• Update base distribution to 20250221. [#​480]
• Update dependencies
• Drop support for CLANG32

v2.26.0

Compare Source

• Update base distribution to 20241208. [#​444]
• Update dependencies
• Update @​actions/cache to v4 which will be required for the GitHub cache
  backend migration, which is scheduled for 2025-02, see
  https://redirect.github.com/actions/toolkit/discussions/1890 for details. There is no
  action required for users of this action, but old versions of this action may
  start to fail after the legacy cache backend is sunset.

v2.25.0

Compare Source

• Update base distribution to 20241116. [#​444]

---

Configuration

📅 Schedule: Branch creation - "after 5am and before 8am on Wednesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.