Update Nix flake inputs #18256

	---
	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	types: [opened, synchronize, reopened]

	jobs:
	lint:
	name: Lint
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	with:
	persist-credentials: false

	- name: Install Nix
	uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31
	with:
	github_access_token: ${{ github.token }}

	- name: Setup Cachix
	uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17
	with:
	name: claytono
	authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}

	- name: Cache pre-commit
	uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
	with:
	path: ~/.cache/pre-commit
	key: precommit-${{ hashFiles('.pre-commit-config.yaml') }}
	restore-keys: \|
	precommit-

	- name: Write vault password file
	run: echo "$ANSIBLE_VAULT_PASSWORD" > ansible/ansible-vault-password
	env:
	ANSIBLE_VAULT_PASSWORD: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}

	- name: Run lint
	run: nix develop --command ./scripts/lint
	env:
	SKIP: terraform_validate,terraform_providers_lock
	GH_TOKEN: ${{ github.token }}

	test:
	name: Renovate Eval Tests
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	with:
	persist-credentials: false

	- name: Install uv
	uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0

	- name: Run pytest with coverage
	working-directory: .claude/skills/renovate-eval
	run: uv run pytest tests/ --cov --cov-report=term-missing

Provide feedback