chore(deps): cachix/install-nix-action ^ v31.10.6 (#1285)

## What?

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[cachix/install-nix-action](https://redirect.github.com/cachix/install-nix-action)
| action | major | `v30` → `v31` |

---

### Release Notes

<details>
<summary>cachix/install-nix-action (cachix/install-nix-action)</summary>

###
[`v31.10.6`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.10.6)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.10.5...v31.10.6)

#### What's Changed

- nix: 2.34.6 -> 2.34.7 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;275](https://redirect.github.com/cachix/install-nix-action/pull/275)

**[GHSA-vh5x-56v6-4368](https://redirect.github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368)**:
Fixes a coroutine stack-to-heap overflow via unbounded recursion in the
NAR directory parser. **Severity: High.**

**[GHSA-gr92-w2r5-qw5p](https://redirect.github.com/NixOS/nix/security/advisories/GHSA-gr92-w2r5-qw5p)**:
Fixes an absolute path traversal vulnerability when unpacking archives
to disk. Severity: Moderate.

**Full Changelog**:
<cachix/install-nix-action@v31...v31.10.6>

###
[`v31.10.5`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.10.5)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.10.4...v31.10.5)

#### What's Changed

- nix: 2.34.5 -> 2.34.6 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;274](https://redirect.github.com/cachix/install-nix-action/pull/274)

**Full Changelog**:
<cachix/install-nix-action@v31...v31.10.5>

###
[`v31.10.4`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.10.4)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.10.3...v31.10.4)

#### What's Changed

- nix: 2.34.4 -> 2.34.5 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;273](https://redirect.github.com/cachix/install-nix-action/pull/273)
**\[SECURITY]** Fixes a root privilege escalation vulnerability via
sandbox escape
<GHSA-g3g9-5vj6-r3gj>

**Full Changelog**:
<cachix/install-nix-action@v31.10.3...v31.10.4>

###
[`v31.10.3`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.10.3)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.10.2...v31.10.3)

#### What's Changed

- nix: 2.34.2 -> 2.34.4 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;271](https://redirect.github.com/cachix/install-nix-action/pull/271)

**Full Changelog**:
<cachix/install-nix-action@v31...v31.10.3>

###
[`v31.10.2`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.10.2)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.10.1...v31.10.2)

#### What's Changed

- nix: 2.34.1 -> 2.34.2 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;270](https://redirect.github.com/cachix/install-nix-action/pull/270)

**Full Changelog**:
<cachix/install-nix-action@v31...v31.10.2>

###
[`v31.10.1`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.10.1)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.10.0...v31.10.1)

#### What's Changed

- nix: 2.34.0 -> 2.34.1 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;269](https://redirect.github.com/cachix/install-nix-action/pull/269)
Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load
authentication keys configured by `cachix-action`.

**Full Changelog**:
<cachix/install-nix-action@v31.10.0...v31.10.1>

###
[`v31.10.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.10.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.9.1...v31.10.0)

#### What's Changed

- nix: 2.33.3 -> 2.34.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;267](https://redirect.github.com/cachix/install-nix-action/pull/267)
Release notes: <https://discourse.nixos.org/t/nix-2-34-0-released/75818>

⚠️ Nix 2.34.0 contains a regression that, under certain scenarios (a
`trusted-user` + a client-side `netrc-file`), breaks authentication with
private caches that rely on `netrc` files. This regression affects
`cachix/cachix-action`.

**UPD: 2.34.1 has been released with a patch for the authentication
issue**

**Full Changelog**:
<cachix/install-nix-action@v31.9.1...v31.10.0>

###
[`v31.9.1`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.9.1)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.9.0...v31.9.1)

#### What's Changed

- nix: 2.33.0 -> 2.33.3 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;266](https://redirect.github.com/cachix/install-nix-action/pull/266)

**Full Changelog**:
<cachix/install-nix-action@v31...v31.9.1>

###
[`v31.9.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.9.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.8.4...v31.9.0)

#### What's Changed

- nix: 2.32.4 -> 2.33.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;264](https://redirect.github.com/cachix/install-nix-action/pull/264)
- chore(deps): bump peter-evans/create-pull-request from 7 to 8 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;263](https://redirect.github.com/cachix/install-nix-action/pull/263)
- chore(deps): bump actions/checkout from 5 to 6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;262](https://redirect.github.com/cachix/install-nix-action/pull/262)

**Full Changelog**:
<cachix/install-nix-action@v31.8.4...v31.9.0>

###
[`v31.8.4`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.8.4)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.8.3...v31.8.4)

#### What's Changed

- nix: 2.32.3 -> 2.32.4 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;261](https://redirect.github.com/cachix/install-nix-action/pull/261)

**Full Changelog**:
<cachix/install-nix-action@v31.8.3...v31.8.4>

###
[`v31.8.3`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.8.3)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.8.2...v31.8.3)

#### What's Changed

- nix: 2.32.2 -> 2.32.3 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;260](https://redirect.github.com/cachix/install-nix-action/pull/260)

**Full Changelog**:
<cachix/install-nix-action@v31.8.2...v31.8.3>

###
[`v31.8.2`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.8.2)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.8.1...v31.8.2)

#### What's Changed

- nix: 2.32.1 -> 2.32.2 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;259](https://redirect.github.com/cachix/install-nix-action/pull/259)

**Full Changelog**:
<cachix/install-nix-action@v31.8.1...v31.8.2>

###
[`v31.8.1`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.8.1)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.8.0...v31.8.1)

#### What's Changed

- nix: 2.32.0 -> 2.32.1 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;258](https://redirect.github.com/cachix/install-nix-action/pull/258)

**Full Changelog**:
<cachix/install-nix-action@v31...v31.8.1>

###
[`v31.8.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.8.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.7.0...v31.8.0)

#### What's Changed

- nix: 2.31.2 -> 2.32.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;257](https://redirect.github.com/cachix/install-nix-action/pull/257)
Release notes: <https://discourse.nixos.org/t/nix-2-32-0-released/70528>

**Full Changelog**:
<cachix/install-nix-action@v31.7.0...v31.8.0>

###
[`v31.7.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.7.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.6.2...v31.7.0)

#### What's Changed

- feat: set up the environment based on the installer shell scripts by
[@&#8203;sandydoo](https://redirect.github.com/sandydoo) in
[#&#8203;251](https://redirect.github.com/cachix/install-nix-action/pull/251)

  Configures the following environment variables:

  - `NIX_PROFILES`
  - `NIX_SSL_CERT_FILE` (if not set)

  Adds the bin directory from the user's profile to `$PATH`.

**Full Changelog**:
<cachix/install-nix-action@v31.6.2...v31.7.0>

###
[`v31.6.2`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.6.2)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.6.1...v31.6.2)

#### What's Changed

- nix: 2.31.1 -> 2.31.2 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;256](https://redirect.github.com/cachix/install-nix-action/pull/256)

**Full Changelog**:
<cachix/install-nix-action@v31...v31.6.2>

###
[`v31.6.1`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.6.1)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.6.0...v31.6.1)

#### What's Changed

- ci: adjust oldest supported installer for macos-15 by
[@&#8203;sandydoo](https://redirect.github.com/sandydoo) in
[#&#8203;252](https://redirect.github.com/cachix/install-nix-action/pull/252)
- nix: 2.31.0 -> 2.31.1 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;253](https://redirect.github.com/cachix/install-nix-action/pull/253)

**Full Changelog**:
<cachix/install-nix-action@v31...v31.6.1>

###
[`v31.6.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.6.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.5.2...v31.6.0)

#### What's Changed

- chore(deps): bump actions/checkout from 4 to 5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;249](https://redirect.github.com/cachix/install-nix-action/pull/249)
- docs: add example for `nix develop` by
[@&#8203;jennydaman](https://redirect.github.com/jennydaman) in
[#&#8203;248](https://redirect.github.com/cachix/install-nix-action/pull/248)
- nix: 2.30.2 -> 2.31.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;250](https://redirect.github.com/cachix/install-nix-action/pull/250)
Release notes: <https://discourse.nixos.org/t/nix-2-31-0-released/68465>

#### New Contributors

- [@&#8203;jennydaman](https://redirect.github.com/jennydaman) made
their first contribution in
[#&#8203;248](https://redirect.github.com/cachix/install-nix-action/pull/248)

**Full Changelog**:
<cachix/install-nix-action@v31.5.2...v31.6.0>

###
[`v31.5.2`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.5.2)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.5.1...v31.5.2)

#### What's Changed

- nix: 2.30.1 -> 2.30.2 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;246](https://redirect.github.com/cachix/install-nix-action/pull/246)

**Full Changelog**:
<cachix/install-nix-action@v31...v31.5.2>

###
[`v31.5.1`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.5.1)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.5.0...v31.5.1)

#### What's Changed

- nix: 2.30.0 -> 2.30.1 by
[@&#8203;xokdvium](https://redirect.github.com/xokdvium) in
[#&#8203;245](https://redirect.github.com/cachix/install-nix-action/pull/245)
**\[SECURITY]** Builds with Nix 2.30.0 on macOS were executed with
elevated privileges (root), instead of the build users.
<GHSA-qc7j-jgf3-qmhg>

#### New Contributors

- [@&#8203;xokdvium](https://redirect.github.com/xokdvium) made their
first contribution in
[#&#8203;245](https://redirect.github.com/cachix/install-nix-action/pull/245)

**Full Changelog**:
<cachix/install-nix-action@v31.5.0...v31.5.1>

###
[`v31.5.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.5.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.4.1...v31.5.0)

#### What's Changed

- nix: 2.29.1 -> 2.30.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions) in
[#&#8203;244](https://redirect.github.com/cachix/install-nix-action/pull/244)
Release notes:
<https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html>

**Full Changelog**:
<cachix/install-nix-action@v31.4.1...v31.5.0>

###
[`v31.4.1`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.4.1)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.4.0...v31.4.1)

#### What's Changed

- nix: 2.29.0 -> 2.29.1 by
[@&#8203;github-actions](https://redirect.github.com/github-actions) in
[#&#8203;243](https://redirect.github.com/cachix/install-nix-action/pull/243)
**\[SECURITY]**
<https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017>

#### New Contributors

- [@&#8203;github-actions](https://redirect.github.com/github-actions)
made their first contribution in
[#&#8203;243](https://redirect.github.com/cachix/install-nix-action/pull/243)

**Full Changelog**:
<cachix/install-nix-action@v31.4.0...v31.4.1>

###
[`v31.4.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.4.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.3.0...v31.4.0)

#### What's Changed

- nix: 2.28.3 -> 2.29.0 by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;239](https://redirect.github.com/cachix/install-nix-action/pull/239)
  Release notes: <https://nix.dev/manual/nix/2.29/release-notes/rl-2.29>
- Automate nix updates in CI by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;241](https://redirect.github.com/cachix/install-nix-action/pull/241)

**Full Changelog**:
<cachix/install-nix-action@v31.3.0...v31.4.0>

###
[`v31.3.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.3.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.2.0...v31.3.0)

#### What's Changed

- feat: Pin actions to hashes by
[@&#8203;l0b0](https://redirect.github.com/l0b0) in
[#&#8203;201](https://redirect.github.com/cachix/install-nix-action/pull/201)
- chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;234](https://redirect.github.com/cachix/install-nix-action/pull/234)
- docs: document how to provide AWS credentials to the nix-daemon by
[@&#8203;sandydoo](https://redirect.github.com/sandydoo) in
[#&#8203;235](https://redirect.github.com/cachix/install-nix-action/pull/235)
- nix: 2.28.2 -> 2.28.3 by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;236](https://redirect.github.com/cachix/install-nix-action/pull/236)

**Full Changelog**:
<cachix/install-nix-action@v31.2.0...v31.3.0>

###
[`v31.2.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.2.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31.1.0...v31.2.0)

#### What's Changed

- nix: 2.26.3 -> 2.28.2 by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;232](https://redirect.github.com/cachix/install-nix-action/pull/232)

**Full Changelog**:
<cachix/install-nix-action@v31.1.0...v31.2.0>

###
[`v31.1.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.1.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31...v31.1.0)

#### What's Changed

- Remove deprecated `--darwin-use-unencrypted-nix-store-volume` flag by
[@&#8203;sandydoo](https://redirect.github.com/sandydoo) in
[#&#8203;230](https://redirect.github.com/cachix/install-nix-action/pull/230)
- action: add option to configure updating trusted users by
[@&#8203;Enzime](https://redirect.github.com/Enzime) in
[#&#8203;231](https://redirect.github.com/cachix/install-nix-action/pull/231)

**Full Changelog**:
<cachix/install-nix-action@v31.0.0...v31.1.0>

###
[`v31.0.0`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31.0.0)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v31...v31)

#### What's Changed

- nix: 2.24.9 -> 2.25.2 by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;218](https://redirect.github.com/cachix/install-nix-action/pull/218)
- ci: fix latest installer tests by
[@&#8203;sandydoo](https://redirect.github.com/sandydoo) in
[#&#8203;220](https://redirect.github.com/cachix/install-nix-action/pull/220)
- GitHub test.yml: add ubuntu-24.04-arm to matrix by
[@&#8203;msgilligan](https://redirect.github.com/msgilligan) in
[#&#8203;221](https://redirect.github.com/cachix/install-nix-action/pull/221)
- nix: 2.25.2 -> 2.26.2 by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;226](https://redirect.github.com/cachix/install-nix-action/pull/226)
- nix: 2.26.2 -> 2.26.3 by
[@&#8203;sandydoo](https://redirect.github.com/sandydoo) in
[#&#8203;228](https://redirect.github.com/cachix/install-nix-action/pull/228)

#### New Contributors

- [@&#8203;msgilligan](https://redirect.github.com/msgilligan) made
their first contribution in
[#&#8203;221](https://redirect.github.com/cachix/install-nix-action/pull/221)

**Full Changelog**:
<cachix/install-nix-action@v30...v31.0.0>

###
[`v31`](https://redirect.github.com/cachix/install-nix-action/releases/tag/v31)

[Compare
Source](https://redirect.github.com/cachix/install-nix-action/compare/v30...v31)

Starting with v31, this action will use semantic versioning for
releases.
Major tags, like v31, will be bumped to point to the latest minor/patch
release.
This is in line with how most GitHub actions manage releases.

#### What's Changed

- nix: 2.26.3 -> 2.28.2 by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;232](https://redirect.github.com/cachix/install-nix-action/pull/232)

- nix: 2.24.9 -> 2.25.2 by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;218](https://redirect.github.com/cachix/install-nix-action/pull/218)

- ci: fix latest installer tests by
[@&#8203;sandydoo](https://redirect.github.com/sandydoo) in
[#&#8203;220](https://redirect.github.com/cachix/install-nix-action/pull/220)

- ci: add ubuntu-24.04-arm to matrix by
[@&#8203;msgilligan](https://redirect.github.com/msgilligan) in
[#&#8203;221](https://redirect.github.com/cachix/install-nix-action/pull/221)

- nix: 2.25.2 -> 2.26.2 by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;226](https://redirect.github.com/cachix/install-nix-action/pull/226)

- nix: 2.26.2 -> 2.26.3 by
[@&#8203;sandydoo](https://redirect.github.com/sandydoo) in
[#&#8203;228](https://redirect.github.com/cachix/install-nix-action/pull/228)

- feat: Pin actions to hashes by
[@&#8203;l0b0](https://redirect.github.com/l0b0) in
[#&#8203;201](https://redirect.github.com/cachix/install-nix-action/pull/201)

- chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;234](https://redirect.github.com/cachix/install-nix-action/pull/234)

- docs: document how to provide AWS credentials to the nix-daemon by
[@&#8203;sandydoo](https://redirect.github.com/sandydoo) in
[#&#8203;235](https://redirect.github.com/cachix/install-nix-action/pull/235)

- nix: 2.28.2 -> 2.28.3 by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;236](https://redirect.github.com/cachix/install-nix-action/pull/236)

- nix: 2.28.3 -> 2.29.0 by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;239](https://redirect.github.com/cachix/install-nix-action/pull/239)
Release notes: <https://nix.dev/manual/nix/latest/release-notes/rl-2.29>

- Automate nix updates in CI by
[@&#8203;Mic92](https://redirect.github.com/Mic92) in
[#&#8203;241](https://redirect.github.com/cachix/install-nix-action/pull/241)

- nix: 2.29.0 -> 2.29.1 by
[@&#8203;github-actions](https://redirect.github.com/github-actions) in
[#&#8203;243](https://redirect.github.com/cachix/install-nix-action/pull/243)
**\[SECURITY]**
<https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017>

- nix: 2.29.1 -> 2.30.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions) in
[#&#8203;244](https://redirect.github.com/cachix/install-nix-action/pull/244)
Release notes:
<https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html>

- nix: 2.30.0 -> 2.30.1 by
[@&#8203;xokdvium](https://redirect.github.com/xokdvium) in
[#&#8203;245](https://redirect.github.com/cachix/install-nix-action/pull/245)
**\[SECURITY]** Builds with Nix 2.30.0 on macOS were executed with
elevated privileges (root), instead of the build users.
<GHSA-qc7j-jgf3-qmhg>

- docs: add example for `nix develop` by
[@&#8203;jennydaman](https://redirect.github.com/jennydaman) in
[#&#8203;248](https://redirect.github.com/cachix/install-nix-action/pull/248)

- nix: 2.30.2 -> 2.31.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;250](https://redirect.github.com/cachix/install-nix-action/pull/250)
Release notes: <https://discourse.nixos.org/t/nix-2-31-0-released/68465>

- nix: 2.31.0 -> 2.31.1 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;253](https://redirect.github.com/cachix/install-nix-action/pull/253)

- nix: 2.31.1 -> 2.31.2 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;256](https://redirect.github.com/cachix/install-nix-action/pull/256)

- feat: set up the environment based on the installer shell scripts by
[@&#8203;sandydoo](https://redirect.github.com/sandydoo) in
[#&#8203;251](https://redirect.github.com/cachix/install-nix-action/pull/251)
  Adds the bin directory from the user's profile to `$PATH`.
  Configures the following environment variables:
  - `NIX_PROFILES`
  - `NIX_SSL_CERT_FILE` (if not set)

- nix: 2.31.2 -> 2.32.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;257](https://redirect.github.com/cachix/install-nix-action/pull/257)
Release notes: <https://discourse.nixos.org/t/nix-2-32-0-released/70528>

- nix: 2.32.0 -> 2.32.1 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;258](https://redirect.github.com/cachix/install-nix-action/pull/258)

- nix: 2.32.1 -> 2.32.2 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;259](https://redirect.github.com/cachix/install-nix-action/pull/259)

- nix: 2.32.2 -> 2.32.3 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;260](https://redirect.github.com/cachix/install-nix-action/pull/260)

- nix: 2.32.3 -> 2.32.4 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;261](https://redirect.github.com/cachix/install-nix-action/pull/261)

- nix: 2.32.4 -> 2.33.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;264](https://redirect.github.com/cachix/install-nix-action/pull/264)

- nix: 2.33.0 -> 2.33.3 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;266](https://redirect.github.com/cachix/install-nix-action/pull/266)

- ~~nix: 2.33.3 -> 2.34.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;267](https://redirect.github.com/cachix/install-nix-action/pull/267)
Release notes:
<https://discourse.nixos.org/t/nix-2-34-0-released/75818>~~ **Rolled
back due to reports of issues with cachix-action**

- nix: 2.34.0 -> 2.34.1 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;269](https://redirect.github.com/cachix/install-nix-action/pull/269)
Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load
authentication keys configured by `cachix-action`.

- nix: 2.34.1 -> 2.34.2 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;270](https://redirect.github.com/cachix/install-nix-action/pull/270)

- nix: 2.34.2 -> 2.34.4 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;271](https://redirect.github.com/cachix/install-nix-action/pull/271)

- nix: 2.34.4 -> 2.34.5 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;273](https://redirect.github.com/cachix/install-nix-action/pull/273)

**[CVE-2026-39860](https://redirect.github.com/NixOS/nix/security/advisories/GHSA-g3g9-5vj6-r3gj)**
Fixes a root privilege escalation vulnerability via sandbox escape.
**Severity: Critical.**

- nix: 2.34.5 -> 2.34.6 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;274](https://redirect.github.com/cachix/install-nix-action/pull/274)

- nix: 2.34.6 -> 2.34.7 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;275](https://redirect.github.com/cachix/install-nix-action/pull/275)

**[GHSA-vh5x-56v6-4368](https://redirect.github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368)**:
Fixes a coroutine stack-to-heap overflow via unbounded recursion in the
NAR directory parser. **Severity: High.**

**[GHSA-gr92-w2r5-qw5p](https://redirect.github.com/NixOS/nix/security/advisories/GHSA-gr92-w2r5-qw5p)**:
Fixes an absolute path traversal vulnerability when unpacking archives
to disk. Severity: Moderate.

**Full Changelog**:
<cachix/install-nix-action@v30...v31>

</details>

## Why?

Automated dependency update via Renovate.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNzcuNyIsInVwZGF0ZWRJblZlciI6IjQzLjE3Ny43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

Author: floatpanebot

.github/workflows/nixpkgs-bump.yml

@@ -44,7 +44,7 @@ jobs:
 
       - name: Install Nix
         if: steps.ver.outputs.skip != 'true'
-        uses: cachix/install-nix-action@v30
+        uses: cachix/install-nix-action@v31
         with:
           extra_nix_config: |
             experimental-features = nix-command flakes