cachix-action

What's Changed

• Pass cachixArgs to the daemon by @sandydoo in https://github.com/cachix/cachix-action/pull/177
• Support path filtering when using the daemon by @sandydoo in https://github.com/cachix/cachix-action/pull/182
• Skip prep steps if using pathsToPush by @sandydoo in https://github.com/cachix/cachix-action/pull/180
• store-scan: improve error handling when listing the store fails by @sandydoo in https://github.com/cachix/cachix-action/pull/183

Full Changelog: https://github.com/cachix/cachix-action/compare/v14...v15

https://blog.cachix.org/posts/2024-01-12-cachix-v1-7/

• run on node20
• add skipAddingSubstituter to skip running cachix use

Fix save-state deprecation warning.

• Allow pushFilter regex to start with a dash
• Add pathsToPush and cachixArgs
• Avoid pushing .drv.chroot files
• Self-hosted runner support improvements

The previous release broke installations when using Nix from master branch.

This bug is fixed and has a regression test.

• when the action fails, don't display a frightening traceback
• use only stable Nix commands to avoid extra Nix configuration when using flakes
• new option pushFilter: Regular expression to exclude derivations when pushing, for example "(-source$|nixpkgs.tar.gz$)". Warning: this filter doet not guarantee it will not get pushed in case the path is part of the closure of something that will get pushed.

Support for write auth tokens - see https://blog.cachix.org/posts/2020-11-09-write-access-control-for-binary-caches/

• Replaced deprecated GitHub functions

• Added extraPullNames option to specify additional caches to pull from

• Added installCommand option to allow overriding how Cachix is installed

• BREAKING CHANGE: cachix-action no longer runs nix-build, so make sure to append run: nix-build to your job configuration

• bundle all dependencies, reducing the time needed to fetch the job for ~5s

• silently install cachix to reduce noise

• push even if the build fails #33

• restore reproducibility #36

v4 had a regression of not building anything in PRs

• Add nixBuildArgs parameter

• Simplify how paths are pushed

  Previously we were setting up Nix build hook to make sure all paths are
  synced to cachix.

  This had a few flaws:

  • nix-daemon had to be restarted, resulting into a few seconds extra
    setup per each build
  • spurious error on macos due to nix-daemon socket not ready in time
  • significant overhead since syncing to cachix was synchronous for each
    derivation built

  Now we just look for new store paths and push those after nix-build.

• add skipNixBuild option. By default false. If true, caches will only be configured for pulling, avoiding pushing and nix-build
• upload all build-time (not only run-time) dependencies to Cachix via post-build-hook
• use official Cachix installation URL

• fix cachix: CppStdException "Exception: path '/nix/store/... ' is not valid; type: nix::InvalidPath"

• don't error out if signing key is missing (typical on pull requests)

Initial release