Update GH Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v4 -> v6
actions/download-artifact	action	major	v4 -> v6
actions/upload-artifact	action	major	v4 -> v5
aws-actions/configure-aws-credentials	action	major	v4 -> v5
cachix/cachix-action	action	major	v15 -> v16
cachix/install-nix-action	action	major	v30 -> v31
cygwin/cygwin-install-action	action	major	v5 -> v6
ilammy/setup-nasm	action	patch	v1.5.1 -> v1.5.2
korthout/backport-action	action	minor	v3.1.0 -> v3.4.1
msys2/setup-msys2	action	minor	v2.26.0 -> v2.29.0
windows	github-runner	major	2022 -> 2025

---

Release Notes

actions/checkout (actions/checkout)

v6

Compare Source

v5

Compare Source

actions/download-artifact (actions/download-artifact)

v6

Compare Source

v5

Compare Source

actions/upload-artifact (actions/upload-artifact)

v5

Compare Source

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v5

Compare Source

cachix/cachix-action (cachix/cachix-action)

v16

Compare Source

What's Changed

• Add a small delay to allow post-build hooks to flush through by @​sandydoo in #​196
• Upgraded dependencies

Full Changelog: cachix/cachix-action@v15...v16

cachix/install-nix-action (cachix/install-nix-action)

v31

Compare Source

Starting with v31, this action will use semantic versioning for releases.
Major tags, like v31, will be bumped to point to the latest minor/patch release.
This is in line with how most GitHub actions manage releases.

What's Changed

• nix: 2.26.3 -> 2.28.2 by @​Mic92 in #​232

• nix: 2.24.9 -> 2.25.2 by @​Mic92 in #​218

• ci: fix latest installer tests by @​sandydoo in #​220

• ci: add ubuntu-24.04-arm to matrix by @​msgilligan in #​221

• nix: 2.25.2 -> 2.26.2 by @​Mic92 in #​226

• nix: 2.26.2 -> 2.26.3 by @​sandydoo in #​228

• feat: Pin actions to hashes by @​l0b0 in #​201

• chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @​dependabot in #​234

• docs: document how to provide AWS credentials to the nix-daemon by @​sandydoo in #​235

• nix: 2.28.2 -> 2.28.3 by @​Mic92 in #​236

• nix: 2.28.3 -> 2.29.0 by @​Mic92 in #​239
  Release notes: https://nix.dev/manual/nix/latest/release-notes/rl-2.29

• Automate nix updates in CI by @​Mic92 in #​241

• nix: 2.29.0 -> 2.29.1 by @​github-actions in #​243
  [SECURITY] https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017

• nix: 2.29.1 -> 2.30.0 by @​github-actions in #​244
  Release notes: https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html

• nix: 2.30.0 -> 2.30.1 by @​xokdvium in #​245
  [SECURITY] Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. GHSA-qc7j-jgf3-qmhg

• docs: add example for nix develop by @​jennydaman in #​248

• nix: 2.30.2 -> 2.31.0 by @​github-actions[bot] in #​250
  Release notes: https://discourse.nixos.org/t/nix-2-31-0-released/68465

• nix: 2.31.0 -> 2.31.1 by @​github-actions[bot] in #​253

• nix: 2.31.1 -> 2.31.2 by @​github-actions[bot] in #​256

• feat: set up the environment based on the installer shell scripts by @​sandydoo in #​251
  Adds the bin directory from the user's profile to $PATH.
  Configures the following environment variables:

  • NIX_PROFILES
  • NIX_SSL_CERT_FILE (if not set)

• nix: 2.31.2 -> 2.32.0 by @​github-actions[bot] in #​257
  Release notes: https://discourse.nixos.org/t/nix-2-32-0-released/70528

• nix: 2.32.0 -> 2.32.1 by @​github-actions[bot] in #​258

• nix: 2.32.1 -> 2.32.2 by @​github-actions[bot] in #​259

• nix: 2.32.2 -> 2.32.3 by @​github-actions[bot] in #​260

• nix: 2.32.3 -> 2.32.4 by @​github-actions[bot] in #​261

Full Changelog: cachix/install-nix-action@v30...v31

cygwin/cygwin-install-action (cygwin/cygwin-install-action)

v6

Compare Source

What's Changed

• Add warning about using SHELLOPTS to set igncr by @​tobil4sk in #​22
• Add work-vol option by @​gstrauss in #​27
• For performance, default work-vol to D: (if it exists) by @​gstrauss in #​27
• Add a retry mechanism for fetching setup executable by @​jon-turney in #​26
• Check Authenticode signature on setup executable by @​jon-turney
• Give the action some outputs (e.g. so uses can find out where we installed) by @​jon-turney

New Contributors

• @​tobil4sk made their first contribution in #​22

Full Changelog: cygwin/cygwin-install-action@v5...v6

ilammy/setup-nasm (ilammy/setup-nasm)

v1.5.2: setup-nasm v1.5.2

Compare Source

• Update package-lock.json (#​41)

korthout/backport-action (korthout/backport-action)

v3.4.1: Backport-action v3.4.1

Compare Source

What's Changed

• fix(action.yml): remove github expression examples by @​yafanasiev in #​507

Full Changelog: korthout/backport-action@v3.4.0...v3.4.1

v3.4.0: Backport-action v3.4.0

Compare Source

What's Changed

You can now automatically enable auto-merge on pull requests created by backport-action thanks to a great contribution from @​jasonwbarnett - enable it using auto_merge_enabled and control the merge method using auto_merge_method.

• feat: enable auto merge when creating branches by @​jasonwbarnett in #​498

It's now also easier to contribute to backport-action. Thanks to @​yafanasiev, the CI can push newly built artifacts regardless of whether the PR comes from a fork or not.

• ci: separate workflow for publishing by @​yafanasiev in #​502

Updated dependencies

• Update korthout/backport-action digest to ca4972a by @​renovate[bot] in #​491
• Update dependency dedent to v1.7.0 by @​renovate[bot] in #​493
• Update actions/setup-node action to v5 by @​renovate[bot] in #​494
• deps: update Jest to v30, improve TS setup by @​yafanasiev in #​492
• Define dependency versions explicitly by @​korthout in #​496
• Update dependency ts-jest to v29.4.4 by @​renovate[bot] in #​499
• Update dependency @​vercel/ncc to v0.38.4 by @​renovate[bot] in #​500
• Update dependency jest to v30.2.0 by @​renovate[bot] in #​504
• Update dependency typescript to v5.9.3 by @​renovate[bot] in #​505

New Contributors

• @​jasonwbarnett made their first contribution in #​498

Full Changelog: korthout/backport-action@v3.3.0...v3.4.0

v3.3.0: Backport-action v3.3.0

Compare Source

What's Changed

Thanks to a great contribution from @​yafanasiev, you can now change the git committer name and email - enabling signing the cherry-picked commits.

• feat: make git committer name and email configurable by @​yafanasiev in #​488

Updated dependencies

• chore: Configure Renovate by @​renovate[bot] in #​481
• Pin dependencies by @​renovate[bot] in #​482
• build(deps-dev): bump prettier from 3.6.0 to 3.6.1 by @​dependabot[bot] in #​478
• build(deps-dev): bump prettier from 3.6.1 to 3.6.2 by @​dependabot[bot] in #​479
• Update dependency typescript to v5.9.2 by @​renovate[bot] in #​487
• Update actions/checkout action to v5 by @​renovate[bot] in #​489
• Update dependency ts-jest to v29.4.1 by @​renovate[bot] in #​490

New Contributors

• @​renovate[bot] made their first contribution in #​481
• @​yafanasiev made their first contribution in #​488

Full Changelog: korthout/backport-action@v3.2.1...v3.3.0

v3.2.1: Backport-action v3.2.1

Compare Source

What's Changed

Backport-action now detects when a backport branch or pull request already exists and continues without posting an error comment. This means you can safely add backport labels after a previous run. It also allows you to retry the workflow where the branch was pushed, but the pull request couldn’t be created. In earlier versions, rerunning in those situations would have left an error comment on the original pull request. Now, it handles these gracefully. The actions' log shows what happens in detail. Thanks @​wolfgangwalther for this great contribution!

• Treat errors on repeated runs gracefully by @​wolfgangwalther in #​473

A typo in the actions' log was also fixed thanks to @​codygarver.

• utils: fix typo in error message by @​codygarver in #​475

Updated dependencies

• build(deps): bump @​actions/github from 6.0.0 to 6.0.1 by @​dependabot in #​464
• build(deps): bump dedent from 1.5.3 to 1.6.0 by @​dependabot in #​462
• build(deps): bump undici from 5.28.5 to 5.29.0 by @​dependabot in #​466
• build(deps-dev): bump typescript from 5.7.3 to 5.8.3 by @​dependabot in #​455 #​460
• build(deps-dev): bump prettier from 3.5.2 to 3.6.0 by @​dependabot in #​456 #​474
• build(deps-dev): bump ts-jest from 29.2.6 to 29.4.0 by @​dependabot in #​461 #​467 #​469

New Contributors

• @​wolfgangwalther made their first contribution in #​473
• @​codygarver made their first contribution in #​475

Full Changelog: korthout/backport-action@v3.2.0...v3.2.1

v3.2.0: Backport-action 3.2.0

Compare Source

What's Changed

This release adds two new inputs: add_labels and add_author_as_assignee.

add_labels allows you to specify additional labels for the backport pull request. Thanks @​chancez for the great contribution!

• Add support for statically setting labels on backport PRs by @​chancez in #​432
• Delimit add_labels using comma by @​korthout in #​454

add_author_as_assignee allows you to control whether the action should set the author of the original pull request as an assignee on the backport pull request. Thanks @​soooch for the great contribution!

• Add option to add original author as assignee by @​soooch in #​445

Updated Dependencies

• build(deps): bump @​actions/core from 1.10.1 to 1.11.1 by @​dependabot in #​439
• build(deps-dev): bump @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot in #​440
• build(deps): bump cross-spawn from 7.0.3 to 7.0.6 by @​dependabot in #​441
• build(deps): bump undici from 5.28.4 to 5.28.5 by @​dependabot in #​446
• build(deps): bump @​octokit/request-error from 5.0.1 to 5.1.1 by @​dependabot in #​447
• build(deps): bump @​octokit/plugin-paginate-rest from 9.1.2 to 9.2.2 by @​dependabot in #​448
• build(deps): bump @​octokit/request from 8.1.4 to 8.4.1 by @​dependabot in #​449
• Bump dev dependencies and ES target by @​korthout in #​453

New Contributors

• @​soooch made their first contribution in #​445

Full Changelog: korthout/backport-action@v3.1.0...v3.2.0

msys2/setup-msys2 (msys2/setup-msys2)

v2.29.0

Compare Source

• Allow installation to C:\msys64 if it doesn't exist already. Like with the new windows-11-arm image, for example. [#​542]
• Update base distribution to 20250830. [#​548]
• Update dependencies

v2.28.0

Compare Source

• Update base distribution to 20250622. [#​518]
• Update dependencies

v2.27.0

Compare Source

• Update base distribution to 20250221. [#​480]
• Update dependencies
• Drop support for CLANG32

---

Configuration

📅 Schedule: Branch creation - "after 5am and before 8am on Wednesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.