Merge pull request #190 from DeterminateSystems/push-qplnztlqooll

Update deps for brace-expansion vuln

.github/workflows/update.yml

@@ -1,24 +1,24 @@
-name: update-flake-lock
+name: "Flake.lock: update Nix dependencies"
 
 on:
-  workflow_dispatch:
+  workflow_dispatch: # allows manual triggering
   schedule:
-    - cron: "0 0 * * 0"
+    - cron: "0 0 * * 0" # runs weekly on Sunday at 00:00
 
 jobs:
-  lockfile:
+  nix-flake-update:
-    runs-on: ubuntu-latest
     permissions:
+      contents: write
       id-token: write
-      contents: read
+      issues: write
+      pull-requests: write
+    runs-on: ubuntu-latest
     steps:
-      - name: Checkout
+      - uses: actions/checkout@v4
-        uses: actions/checkout@v4
+      - uses: DeterminateSystems/determinate-nix-action@v3
-      - name: Install Determinate Nix
+      - uses: DeterminateSystems/update-flake-lock@main
-        uses: DeterminateSystems/determinate-nix-action@v3
-      - name: Enable FlakeHub Cache
-        uses: DeterminateSystems/flakehub-cache-action@main
-      - name: Update flake.lock
-        uses: ./.
         with:
-          _internal-strict-mode: true
+          pr-title: "Update Nix flake inputs" # Title of PR to be created
+          pr-labels: | # Labels to be set on the PR
+            dependencies
+            automated

flake.lock

@@ -2,12 +2,12 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1746663147,
+        "lastModified": 1750134718,
-        "narHash": "sha256-Ua0drDHawlzNqJnclTJGf87dBmaO/tn7iZ+TCkTRpRc=",
+        "narHash": "sha256-v263g4GbxXv87hMXMCpjkIxd/viIF7p3JpJrwgKdNiI=",
-        "rev": "dda3dcd3fe03e991015e9a74b22d35950f264a54",
+        "rev": "9e83b64f727c88a7711a2c463a7b16eedb69a84c",
-        "revCount": 796699,
+        "revCount": 816272,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.796699%2Brev-dda3dcd3fe03e991015e9a74b22d35950f264a54/0196b263-02b0-7dec-8aca-c2506ed2485f/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.816272%2Brev-9e83b64f727c88a7711a2c463a7b16eedb69a84c/01977fb5-daf4-741f-bbb9-d7589f1b897f/source.tar.gz"
       },
       "original": {
         "type": "tarball",

package.json

@@ -38,10 +38,10 @@
     "eslint-import-resolver-typescript": "^3.10.1",
     "eslint-plugin-github": "^4.10.2",
     "eslint-plugin-import": "^2.31.0",
-    "eslint-plugin-prettier": "^5.4.1",
+    "eslint-plugin-prettier": "^5.5.0",
     "prettier": "^3.5.3",
     "tsup": "^8.5.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.2.0"
+    "vitest": "^3.2.4"
   }
 }