chore: nix-config-private lock bump (automated CD) #1964

Merged
hermes merged 1 commit from priv-lock-7eadff4 into main 2026-10-13 06:44:39 -06:00
Collaborator

Automated flake.lock bump from ymrtech/nix-config-private CI/CD. Affects: scripts/kanboard/**. Merged BEFORE deploy (merge-then-deploy): the pin carries main PLUS the current client peer set, so the deployed tree is never missing either; the deploy below is the merge push-triggered NixOS Deploy on main.

Opened by hand (card nix-config#929) because the chain's own run for this rev refused at its first step: ci.yml on nix-config-private@7eadff42 is red ONLY at the tail of the Eval real host configs with this revision job, where the Dispatch CD chain (main only) step gets 403 token does not have at least one of required scope(s): [write:repository] from the runner-pool .netrc (the pool includes a [ci] slot whose runner home has no working write:repository token - the family tracked by cards nix-config#918 / #907). Every evaluation in that job passed and all other 27 statuses on the head sha are green, so the merge itself is sound; the chain's gate is permanent for a sha with a red status because Forgejo exposes no re-run API. The command, branch name, commit message, PR title and body here mirror the chain's step 1-3 exactly, so a later chain run for a newer rev simply moves the pin onward.

Automated flake.lock bump from ymrtech/nix-config-private CI/CD. Affects: scripts/kanboard/**. Merged BEFORE deploy (merge-then-deploy): the pin carries main PLUS the current client peer set, so the deployed tree is never missing either; the deploy below is the merge push-triggered NixOS Deploy on main. Opened by hand (card nix-config#929) because the chain's own run for this rev refused at its first step: `ci.yml` on nix-config-private@7eadff42 is red ONLY at the tail of the `Eval real host configs with this revision` job, where the `Dispatch CD chain (main only)` step gets `403 token does not have at least one of required scope(s): [write:repository]` from the runner-pool `.netrc` (the pool includes a `[ci]` slot whose runner home has no working write:repository token - the family tracked by cards nix-config#918 / #907). Every evaluation in that job passed and all other 27 statuses on the head sha are green, so the merge itself is sound; the chain's gate is permanent for a sha with a red status because Forgejo exposes no re-run API. The command, branch name, commit message, PR title and body here mirror the chain's step 1-3 exactly, so a later chain run for a newer rev simply moves the pin onward.
chore: bump nix-config-private lock to 7eadff4 (nix-config-private CI/CD)
All checks were successful
PR base guard / Base drift / conflict check (pull_request) Successful in 2s
NixOS Build Check / Flake input regression guard (pull_request) Successful in 6s
Secret Scan / gitleaks scan (pull_request) Successful in 1s
NixOS Build Check / Scope changed deployable hosts (pull_request) Successful in 8s
NixOS Build Check / Hermes runtime gates (one eval of vpn's runtime) (pull_request) Successful in 1m4s
NixOS Build Check / Worker-scope reaper worker signature (mutation-tested) (pull_request) Successful in 4s
NixOS Build Check / Kanban pool capacity knob (runtime override + clamp, mutation-tested) (pull_request) Successful in 3s
NixOS Build Check / Sentinel pass budget contract (prompt forbids the full board walk, mutation-tested) (pull_request) Successful in 7s
NixOS Build Check / CI-scratch reaper class table (mutation-tested) (pull_request) Successful in 7s
NixOS Build Check / foremerge accept-order contract (real binary) (pull_request) Successful in 6s
NixOS Build Check / .forgejo/tests python suites (hermetic) (pull_request) Successful in 38s
foremerge intent (advisory) nothing to check: no claimable paths (docs/lock-only change)
NixOS Build Check / Repo gates (the folded selftest battery) (pull_request) Successful in 3m43s
NixOS Build Check / Build changed host closures (native, one eval) (pull_request) Successful in 4m44s
85cf7e845a
hermes merged commit 9a577af5bc into main 2026-10-13 06:44:39 -06:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ymrtech/nix-config!1964
No description provided.