[homelab-crafter]

This PR contains the following updates:

Package	Type	Update	Change
cachix/install-nix-action	action	patch	31.11.3 → v31.11.4
goreleaser/goreleaser	uses-with	patch	v2.20.0 → v2.20.1

---

Release Notes

cachix/install-nix-action

v31.11.4

Compare Source

What's Changed

• nix: 2.35.4 -> 2.35.5 by @​github-actions[bot] in #​285
• fix: prevent extra-experimental-flags from overriding the default experimental-flags #​280

Full Changelog: cachix/install-nix-action@31.11.3...v31.11.4

goreleaser/goreleaser

v2.20.1

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.20.

Changelog

Security updates

• 0b1b1ff: sec(git): redact URL credentials from diagnostics (#​7294) (@​caarlos0) (GHSA-7qv4-9g3j-wvq8)
• 9a037e1: sec(srpm): reject RPM macros in package versions (#​7295) (@​caarlos0) (GHSA-rjp9-h7gp-wr7q)
• fb9617b: sec: redact hook and chocolatey secrets from logs (#​7293) (@​caarlos0) (GHSA-gvxm-cvj4-qwvp)

Bug fixes

• 0946e5e: fix(aur): install every binary of the archive in the default package (#​7284) (@​lbarrosby)
• 79c8d68: fix(client): defer SSH private-key expansion until publishing (#​7273) (@​caarlos0)
• e46cd64: fix(docs): remove duplicate prebuilt redirects (@​caarlos0)
• 5f422b1: fix(ko): accept '..' as main path (#​7279) (@​mrueg)
• a8f1c1e: fix(ko): prefer remote base images and don't cache failed lookups (#​7275) (@​mrueg)
• 3432e8d: fix(mcp): retry publish when package version is not yet visible (#​7283) (@​santhiprakash)
• 119f88f: refactor(ko): simplify template handling (#​7277) (@​mrueg)

Documentation updates

• 3286c23: docs: .ArtifactPath is not always an absolute path (#​7289) (@​ZainnQureshii)

Other work

• ed8efe6: chore: auto-update generated files (#​7274) (@​goreleaserbot)

Full Changelog: goreleaser/goreleaser@v2.20.0...v2.20.1

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

• Find examples and commented usage of all options in our website.
• Reach out on Discord, Twitter, and Telegram!

---

Configuration

📅 Schedule: (in timezone Europe/Belgrade)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[kritikal-github]

Confidence Score: 5/5

[Medium risk] No findings.

Summary

Updates Nix installation and GoReleaser package build versions.

• Workflows using .github/actions/setup-nix/action.yaml install cachix/install-nix-action v31.11.4 when they run.
• Package builds in .github/workflows/release-packages.yaml use GoReleaser v2.20.1.

Review context · 2 agents · 2 sources · 1/5 commands

• Risk: The shared Nix setup serves CI jobs, retaining the earlier medium risk rating for its patch update; GoReleaser is confined to the package-release job, and the review checked its release notes against the repository’s packaging configuration.
• Agents: default security
• Sources:
  • https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.20.1
  • https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.20.0
• Commands run: gh

_{Reviews (2) · Last reviewed commit: "chore(deps): update github actions" · gpt-6-sol}