From aa403ef23738ac9e01af3368a6444905a04d5219 Mon Sep 17 00:00:00 2001
From: faf0 <3429782+faf0@users.noreply.github.com>
Date: Mon, 19 Jan 2026 09:08:47 -0500
Subject: [PATCH] Update GitHub Actions in release.yaml

Update common GitHub Actions in release.yaml.

To reduce supply chain risk and increase consistency, replace
DeterminateSystems/nix-installer-action by
DeterminateSystems/determinate-nix-action and pin it to a specific
version.
---
 .github/workflows/release.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 0600359..48750f9 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Extract version
         id: version
@@ -70,14 +70,14 @@ jobs:
           fi
 
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@main
+        uses: DeterminateSystems/determinate-nix-action@1d699fc25db3f9e079cd2f168ca007a4183389be # v3.15.1
 
       - name: Build image
         run: |
           nix develop --command make build IMAGE_VERSION=${{ steps.version.outputs.version }}
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v5
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}