Update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v5 → v7
cachix/install-nix-action (changelog)	action	digest	9280e7a → 8aa0397
stefanzweifel/git-auto-commit-action	action	major	v6 → v7

---

Release Notes

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

• Add worktree support for persist-credentials includeIf by @​ericsciple in #​2327

v6.0.0

Compare Source

• Persist creds to a separate file by @​ericsciple in #​2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in #​2248

v6

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

stefanzweifel/git-auto-commit-action (stefanzweifel/git-auto-commit-action)

v7.2.0

Compare Source

Added

• Add hooks to run shell snippets around git operations (#​411) @​stefanzweifel
• Emit warning for pull_request_target trigger usage (#​410) @​stefanzweifel

Fixed

• docs(action): fix input and output descriptions in action.yml (#​406) @​kranthipoturaju
• docs: fix typos, grammar, and formatting across markdown files (#​408) @​kranthipoturaju
• docs: fix broken and redirecting URLs in README.md (#​407) @​kranthipoturaju
• README: clearify meaning of the repository field (#​404) @​gucio321

Dependency Updates

• Bump actions/checkout from 6 to 7 (#​409) [@​dependabot[bot]](https://github.com/@​[dependabot[bot]](https://github.com/apps/dependabot))
• Bump release-drafter/release-drafter from 6 to 7 (#​403) [@​dependabot[bot]](https://github.com/@​[dependabot[bot]](https://github.com/apps/dependabot))

v7.1.0

Compare Source

Added

• Add skip_push input option (#​401) @​kvanzuijlen

Changes

• docs: fix typo in README.md (#​400) @​GideonBear

Dependency Updates

• Bump actions/checkout from 5 to 6 (#​399) [@​dependabot[bot]](https://github.com/@​[dependabot[bot]](https://github.com/apps/dependabot))
• Bump bats from 1.12.0 to 1.13.0 (#​398) [@​dependabot[bot]](https://github.com/@​[dependabot[bot]](https://github.com/apps/dependabot))

v7.0.0

Compare Source

Added

• Restore skip_fetch, skip_checkout, create_branch (#​388) @​stefanzweifel
• Restore Detached State Detection (#​393) @​stefanzweifel
• Add Support for Tag Messages (#​391) @​EliasBoulharts

Changed

• Run Action on Node 24 (#​389) @​stefanzweifel

Dependency Updates

• Bump actions/checkout from 4 to 5 (#​386) [@​dependabot[bot]](https://github.com/@​[dependabot[bot]](https://github.com/apps/dependabot))

v7

Compare Source

Added

• Add skip_push input option (#​401) @​kvanzuijlen

Changes

• docs: fix typo in README.md (#​400) @​GideonBear

Dependency Updates

• Bump actions/checkout from 5 to 6 (#​399) [@​dependabot[bot]](https://github.com/@​[dependabot[bot]](https://github.com/apps/dependabot))
• Bump bats from 1.12.0 to 1.13.0 (#​398) [@​dependabot[bot]](https://github.com/@​[dependabot[bot]](https://github.com/apps/dependabot))

---

Configuration

📅 Schedule: (in timezone Asia/Singapore)

• Branch creation
  • Only on Sunday (* * * * SUN)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.