From 2816a459e6f7ab721b885b11770a3f215f6990c2 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 9 Oct 2026 13:10:08 +0000
Subject: [PATCH] chore(deps): update determinatesystems/nix-installer-action
 action to v23

---
 .github/actions/setup-nix/action.yml        | 2 +-
 .github/workflows/flake-closure-diff.yml    | 2 +-
 .github/workflows/renovate-dev-kit-lock.yml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/actions/setup-nix/action.yml b/.github/actions/setup-nix/action.yml
index dc759fe..c40aa91 100644
--- a/.github/actions/setup-nix/action.yml
+++ b/.github/actions/setup-nix/action.yml
@@ -20,7 +20,7 @@ runs:
   using: composite
   steps:
     - name: Install nix
-      uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22
+      uses: DeterminateSystems/nix-installer-action@3138316df39ed29be04236d7ffc686fa525866aa # v23
       with:
         # Use upstream Nix, not the Determinate fork (avoids the
         # determinate-nixd binary + FlakeHub auto-enablement we don't want).
diff --git a/.github/workflows/flake-closure-diff.yml b/.github/workflows/flake-closure-diff.yml
index 0e4124d..7a90c7e 100644
--- a/.github/workflows/flake-closure-diff.yml
+++ b/.github/workflows/flake-closure-diff.yml
@@ -50,7 +50,7 @@ jobs:
       # would need the release's own SHA before that commit exists. Keep these
       # two pins in step with .github/actions/setup-nix.
       - name: Install nix
-        uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22
+        uses: DeterminateSystems/nix-installer-action@3138316df39ed29be04236d7ffc686fa525866aa # v23
         with:
           determinate: false
           diagnostic-endpoint: ''
diff --git a/.github/workflows/renovate-dev-kit-lock.yml b/.github/workflows/renovate-dev-kit-lock.yml
index 1715f96..6012db4 100644
--- a/.github/workflows/renovate-dev-kit-lock.yml
+++ b/.github/workflows/renovate-dev-kit-lock.yml
@@ -51,7 +51,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
           persist-credentials: false
       - name: Install nix
-        uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22
+        uses: DeterminateSystems/nix-installer-action@3138316df39ed29be04236d7ffc686fa525866aa # v23
         with:
           # Upstream Nix and no telemetry, as in setup-nix.
           determinate: false