From a5742d952cb01a18567d4da2db00f8606a05b835 Mon Sep 17 00:00:00 2001
From: Niklas Zender <n.zender@famedly.com>
Date: Tue, 26 May 2026 11:05:50 +0200
Subject: [PATCH 1/2] chore: update GitHub Action pins

Pin listed workflow actions to current upstream default-branch SHAs.
---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a924107..b389c1f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
         with:
           extra_nix_config: experimental-features = nix-command flakes
       - continue-on-error: true
-        uses: cachix/cachix-action@1eb2ef646ac0255473d23a5907ad7b04ce94065c
+        uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71
         with:
           authToken: ${{ secrets.CACHIX_AUTH_TOKEN_FAMEDLY }}
           name: famedly

From fe7f5c415b0ed7bde642e0d9eb990f44b132e657 Mon Sep 17 00:00:00 2001
From: Niklas Zender <n.zender@famedly.com>
Date: Tue, 26 May 2026 12:03:44 +0200
Subject: [PATCH 2/2] chore: migrate to docker login action

Replace famedly/login-action with docker/login-action@2ff7bc63ffa51414f77e9cbeea0d3297c1672d2e.
---
 nix/modules/workflows/definitions/docker-backend.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nix/modules/workflows/definitions/docker-backend.nix b/nix/modules/workflows/definitions/docker-backend.nix
index a65cb29..5f8a212 100644
--- a/nix/modules/workflows/definitions/docker-backend.nix
+++ b/nix/modules/workflows/definitions/docker-backend.nix
@@ -126,7 +126,7 @@ in
         }
         {
           name = "Log into registry";
-          uses = "famedly/login-action@${av.famedlyLogin}";
+          uses = "docker/login-action@2ff7bc63ffa51414f77e9cbeea0d3297c1672d2e";
           if_ = "env.OCI_REGISTRY != null";
           with_ = {
             registry = ghEnv "OCI_REGISTRY";