add CI NIX_CONFIG to trust flake cache config and pass GitHub access token
run nix commands with --accept-flake-config
Why
The previous Nix CI failure showed two problems:
flake cache settings were ignored as untrusted
bun install attempted sandbox network fetches for packages missing from bun.nix (for example: astro@5.18.0, @playwright/test@1.58.2)
This change addresses both.
Notes
Could not run nix build locally in this environment because nix is unavailable.
Regenerated bun.nix now includes the missing tarballs from the failure log.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/RayLabsHQ/gitea-mirror/pull/216
**Author:** [@arunavo4](https://github.com/arunavo4)
**Created:** 3/6/2026
**Status:** ✅ Merged
**Merged:** 3/6/2026
**Merged by:** [@arunavo4](https://github.com/arunavo4)
**Base:** `main` ← **Head:** `codex/nix-ci-bun2nix-refresh`
---
### 📝 Commits (1)
- [`6bc039b`](https://github.com/RayLabsHQ/gitea-mirror/commit/6bc039b1550f26c149dbdad35e0781bab822f9c6) nix: refresh bun deps and ci flake trust
### 📊 Changes
**2 files changed** (+34 additions, -6 deletions)
<details>
<summary>View changed files</summary>
📝 `.github/workflows/nix-build.yml` (+7 -3)
📝 `bun.nix` (+27 -3)
</details>
### 📄 Description
## Summary
- regenerate `bun.nix` from `bun.lock` with `bun2nix`
- add CI `NIX_CONFIG` to trust flake cache config and pass GitHub access token
- run nix commands with `--accept-flake-config`
## Why
The previous Nix CI failure showed two problems:
1. flake cache settings were ignored as untrusted
2. `bun install` attempted sandbox network fetches for packages missing from `bun.nix` (for example: `astro@5.18.0`, `@playwright/test@1.58.2`)
This change addresses both.
## Notes
- Could not run `nix build` locally in this environment because `nix` is unavailable.
- Regenerated `bun.nix` now includes the missing tarballs from the failure log.
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/RayLabsHQ/gitea-mirror/pull/216
Author: @arunavo4
Created: 3/6/2026
Status: ✅ Merged
Merged: 3/6/2026
Merged by: @arunavo4
Base:
main← Head:codex/nix-ci-bun2nix-refresh📝 Commits (1)
6bc039bnix: refresh bun deps and ci flake trust📊 Changes
2 files changed (+34 additions, -6 deletions)
View changed files
📝
.github/workflows/nix-build.yml(+7 -3)📝
bun.nix(+27 -3)📄 Description
Summary
bun.nixfrombun.lockwithbun2nixNIX_CONFIGto trust flake cache config and pass GitHub access token--accept-flake-configWhy
The previous Nix CI failure showed two problems:
bun installattempted sandbox network fetches for packages missing frombun.nix(for example:astro@5.18.0,@playwright/test@1.58.2)This change addresses both.
Notes
nix buildlocally in this environment becausenixis unavailable.bun.nixnow includes the missing tarballs from the failure log.🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.