chore(deps): update sequoia-pgp/fast-forward digest to e2c6fb5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
sequoia-pgp/fast-forward	action	digest	042cd23 → e2c6fb5

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for the sequoia-pgp/fast-forward e2c6fb5 update again.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

[github-actions]

Triggered from #92 (comment) by @​renovate[bot].

Trying to fast forward main (0576c56) to renovate/sequoia-pgp-fast-forward-digest (30de897).

Target branch (main):

commit 0576c561b9913c4e4f9913a68b088cd79121f2f3 (HEAD -> main, origin/main)
Author: Cameron Smith <cameron.ray.smith@gmail.com>
Date:   Thu Mar 5 16:14:15 2026 -0500

    ci(release): handle no-match exit in semver tag filter pipeline

Pull request (renovate/sequoia-pgp-fast-forward-digest):

commit 30de897f497683e93b709f1a79b32cd74d1f93f5 (pull_request/renovate/sequoia-pgp-fast-forward-digest)
Author: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Date:   Thu Sep 25 20:41:50 2025 +0000

    chore(deps): update sequoia-pgp/fast-forward digest to e2c6fb5

Can't fast forward main (0576c56) to renovate/sequoia-pgp-fast-forward-digest (30de897). main (0576c56) is not a direct ancestor of renovate/sequoia-pgp-fast-forward-digest (30de897). Branches appear to have diverged at eccfced:

* 0576c561b9913c4e4f9913a68b088cd79121f2f3 ci(release): handle no-match exit in semver tag filter pipeline
* 8138f4e00e8323494f0e59c8b3318a9a7f553824 ci(release): use semver tag filter instead of git describe for release detection
* a01046b96a92cd1863f09f95dad422b77bfdd05f docs(readme): update outputs, checks, and architecture for current state
* 651ca14e2be9f6f65960f658ae7167b64e8b78f8 test(checks): add linux-only invariant test for container packages
* e3f4e3c97a5338f3ed58b01e3e8544cbaf118c03 fix(containers): gate container variant outputs on linux systems
* 4773aad5a164df3e9fda81462e3c268ee864371f fix(containers): gate nixpod-users package on linux systems
* 671eb722d879300f12b85785d0a71395a849bdd9 fix(containers): gate s6-overlay package on linux systems
* c83ac4236e5214f21c88bf02e93936d1c4ba2ce3 feat(checks): add nix-unit evaluation tests for flake structure
* 593303b1c3a2d4a3ae55a28d84b704cb8a22134e feat(checks): import nix-unit flake-parts module
* 3526acfac222c1db990c0ff3146c29a1e7157972 feat(checks): add nix-unit flake input
* c5435cbce9cbc5618dd9776fa831707f39b36694 refactor(justfile): split container push and manifest recipes
* de85e5c295e185d5cd48b0592a0e01d2344f9785 feat(ci): add aarch64-linux runner matrix to containers workflow
* c7a909f4fc2ab0f366424b30b7a2861e62e9ea9d feat(ci): add aarch64-linux runner matrix to CI container jobs
* e1c8ffa50ad5257b7f4cd95658558b3a12155a9b fix(containers): restrict push tags to arch-qualified suffixes only
* aa0e64c620ae831be447cc4843f9330650980b3f refactor(containers): replace fused manifest with push-* and *Manifest outputs
* 023b6ad03f2368de939ec68ecf3333b0ece4a524 fix(containers): add darwin system mapping and separate repo parameter
* 174abdc996748b1278a0091fb9c4ceca169876ad refactor(containers): split mkMultiArchManifest into mkPushImage and mkManifest
* 0c86753f1272ce0d379e08be764380063759017c docs: rewrite README.md to reflect current nix2container-based architecture
* aa9969f30f298c58b86ad255e655c8e33170fe33 refactor: remove obsolete testing/ experimental flake
* f845bad076acf8279328e44dfcdbc6f4e1eca6ba fix(ci): remove stale home/**/*.nix glob from cached-ci-job hash-sources
* 933a410b6b78df06705b6c32322d79847ebdd073 refactor: use prek as pre-commit runner instead of python pre-commit
* 0887efb6b231d8ac1b3cb302e39205330bc062fd chore: update flake.lock for git-hooks flake-compat removal
* 8212757b9c18d60019aab0a93f6bffc8f5de3c8b refactor: eliminate unused flake-compat transitive dependency from git-hooks
* 72340f600075ee5fdbdc37cef6afeac10984c737 fix: apply nixfmt to home-manager module aggregator
* 9d359bcfb5ca2f5a5505654eeb9c63fc3fd97d2e refactor: remove home/ directory after relocation to modules/home/
* 7b77fc6a874ca2a9756285ca01286fd8b8462761 refactor: remove modules/home.nix bridge to home/ directory
* 382b3c7f2c86d6ca0c9471a6137cd8f5e6567c2a refactor: relocate neovim config.lua to modules/home/neovim/
* e6c1d6850e9206e517b7dd1802e1d58ff0c556ff refactor: relocate neovim which-key sub-module with underscore prefix
* bc8160cb842f368f7219681fb02706f4f0c56d2e refactor: relocate neovim haskell sub-module with underscore prefix
* 7ea477f31ddf02cfd0cbae34b9f74d1dc6157d9a refactor: relocate neovim coc sub-module with underscore prefix
* 2c1ae16e461120f125496f465e17a0a1c5b0bfb9 refactor: relocate neovim telescope sub-module with underscore prefix
* 024895880e399f3d4b95f78de08c825c5153f4a9 refactor: wrap neovim config as flake-parts home-manager module
* aad7e926b17a33f28684de4acaf64372c9c58b8d refactor: wrap zsh config as flake-parts home-manager module
* 1360b3dd2ccd2f54e85a4cf11d23f99783d716d7 refactor: wrap terminal config as flake-parts home-manager module
* 53bfc475849ac5d96802b317695eb775b87ca9f8 refactor: wrap starship config as flake-parts home-manager module
* 6f2143dd7ed399614d39b63af393f0df1a81789d refactor: wrap git config as flake-parts home-manager module
* 9fa2cf993dff2fa86b8008177640f32923b3eb9a refactor: wrap atuin config as flake-parts home-manager module
* 6d4d31c0c1d61737eb0b145d7142b4400c4c1a39 feat: add home-manager module aggregator in modules/home/
* 1d4dbdf58c9513db779ecdd5533afab1edeb487a feat: enable flake.modules option via flakeModules.modules import
* da117bbea4d71e1e9d41c81ede105cce79905a91 refactor: convert manifest builder to flake-parts module
* 270f94dcf3d04d865d0be4257072fd675fa5315e refactor: convert container builders to flake-parts modules
* 6a48f0ced3374297693cfc5d7a7f6631efe4c7b3 refactor: decompose packages into container flake-parts modules
* 182fa36999a8c52fe06be120866e1f45a72f94b1 fix(ci): force-update tags before semantic-release preview
* 50a6c51211eccb2019fd0c68200c1d86fbd74ea0 fix(ci): correct repository URL in package.json
* 8ba3b68a91159e17b25dc721270f7e8cd42eff57 feat(ci): add preview-release-version job for PR version preview
* 420d1489906a8536e5c6a8de0d1b2e8e08d5edef feat(ci): write version outputs to GITHUB_OUTPUT in preview-version
* 9beafe1a21f57dbb16051e99d2db6fd827c32be2 fix(ci): replace grep -oP with POSIX-compatible patterns in preview-version
* 5b437bdd7990d9fac2f080cf46abe7e31bbf0f05 fix(ci): use bun and just for semantic-release instead of cycjimmy action
* 2e270fe172c42f2c644abcf7df63b44bb7bddf9e feat(ci): add preview-version script for release previewing
* dc50656387d1407ed9cc33e846a7d124cefbbfeb feat(justfile): add semantic-release recipes
* 3275b7092bfe434b955e1a12ce561025a12ac007 chore(gitignore): add node_modules
* 3e0764c4aeae5775d2c8c1d6f058521f77927ed7 chore: generate bun.lock from package.json
* 661c36e92122c3c3acd7fe8ae51ccf366336b374 feat(devshell): add bun and nodejs for semantic-release
* ac77e5aa73c8ac7609eda8d3ca78b3ae8bd88be6 feat(ci): add package.json with inline semantic-release config
* 8c8e7bb783469b345aa4ca66d9fa44546fbb987c fix(ci): remove standalone releaserc in favor of package.json config
* 742255e1080c58c1c80eeb0704af46c088e54864 docs(readme): update Containerfile paths and build tool description
* 5df2318e37b7c9443486693faae3a30b22136c20 fix(justfile): remove deleted tag-build-push-container from gha_workflows
* 9dd88fbda7ee23402c7ce189371c4d529b886d3e refactor(containers): remove legacy file reference from containers.nix comment
* cb7f42c9a75a896c96ceca44db7bf3b971712510 refactor(containers): remove legacy file references from users.nix comments
* 2e36d722b775e224a82acf52fad33113fa244b2d refactor(containers): rename Containerfile.debnixpod to debnixpod.Containerfile
* 7e3c2f073c38c9838b54212f87d1dfc0a33d9224 refactor(containers): rename Containerfile.debnix to debnix.Containerfile
* e52276c27ae1d652271cac2fc43f1a4b0134cbd4 chore: remove generated CHANGELOG.md
* 618e3932267985901e0f5673098787bd553088d4 fix(ci): replace cihelper preset with inline semantic-release config
* 4ec68f1fbbff81c8efd79a189bd0807b7e8720ff refactor(ci): remove tag-build-push-container composite action
* e2341b4cc3518d0e59a8af860ee05a15df62c4d6 refactor(containers): remove legacy dockerTools build files
* 3e065ce5799ec9b1e26092d9c09490a09f62de5d feat(ci): add inline semantic-release config
* 60583ebc6ac55921aeab5e00b3c4621847d374a8 chore(gitignore): add logs
* 507593a77f7f5cb5493976a83c39fe59f7d15c76 fix(home): force overwrite atuin config for s6 daemon compatibility
* bdfaa5cb861094591d03a7841c8118f87ac00400 fix(containers): remove build-time /tmp/jupyter_runtime directory
* 3e2cf074ebff48fbad9abe36e54d0870fb2e979b fix(containers): move nixConfig perms to nixConfigLayer buildLayer
* b0aa6ea9245d5ad6ecc37dbcdfa1ca6f94bc017d fix(containers): set nix profile directory ownership to storeOwner
* 77a8a1836dbbba6f993a3b5d778f704b5ab93ce5 fix(containers): set nix database ownership to storeOwner
* e506aecd05db878f2f21c8ad63be73da40507d86 fix(containers): set writable perms on s6 service directories
* d2fce4ab1e5524a4e922eb6bdacb8e6d2784f514 fix(containers): force real directories for s6 service entries
* 7e675ab9c084d11867b0987898ad4e2a54c8dae4 fix(containers): bypass buildEnv for s6 services.d derivations
* faf20445b773ec436484c33b74b1335629422b03 fix(containers): force real directories for /tmp, /var/tmp, /var/log
* 2cc9db117d5e168eb9f96047812de020c3887fd7 fix(containers): target rootEnv for nix2container perms matching
* 2ced48b79ea162f019cf88bd68a910084116a6f2 fix(containers): set /run ownership for s6-overlay non-root users
* 1b03f8cff6d884a59edea66f421e541d252d4aed fix(containers): set S6_KEEP_ENV to preserve OCI environment variables
* 29db0903408dde80190aa17d05f1fc0a8aa03b79 fix(containers): add /bin to PATH for extraPkgs visibility
* 6eb8f3695900dfda771dbe9f63258d24d6150e52 fix(containers): populate default nix profile with base packages
* 45150121567b9c157703462caaeaf66ac50f6499 refactor(containers): add profilePackages parameter to nix-config
* b83d6f109521e5de1c7120ba5eb17423061ab691 feat(containers): add host-native container loader apps
* bb3b296a9394df4aad1cb52da607e32b22bf3c01 fix(containers): use root activation package for nixpod variant
* fec3ddcb3fbf7819e716444782891ea88c3c8b5a fix(containers): use direct store path for bash in container Cmd
* 9356d8fdde97e46208c45639cfc8ff333d29172d fix(containers): use copyToRoot for s6-overlay layer placement
* 5cc99ac360d0cddd047785a497a8211ce34b0673 fix(ci): sanitize GIT_REF to replace slashes with dashes for OCI tags
* 6e4756a16a0b2e5592784793c29c0a0574158a8a docs: update nix-installer credit to NixOS/nix-installer
* b6f5127a75c3b174b99442ee271004d1a834ad65 refactor(testing): update nix-installer URL to NixOS/nix-installer
* 5cf83bf53cdbd1f1ce78b00c74a5776be2690cbd refactor(devcontainer): use nixpod image instead of Containerfile.debnix
* 6d2842ee6a4f63e965c4654c9b1c95bd099f6c6f refactor(justfile): remove build-nix-image from ratchet pin list
* 60d96d74e66039c64eed7c42e3d05d748c0156f1 chore(ci): remove commented-out flakehub publish block
* 6d0d32c14b45ec72c89543c5ec1656b519d4b28a refactor(ci): remove deb container build and publish jobs
* 6fccb8d9c6f9a2f5712eb09f450fd4775ba75360 chore(ci): remove legacy build-nix-image composite action
* 5860f98cb28154fc35eefb2d9a0ac844e4e33ab5 refactor(ci): replace build-nix-image with setup-nix in container jobs
* 40c7c2e7bd80fac3ec8e43ecb98cbb9b779a9e7b chore(flake): update catppuccin input
* 667ac406227d88b78d635ae395c5b460ce960925 refactor(home): migrate deprecated zsh initExtra options to initContent
* 721683547a3957d6f172f036e3ce0df2afa44f80 refactor(home): migrate deprecated git options to programs.git.settings and programs.delta
* 3a2977fe1bf4deda391bd4fcb652318f6a72ab84 refactor(home): rename deprecated module imports for catppuccin and nix-index-database
* 02f79389523cfefeddcddcdc0f9553f262ea730c chore(flake): update sops-nix input
* 917784b155aa1693622c50e2c006bad4a39de322 chore(flake): update nix-index-database input
* 68fe23dfc3cfc5109b1edf50b54ad772efee47ef chore(flake): update home-manager input
* b9cacb6e4015ec059557dc32e1e75e4302edc3ea chore(flake): update flake-parts input
* ad20a063786dbf06e37ebc55bdd839f9368e42a9 fix(home): rename noto-fonts-emoji to noto-fonts-color-emoji
* 24dbebf01008fcf9d8159683575a7c113e1b5524 chore(flake): update nixpkgs input
* 2af53e8ab21eee756a374ab37aeb52743045af89 chore: update flake.lock after nixos-flake removal
* 8e9c08602eff874b95c08521387f8e1d965039c2 refactor: remove nixos-flake flake input
* 531a134c6f3b9a84ac18759cbc601305429c6c01 refactor: remove nixos-flake flakeModule import
* 3eddef72c9c2bb58fe7352ad3b38410703279c9d refactor(dev-shell): remove activate-home app referencing nixos-flake
* 149c11462e3ffaf4ef9eb6b2c07b3ae4e60f0849 refactor(packages): replace nixos-flake mkHomeConfiguration with direct home-manager
* 76ea9645aa39322574088435fa271aab23b37065 refactor(ci): remove flocken debug lines and standardize GITHUB_TOKEN in build-nix-image
* 2f9259c6c1aea8800ed086d785748a98d3138048 chore: update flake.lock after flocken removal
* 93026e3add429806cb8483af324cb3ce268a3733 refactor: remove flocken flake input
* cfc1cf63d9f842a63e89574a254511893d0b8951 refactor(containers): replace flocken with crane-based manifest builder
* c4dc4630c85f70f35041673e5c6a2e4a61e4a420 chore(vars): add actors
* 8d48024f4bccadd4aeee2865b6547e914141ea40 fix(justfile): unset GITHUB_TOKEN in ghvars sops subshell
* d4470aa5ab4e6daf63781e162d82d4973b375779 feat(ci): add gitleaks configuration
* e3ad9822fa9ae796aa8c2a8dd567c138b6f886ee feat(ci): add gitleaksignore for false positives
* d85ed72c51d8144011226528c4df85a04cf96711 fix(justfile): unset GITHUB_TOKEN in ghsecrets sops subshell
* 9cf065d32aeba339c8e1caa1bea0b4f9b55ffb1e chore(vars): wrap int in string
* 3339b0cc55efd7c3d0f3e02e147b797e6ea249d0 fixup! feat(ci): add cached-ci-job composite action
* 10c709487c3e7810e95a3cab274bdb508a6610b0 fixup! feat(ci): replace update-flake-lock with update-flake-inputs
* ef5e9b302152a5f300ee07e79489a8c40e6ebc1a chore: remove residual .teller.yml
* 30c52b4b87ec5e3cdf369de678d35e3a53f82662 refactor(justfile): update CI references for renamed workflows
* 676787f17c00dcd9f851fb5447865ed001d4e50d feat(ci): replace update-flake-lock with update-flake-inputs
* 434f36fae333f1a5632f7088b21d1301d6384511 refactor(ci): rename labeler.yml to labeler.yaml
* 5cb89b81b0731366d9bcb2bc8bdccdea0818308a refactor(ci): modernize flake-check with setup-nix and cached-ci-job
* 5945c66b87da5c63e6ef3b106f05721fa637ebe4 feat(ci): add secrets-scan job and top-level concurrency
* 024ececeee5c2facc2dd0b0875d3484ef80fd0e0 refactor(ci): rename cid.yaml to ci.yaml
* d5d98f5fccb6cb73f9b2d68058b9bf0f115fc098 feat(ci): add cached-ci-job composite action
* aa1391d7f08c2d9e6c4d9d09b3b577bf630d5149 refactor(justfile): reorganize devpod recipes and clean up variables
* ff74f222fca346eff88df26ab42b65a6a562c15e feat(justfile): add sops lifecycle and gitleaks recipes
* b2934296f6888b857a22781c929d2dc8ff839c39 feat(justfile): add CI helper recipes
* d48676dfdd4fb83f060b4b0d9c41737e255c49ea feat(justfile): add nix2container-aware container recipes
* a3e782ac0b19af0608d1d278e8a5da846aa5eaa5 fix(justfile): update gha_workflows to reference existing files
* 80f1b6e0e9bab84599510a70cc2f61c3f95a75cf refactor(justfile): rename sops-prefixed recipes to canonical names
* 22e75a29cbf7b691b9a52b05a100e9c100034b67 refactor(justfile): remove teller-based secrets recipes
* 354c4172550ecec3f90be5d6ec9121cd1544c0c3 fix(beads): disable auto-start
* 999ec6b64c465e8ae1b5f8fe3c7b85036e931786 feat(just): add sops secrets management recipes
* 26fa79ec39b4fd6819b9eedc10e1d22968bf2f3a chore(flake): update lock file for sops-nix input
* 3cdd2ec263d18bd1ad6d38c63d108835673881ae feat(flake): add sops-nix input
* a8d4ce1c50c834d2e81e74d0bca7a3857088f1a0 chore(vars): init
* 2c735362a66f26a2ab71664389a0b4c785c19a57 chore(gitignore): pre commit config autogenerated
* f5252361dea9a05f1c7639c057fa4eca3db576fe chore(sops): init config
* 0606641f90904f5597a0a1a2f56d6faa3acad480 feat(dev-shell): add git-env shellHook exports
* 957e94d1d75865b4498a92beeee805e704d1c9fd feat(dev-shell): add secrets and development tooling
* badae749a21ef2867f3645ed490593125e68067a refactor(just): update test-flake-workflow job name to flake-check
* 1d8ea16920b8feb2d8d5a182267d35314d5f3250 refactor(ci): update mergify check-success from nixci to flake-check
* 5862d79882db8edcc4d63b1a19c99be1c4074f4c refactor(ci): replace omnix with nix flake check
* 55d9bc59c0ad4eb07e4330ef3f0568af56d71ca7 style(dev-shell): format dev-shell.nix with treefmt nixfmt
* 483ad87d3a6a4c3dca7637535a160efa29d6412c feat(dev-shell): wire pre-commit hooks into dev shell
* 858e430849d05dcff01ef4db857c497a4c25e092 docs(ci): update secret scanning notes to reflect gitleaks migration
* 619f7784ce81c6b60a5357d73ef0561df0348c41 chore(ci): remove gitguardian check requirement from mergify
* 65e0217984614dcc8d9edf6b243b06c11074db21 chore(ci): remove gitguardian scan job from CI workflow
* 662f991ebfde44e85f8b81f8965052dae1f16950 feat(formatting): add gitleaks pre-commit hook
* 9536fa9324c98e5a524ffb21436c436f5267b902 style(modules): format containers.nix with treefmt nixfmt
* f76be0ca58a91d5735246aab4560c9dc1170c81b style(containers): format users.nix with treefmt nixfmt
* 249b1df7d15bb2c697e6f82a09ce9d1fe6753b9c style(containers): format s6-overlay.nix with treefmt nixfmt
* 76883aec8120c9b46d50036e10499545ef72b00d style(containers): format nix-legacy.nix with treefmt nixfmt
* 8fb0fcff23a8721f226862a28165e57283f51482 style(containers): format nix-config.nix with treefmt nixfmt
* be19774ff63abc4661c82e90be2355c2c29302ca chore(flake): update lock file for treefmt-nix and git-hooks inputs
* bbe7319f29a716f5d8def24cf7cf0b096d09bf9d feat(formatting): replace bare nixfmt with treefmt-nix and git-hooks.nix
* f0fb31e57b6fcb29c2e2e42958b4d09905e79f64 feat(flake): add treefmt-nix and git-hooks.nix inputs
* def248c6bb937251c7a328dcd5ee70cb285d7fc8 refactor(flake): rewrite outputs to use import-tree
* 77894cdd786569f977945d2460fd62a0132c303a refactor(flake): extract manifests to modules/containers/manifests.nix
* 0e080a33117f5457be05c19ac8d996e507c69d22 refactor(flake): extract containers to modules/containers.nix
* 8f4593e35ba8cd68148b92cf961186aee2966f97 refactor(flake): extract packages to modules/packages.nix
* a64fe5d92359eb2627910c1f6eee939656332545 refactor(flake): extract dev shell to modules/dev-shell.nix
* 2e47364fac64f84052eb1bee03fae7efdb229150 refactor(flake): extract formatter to modules/formatting.nix
* 7a8036c0d30fd1877ebba08b9b1e8b01c116e87a refactor(flake): extract home module import to modules/home.nix
* 9c9ef902f25b56cbbe92cd52a39d51b071fa6f45 refactor(flake): extract flake-parts config to modules/flake-parts.nix
* 40d0985a3fd3243575d03c94c642c38b62e8a218 refactor(flake): extract systems to modules/systems.nix
* 6f92e6389e7a4a6eaf2ecaccae8292897a564bc0 chore(flake): update flake.lock for import-tree
* 13313d92979488fbc33c65224fe840468a88e4b9 feat(flake): add import-tree input
* 5bbe1e3645c2a364619a849246443adbbec9e54a fix(beads): remove hardcoded dolt_server_port and dolt_mode from metadata
* a4838865ff852c59d274e01e1033437eb190b41d nit(cid): name `CI/CD`
* 8ca6cdac9ca712f50859763061a5a07f51c96b18 chore(containers): update users.nix comments to reference archived filenames
* 7757aebbc1cf1d5a60adb77d89d383c7cdc5b1d1 refactor(flake): remove legacy dockerTools build pipeline references
* 291da146ba5efb9730da9f97afdf58f1643eb195 chore(containers): archive sudoimage.nix as sudoimage-legacy.nix
* 6dd325cf3493e5dec33e3fd9c9e2fd2279b54eab chore(containers): archive nix.nix as nix-legacy.nix
* 1a5a3bd9a413995210e216bdfd3286c45f1648b0 feat(ci): add nix2container container build workflow
* 1d9fda1bae787e7fb684baf744555a47a8412348 feat(flake): add all variants to containerMatrix
* 359c658167650ef4e716c2da9ca709bc856cfd0d feat(flake): migrate jupnix variant to nix2container buildNixImage
* e1c549837a6dc67853cdebaf19d84d2e048c153b feat(flake): migrate codenix variant to nix2container buildNixImage
* 156d63ef7a9ddb926520763d264b2ee58cd15358 feat(flake): migrate ghanix variant to nix2container buildNixImage
* e7ffab51659e92638c1df15fb7749f8acc5a1c75 fix(containers): parameterize PATH/MANPATH/NIX_PATH for non-root storeOwner
* 366f04e27795a7cdce196d12575963693d22c6d0 feat(flake): migrate nixpod variant to nix2container buildNixImage
* 395c124e3642d91e55edf7f4aaf52e005f98fb00 chore(beads): init
* c7b9d087f20569d966137a51caa37396d62cddee feat(flake): expose nixpod-test-image package output
* cdb528a992d262187e9b29d02c05abe49601f746 feat(containers): implement nix2container-based image builder
* b118f59db7dc6781720ed7354949bae358f614b8 docs: correct teller schema, setup-nix references, and add CI patterns in ci-cd-modernization
* a2c4b8888177403abf21888d6ae2e5101c678a81 docs: correct config casing, sudoImage chain, and add multi-arch patterns in container-build-refactoring
* 93ba11ffe4e33a0cb952e476da2d8b5042678085 fix(containers): drop setuid-preserving tar flag in s6-overlay extraction
* 3e8fdb1b099d1ea646eb45177f05eae714037498 feat(flake): expose nixpod-nix-config package output
* f44d44e878791588163102972fcb4ceb41a5ef88 feat(containers): create Nix daemon configuration derivation
* adcbf0b1fd05ab155a6cd4681327024c325c65de feat(flake): expose nixpod-users package output
* 5b5aaa1f20e975b706ad361af6fa4f90ebfb780d feat(containers): create multi-user system configuration derivation
* d6d38a458d6b496f11d1659ed5d9f3c83cd7e62f feat(flake): expose s6-overlay-layer package output
* 6f6554c8568ab0e307c0932ccec378dd0251da02 feat(containers): create s6-overlay fetch derivation
* 245b008ab9922bb3833cdace2a5a0ad97c4f24c9 chore(flake): lock nix2container input
* 70b21b125b8e54ad608b854ff27e8f17f535e8d2 feat(flake): add nix2container input with nixpkgs follows
* ff915cb326704deef1e5b5a3bc9d3b5b08616b3f feat(lib): vendor mk-multi-arch-manifest.nix from vanixiets
* 9518cea0c75c6ddadc79e05723fcca9a59519c02 feat(ci): vendor setup-nix action from vanixiets
* d4fa12a23446eb5434b79835635dc200e7c4d15b docs: add CI/CD modernization research notes
* 215ecd0f89aa53775e5949ac2fd70411e127df35 docs: add nix2container migration research notes
* 2a9403a891ad8fd2ba84da45b1275a87461cf83c chore(gitignore): add .worktrees/ for bead worktree isolation
* 1073f161d832476e1748dcc9feb2ea513c0eaea0 chore(beads): add config with dolt auto-push disabled
| * 30de897f497683e93b709f1a79b32cd74d1f93f5 chore(deps): update sequoia-pgp/fast-forward digest to e2c6fb5
|/  
* eccfcedea8e7cac7e0aa4a58f1e47aa8fb73d157 chore(release): 0.4.12

commit eccfcedea8e7cac7e0aa4a58f1e47aa8fb73d157 (tag: v0.4.12, tag: v0.4)
Author: semantic-release-bot <semantic-release-bot@martynus.net>
Date:   Tue Sep 16 23:58:11 2025 +0000

    chore(release): 0.4.12

Rebase locally, and then force push to renovate/sequoia-pgp-fast-forward-digest.