The worker's --nix-daemon-shared-dir option now takes a relative path only, which is what it always meant.
An absolute path there used to be accepted and silently placed the directory outside the runtime directory it belongs under.
Pass --shared-nix-cache if you want to name a Nix cache directory by its full path.
A run that NixCI cancels is now reported to GitHub, GitLab and Codeberg as cancelled, instead of being left saying it is still running.
Waiting for a build now answers 402 instead of 408 when builds are not running for the repository.
NixCI now clones private repositories with the ssh key in a secret always called GIT_SSH_KEY.
The git-ssh-key configuration option is gone.
The name is fixed because reading your configuration is the first thing a build does, and it has to clone the repository to do that, so a key named only in the configuration could never authenticate the clone that reads it.
If you named a secret there, rename it to GIT_SSH_KEY; the configuration option itself needs no replacement, and a leftover git-ssh-key in your configuration is reported as an unrecognised option rather than failing the build.
There is now an API reference, generated from an OpenAPI document that you can point your own tooling at. It also shows how to start a build from a shell and wait for it to finish, which fails if the build does.
Workers can now build with Determinate Nix.
Code blocks in the documentation are now syntax highlighted, in the same colours as the build logs.
Asking a page for text/markdown gets fenced blocks that name their language.
Evaluation, build, test, and deploy jobs now fetch only the commit they are building or running, not every commit it descends from. For a repository with a long history that is much less to download, and the fetch is the first thing every job does.
A new shallow-clone option in nix-ci.nix controls it.
Set shallow-clone = false for a flake that reads self.revCount, which has no history to count when only one commit is fetched.
A test or deploy job that runs in-repo still fetches the whole history, because it clones the repository and a clone has no depth control.
A build that did not have to run now says it was already built, instead of showing zero seconds as though it had. It keeps the green check of a passing build but trades the elapsed time for a lightning bolt , because the result came back instantly from the cache.
Sped up configuration jobs by only fetching the configuration file instead of the entire repository using a specialised new tool: nix-ci-config.
Builds are now skipped when the same derivation has already been built, even after the evaluation job has completed. This should speed builds up even more under heavy load.
Evaluation jobs got about 30% faster thanks to a new tool: nix-ci-eval.
As part of this change, builds that are already known to be cached will now be skipped entirely. This brings the total worker time of the common case suite down by even more than 30%.
NixCI got a changelog, and this is its first entry.
Every change to NixCI gets an entry here from now on, so you can see what
shipped without having to ask.
Each entry is named for its version, like 26-07.1: a two-digit year, a month,
and a counter that starts again each month.