3 files changed, 19 insertions, 12 deletions
diff --git a/.github/workflows/autobot.yaml b/.github/workflows/autobot.yaml
index efb14a9..ddc70d4 100644
--- a/.github/workflows/autobot.yaml
+++ b/.github/workflows/autobot.yaml
@@ -2,15 +2,16 @@ name: auto-merge dependabot
 
 on: pull_request
 
-permissions:
-  contents: write
-  pull-requests: write
-
 jobs:
   automerge:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: write
+      pull-requests: write
+
     if: github.actor == 'dependabot[bot]'
+
     steps:
       - uses: dependabot/fetch-metadata@v1
         id: metadata
@@ -21,5 +22,5 @@ jobs:
         if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
         run: gh pr merge --auto --rebase "$PR"
         env:
-          PR: ${{ github.event.pull_request.html_url }}
           GH_TOKEN: ${{ github.token }}
+          PR: ${{ github.event.pull_request.html_url }}
diff --git a/.github/workflows/flakehub-publish.yaml b/.github/workflows/flakehub-publish.yaml
index 8e214ae..89a82d2 100644
--- a/.github/workflows/flakehub-publish.yaml
+++ b/.github/workflows/flakehub-publish.yaml
@@ -13,8 +13,12 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@main
-      - uses: DeterminateSystems/flakehub-push@main
+
+      - name: install nix
+        uses: nixbuild/nix-quick-install-action@v26
+
+      - name: push to flakehub
+        uses: DeterminateSystems/flakehub-push@v3
         with:
           visibility: "public"
           rolling: true
diff --git a/.github/workflows/update-lock.yaml b/.github/workflows/update-lock.yaml
index b922394..e735b81 100644
--- a/.github/workflows/update-lock.yaml
+++ b/.github/workflows/update-lock.yaml
@@ -6,17 +6,19 @@ on:
     - cron: "0 0 * * 6"
   workflow_dispatch:
 
-permissions:
-  contents: write
-  pull-requests: write
-
 jobs:
   update:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: write
+      pull-requests: write
+
     steps:
       - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@main
+
+      - name: install nix
+        uses: nixbuild/nix-quick-install-action@v26
 
       - name: update lockfile
         uses: DeterminateSystems/update-flake-lock@v20