chore(deps): update cachix/cachix-action action to v17

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
cachix/cachix-action	action	major	v16 → v17

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

cachix/cachix-action (cachix/cachix-action)

v17

Compare Source

What's Changed

Breaking changes

• Upgrade action to use Node 24 by @​sandydoo in #​212
  https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Full Changelog: cachix/cachix-action@v16...v17

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

KICS version: v2.1.20

Category Results CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0 INFO 0 TRACE 0 TOTAL 0	Metric Values Files scanned 6 Files parsed 6 Files failed to scan 0 Total executed queries 4 Queries failed to execute 0 Execution time 0

Queries Results

| |

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	2		0	0	0.06s
✅ COPYPASTE	jscpd	yes		no	no	1.41s
✅ EDITORCONFIG	editorconfig-checker	3		0	0	0.01s
✅ REPOSITORY	checkov	yes		no	no	22.09s
✅ REPOSITORY	devskim	yes		no	no	1.66s
✅ REPOSITORY	dustilock	yes		no	no	0.01s
✅ REPOSITORY	gitleaks	yes		no	no	1.29s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	44.23s
✅ REPOSITORY	kics	yes		no	no	1.82s
✅ REPOSITORY	kingfisher	yes		no	no	4.7s
✅ REPOSITORY	secretlint	yes		no	no	1.57s
✅ REPOSITORY	semgrep	yes		no	no	25.05s
✅ REPOSITORY	syft	yes		no	no	2.63s
✅ REPOSITORY	trivy	yes		no	no	11.93s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.14s
✅ REPOSITORY	trufflehog	yes		no	no	4.46s
✅ SPELL	lychee	3		0	0	0.06s
✅ YAML	prettier	3	0	0	0	0.57s
✅ YAML	v8r	3		0	0	3.22s
✅ YAML	yamllint	3		0	0	0.42s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository