ci(github-actions): bump cachix/cachix-action from 16 to 17

[dependabot]

Bumps cachix/cachix-action from 16 to 17.

Release notes

Sourced from cachix/cachix-action's releases.

v17

What's Changed

Breaking changes

• Upgrade action to use Node 24 by @​sandydoo in cachix/cachix-action#212 https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Full Changelog: cachix/cachix-action@v16...v17

Commits

• 1eb2ef6 Merge pull request #212 from cachix/upgrade-node-24
• 75ce400 dist: re-build using esbuild targeting node24
• 2b33705 deps: update devenv inputs
• 04937db breaking: update action to Node 24
• ca2e519 ci: use 25.11 for tests
• e7c5c1a Merge pull request #208 from cachix/dependabot/github_actions/actions/checkout-6
• bea8a50 ci: allow running tests manually and with a custom nix version
• 2e35755 chore(deps): bump actions/checkout from 5 to 6
• See full diff in compare view

[github-actions]

KICS version: v2.1.20

Category Results CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0 INFO 0 TRACE 0 TOTAL 0	Metric Values Files scanned 6 Files parsed 6 Files failed to scan 0 Total executed queries 4 Queries failed to execute 0 Execution time 0

Queries Results

| |

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	2		0	0	0.07s
✅ COPYPASTE	jscpd	yes		no	no	1.38s
✅ EDITORCONFIG	editorconfig-checker	2		0	0	0.01s
✅ REPOSITORY	checkov	yes		no	no	24.1s
✅ REPOSITORY	devskim	yes		no	no	1.71s
✅ REPOSITORY	dustilock	yes		no	no	0.01s
✅ REPOSITORY	gitleaks	yes		no	no	1.19s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	47.78s
✅ REPOSITORY	kics	yes		no	no	2.86s
✅ REPOSITORY	kingfisher	yes		no	no	4.46s
✅ REPOSITORY	secretlint	yes		no	no	1.45s
✅ REPOSITORY	semgrep	yes		no	no	27.07s
✅ REPOSITORY	syft	yes		no	no	2.31s
✅ REPOSITORY	trivy	yes		no	no	11.71s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.12s
✅ REPOSITORY	trufflehog	yes		no	no	4.27s
✅ SPELL	lychee	2		0	0	0.05s
✅ YAML	prettier	2	0	0	0	0.5s
✅ YAML	v8r	2		0	0	3.58s
✅ YAML	yamllint	2		0	0	0.4s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository