Skip to content

chore: rotate cachix token #12003

@NickCrews

Description

@NickCrews

What happened?

Looking at many recent CI runs, such as https://github.com/ibis-project/ibis/actions/runs/25837027060/job/75914224903?pr=12002 many of them are erroring. This is blocking many CI runs, such as building docs, testing PRs, etc

I set claude code on this and this is what it came up with. As a human, this feels likely to be the real cause, but take it with a grain of salt.

The jobs fail at the setup cachix step with this message:

Binary cache ibis doesn't exist or you don't have access.
Error: Cachix Auth token "ibis gha" has expired.
So nothing's wrong with the workflow YAML — the PR ([#12002](https://github.com/NickCrews/ibis.git/issues/12002)) already updated cachix/cachix-action to v16, and the action runs fine. The CACHIX_AUTH_TOKEN repository secret has simply expired.

To fix this, a repo admin needs to:

  • Sign in at https://app.cachix.org/cache/ibis → Settings → Auth Tokens → generate a new token with write access (the old one was labeled ibis gha).
  • In GitHub: Settings → Secrets and variables → Actions for ibis-project/ibis → update the CACHIX_AUTH_TOKEN secret with the new value.

This is the only blocker. Once the secret is rotated, the same workflow should pass without code changes.

@cpcloud is this you on the cachix account? If you add nicholas.b.crews@gmail.com to the cachix account I could do this in the future (IDK if there are other security concerns)

What version of ibis are you using?

NA

What backend(s) are you using, if any?

No response

Relevant log output

Code of Conduct

  • I agree to follow this project's Code of Conduct

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugIncorrect behavior inside of ibis

    Type

    No type
    No fields configured for issues without a type.

    Projects

    Status
    backlog

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions