Merge master into haskell-updates

name: "Update terraform-providers"

on:

  #schedule:

  #  - cron: "0 3 * * *"

  workflow_dispatch:

permissions:

  contents: read

jobs:

  tf-providers:

    permissions:

      contents: write # for peter-evans/create-pull-request to create branch

      pull-requests: write # for peter-evans/create-pull-request to create a PR

    if: github.repository_owner == 'NixOS' && github.ref == 'refs/heads/master' # ensure workflow_dispatch only runs on master

    runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - uses: cachix/install-nix-action@08dcb3a5e62fa31e2da3d490afc4176ef55ecd72 # v30

        with:

          nix_path: nixpkgs=channel:nixpkgs-unstable

      - name: setup

        id: setup

        run: |

          echo "title=terraform-providers: update $(date -u +"%Y-%m-%d")" >> $GITHUB_OUTPUT

      - name: update terraform-providers

        env:

          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

        run: |

          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"

          git config user.name "github-actions[bot]"

          echo | nix-shell \

            maintainers/scripts/update.nix \

            --argstr commit true \

            --argstr keep-going true \

            --argstr max-workers 2 \

            --argstr path terraform-providers

      - name: get failed updates

        run: |

          echo 'FAILED<<EOF' >> $GITHUB_ENV

          git ls-files --others >> $GITHUB_ENV

          echo 'EOF' >> $GITHUB_ENV

      # cleanup logs of failed updates so they aren't included in the PR

      - name: clean repo

        run: |

          git clean -f

      - name: create PR

        uses: peter-evans/create-pull-request@6cd32fd93684475c31847837f87bb135d40a2b79 # v7.0.3

        with:

          body: |

            Automatic update by [update-terraform-providers](https://github.com/NixOS/nixpkgs/blob/master/.github/workflows/update-terraform-providers.yml) action.

            https://github.com/NixOS/nixpkgs/actions/runs/${{ github.run_id }}

            These providers failed to update:

            ```

            ${{ env.FAILED }}

            ```

            Check that all providers build with:

            ```

            @ofborg build opentofu.full

            ```

            If there is more than ten commits in the PR `ofborg` won't build it automatically and you will need to use the above command.

          branch: terraform-providers-update

          delete-branch: false

          title: ${{ steps.setup.outputs.title }}

          token: ${{ secrets.GITHUB_TOKEN }}

   Most prominently access to the webinterface and API are now protected by authentication. Retrieve the auto-created

   admin account from the `frigate.service` journal after upgrading.

- `nodePackages.coc-python` was dropped, as [its upstream is unmaintained](https://github.com/neoclide/coc-python). The associated `vimPlugins.coc-python` was also dropped.

  The upstream project recommends using `coc-pyright` or `coc-jedi` as replacements.

- `services.forgejo.mailerPasswordFile` has been deprecated by the drop-in replacement `services.forgejo.secrets.mailer.PASSWD`,

  which is part of the new free-form `services.forgejo.secrets` option.

  `services.forgejo.secrets` is a small wrapper over systemd's `LoadCredential=`. It has the same structure (sections/keys) as

        with self.logger.nested("cleanup"):

            self.race_timer.cancel()

            for machine in self.machines:

                try:

                    machine.release()

                except Exception as e:

                    self.logger.error(f"Error during cleanup of {machine.name}: {e}")

            for vlan in self.vlans:

                try:

                    vlan.stop()

                except Exception as e:

                    self.logger.error(f"Error during cleanup of vlan{vlan.nr}: {e}")

    def subtest(self, name: str) -> Iterator[None]:

        """Group logs under a given test name"""

        self.monitor.close()

        self.serial_thread.join()

        if self.qmp_client:

            self.qmp_client.close()

    def run_callbacks(self) -> None:

        for callback in self.callbacks:

            callback()

        sock.connect(str(path))

        return cls(sock)

    def __del__(self) -> None:

    def close(self) -> None:

        self.sock.close()

    def _wait_for_new_result(self) -> dict[str, str]: