ci: nix flake fixes

.github/workflows/ci.yml

@@ -1,7 +1,6 @@
 name: CI
 permissions:
   contents: read
-  id-token: write
   actions: write
 
 on:
@@ -10,33 +9,18 @@ on:
     branches: [main]
 
 jobs:
-  checks:
-    name: Nix checks
+  check:
+    name: Format, lint, build & test
     runs-on: ubuntu-latest
-    permissions:
-      id-token: write
-      contents: read
-      actions: write
 
     steps:
       - uses: actions/checkout@v4
         with:
           submodules: recursive
 
-      - name: Install Nix
-        uses: DeterminateSystems/determinate-nix-action@main
+      - uses: DeterminateSystems/determinate-nix-action@v3
 
-      - name: Set up Nix store cache
-        uses: nix-community/cache-nix-action@v6
-        with:
-          primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock', 'Cargo.lock') }}
-          restore-prefixes-first-match: nix-${{ runner.os }}-
-          gc-max-store-size-linux: 10G
-          purge: true
-          purge-prefixes: nix-${{ runner.os }}-
-          purge-created: 14
-          purge-last-access: 7
-          purge-primary-key: never
+      - uses: DeterminateSystems/magic-nix-cache-action@main
 
-      - name: Run all flake checks
-        run: nix flake check -L --show-trace
+      - name: Check formatting, clippy lint, unit tests & ort version
+        run: nix flake check --show-trace

.github/workflows/release.yml

@@ -26,29 +26,16 @@ jobs:
           submodules: recursive
 
       - name: Install Nix
-        uses: DeterminateSystems/determinate-nix-action@main
-        with:
-          extra-conf: |
-            experimental-features = nix-command flakes
+        uses: DeterminateSystems/determinate-nix-action@v3
 
-      - name: Set up Nix store cache
-        uses: nix-community/cache-nix-action@v6
-        with:
-          primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock', 'Cargo.lock') }}
-          restore-prefixes-first-match: nix-${{ runner.os }}-
-          gc-max-store-size-linux: 10G
-          purge: true
-          purge-prefixes: nix-${{ runner.os }}-
-          purge-created: 14
-          purge-last-access: 7
-          purge-primary-key: never
+      - uses: DeterminateSystems/magic-nix-cache-action@main
 
       - name: Read ORT version from flake
         id: ort_version
         run: echo "value=$(nix eval .#lib.ortVersion --raw)" >> "$GITHUB_OUTPUT"
 
       - name: Verify ort-version matches nixpkgs onnxruntime
-        run: nix flake check --system x86_64-linux -L
+        run: nix flake check --system x86_64-linux
 
       - name: Install dist
         shell: bash
@@ -217,19 +204,9 @@ jobs:
           submodules: recursive
 
       - name: Install Nix
-        uses: DeterminateSystems/determinate-nix-action@main
+        uses: DeterminateSystems/determinate-nix-action@v3
 
-      - name: Set up Nix store cache
-        uses: nix-community/cache-nix-action@v6
-        with:
-          primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock', 'Cargo.lock') }}
-          restore-prefixes-first-match: nix-${{ runner.os }}-
-          gc-max-store-size-linux: 10G
-          purge: true
-          purge-prefixes: nix-${{ runner.os }}-
-          purge-created: 14
-          purge-last-access: 7
-          purge-primary-key: never
+      - uses: DeterminateSystems/magic-nix-cache-action@main
 
       - name: Build Docker image with Nix
         run: nix build .#dockerImage -L --show-trace