feat(nix): add bun version check workflow for pull requests

DanConwayDev · DanConwayDev · commit e96d5256872d · 2026-03-09T11:33:11.000Z
Add a lightweight CI check that compares the bun version in package.json against the version provided by the nixpkgs revision in flake.lock, using `nix eval --inputs-from . --raw nixpkgs#bun.version`. This is much cheaper than a full `nix build` and directly targets the version mismatch problem that caused anomalyco#13300 (and recurred on dev with 1.3.10). The workflow only runs when package.json or flake.lock are touched, and completes in seconds rather than minutes. Supersedes anomalyco#13496 (which used `nix build` as suggested by @gigamonster256). Also related: anomalyco#12175 (nix-eval workflow), anomalyco#13302 (earlier nixpkgs bump).
diff --git a/.github/workflows/nix-bun-version-check.yml b/.github/workflows/nix-bun-version-check.yml
@@ -0,0 +1,44 @@
+name: nix-bun-version-check
+
+on:
+  pull_request:
+    branches: [dev]
+    paths:
+      - "package.json"
+      - "flake.lock"
+      - ".github/workflows/nix-bun-version-check.yml"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    runs-on: blacksmith-4vcpu-ubuntu-2404
+    timeout-minutes: 5
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Nix
+        uses: nixbuild/nix-quick-install-action@v34
+
+      - name: Check bun version matches nixpkgs
+        run: |
+          set -euo pipefail
+
+          pkg_bun=$(jq -r '.packageManager' package.json | sed 's/bun@//')
+          nix_bun=$(nix eval --inputs-from . --raw nixpkgs#bun.version)
+
+          echo "package.json: bun@${pkg_bun}"
+          echo "nixpkgs:      bun@${nix_bun}"
+
+          if [ "$pkg_bun" != "$nix_bun" ]; then
+            echo "::error::Bun version mismatch: package.json requires ${pkg_bun} but nixpkgs provides ${nix_bun}. Update flake.lock (nix flake update nixpkgs) or align package.json."
+            exit 1
+          fi
+
+          echo "Versions match."
