Add flake rendering outputs

.github/workflows/publish.yaml

@@ -27,9 +27,9 @@ jobs:
     steps:
       - name: Generate app token
         id: app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
-          app-id: ${{ secrets.APP_ID }}
+          client-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
 
       - name: Checkout repository
@@ -78,7 +78,7 @@ jobs:
           default_author: github_actions
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
         with:
           path: 'rendered'
 

.github/workflows/render.yml

@@ -19,11 +19,11 @@ jobs:
           if [ -e base_ref ]; then exit 1; fi
 
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@c5a866b6ab867e88becbed4467b93592bce69f8a # v21
+        uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22
 
       - name: Restore Nix store cache
         id: nix-cache
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: /tmp/nix-closure
           key: nix-devshell-${{ runner.os }}-${{ hashFiles('flake.lock', 'flake.nix') }}

.github/workflows/report_updatecheck.yml

@@ -12,7 +12,7 @@ jobs:
   post_status:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@v8
+      - uses: actions/github-script@v9
         with:
           script: |
             const runId = context.payload.workflow_run.id;
@@ -27,7 +27,7 @@ jobs:
                   run_id: runId,
                });
 
-               if (artifacts.data.artifacts.some(a => a.name === 'neutral-signal') {
+               if (artifacts.data.artifacts.some(a => a.name === 'neutral-signal')) {
                  conclusion = 'neutral';
                  title = 'Dependencies are correct but not up-to-date';
                } else {

README.template

@@ -62,6 +62,7 @@ NU7 Candidate ZIPs
 
 The following ZIPs are under consideration for deployment in NU7:
 
+- `ZIP 218: 25-second Block Target Spacing <zips/zip-0218.md>`__
 - `ZIP 226: Transfer and Burn of Zcash Shielded Assets <zips/zip-0226.rst>`__
 - `ZIP 227: Issuance of Zcash Shielded Assets <zips/zip-0227.rst>`__
 - `ZIP 230: Version 6 Transaction Format <zips/zip-0230.rst>`__

flake.nix

@@ -63,40 +63,67 @@
           # Tests require additional fixtures not included in the PyPI tarball
           doCheck = false;
         };
+
+        buildInputs = [
+          # Core dependencies for render.sh
+          rst2html5 # rst2html5 2.0.1 (PyPI)
+          pkgs.python3Packages.pygments # syntax highlighting for code blocks
+          pkgs.pandoc # pandoc markdown renderer
+          mmd # multimarkdown renderer (zcash fork)
+          pkgs.perl # perl for text processing
+
+          # Build system dependencies
+          pkgs.gnumake # make command for building
+          pkgs.git # required by Makefile for safe.directory
+
+          # LaTeX dependencies for protocol PDF generation
+          (pkgs.texlive.combine { inherit (pkgs.texlive) scheme-full; })
+
+          # Python dependencies for links_and_dests.py
+          pkgs.python3
+          pkgs.python3Packages.beautifulsoup4
+          pkgs.python3Packages.html5lib
+          pkgs.python3Packages.certifi
+
+          # Standard utilities (usually available, but ensuring they're present)
+          pkgs.coreutils
+          pkgs.bash
+          pkgs.gnused
+          pkgs.gnugrep
+          pkgs.diffutils
+          pkgs.findutils
+        ];
+
+        all = pkgs.stdenv.mkDerivation {
+          pname = "zcash-zips-rendered-all";
+          version = "0.0.1";
+          src = ./.;
+
+          inherit buildInputs;
+
+          buildPhase = ''
+            # Subprocess for bash set flags scope, especially -x so that we
+            # don't see very verbose nix cleanup traces on errors:
+            (
+              set -efuxo pipefail
+              # Ewww... looks like `kpathsea` mutates the user's home.
+              # Create a fake home dir inside the buildir:
+              fake_home='./messy-fake-home'
+              mkdir "$fake_home"
+              HOME="$fake_home" make all
+            )
+          '';
+        };
       in
       {
+        packages = {
+          inherit all;
+
+          default = all;
+        };
+
         devShells.default = pkgs.mkShell {
-          buildInputs = [
-            # Core dependencies for render.sh
-            rst2html5 # rst2html5 2.0.1 (PyPI)
-            pkgs.python3Packages.pygments # syntax highlighting for code blocks
-            pkgs.pandoc # pandoc markdown renderer
-            mmd # multimarkdown renderer (zcash fork)
-            pkgs.perl # perl for text processing
-
-            # Build system dependencies
-            pkgs.gnumake # make command for building
-            pkgs.git # required by Makefile for safe.directory
-
-            # LaTeX dependencies for protocol PDF generation
-            (pkgs.texlive.combine {
-              inherit (pkgs.texlive) scheme-full;
-            })
-
-            # Python dependencies for links_and_dests.py
-            pkgs.python3
-            pkgs.python3Packages.beautifulsoup4
-            pkgs.python3Packages.html5lib
-            pkgs.python3Packages.certifi
-
-            # Standard utilities (usually available, but ensuring they're present)
-            pkgs.coreutils
-            pkgs.bash
-            pkgs.gnused
-            pkgs.gnugrep
-            pkgs.diffutils
-            pkgs.findutils
-          ];
+          inherit buildInputs;
 
           shellHook = ''
             echo "ZIP documentation rendering environment"