actions-marketplace-validations/niv Updater Action
A GitHub action that detects updates to dependencies tracked by niv and creates pull requests to keep them up to date.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Sep 22, 2025
- License
- BSD
Pinned Snippet
uses: actions-marketplace-validations/knl_niv-updater-action@5cda363cd338250dbc77b0c53984896774dc9242 # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| pull_request_base | The name of the branch to issue the pull requests against. Defaults to an empty string, which means to take the default branch for the repository. | no | "" |
| sources_file | The path in the repo to the sources.json file. This value will be passed to niv via `--sources-file` option. Defaults to `nix/sources.json`. | no | nix/sources.json |
| niv_version | The niv version to be used. Defaults to `master`, meaning niv-updater-action will take the latest niv for each run. You may want to fix a particular version and avoid future breaks to your workflow. | no | master |
| keep_updating | If PR already exists, keep it updated with new changes. The branch will be force updated, as this process keeps a single commit on a branch. Defaults to false to maintain the old behaviour. | no | false |
| branch_prefix | The prefix used for update branches, created by this action. The action does not sanitize the branch name. For a description of what a valid branch name is, please consult: https://mirrors.edge.kernel.org/pub/software/scm/git/docs/git-check-ref-format.html. Defaults to "update/". | no | update/ |
| skip_versioned_revisions | If `true`, will cause the action to skip updating any dependency that has a version in their revision. This is due to the way niv currently works, where it will always update to the latest HEAD of a branch. Thus, if one have a dependency where, for example, `rev=v1.0.0`, niv would normally update it to the latest head of the branch, making `rev` holding the appropriate SHA. This is something one would not normally expect. Thus, this option exists until niv fixes the behaviour. Defaults to `true`. | no | true |
| skip_ssh_repos | If `true`, will cause the action to skip updating any dependency that is hosted by a repo accessible via ssh. Defaults to `false`. | no | false |
| whitelist | A list of dependencies, comma separated, that will be checked for updates. Other dependencies tracked by niv will not be checked for updates. This list will be consulted before the blacklist. It defaults to the list of all dependencies tracked by niv. | no | "" |
| blacklist | A list of dependencies, comma separated, to skip from updating. This list will be consulted after evaluating the whitelist. | no | "" |
| labels | A list of labels, *newline* separated, that will be applied to the generated PR. Defaults to an empty list. | no | "" |
| show_merges | If `true`, the changelog will contain merge commits listed. Otherwise, they will be skipped (however, the commits from the PRs/branches will shown). Defaults to `false`. | no | false |
| message_prefix | The text that will be put in front of the generated changelog. Defaults to empty. | no | "" |
| message_suffix | The text that will be put in after the generated changelog. Defaults to empty. | no | "" |
| title_prefix | The text that will be put in front of the generated commit title. Defaults to empty. | no | "" |
| github_changelog_no_backreferences | If `true`, the changelog will transform all issue links to links via a redirector, to prevent GitHub from backreferencing the created PR in these issues. Defaults to `true`. | no | true |
| debug_output | If `true`, `set -x` will be turned on for the updater script, outputing every step the action takes. This will show up in the action log, and could be useful for trying to reproduce issues locally. Defaults to `false`. | no | false |
Outputs
no outputs