Update ci workflow to regenerate dotnet sdk hashes.

[adampoit]

No description provided.

[not-adam]

Mira PR Walkthrough

This PR enhances the CI workflow to automatically regenerate .NET SDK hashes in flake.nix when Renovate bot updates global.json. It introduces a new dotnet-sdk-hashes job that builds the devShell on both x86_64-linux and aarch64-darwin to extract updated SRI hashes, uploads them as artifacts, and then a modified nix-deps job downloads and applies them. The existing nix build job is also gated to skip when dependency metadata was just regenerated.

graph LR
    detect["nix-deps-changes: detect changes"]
    sdkHash["dotnet-sdk-hashes: build & extract SDK hash"]
    regen["nix-deps: regenerate Nix metadata"]
    build["nix: build & checks"]

    detect -->|"dotnet_sdk=true"| sdkHash
    sdkHash -->|"hash artifacts"| regen
    detect -->|"nuget/npm=true"| regen
    regen -->|"updated=false"| build

Loading

Confidence: 4/5   ◉◉◉◉○   Safe with minor fixes

• Logic is sound and well-structured, but the sed-based hash extraction from nix build output is fragile and could break if Nix changes its error message format.

1 file reviewed

---

Comment @not-adam help to get the list of available commands and usage tips.