Determinate Systems, Inc. | Status
Determinate Nix 3.8.0 users on macOS should upgrade to Determinate Nix 3.8.1 as soon as possible due to a security issue.
Updates
-
Jul 19, 2025 12:07 AM UTC
We released Determinate Nix 3.8.1, and upstream has released Nix 2.30.1.
Please upgrade to these versions (or newer) as soon as possible.Resolved -
Jul 12, 2025 2:37 AM UTC (6 days, 21 hours, and 29 minutes earlier)
For more information and instructions on how to upgrade, see our changelog: https://determinate.systems/posts/changelog-determinate-nix-381/
Monitoring -
Jul 12, 2025 1:54 AM UTC (42 minutes earlier)
We have released Determinate Nix 3.8.1 which fixes this issue and are continuing to monitor for additional problems.
Identified -
Jul 11, 2025 10:32 PM UTC (3 hours and 22 minutes earlier)
The v3 tag of determinate-nix-action has been rolled back to version 3.7.0 as well.
Identified -
Jul 11, 2025 10:16 PM UTC (15 minutes earlier)
While we test the mitigation, we have issued a rollback to version 3.7.0.
Identified -
Jul 11, 2025 10:05 PM UTC (11 minutes earlier)
We believe we have found the issue and are currently testing a mitigation.
Identified -
Jul 11, 2025 9:13 PM UTC (52 minutes earlier)
At this time, we believe the issue only impacts macOS users.
Investigating -
Jul 11, 2025 9:05 PM UTC (7 minutes earlier)
Users of Determinate.pkg on macOS will get 3.7.0. You can redownload and run the macOS package to roll back. In CI, you can pin back to 3.7.0 via determinate-nix-action: https://github.com/DeterminateSystems/determinate-nix-action
Investigating -
Jul 11, 2025 9:04 PM UTC (1 minute earlier)
We're bisecting the changes in Determinate Nix 3.8.0 and Nix 2.30.0 to identify why some builds are failing that previously succeeded. We believe the issue is related to the build-dir changes.
Investigating