Update CI

.github/workflows/main.yaml

@@ -7,10 +7,17 @@ on:
       version:
         description: "Release version"
         required: true
+env:
+  NIX_CACHE_BUCKET_NAME: ${{ vars.NIX_CACHE_BUCKET_NAME }}
+  NIX_CACHE_BUCKET_REGION: ${{ vars.NIX_CACHE_BUCKET_REGION }}
+  NIX_CACHE_SIGNING_PRIVATE_KEY: ${{ secrets.NIX_CACHE_SIGNING_PRIVATE_KEY }}
+  AWS_REGION: ${{ vars.AWS_REGION }}
+  AWS_ACCESS_KEY_ID: ${{ secrets.NIX_AWS_ACCESS_KEY_ID }}
+  AWS_SECRET_ACCESS_KEY: ${{ secrets.NIX_AWS_SECRET_ACCESS_KEY }}
 
 defaults:
   run:
-    shell: nix develop -v -c bash {0}
+    shell: nix develop -v -c bash -euo pipefail {0}
 
 jobs:
   build:
@@ -43,7 +50,7 @@ jobs:
         env:
           NIX_OUTPUT: .#defaultPackage.${{ matrix.arch.nix }}
         run: |
-          nix store sign "${NIX_OUTPUT}" -v -r -k ~/.secrets/nix-cache-private-key
+          nix store sign "${NIX_OUTPUT}" -v -r -k <(echo -n "${NIX_CACHE_SIGNING_PRIVATE_KEY}")
           nix copy -v --to "s3://${NIX_CACHE_BUCKET_NAME}/cache?region=${NIX_CACHE_BUCKET_REGION}&compression=zstd&parallel-compression=true" "${NIX_OUTPUT}"
   
   release:

deno.json

@@ -32,13 +32,13 @@
     }
   },
   "imports": {
-    "@std/assert": "jsr:@std/assert@^1.0.10",
-    "@std/async": "jsr:@std/async@^1.0.9",
-    "@std/fmt": "jsr:@std/fmt@^1.0.4",
-    "@std/fs": "jsr:@std/fs@^1.0.9",
+    "@std/assert": "jsr:@std/assert@^1.0.11",
+    "@std/async": "jsr:@std/async@^1.0.10",
+    "@std/fmt": "jsr:@std/fmt@^1.0.5",
+    "@std/fs": "jsr:@std/fs@^1.0.11",
     "@std/path": "jsr:@std/path@^1.0.8",
     "@std/yaml": "jsr:@std/yaml@^1.0.5",
-    "@wok/schema": "jsr:@wok/schema@^2.1.0",
-    "@wok/utils": "jsr:@wok/utils@^4.1.0"
+    "@wok/schema": "jsr:@wok/schema@^2.2.0",
+    "@wok/utils": "jsr:@wok/utils@^4.2.9"
   }
 }