From 6bb1e8e1d05424fab4d30207ad6836f9753b21cc Mon Sep 17 00:00:00 2001
From: Phillip Cloud <417981+cpcloud@users.noreply.github.com>
Date: Fri, 16 Jun 2023 10:05:24 -0400
Subject: [PATCH] ci: run nix macos jobs on macos-13 to try and avoid SIP

---
 .github/actionlint.yaml   | 7 +++++++
 .github/workflows/nix.yml | 2 +-
 .pre-commit-config.yaml   | 8 ++++----
 3 files changed, 12 insertions(+), 5 deletions(-)
 create mode 100644 .github/actionlint.yaml

diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml
new file mode 100644
index 000000000000..5be7d17f3d6f
--- /dev/null
+++ b/.github/actionlint.yaml
@@ -0,0 +1,7 @@
+self-hosted-runner:
+  # Labels of self-hosted runner in array of strings.
+  labels: [macos-13]
+# Configuration variables in array of strings defined in your repository or
+# organization. `null` means disabling configuration variables check.
+# Empty array means no configuration variable is allowed.
+config-variables: null
diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index e37346c50153..dce77e17dd42 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -37,7 +37,7 @@ jobs:
           - "3.10"
           - "3.11"
         include:
-          - os: macos-latest
+          - os: macos-13
             python-version: "3.10"
     steps:
       - name: checkout
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 005a850cdcb1..8db22e272815 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -3,7 +3,7 @@ ci:
   autofix_prs: false
   autoupdate_commit_msg: "chore(deps): pre-commit.ci autoupdate"
   skip:
-    - actionlint
+    - actionlint-system
     - deadnix
     - just
     - nixpkgs-fmt
@@ -17,9 +17,9 @@ default_stages:
   - commit
 repos:
   - repo: https://github.com/rhysd/actionlint
-    rev: v1.6.24
+    rev: v1.6.25
     hooks:
-      - id: actionlint
+      - id: actionlint-system
   - repo: https://github.com/psf/black
     rev: 23.3.0
     hooks:
@@ -30,7 +30,7 @@ repos:
       - id: nbstripout
         exclude: .+/rendered/.+
   - repo: https://github.com/codespell-project/codespell
-    rev: v2.2.4
+    rev: v2.2.5
     hooks:
       - id: codespell
         additional_dependencies: